Queen opens Centre to protect against Attacks

The Queen was shown how hackers could target the UK's electricity supply as she opened a centre to protect the nation from cyber-attacks.

The National Cyber Security Centre, part of intelligence agency GCHQ, started work in October as part of a £1.9bn five-year strategy.

Staff in Victoria, central London, will be joined by experts from the private sector to help identify threats. NCSC chief Ciaran Martin said: "We want to make the UK the hardest target".

The secondments to the centre by 100 private sector employees will be funded by their own companies.

Announcing the initiative, Chancellor Philip Hammond said the "best and the brightest in industry" will help "test and to challenge the government's thinking" in cyber security.

Russia Concern

There were 188 cyber-attacks classed by the NCSC as Category Two or Three during the last three months.

And even though the UK has not experienced a Category One attack, the, highest level, an example of which would have been the theft of confidential details of millions of Americans from the Office of Personnel Management, there is no air of complacency at the NCSC's new headquarters.

Ciaran Martin, the Centre's Chief Executive, told the BBC: "We have had significant losses of personal data, significant intrusions by hostile state actors, significant reconnaissance against critical national infrastructure, and our job is to make sure we deal with it in the most effective way possible."

As well as protecting against and responding to high-end attacks on government and business, the NCSC also aims to protect the economy and wider society.

The UK is one of the most digitally dependent economies, with the digital sector estimated to be worth over £118bn per year, which means the country has much to lose.

It is not just a crippling cyber-attack on infrastructure that could turn out the lights which worries officials, but also a loss of confidence in the digital economy from consumers and businesses, as a result of criminals exploiting online vulnerabilities.

A sustained effort was required by government and private sector working together to make the UK the hardest possible target, officials say.

Russia has been the focus of recent concern, following claims it used cyber-attacks to interfere with the recent US presidential election.

"I think there has been a significant change in the Russian approach to cyber-attacks and the willingness to carry it out, and clearly that's something we need to be prepared to deal with," Mr Martin said.

French and German officials have warned of the possibility of interference in their upcoming elections, but the NCSC's head said there was no evidence that a significant attack or compromise had yet taken place against the UK democratic process.

"There has been an identifiable trend in Russian attacks in the West, in terms of focusing on critical national industries and political and democratic processes," Mr Martin added.

"And so it follows from that that we will look to be sure we are protecting those sectors in the UK as well as we possibly can."

The centre will be working on a voluntary basis with political parties and giving advice to high-profile individuals - including MPs - on how to protect their sensitive data.

The UK is already targeting computers in other countries being used for cyber-attack, particularly if there is no possibility of prosecution or for co-operation with authorities where the hackers are based.

In the past, UK cyber protection was largely situated within GCHQ in Cheltenham, which was criticised by businesses and others as overly secretive.

The NCSC aims to be more public facing and accessible. It will also protect a far wider range of sectors, rather than just government and national security-related industries, like defence.

GCHQ will still be the parent body for the NCSC, meaning it can draw on the intelligence agency's skills and capabilities. Sometimes, the intelligence arm of GCHQ spots compromised networks as it watches adversaries move across the Internet.

It was through this type of work that GCHQ spotted the compromise of the US Democratic Party's information by Russian hackers, which it then informed US authorities about.

The NCSC is working on trial services to pro-actively discover vulnerabilities in public sector websites, help government departments better manage spoofing of their email, and take down tens of thousands of phishing sites affecting the UK.

"We're actively working to reduce the harm caused by cyber-attacks against the UK and will use the government as a guinea pig for all the measures we want to see done by industry at national scale," says the NCSC technical director, Dr Ian Levy.

He says results would be published openly to enhance collaboration. The centre will be publishing some of its code as open source, so that others can use the techniques.

BBC

 

« Dell Says Security Is Plaguing Business
Bitcoin Is Increasing Ransom Attacks »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

SmartSearch

SmartSearch

SmartSearch is a leading online provider of Anti-Money Laundering and Fraud Prevention Services.

Davis Wright Tremaine (DWT)

Davis Wright Tremaine (DWT)

Davis Wright Tremaine is a full-service law firm with offices throughout the US and in Shanghai, China. Practice areas include Technology, Privacy & Security.

vArmour

vArmour

vArmour is the industry’s first distributed security system that provides insight and control for multi-cloud environments.

CERT-IS

CERT-IS

CERT-IS is the national Computer Emergency Response Team for Iceland.

First National Technology Solutions (FNTS)

First National Technology Solutions (FNTS)

First National Technology Solutions is a leading provider of flexible, customized hosted and remote managed services including IT security and compliance.

Infosec Train

Infosec Train

Infosec Train provide professional training, certifications & professional services related to all spheres of Information Technology and Cyber Security.

World Congress on Industrial Control Systems Security (WCICSS)

World Congress on Industrial Control Systems Security (WCICSS)

The World Congress on Industrial Control Systems Security (WCICSS) is focused on emerging trends in protection of industrial control systems.

Elron Ventures

Elron Ventures

Elron partner with early stage ventures to build companies that transform lives and industries. Our main areas of focus are enterprise software, cybersecurity, and healthcare.

Hudson Cybertec

Hudson Cybertec

Hudson Cybertec are an internationally recognized Subject Matter Expert for cyber security in the Industrial Automation & Control Systems (IACS) domain.

Global Cybersecurity Association (GCA)

Global Cybersecurity Association (GCA)

GCA’s Symposium and conferences featuring global thought leaders and CISOs provide a global best practice perspective on cybersecurity.

Nonprofit Cyber

Nonprofit Cyber

Nonprofit Cyber is a first-of-its-kind coalition of global nonprofit organizations to enhance joint action to improve cybersecurity.

Telesystem

Telesystem

Telesystem empowers businesses across the USA with a range of innovative network, communication and collaboration solutions.

Tidelift

Tidelift

Tidelift provides the tools, data, and strategies that help organizations assess risk and improve the health, security, and resilience of the open source used in their applications.

Positiwise Software Pvt Ltd

Positiwise Software Pvt Ltd

Positiwise Software offers end-to-end software development solutions to accelerate the digital growth of businesses.

Options Technology

Options Technology

Options is a global leader in financial technology, specialising in Capital Markets technology and enterprise-grade solutions.

Everfox

Everfox

Everfox (formerly Forcepoint Federal) has been defending the world's most critical data and networks against the most complex cyber threats imaginable for more than 25 years.

Bedrock Security

Bedrock Security

Bedrock Security is at the forefront of revolutionizing data security in the cloud and GenAI era.