cybersecurity

With IP the lifeblood of today’s globally integrated microelectronics supply chain, protecting confidential information is vital to electronics companies around the world. Additionally, the industry’s central role in ensuring the national security and economic competitiveness of every country ups the ante. Yet the supply chain is fraught with security risks. Malicious actors never rest in their work to infiltrate factory systems or human resources databases with the intent to steal IP, disrupt production or embed malicious software that can open the door to future attacks. Cyberattacks in the financial and retail sectors typically draw much more public attention than IT security breaches in the semiconductor industry. While large microelectronics companies are not immune to these threats, they tend to deploy some of the world’s strongest security systems and implement robust security policies and protocols to help mitigate risks. Many of their small and mid-sized counterparts with modest IT budgets and limited expertise, on the other hand, struggle to maintain a similar level of cyberhealth – a critical gap in the microelectronics industry, one of the most strategically important in the world. SEMI is out to help change that by collaborating with cybersecurity experts to help members strengthen their cybersecurity defenses. SEMI plans to increase cybersecurity awareness within the microelectronics workforce and offer cybersecurity assessments to member companies through a third-party provider as part of its SEMI Works® program. Working with experts, SEMI will add cybersecurity-related competencies to the SEMI Works® Skills Portal database to help ensure educational and training programs address these skills. As part of SEMI’s recently launched Curated Content Initiative, member companies will have access to workforce training courses on how to raise awareness of cybersecurity risks and mitigate them. Strengthening IP protections across smart technologies and industries driving the next wave of microelectronics industry growth such as artificial intelligence (AI), 5G, medtech and mobility starts in chip design and extends through fabrication to packaging and ultimately end-use applications. Helping to establish a baseline understanding and awareness of cybersecurity risks and how to mitigate them throughout the supply chain is critical. Bolstering cyber protections at small and mid-sized member companies is a key step in that direction. Commercial success, national security and the security of the ubiquitous IT infrastructures at the center of how we work and live depend on it. Mike Russo is vice president of Industry Advancement and Government Programs at SEMI.

Over the next five years the Taiwan government plans to invest NT$1.546 billion to build the workforce direly needed for future semiconductor industry research and development. The largesse is a tribute to efforts by SEMI president and CEO Ajit Manocha to enhance the competitiveness of the semiconductor industry by stressing the importance of talent development during his annual visits with the Taiwan president. He has been instrumental in bringing together Taiwan government agencies and local industry representatives – two players in developing the talent pool of the future – to discuss workforce initiatives.As the talent gaps threatens to choke the long-term growth potential of the chip industry, Manocha has emerged as a passionate champion of workforce development. In a letter to more than 2,000 semiconductor companies worldwide, he urged to executives act together to build the workforce vital to industry growth. In 2018, he met with Taiwan President Tsai Ing-wen to discuss ideas for attracting and retaining skilled workers to help ensure Taiwan remains a top investment destination for high-tech multinationals.In early 2019, SEMI Taiwan established its SEMI Taiwan Workforce Development Council to promote talent and career development. Already, the group’s work is resonating in the global semiconductor industry. In September last year, Manocha joined executives from industry heavyweights ASE, MediaTek and TSMC in a visit to President Tsai to urge the government to pursue industry sustainability through talent development. President Tsai responded by instructing her staff to review government resources available for talent development, help drive public-private dialogue and partnerships, and form talent development projects involving the government, industry, academia and research institutes.To carry out comprehensive workforce initiatives, SEMI Taiwan continues to work with the National Security Council and the Executive Yuan (the cabinet). We also launched the Semiconductor Industry Development Council in partnership with leading high-tech companies in Taiwan including ASE, TSMC, MediaTek, PSMC, VIS, MXIC, Nanya, Etron and UMC. Focused on developing semiconductor talent and technology, localizing equipment sourcing, and improving cybersecurity, the council has formed the following seven initiatives: Make existing government talent development programs more flexible to better meet the industry’s workforce needs. Recruit outstanding scholars and leading experts in scientific research, and solicit world-class scientific research teams. Extend age restrictions and other requirements for the Einstein Program (established by the Taiwan MOST, Ministry of Science and Technology) to attract outstanding foreign scholars to Taiwan. Establish a domestic semiconductor research ecosystem and provide sufficient research funding to cultivate R D talent. Strengthen female education in STEM (science, technology, engineering, mathematics) and encourage women to re-join the workforce to help meet the industry’s workforce needs. Continue to promote MOST University-Industry Collaboration Projects (Large Alliance) to connect the upstream academic and research sector with downstream industries. Encourage cooperation between science and technology universities and the chip industry to develop the talent necessary for smart manufacturing to thrive. SEMI’s advocacy efforts with the Taiwan government, the industry and academia are clearly paying off. The Executive Yuan recently announced three major talent development strategies – expanding the talent development capabilities of higher education institutions, promoting industrial-academic cooperation and encouraging businesses to strengthen recruiting efforts and increase funding for semiconductor talent development.The building momentum includes plans by the Taiwan Ministry of Education plans to establish semiconductor technology research centers at several national universities. By passing the sandbox law and loosening regulations organizational personnel, finance and education, the government is freeing up more funding to support semiconductor industry talent development. The ministry also plans to gradually expand the number of students enrolled in STEM curriculum and continues to promote talent training programs and recruiting strategies to help close the workforce gaps and reduce related industry risks. A highly skilled workforce is indispensable to the development of the semiconductor industry and among the most strategic resources in any region. It’s only through long-term partnerships between the government, industry and academia that impactful and sustainable workforce development goals and initiatives can be developed to help the chip industry realize its full potential to innovate and solve some of the world’s greatest challenges. The programs are key to the ability of Taiwan’s semiconductor industry to sharpen its competitive edge. More importantly, they are also the center of gravity in the region’s pursuit of its position as the global semiconductor hub. Jo-Ann Su is senior director and Winnie Chang is marketing and public relations specialist at SEMI Taiwan.

Like all other SEMICON expositions, SEMICON West last month gathered thousands of people to make business connections and learn about the industry and its opportunities. But the events are also great venues for SEMI’s Global Industry Advocacy team to meet with industry leaders from around the world as well as regional SEMI presidents to discuss policy issues we face in each region and best practices for how to address them. The time was also ripe for us to meet with various advisory groups and advocacy committees to examine current issues.Top on our list at SEMICON West was a discussion with SEMI’s International Board of Directors about the then newly announced actions by Japan’s Ministry of Economy, Trade and Industry (METI) to tighten export controls in trade with Korea. SEMI depends heavily on and is grateful for insights from its International Board, Board of Industry Leaders and various Regional Advisory Boards. They are crucial to our ability to develop and execute industry advocacy strategies that take into account regional idiosyncrasies, geopolitical sensitivities and global supply chain complexities. SEMI is unique in its ability to bring a global perspective to engaging governments around the world in real time. In the case of the trade dispute between Japan and South Korea, we engaged SEMI members in Japan and Korea as we developed our strategy.On the SEMI America’s front, the North American Advisory Board and its Public Policy Committee met at SEMICON West for a spirited discussion on how to best manage our lobbying activities and how regional and U.S. companies should be involved. The committee’s perspectives and guidance will be invaluable as we chart a path forward in these challenging times in global trade.Our Global Industry Advocacy team also continues to build out SEMI Works, SEMI’s comprehensive initiative to develop a talent pipeline and overcome the industry’s longstanding shortage of skilled workers. SEMI Works focuses on stimulating greater interest in STEM careers, aligning STEM course curriculum and industry needs, and connecting students with relevant courses and careers. We are in the process of launching three regional pilot programs that will enable us to develop the SEMI Works business model that we’ll use to scale the program and ensure the initiative is robust and sustainable. At SEMICON West the Global Advocacy team convened regional stakeholders involved in these pilots to share information on opportunities and challenges and to discuss various implementation strategies.At SEMICON West we also facilitated meetings with U.S. government representatives aimed at improving cybersecurity in manufacturing and developing a commercial security model that will strengthen security throughout the supply chain in areas vital to industry growth such as traceability.After nearly 50 years, SEMI still excels in enabling the industry collaborations key to growth and innovation. Collaboration is also a driving force within SEMI Global Industry Advocacy as we continue to work with SEMI members, our various boards and governments around the world to advance the interests of the semiconductor industry.Mike Russo is vice president of Global Industry Advocacy at SEMI.

The automation of semiconductor factories through digitization is reshaping Smart Manufacturing to streamline the connectivity and orchestration of manufacturing processes across the entire supply chain. But the threat of cyberattacks and viruses looms. An estimated 26 billion smart and connected manufacturing devices are expected to be online by next year. Never before has the need been greater to protect the staggering volume of manufacturing data traversing increasingly intricate supply chain networks.“We are living in the time of digital manufacturing,” said Chen Chi-Hsien, Director of TSMC’s Manufacturing Technology Center. “Processes ranging from assembling equipment and upgrading hardware and software are increasing security challenges for semiconductor manufacturers. With viruses and malware constantly evolving to pose greater threats, all members of the supply chain – from manufacturing and equipment to operating system and software/firmware providers – should work together within the SEMI Smart Manufacturing platform to establish cybersecurity standards across the industry. Doing so will also enhance the development of smart manufacturing and accelerate digitalization.” Representatives from Tongfu Microelectronics, Adlink, NSHC, ABB, TSMC, ASE and Microsoft with SEMI CMO and SEMI Taiwan president Terry Tsao (left to right) Chi-Hsien offered his insights at the SEMI Smart Manufacturing and Cybersecurity Seminar, joining speakers from other leading semiconductor manufacturers including TFME and ASE to discuss the latest smart manufacturing trends and cybersecurity challenges. The April event in Hsinchu also featured representatives from ABB, Adlink, Microsoft, Rockwell, Siemens, Delta Electronics and the National Center for High-Performance Computing (NCHC) offering their views on how the semiconductor industry can speed its digital transformation using various technologies.With its 43 years’ experience in developing international standards, SEMI is committed to serving as the platform to establish universal information security standards for silicon wafer plants and semiconductor equipment, Terry Tsao, SEMI chief marketing officer and SEMI Taiwan president, said at the seminar. Tsao added that SEMI is now in discussions with leading semiconductor manufacturers to establish a communications framework for addressing potential security risks and facilitating the development of risk management and security solutions that safeguard the semiconductor supply chain.This year SEMI will debut its SMART Manufacturing EXPO to gather key supply chain players for critical discussions about security and to feature AI manufacturing and cybersecurity solutions. Co-located with SEMICON Taiwan, September 18-20, 2019, at TaiNEX 1 (Taipei Nangang Exhibition Center, Hall 1), the SMART Manufacturing EXPO will include Smart manufacturing hardware and software providers from around the world for the interdisciplinary discussions and collaboration key to developing strong Smart manufacturing security.For more information about the SEMI Smart Manufacturing Platform, contact Emmy Yi of SEMI Taiwan at [email protected] Yi is a marketing specialist at SEMI Taiwan.

With (most of) the election results in from the U.S. midterms, the expected Democratic takeover of the House and the Republican’s maintaining control of the Senate is now a reality. The day of the election, DC insiders expected that the House would go to the Democrats by a margin of +/- 20, with the Republicans gaining 2-3 seats in the Senate. Not a bad prediction, which is a far cry from what the same insiders called in advance of the 2016 Presidential election.What does that mean for our members and the tech sector in general? Will there be an ease of trade tensions or less of a chance of tighter export controls? Some believe that with the midterm elections over, President Trump will have some room to take a less aggressive stance against China, setting up a “win” that he can carry into 2020. With the recent more aggressive stance by North Korea against the U.S. regarding its nuclear program, China may well have some leverage at the trade table … and the U.S. may want to make a deal that provides a path for a “win” on both fronts. Indeed, there are the makings of a potential win-win leading into the G20 meeting in Argentina when President Xi Jinping and President Trump are scheduled to meet on Dec. 1.One can see a scenario where there is a meeting of the minds and some degree of lessening tariffs; that does not mean that the effort to enhance export controls will go away. The need for tighter restrictions on export controls is driven to a great degree by the U.S. Department of Defense (DoD) and is a follow on from the previous FIRRMA legislation and attempts to curb the loss of U.S. technology critical to global competitiveness and national security. This issue will not go away anytime soon, and cases like the recent one involving Jinhua only add fuel to the fire. In addition, given how these cases can be leveraged at the negotiating table, they will continue to surface.SEMI’s approach has been to educate governments, lawmakers and administration officials on the strategic importance of the globally connected and highly complex semiconductor supply chain, and how some of the approaches will not achieve the attended goals. This approach helps to ensure that when and if it comes time to make decisions based on merit, the principals are informed. It also helps SEMI and its members develop and maintain important relationships and positions SEMI as an industry leader and spokesperson, making it a more effective advocate. As an example, on Nov 8th SEMI released its Global Trade Principles with the intention of providing a framework to all governments to guide various trade talks. It also helps to inform member companies and others from the broader tech sector of our industry position(s) so we are able to speak with one voice. These principles are aligned with our fundamental advocacy pillars of promoting free trade and market access, respect for IP, cybersecurity and national security.Will the fact that power is now split between the two chambers of Congress help or hurt? Will the House focus on investigations limit the ability to move productive legislation? Besides taking time, it may well put them at increasingly worse odds with the Senate and the President (if that is possible), creating deadlock. Some argue that if nothing moves, no harm can be done. Some also say that it may drive the President to take independent and more aggressive actions in order to demonstrate (his) effectiveness to his base. There is another view: that with the Democrats, the President may be able to lead in the advancement of legislation that will show he can get things done when others couldn’t in areas that benefit the greater good…some of which may impact our industry…such as investments in education and infrastructure development. This would be a way that he could pull in some of the votes from the middle that he has lost in his first two years in office. They say “politics makes for strange bedfellows”; one never knows what might happen in this case.Regardless of what happens, some things will not change: the global nature of our business and the needs of our members to have access to markets…and to be able to safely and efficiently leverage their technologies in the way they see fit in order to grow their business. SEMI will continue to advance the interests in what is an extremely challenging and dynamic global policy environment today. As ruling parties and representatives change around the globe, we will continue to build new relationships and educate lawmakers so they are able to make informed decisions that benefit our members. Mike Russo is VP of Public Policy and Talent Advocacy at SEMI.

SEMI-MEMS Sensors Industry Group (MSIG) welcomed a global group of industry executives to its 14th annual MEMS Sensors Executive Congress (MSEC), October 29-30, 2018 in Napa, Calif. MEMS and sensors represent a robust sector of the electronic industry. Analyst firm Yole Développement expects the global market for MEMS and sensors to double in the next five years, reaching $100B by 2023, spurred by growth of autonomous mobility products such as Internet of Things (IoT) devices, autonomous cars, fitness and healthcare wearables, and agricultural sensors.“From drones that navigate any terrain in all lighting conditions, robo-taxis that ‘smell’ cigarette smoke, and sensors that monitor animal welfare and food safety, MSEC speakers shared inventive use cases representing new opportunities for MEMS and sensors suppliers,” said Carmelo Sansone, director, MEMS Sensors Industry Group. “Our keynote speakers spurred attendees to collaborate for the greater good. MITRE Corp. cybersecurity expert Cynthia Wright exhorted attendees to proactively address cybersecurity. DARPA Microsystems Technology Office (MTO) program manager Ron Polcawich invited participation in a rapid innovation and production concept that could dramatically speed design cycles for new MEMS. They exemplify the cross-pollination among commercial industry, government and academia that will continue to advance MEMS and sensors.”Getting serious about cybersecurityMITRE cybersecurity expert Cynthia Wright opened MSEC 2018 with a keynote on cybersecurity, alerting attendees to a topic that few in the industry have explored in-depth — but to which they need to pay attention.“Billions of connected mobile devices democratize knowledge, diversity and boost economies, and accelerate innovation by connecting humans to one another and to our environments,” said Wright. “At the same time, they easily create huge networks that carry operationally and personally sensitive data.”Because MEMS and sensors are deeply embedded into this vast array of connected devices, industry needs to get involved now or risk potentially grave consequences, claimed Wright. “From the destruction of critical infrastructure, cyberattacks on life-critical medical devices such as insulin pumps and heart monitors, and intrusions on autonomous vehicle safety systems, MEMS and sensors suppliers have a responsibility to help improve cybersecurity of connected devices,” she added.Allaying the potential fears of a roomful of suppliers envisioning complete redesigns of their products, Wright said that not every device requires the same level of security, and suppliers can make a difference with even “minor tweaks.” Wright suggested encryption at the edge and process authentication. She also gave MSEC attendees a list of design precepts: Build it in. Don’t bolt it on — Design your device with security in mind instead of retrofitting it after-the-fact to realize the most elegant design. Beware of shadow IT — You can’t protect what you don’t know about. Consider physical asset security; software/sensor-guided decision-making; personal or operational data collection; and key process control. Realize your points of vulnerability — because MEMS and sensors are susceptible to spoofing. Learn from cyberattacks of the past — even if they have not been tied directly to MEMS/sensors. Understand IoT software — Realizing that IoT software acts on what the hardware tells it, pay attention to altered sensor data that can lead to altered system performance. When asked about the role of US government regulation on the security of connected devices, Wright acknowledged that Europe has more restrictive cybersecurity guidelines than the US.“At the same time, it does not make sense to have two different approaches to cybersecurity of devices. US suppliers who implement more security measures can sell to both markets and to other parts of the world.”If she could leave MSEC attendees with a closing thought, it might be that companies “don’t need to put a firewall on a toaster.”“Not every chip has to be secure-foundry secure, but it would be nice if even 10% could hit that mark,” added Wright.Rapid Innovation through CollaborationIC designers typically enjoy three to four design cycles in a calendar year, leading to swift advancement of electronics over subsequent years.Designers in the MEMS community, however, generally have access to one design cycle or less per year, and typical time-to-market is four years for a new product. That slow fabrication pace has hindered deployment of innovative MEMS designs — and it’s something that MSEC closing keynote speaker, Ron Polcawich, program manager, DARPA MTO, would like to change.Polcawich’s vision of government collaboration with industry and academia spawned the investigational Rapid Innovation through Production MEMS (RIPM) Workshop, which Polcawich and his team held in May 2018. During his keynote, Polcawich shared lessons learned from the workshop while inviting MSEC attendees to get involved.Before RIPM can become a program, Polcawich knows it will require definition. What would a program concept look like? What is the best way to articulate the potential benefits to the MEMS community, and what additional inputs would be needed?“This is a daunting challenge from a program planning perspective,” said Polcawich. “In developing RIPM, we realized that we needed representatives from the entire MEMS ecosystem – integrated device manufacturers, or IDMs, equipment suppliers, foundries, and materials’ providers — to literally come to the table to tackle a common goal. Given the potential for the MEMS industry at large to benefit from rapid innovation and production, we hoped that competitors would realize that leveraging established MEMS processes could deliver significant benefits over the historically entrenched approach: one product, one process.”Polcawich believes that MEMS suppliers might relinquish the one product, one process paradigm if they knew that their IP were secure.“While technical challenges to realizing RIPM abound, we knew that we could tap the MEMS industry’s vast knowledge base to address them,” he said. “IP protection is an equally complex issue, and one that may bear a range of approaches. One model could ensure that each IDM owns their IP while the foundry owns the process technology, which it licenses to other companies through process development kits. In addition to speeding innovation, it also provides new revenue sources for the industry.”Polcawich sees RIPM as a win-win for both commercial industry and for the DoD. Speeding design-to-deployment of new MEMS devices could open new and larger markets to MEMS suppliers. It could also support greater product-line diversification and new revenue streams for foundries and other ecosystem members. The DoD could tap new MEMS devices for strategically important applications like tactical radios, unmanned aircraft systems such as drones, and image autofocus for cameras. Polcawich encouraged SEMI-MSIG members to get involved by emailing his group: [email protected] Hall of Fame MembersThree new industry leaders joined the SEMI-MSIG Hall of Fame, first established in 2011 as a means of honoring those who have made a substantial contribution to SEMI-MSIG. Selected by members of the Governing Council, 2018 Hall of Fame inductees include: Michelle Bourke, strategic marketing director, Customer Support Business Group, Lam Research Eric Pabo, business development manager, MEMS, EV Group Yoshio Sekiguchi, senior strategic advisor, TDK InvenSense Technology Showcase WinnerMSEC recognizes the latest advancements in applications enabled by MEMS and sensors — including those demonstrated by entrepreneurs competing in the Technology Showcase. Selected by a committee of industry experts, five finalists did their best to impress attendees with their technical approach and go-to-market strategies. The 2018 Technology Showcase winner, Alertgy, presented a biosensor-based wristband device that provides non-invasive, real-time blood glucose monitoring for people with type 2 diabetes, which affects more than 20 million Americans and hundreds of millions more worldwide. MSEC 2018 Sponsors MSEC 2019 Location and DatesMSEC 2019 will take place October 22-24, 2019, at the Coronado Island Marriott Resort Spa in Coronado, Calif., just minutes from downtown San Diego.For more information on MSEC 2019 and other SEMI-MSIG events and programs, please follow @MEMSgroup on Twitter, visit MSIG at SEMI and subscribe to SEMI’s weekly newsletter, SEMI Global Update.Maria Vetrano is a public relations consultant at SEMI.

Cynthia Wright, a retired military officer with over 25 years of experience in national security and cyber strategy and policy, now Principal Cyber Security Engineer at The MITRE Corporation, will give the opening keynote at the upcoming MEMS Sensors Executive Congress, October 29-30, 2018 in Napa, Calif. SEMI’s Maria Vetrano interviewed Wright to give MSEC attendees an advance look at Wright’s highly anticipated presentation.SEMI: MEMS and sensors suppliers provide intelligent sensing and actuation to hundreds of billions of autonomous mobility devices – but historically, our community has not been at the forefront of cybersecurity. Why is now a good time for us to get involved?Wright: From wearables, smartphones, refrigerators and agriculture to medical devices and military hardware, autonomous mobility devices pervade our lives. At the same time, Internet of Things (IoT) botnet attacks like Mirai — and other demonstrated cyberattacks on home devices, vehicles and infrastructure — highlight the increasingly urgent need to address cybersecurity and privacy in MEMS/sensors-enabled devices.As building-block players in autonomous devices, MEMS and sensors suppliers have several good reasons to get involved.The number of IoT cyber security bills before state and federal legislatures suggest that regulation is coming, and it is in everyone’s best interest to prepare. While original equipment manufacturers (OEMs) would generally be held liable in cases of component malfunction or data breach, if insecurity stems from a microelectromechanical component, OEMs would most likely choose component suppliers with secure products.Beyond legislation and competitive advantage, we must consider that people’s well-being, even lives, could be at stake. Imagine what could happen if someone hacks into an insulin pump, the accelerometer on a train, or the LIDAR of an autonomous car. Intrusions of this sort could prove catastrophic.SEMI: Where do you perceive the biggest potential threats to consumers, industry, government?Wright: In good military fashion, I would say that it depends. If a person is a consumer of medical implants, that’s a big threat. On the government side, we could be talking about networked devices involved in military situational awareness. In industry, it could be sensors governing critical manufacturing or safety processes.I am not saying that every sensor must be secure. In every sector, there are areas of greater or lesser vulnerability, depending on context. SEMI: What is security or privacy by design?Wright: Addressing security flaws is cheaper and more easily accomplished at the design stage and not after the vulnerabilities are discovered. At MITRE, we practice systems- and design-oriented thinking as we consult with people doing development. We help them to develop security standards and approaches that are broadly applicable, rather than focusing on a specific product.For example, MITRE looks at the ways that a person might hack into a car to steal location and life history data — or alter its functions — to facilitate general standards and approaches that will help manufacturers better ensure the privacy and security of autonomous vehicles. Hackers have demonstrated that they can interfere with vehicle transmissions and brakes. Ignition, steering and other critical systems are theoretically accessible through the same types of attacks. To what degree can MEMS/sensors suppliers help automotive manufacturers ensure the privacy and security of autonomous cars, and the safety of their drivers? SEMI: What would you like MSEC attendees to take away from your presentation?Wright: MEMS/sensors suppliers are on the leading edge of computing and should take some responsibility for considering cybersecurity and privacy, for the safety of their customers and their own competitive advantage. Recognize which devices should be secure and act accordingly. Get involved at the design stage. The market for secure microelectronics is only going to grow, and this will benefit suppliers who take secure design seriously.Cynthia Wright will present Cyber Security and Privacy in the Age of Autonomous Sensing on Monday, October 29 at MEMS Sensors Executive Congress in Napa, Calif.Register today to connect with her at the event. Maria Vetrano is a public relations consultant at SEMI.