Analyst's note: Troubling. Considering this UK article, "How are we going to keep our "geeks down on the farm?" is becoming an international question. A nation's infrastructure is clearly a target. So what is new here?
Considering reports in both UK & U.S. papers we see reported that "....China and Russia that are targeting gas, water and electricity suppliers in Britain, according to the parliamentary Intelligence and Security Committee. All this at a time when "GCHQ (Government Communications Headquarters) is losing “whizz kid” specialists to Google, Microsoft, and Amazon because they can triple their pay, the head of the agency has warned
As pointed out recently by one of my friends: "Looks to me that there are two distinct sides to such an action. On the one hand you provide businesses, etc., the ability to hopefully keep their cyber activities secure, then on the other hand, this same information can be used by hackers to break into the very cyber systems they were meant to secure. It’s a no win situation in my humble view." It is good to remember that some things simply can not be bought.
The overall impact of this report is absolutely not good people. Available evidence suggests that the U.S. Department of Homeland Security (DHS) is downplaying the incident, apparently not advising other similar activities of the threat, and indicating that “At this time there is no credible corroborated data that indicates a risk to critical infrastructure entities or a threat to public safety.” Just move along .... nothing is happening here.
One has to wonder what will be discovered next .... after the fact? For further insight and perspective, I recommend an internal site searchs on the term "Stuxnet" and "SCADA".
The move is part of the government’s new “cyber security strategy” which is seeking to make better use of the expertise at the Cheltenham listening centre.
The strategy says that GCHQ is “home to world-class expertise in cyber security” and it wants that to be used to support the private sector “without compromising the agency's core security and intelligence mission.”
The agency has agreed for the first time to “work with private sector partners to explore the potential commercial applications for GCHQ's unique expertise.”
It will also explore “strategic vehicles” for bringing together industry, academia and government to exploit the latest innovations in cyber security.
A major new development could see GCHQ developing a venture capital “model” to help fund innovation in cyber security in small and medium-sized enterprises, based on a model developed by the CIA.
The CIA has run a not-for-profit company called In-Q-Tel since 1999 and has invested in face recognition technology and the satellite imaging that led to the development of Google Earth.
The idea is that technology developed by innovative private companies can then be applied for intelligence uses.
[....] In tackling cyber fraud, new guidance will be issued aimed at increasing the use of current laws to restrict access to the internet and instant messaging services, where organised criminals have committed offences using those tools.
The government wants to encourage the role of “cyber-Specials” within the Metropolitan Police e-crime Unit – computer experts who act as special constables.
But by 2013, the Metropolitan Police and Serious and Organised Crime Agency will combine their efforts in a new cyber crime unit within the National Crime Agency, Britain’s FBI.
The unit will help deal with the most serious national-level cyber crime and be part of the response to major national incidents.
Action Fraud, the national fraud reporting and advice centre run, take on responsibility for reporting financially motivated cyber crime.
Related articles:
Hackers 'should fight cyber spies'
GCHQ is losing “whizz kid” specialists to Google, Microsoft, and Amazon
Cyber crime unit dubbed the i-Plods is unveiled
Russian Hackers Attack Illinois Water System
Hackers Attacked U.S. Water Utility in IL; **Destroyed** Pump
