The $150 Billion Hole in Critical Infrastructure: How Analog Components Became the Supply Chain’s Blind Spot

Your data center has a secure boot. Your network traffic is encrypted. Your semiconductor supply chain has ISO certifications plastered all over it. And yet there’s a $150 billion segment of the global semiconductor market that nobody is properly watching and it’s hiding inside the very infrastructure you’re trying to protect.

Analog and mixed-signal components, sensors, and discrete passives the unglamorous parts that handle real-world voltages and currents lack the ID tagging infrastructure that digital chips have built over the past decade. While digital ICs can now leverage physically unclonable functions (PUFs) and secure elements for immutable device identity, analog components are essentially anonymous in the supply chain. They’re bought from distributors, soldered onto boards, and expected to work. That’s a big assumption.

The threat model is real. Counterfeit analog components, including fake capacitors and resistors, enter the supply chain through the gray market. They’re not just quality problems they’re security problems. A degraded capacitor in a power filtering stage, or a sensor with altered characteristics, can silently degrade system performance or create safety vulnerabilities in critical infrastructure.

The U.S. government defines critical infrastructure telecom, aerospace, defense, and utilities as roughly 20% of today’s semiconductor TAM, or about $150 billion. These sectors depend on analog and passive components that nobody has properly identified or authenticated.

The emerging solution involves certificate-based anti-counterfeit systems that bind physical device IDs to immutable digital certificates. But implementing this for analog components, sensors, and discretes is fundamentally harder than for digital chips, because their physical characteristics can’t easily be turned into unclonable fingerprints the way silicon variation can. It’s a hard problem and it’s one the industry urgently needs to solve.