The Cyberwar Frontier In Korea

In one college major at Seoul's elite Korea University, the courses are known only by number, and students keep their identities a secret from outsiders. 

The Cyber Defense curriculum, funded by the defense ministry, trains young keyboard warriors who get a free education in exchange for a seven-year commitment as officers in the army's cyber warfare unit - and its ongoing conflict with North Korea. 

North and South Korea remain in a technical state of war since the 1950-53 Korean War ended in an armed truce. Besides Pyongyang's nuclear and rocket programmes, South Korea says the North has a strong cyber army which it has blamed for a series of attacks in the past three years. 

The cyber defense programme at the university in Seoul was founded in 2011, with the first students enrolled the following year. 

One 21-year-old student, who allowed himself to be identified only by his surname Noh, said he had long been interested in computing and cyber security and was urged by his father to join the programme. All South Korean males are required to serve in the military, usually for up to two years. 

"It's not a time burden but part of a process to build my career," Noh said. "Becoming a cyber warrior means devoting myself to serve my country," he said in a war room packed with computers and wall-mounted flat screens at the school's science library.

South Korea, a key US ally, is one of the world's most technologically advanced countries. That makes its networks that control everything from electrical power grids to the banking system vulnerable against an enemy that has relatively primitive infrastructure and thus few targets against which the South can retaliate. 

"In relative terms, it looks unfavorable because our country has more places to defend, while North Korea barely uses or provides internet," said Noh. 

Last year, South Korea estimated that the North's "cyber army" has doubled in size over the last two years to 6,000 troops and the South has been scrambling to ramp up its capability to meet what it considers to be a rising threat. 

The United States and South Korea announced efforts to strengthen cooperation on cyber security, including "deepening military-to-military cyber cooperation," the White House said during President Park Geun-hye's visit to Washington in October. 

In addition to the course at Korea University, the national police have been expanding its cyber defence capabilities, while the Ministry of Science, ICT and Future Planning started a one-year programme in 2012 to train so-called "white hat" - or ethical - computer hacker.

Still, the North appears to have notched up successes in the cyber war against both the South and the United States. 

Recently, South Korean police said the North hacked into more than 140,000 computers at 160 South Korean companies and government agencies, planting malicious code under a long-term plan laying groundwork for a massive cyber-attack against its rival. 

In 2013, Seoul blamed the North for a cyber-attack on banks and broadcasters that froze computer systems for over a week. And North Korea denied responsibility. 

The US Federal Bureau of Investigation has blamed Pyongyang for a 2014 cyber-attack on Sony Pictures' network as the company prepared to release "The Interview," a comedy about a fictional plot to assassinate North Korean leader Kim Jong Un. The attack was followed by online leaks of unreleased movies and emails that caused embarrassment to executives and Hollywood personalities. 

North Korea described the accusation as "groundless slander." 

South Korea's university cyber defense programme selects a maximum of 30 students each year, almost all of them men. On top of free tuition, the school provides 500,000 won ($427) per month support for each student for living expenses, according to Korea University Professor Jeong Ik-rae. 

The course trains pupils in disciplines including hacking, mathematics, law and cryptography, with students staging mock hacking attacks or playing defense, using simulation programs donated by security firms, he said. 

The admission to the selective programme entails three days of interviews including physical examinations, attended by military officials along with the school's professors, he said.

While North Korea's cyber army outnumbers the South's roughly 500-strong force, Jeong said a small group of talented and well-trained cadets can be groomed to beat the enemy.

Jeong, an information security expert who has taught in the cyber defense curriculum since 2012, said the school benchmarks itself on Israel's elite Talpiot programme, which trains gifted students in areas like technology and applied sciences as well as combat. After graduating, they focus on areas like Cybersecurity and missile defence.

"It's very important to have skills to respond when attacks happen - not only to defend," Jeong said.

Ein News:

« For Sale: Access to 70,000 Hacked Computer Networks
Russian Cyber Gangs Linked To Bank Robberies »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

NetFort

NetFort

NetFort provides software products to monitor activity on virtual and physical networks.

TokenOne

TokenOne

TokenOne is a Cyber Security software company that makes it easy to replace passwords, tokens and other forms of authentication with a more secure solution.

Torsion Information Security

Torsion Information Security

Torsion is an innovative information security and compliance engine, which runs either in the cloud or your data centre.

Resec Technologies

Resec Technologies

Resec provides total protection against all types of known and unknown malware threats including viruses, Trojans, ransomware and phishing, regardless of their delivery method.

Lineal Services

Lineal Services

Lineal supports clients in meeting their digital forensics, cyber security and eDiscovery needs by providing bespoke solutions to complex problems.

Pluribus One

Pluribus One

Pluribus One develops customized solutions and other data-driven applications to secure your business and your devices.

QuoLab

QuoLab

QuoLab empowers security professionals to analyze, investigate and respond to threats within an integrated ecosystem.

SecureAge Technology

SecureAge Technology

We’re a rapidly growing cybersecurity company with an 18-year history of ZERO Data breaches. Our security solutions place security and usability on equal footing. Learn more about our technology.

Boxphish

Boxphish

Boxphish provides a proven solution to reduce Human Error and Cyber Human Risk via automated learning journeys and intelligent phishing simulations.

Blok Cyber Security

Blok Cyber Security

Blok provide small businesses and sole traders, with affordable, managed Cyber Security Packages that offer immediate protection and peace of mind.

VISTA InfoSec

VISTA InfoSec

VISTA InfoSec is a global Information Security Consulting firm with offices based in US, UK, Singapore and India.

Acora

Acora

Acora provide a range of best-in-class managed services, Microsoft-centric business software, and cloud solutions designed to help mid-market organisations succeed in the digital economy.

Skyhawk Security

Skyhawk Security

Skyhawk Security is the originator of Cloud threat Detection and Response (CDR), helping hundreds of users map and remediate sophisticated threats to cloud infrastructure in minutes.

VicOne

VicOne

With a vision to secure the vehicles of tomorrow, VicOne delivers a broad portfolio of cybersecurity software and services for the automotive industry.

Collabera Digital

Collabera Digital

Collabera Digital engineer the next generation of solutions that power tech-forward organizations and create an impact on people and communities.

Diversified Technical Services Inc. (DTSI)

Diversified Technical Services Inc. (DTSI)

DTSI provides a wide range of technology solutions for Federal Agencies, the Department of Defense, and commerical organizations with capabilities including Cyber Security and DevSecOps.