Keynote: Clocking On

Keynote: Clocking On—Time Synchronization and Its Critical Role in Modern Infrastructure

This Day 2 keynote from Andy Greening, Lead Hardware Hacker for IBM's X-Force Red team, explores the history, importance, and fragility of time synchronization systems. The talk examines why accurate, resilient timekeeping forms the foundation of modern infrastructure and society.

**Personal Journey into Horology**: Greening's interest in time and clocks began unexpectedly during lockdown. What started as a pandemic hobby became an obsession with electromagnetic clocks and timekeeping systems. His collection now includes approximately 20 clocks being actively maintained and disassembled. This personal journey coincided with discovering IBM's surprising historical connection to timekeeping: IBM's roots trace to the International Time Recording Company, which manufactured employee timekeeping equipment. The company later merged with the Computing Scale Company, leading to the formation of International Business Machines (IBM). Greening grew up near Chiswick, West London, near a factory where these master clocks were manufactured—the same clocks now in his personal collection.

**Philosophical and Physical Perspectives on Time**: Greening frames the discussion using two contrasting historical views: Isaac Newton's absolute time theory (time as an immutable constant we can only observe) versus Albert Einstein's relativity theory (time as relative, varying based on velocity and gravity). While these perspectives remain philosophically debated, they underscore time's fundamental importance to human civilization.

**Historical Development of Time Synchronization**: Before Greenwich Mean Time (GMT), local solar time varied significantly across regions. English communities relied on railway station clocks (themselves synchronized to sundials) for local timekeeping, creating half-hour differences between east and west England. Larger countries like America faced even greater synchronization challenges. GMT's establishment represented the first official coordinated time standard, enabling national synchronization. The Shepherd's Gate Clock at Greenwich Observatory became the first public-facing slave clock showing GMT, visually communicating the official time to the public. This system evolved into a network of over 100 clocks distributed across England, enabling nationwide synchronized timekeeping. The U.S. Navy employed similar systems with "time balls"—physical spheres dropped at precisely 1 PM each day to signal exact time to ship crews and observers.

**Critical Modern Dependencies on Time**: As technology theorist Martin Faygo noted, "Everything now depends on time and synchronization." Applications span across communications, navigation, financial transactions, forensics, and distributed systems. Financial markets depend on precise time sequencing to establish transaction order in concurrent trading systems. Forensic investigations rely on accurate logging timestamps to determine event sequences. Distributed computing systems require synchronized clocks for consistency. GPS navigation requires atomic-level time precision. Industrial control systems, power grids, telecommunications, and cryptographic protocols all depend on synchronized time sources.

**Fragility of the Ecosystem**: Despite time synchronization's critical importance, the ecosystem remains surprisingly fragile. Few organizations recognize the dependencies or have implemented resilient timekeeping architectures. Power failures, GPS spoofing, network attacks on time synchronization protocols (like NTP), and hardware failures can cascade through systems relying on synchronized time. Most infrastructure lacks redundancy in time sources and has minimal monitoring of time accuracy.

**Key Insight**: The keynote emphasizes that time synchronization, taken for granted in modern systems, represents a fundamental vulnerability that deserves security research attention. Without understanding these dependencies and implementing resilient, secure time synchronization, critical infrastructure systems remain vulnerable to subtle but potentially catastrophic failures.