The Cyberwar Frontier In Korea

In one college major at Seoul's elite Korea University, the courses are known only by number, and students keep their identities a secret from outsiders. 

The Cyber Defense curriculum, funded by the defense ministry, trains young keyboard warriors who get a free education in exchange for a seven-year commitment as officers in the army's cyber warfare unit - and its ongoing conflict with North Korea. 

North and South Korea remain in a technical state of war since the 1950-53 Korean War ended in an armed truce. Besides Pyongyang's nuclear and rocket programmes, South Korea says the North has a strong cyber army which it has blamed for a series of attacks in the past three years. 

The cyber defense programme at the university in Seoul was founded in 2011, with the first students enrolled the following year. 

One 21-year-old student, who allowed himself to be identified only by his surname Noh, said he had long been interested in computing and cyber security and was urged by his father to join the programme. All South Korean males are required to serve in the military, usually for up to two years. 

"It's not a time burden but part of a process to build my career," Noh said. "Becoming a cyber warrior means devoting myself to serve my country," he said in a war room packed with computers and wall-mounted flat screens at the school's science library.

South Korea, a key US ally, is one of the world's most technologically advanced countries. That makes its networks that control everything from electrical power grids to the banking system vulnerable against an enemy that has relatively primitive infrastructure and thus few targets against which the South can retaliate. 

"In relative terms, it looks unfavorable because our country has more places to defend, while North Korea barely uses or provides internet," said Noh. 

Last year, South Korea estimated that the North's "cyber army" has doubled in size over the last two years to 6,000 troops and the South has been scrambling to ramp up its capability to meet what it considers to be a rising threat. 

The United States and South Korea announced efforts to strengthen cooperation on cyber security, including "deepening military-to-military cyber cooperation," the White House said during President Park Geun-hye's visit to Washington in October. 

In addition to the course at Korea University, the national police have been expanding its cyber defence capabilities, while the Ministry of Science, ICT and Future Planning started a one-year programme in 2012 to train so-called "white hat" - or ethical - computer hacker.

Still, the North appears to have notched up successes in the cyber war against both the South and the United States. 

Recently, South Korean police said the North hacked into more than 140,000 computers at 160 South Korean companies and government agencies, planting malicious code under a long-term plan laying groundwork for a massive cyber-attack against its rival. 

In 2013, Seoul blamed the North for a cyber-attack on banks and broadcasters that froze computer systems for over a week. And North Korea denied responsibility. 

The US Federal Bureau of Investigation has blamed Pyongyang for a 2014 cyber-attack on Sony Pictures' network as the company prepared to release "The Interview," a comedy about a fictional plot to assassinate North Korean leader Kim Jong Un. The attack was followed by online leaks of unreleased movies and emails that caused embarrassment to executives and Hollywood personalities. 

North Korea described the accusation as "groundless slander." 

South Korea's university cyber defense programme selects a maximum of 30 students each year, almost all of them men. On top of free tuition, the school provides 500,000 won ($427) per month support for each student for living expenses, according to Korea University Professor Jeong Ik-rae. 

The course trains pupils in disciplines including hacking, mathematics, law and cryptography, with students staging mock hacking attacks or playing defense, using simulation programs donated by security firms, he said. 

The admission to the selective programme entails three days of interviews including physical examinations, attended by military officials along with the school's professors, he said.

While North Korea's cyber army outnumbers the South's roughly 500-strong force, Jeong said a small group of talented and well-trained cadets can be groomed to beat the enemy.

Jeong, an information security expert who has taught in the cyber defense curriculum since 2012, said the school benchmarks itself on Israel's elite Talpiot programme, which trains gifted students in areas like technology and applied sciences as well as combat. After graduating, they focus on areas like Cybersecurity and missile defence.

"It's very important to have skills to respond when attacks happen - not only to defend," Jeong said.

Ein News:

« For Sale: Access to 70,000 Hacked Computer Networks
Russian Cyber Gangs Linked To Bank Robberies »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

CloudDNA

CloudDNA

CloudDNA deliver solutions that enable users and devices to connect over high performance, secure, efficient, scalable cloud networks.

Secure Identity Alliance (SIA)

Secure Identity Alliance (SIA)

The Secure Identity Alliance is dedicated to supporting sustainable worldwide economic growth and prosperity through the development of trusted digital identities and the adoption of secure eServices.

Fortify Experts

Fortify Experts

Fortify Experts is a search and recruitment firm specializing in Cyber Security.

Kivu Consulting

Kivu Consulting

Kivu Consulting combines technical and legal expertise to deliver data breach response, investigative, discovery and forensic solutions worldwide.

InPhySec

InPhySec

InPhySec is a leading New Zealand information, physical and cyber security company.

Vuntie

Vuntie

Vuntie blend European craftsmanship, performance and open-source technology to deliver cybersecurity services including penetration testing, incident response, training and consultancy.

ngCERT

ngCERT

ngCERT is the National Computer Emergency Response Team for Nigeria.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Broadcom

Broadcom

Broadcom is a global technology leader that designs, develops and supplies a broad range of semiconductor and infrastructure software solutions.

Berezha Security Group (BSG)

Berezha Security Group (BSG)

BSG is a cybersecurity consulting firm specializing in all aspects of application security and penetration testing.

AML Global Solutions (AMLGS)

AML Global Solutions (AMLGS)

AMLGS delivers Financial Crime prevention training programmes and consultancy services encompassing Anti-Money Laundering (AML), Counter Terrorism Financing (CTF), Bribery & Corruption and Fraud.

TheHive Project

TheHive Project

TheHive Project is a Scalable, Open Source and Free Security Incident Response Platform for SOC, CSIRT and CERT teams.

COPA-DATA

COPA-DATA

COPA-DATA is the only independent software manufacturer to combine in-depth experience in automation with new possibilities of digital transformation – reliable, future-proof and operating worldwide.

CYTUR

CYTUR

CYTUR provide trusted and secured maritime cybersecurity solutions to keep ships safe, protecting them, their crews, cargo and all stakeholders from maritime cyber threats.

Bedrock Security

Bedrock Security

Bedrock Security is at the forefront of revolutionizing data security in the cloud and GenAI era.

Siguria Kibernetike (Cyber Security)

Siguria Kibernetike (Cyber Security)

Siguria Kibernetike is a company based in Tirana that offers full service in the field of cyber and physical security.