Predictions for the Next 30 Years of Cybersecurity (2018)
Utku Sen’s Substack
SubscribeSign in
Predictions for the Next 30 Years of Cybersecurity (2018)<br>This 2018 article tries to predict the next 30 years of cybersecurity. Its main predictions focus on unemployment caused by AI, digital IDs and the end of anonymity and the end of hacking.
Utku Sen<br>May 15, 2026
Share
This article was published in 2018 in the 5th issue (page 13) of Arkakapı (Backdoor) magazine in Turkish. You are now reading the English translation of that.
In the world of technology, everything changes every five years. So predicting the distant future may seem impossible. But in cybersecurity, we can see a clear reflection of events humanity has experienced throughout history.<br>In ancient times, without security cameras or forensic science, it was very hard to identify criminals. By the 1800s, forensic methods had improved, and detective work became a common profession. Today, identifying criminals is much easier.<br>Based on this reflection, the cybersecurity world of 2018 is similar to the physical world of the 1800s. If we look at what happened after the 1800s, we can use it to predict how cybersecurity may change in the next 30 to 40 years with a bit of imagination.<br>In this article, I will discuss three main events that I expect to happen around 2030, 2040, and 2050.<br>2030 — The Unemployment Problem AI Will Create in the Security Industry
In the early 2000s, web and internet technologies were just beginning to spread around the world. At that time, people did not pay much attention to security. Adventure movies from that period often included hacker themes, but the damage hackers could cause in daily life still seemed like science fiction.<br>As the years passed, technology became part of every aspect of daily life. As a result, security turned into a critical issue. However, there is still a major shortage of security professionals. Because of this, organizations that make future predictions believe the demand for security experts will continue to grow as digitalization increases.<br>This reminds me of elevator operators.<br>When elevators were first invented, they needed a human operator to run them. At that time, someone might have thought that as elevators spread around the world, the demand for operators would also increase. However, when electronic button systems were introduced, operators were no longer needed. An entire profession disappeared.<br>From the 2000s to today, the security industry has changed a lot. As security became more important, defensive technologies improved too. Companies and governments started investing heavily to protect their assets. Researchers also worked to find and fix vulnerabilities in open-source software.<br>If we compare 2008 to 2018, we can say that global security improved a lot.<br>So where will it go next?<br>In my article “Overlooked Details in the Push for National Cybersecurity Software”, I listed the stages of security software as follows:<br>The early stage (...–2001)
The usability stage (2001–2009)
The maturity stage (2009–...)
The artificial intelligence stage (...–...)
We do not know exactly when we will move from today’s maturity stage to the artificial intelligence stage. However, there are clear signs that the industry is moving in this direction.<br>For example, defensive security tools like IDS and SIEM are close to working without human support. On the offensive side, development is still at an early stage. But we can already see AI-powered hacking tools emerging.<br>Today, these tools are mostly experimental. In the future, they will become more stable and more affordable. They may cost less than a human employee and work more efficiently.<br>Based on current trends, I believe we will enter this period by 2030.<br>So what will happen when that time comes?<br>A large part of both defensive and offensive security will become automated. Human roles may be limited to supervision and solving problems when they appear. In cyber warfare, governments will likely still need human personnel. However, the private sector will probably prefer automation in this area.<br>By 2030, mid-level and junior security professionals who have not developed skills in other areas may face unemployment.<br>2040 — Virtual Passport and Virtual Visa
It is now a known fact that companies like Facebook and Google track people’s behavior through cookies and other methods. Today, this personal data is mainly used by these companies or sometimes by the US government. But I believe this may change in the future.<br>One of the main reasons cybercrime cannot be fully stopped is that criminals’ real identities are hard to find. User profiles owned by companies like Google can sometimes help identify criminals, but they are not a complete solution. Services like TOR also allow people to hide their real IP addresses.<br>TOR and other VPN services continue to work because the internet is open to everyone. For example, a person living in Indonesia can access...