Britain Building Cyber Forces to Attack ISIS

British spies are building elite cyber offensive forces to strike at Islamic State fighters, hackers and hostile powers, Chancellor George Osborne said recently after warning militants wanted to launch deadly digital attacks.

Islamic State was trying to develop the capability to attack British infrastructure such as hospitals, power networks and air traffic control systems with potentially lethal consequences, Osborne said.

In response, Britain will bolster spending on cyber defences, simplify its state cyber structures and build its own offensive cyber capability to attack adversaries.

"We will defend ourselves. But we will also take the fight to you," Osborne, Britain's second most powerful politician after Prime Minister David Cameron, said in a speech at Britain's GCHQ eavesdropping agency.
"We are building our own offensive cyber capability – a dedicated ability to counter-attack in cyberspace. When we talk about tackling (Islamic State), that means tackling their cyber threat as well as their guns, bombs and knives."

Britain's new cyber attack forces will be run jointly between GCHQ and the Defence Ministry and will target individual hackers, criminal gangs, militant groups and hostile powers, using a "full spectrum" of actions, Osborne said.

GCHQ traces its history back to World War One signals intelligence with Winston Churchill as its founder and once reported to the MI6 foreign intelligence service but has since gained significant influence as one of the world's pre-eminent eavesdropping agencies.

One of the most secret spy agencies in the world, its existence was only officially recognised legally by Britain in the 1990s.

After the Paris attacks, which killed at least 129 people and were claimed by Islamic State, Britain said it would boost staff at its domestic MI5 security service, MI6 and GCHQ by about 15 percent.

Osborne said public spending on cyber security would be almost doubled to a total of 1.9 billion pounds ($2.9 billion) over the period to 2020, saying the decision to ramp up cyber defence funding had been taken before Friday's bloodshed in Paris.

Islamic State was already using the Internet for propaganda, to radicalise people and for planning purposes, he added, "They have not been able to use it to kill people yet by attacking our infrastructure through cyber attack," he said. "But we know they want it and are doing their best to build it.

GCHQ was currently monitoring cyber threats against 450 companies in aerospace, finance defence, energy and telecoms sectors, while the number of cyber national security incidents had doubled to 200 a month since last year, he said.

A new national cyber security plan drawn up by the government would feature a dedicated force to ensure faster and more effective responses to major online attacks. The force would be based at GCHQ in Cheltenham, southwest England.

Other elements of the plan included possible cooperation between internet service providers, with help from the government, to fend off malware attacks and block bad addresses used against British internet users, as well as a new institute to train coders, Osborne said.

British broadband provider TalkTalk suffered a cyber attack in October, which affected 157,000 customers. In November, Britain and US authorities carried out a drill with leading banks to test their response to a cyber incident in the financial sector.

"The experience in the last month of TalkTalk shows how cyber attack can suddenly go from a theoretical risk to a massive business cost," Osborne said.

Reuters:

 

« Anonymous Acts on Cyber War Threat
Restricting Encryption Wouldn’t Stop Paris-Style Attacks »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

IntaForensics

IntaForensics

IntaForensics offer a full range of digital investigation services and are able to adapt to the individual needs of solicitors, private clients, Law Enforcement Agencies and commercial businesses.

Learning Tree International

Learning Tree International

Learning Tree's comprehensive cyber security training curriculum includes specialised IT security training and general cyber security courses for all levels of your organisation including the C-suite.

Cyscale

Cyscale

Cyscale automates the contextual analysis of cloud misconfigurations, vulnerabilities, access, and data, to provide an accurate and actionable assessment of risk.

Cube 5

Cube 5

The Cube 5 incubator, located at the Horst Görtz Institute for IT Security (HGI), supports IT security startups and people interested in starting a business in IT security.

Cloud & Cyber Security Expo

Cloud & Cyber Security Expo

Cloud & Cyber Security Expo is the UK’s largest cloud and cyber security event.

Kainos

Kainos

Kainos is a leading provider of Digital Services and Platforms. Our services include Digital Transformation, Cyber Security, Cloud, AI, IoT and more.

UncommonX

UncommonX

UncommonX offers enterprise-class cybersecurity protection for mid-size organizations by combining adaptive threat and intelligence software with 24/7 industry experts.

Hub71

Hub71

Hub71 is a world-class tech ecosystem opening doors to global opportunities from an optimal business environment for entrepreneurial-minded innovators.

Myntex

Myntex

Myntex® builds the future of mobile security. We empower our partners to deliver exclusive mobile endpoint security software, fortifying against mobile threats, device exploits and data exfiltration.

Multipoint Group

Multipoint Group

Multipoint is an information security and protection solutions company operating in the South EMEA region through value-added distribution channels.

HTX (Home Team Science & Technology Agency)

HTX (Home Team Science & Technology Agency)

HTX brings together science and engineering capabilities to transform the homeland security landscape and keep Singapore safe.

Forward Networks

Forward Networks

Forward Networks - transforming networks to be more reliable, agile, and secure.

National Renewable Energy Laboratory (NREL) - USA

National Renewable Energy Laboratory (NREL) - USA

NREL is transforming energy through research, development, commercialization, and deployment of renewable energy and energy efficiency technologies.

Axiotrop

Axiotrop

AXIOTROP is a Cybersecurity firm offering leading services in assessment, remediation, and validation to protect the confidentiality, integrity, and availability of regulated information.

Codacy

Codacy

Codacy is a developer-first, API-driven platform that provides a curated collection of best-in-class code analysis, security, coverage, and engineering performance tools.

C3iHub

C3iHub

C3iHub was set up to drive technology and skills development on Cyber-Physical Systems (CPS) and associated Cybersecurity technologies.