GCHQ Is Investing In Cybersecurity Start-Ups

The UK's intelligence agency GCHQ is backing a new hub for tech start-ups in a rare glimpse into its approach to cybersecurity.

Among the companies is a firm using artificial intelligence to monitor workplace behaviour and another, running decoy computers to fool hackers.

They will have access to staff at the UK's most secretive agency and help bolster the country's online security. The hub is in Cheltenham, but not inside GCHQ's doughnut-shaped complex (pictured).

The tie-ups could be a "twin-edged sword" for the agency, said Prof Anthony Glees, the director of the Buckingham University Centre for Security and Intelligence Studies.

"On the one hand the people at GCHQ work very hard to keep us safe from terrorists and increasingly, you hope, from hackers," he said. Working with the private sector brought in new ideas, but "the other edge of the sword" was that it also came with security risks.

Rigorous Competition

Although GCHQ had long worked with outside contractors, it would need to manage the risks of other firms having access to its staff and resources, he added.

A spokesman for the GCHQ Cyber Accelerator, which launched recently, suggested the agency was aware of the risks. "All of the companies have been selected through a rigorous competition and have been subjected to appropriate background checks," he said.

The centre, which is in partnership with the government and telecoms firm Telefonica, also aims to boost the UK's £22bn cybersecurity sector.

"What GCHQ and the government recognise is that it's no longer just the big companies where you will find innovative ideas on cybersecurity," said Prof Alan Woodward, a cybersecurity expert at the University of Surrey.

Gloucester has long been a hub for defence contractors working with GCHQ, but the accelerator and the new National Cyber Security Centre are designed to attract new businesses to Cheltenham, he said.

The start-ups will be given a £5,000 grant each, access to government tenders and can work with GCHQ's network of international partners.

The seven chosen startups are:

CounterCraft: a counter-intelligence company that protects large organisations with a cybersecurity deception platform by fooling their adversaries with decoy computers, false data and fake identities.

Cyberowl, an early-warning system for cyber-attacks, which uses advanced security analytics.

FutureScaper, an intelligence platform to help visualise complex issues.

StatusToday, building artificial intelligence that attempts to understand human behaviour

Spherical Defence, which uses deep learning to detect banking intrusions.

Cybersmart, which automates compliance with cybersecurity standards.

Verimuchme, a digital wallet used to secure and verify personal information.

For cynics, there will be raised eyebrows at the involvement of GCHQ in the development of startups. In recent years the agency has had questionable techniques exposed by whistleblower Edward Snowden and been ruled to have unlawfully collected private data for 10 years.

Although, the National Cyber Security Centre is attempting to change any of the agency's negative perceptions by collaborating with others.

BBC:         Wired:         Cybersecurity Start-Ups Working With GCHQ:  

 

 

« Hologram Technology Is Finding Military Users
Yahoo Spins A Cautionary Tale Dealing With Data Privacy »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

ControlCase

ControlCase

ControlCase provide solutions that address all aspects of IT-GRCM (Governance, Risk Management and Compliance Management).

Capita

Capita

Capita is a consulting, digital services and software business, providing end-to-end enterprise IT services and solutions focused around digital transformation and innovation.

CERT.LV

CERT.LV

CERT.LV is the national Computer Emergency Response Team for Latvia.

Software Factory

Software Factory

Software Factory develops custom-built high-performance software solutions and products for applications including industrial cyber security.

IDnow

IDnow

IDnow is the world’s fastest, most flexible and most secure identity verification platform, delivering instant verification of the identity documents used by 7 billion people.

Span

Span

Span designs, develops and maintains information systems based on advanced technological solutions of global IT leaders.

HITRUST Alliance

HITRUST Alliance

HITRUST provides widely-adopted common risk and compliance management frameworks, related assessment and assurance methodologies.

Avertium

Avertium

Avertium is the managed security and consulting provider that companies turn to when they want more than check-the-box cybersecurity.

Breadcrumb Cybersecurity

Breadcrumb Cybersecurity

Breadcrumb Cybersecurity is a cybersecurity and advisory firm. We specialize in penetration testing, threat hunting, incident response, regulatory compliance, and employee training services.

Mandiant

Mandiant

Mandiant deliver dynamic cyber defense solutions powered by industry-leading expertise, intelligence and innovative technology.

Core Sentinel

Core Sentinel

Australia's #1 Penetration Testing Service. Make Your Systems Fully Compliant With Our OSCE CREST/CISA Certified Penetration Testing.

Coretelligent

Coretelligent

Coretelligent is a leading providers of Managed and Co-Managed IT, cybersecurity and private cloud services.

Infiot

Infiot

Infiot is a pioneer in enabling secure, reliable access with zero trust security, network optimization, edge-intelligence and AI driven operations for all remote users, devices, sites and cloud.

NorthRow

NorthRow

NorthRow provides digital transformation compliance solutions to help businesses manage regulatory and financial crime risks.

Quantum Dice

Quantum Dice

Quantum Dice is an award-winning venture-backed spinout from Oxford University’s world-renowned quantum optics laboratory.

Basalt

Basalt

Basalt provide qualified consulting services in information security, personnel security and physical security.