Training Young Hackers To Stop Cybercrime

At the heart of a police operation to defend Britain from attack by cybercriminals, a 14-year-old boy was honing his skills to thwart hackers linked to a rogue state.

Ben Abrahmason was among a group who gathered at a military base in Wiltshire to counter fictional but sophisticated cyber-attacks. Police chiefs and intelligence officers hope young people like Ben will become the latest recruits in the rapidly evolving war. “A lot of it is like normal forensics. There are fingerprints, DNA, except it’s digital,” said Ben, from Leicestershire. “You examine phones, laptops, hard drives: the data on them can help you solve crimes.”

He had passed rigorous online tests to be selected to spend the day being tutored by experts from the National Crime Agency. Police say it is important for them to woo talented hackers who might be tempted, out of boredom or greed, to target companies or even work for criminals.

Colin Lobley, chief executive of Cyber Security Challenge UK, which organises a series of national competitions to identify the best potential “cyber-defenders”, said: “They might be phenomenally talented, but not old enough for us to offer them anything so we have to keep them interested and prevent them going to the dark side.”

He was referring to the network of cybercriminals which Europol has warned is responsible for launching 4,000 ransom attacks a day and whose technological capability threatens critical parts of the financial sector.

The government’s National Cyber Security Centre, in its 2017 annual review, revealed it had responded to 590 significant incidents including attacks on key national institutions such as the health service and the British and Scottish parliaments.

Christopher Williams, 18, from south London, is another who wants to help defend the UK’s critical infrastructure from cyber-attack.

“Anyone who’s a good citizen wants to help their country. It’s exciting to know you can still help protect your community and your country, to defend the UK using forensic skills to provide support for British troops overseas and the likes of MI6,” Williams said .

There was another pressing reason for Friday’s event: a gaping skills shortage threatens the rapidly expanding cybersecurity sector. Robert Hannigan, the former head of GCHQ, the intelligence and security agency, has predicted a “huge skills shortage” by 2025.

Craig Jones, head of preparing cyber-capability at the National Crime Agency, warned that if the UK failed to recruit top-level talent it would not be able to keep pace with criminals. “It’s simple: we are going to struggle. We need the best people to progress, though we also need to recognise that people are not going to stay for a 30-year career in law enforcement,” said Jones.

One area where recruitment must improve is in attracting more women to the sector. On Friday only three of the 30 contestants were women, a ratio that broadly mirrors the UK sector as a whole. Only about 8% of jobs in cybersecurity are filled by women compared with 11% globally.

One of the female contestants, Rhiannon Eason, 23, from Oxford, said: “I have always been interested in forensics and law enforcement, but until recently I had never thought of cybercrime. I’d like to do either forensics or ‘red team’ penetration, where you are an external attacker to test defences. I’m happy to play either side.”

Del Rattenbury joined the National Crime Agency in 2014 and explained that becoming a cybersecurity investigator could make the difference between life and death.

She said that one of her operations had helped reduce deaths from the synthetic opioid, fentanyl, which had been linked to particular drug producers in China and suppliers on the dark web. Other investigations had identified women who had been trafficked.

“You are protecting some of the most vulnerable people in society, saving lives,” she said.

The Guardian:

You Might Also Read:

Cybersecurity Training For High School Students

« Why Mainframe Security Risks Are Largely Unrecognized
The Best Security Is Based On Zero Trust »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

NuHarbor Security

NuHarbor Security

NuHarbor is a leading information security consulting and advisory firm specializing in Information Security, Compliance, and Risk Management.

SecWest

SecWest

SecWest is the organizer of CanSecWest, PACSEC, originator of PWN2OWN, security auditing, and virtual engagement/training.

Cybernance

Cybernance

Cybernance provide an enterprise-wide, web-based software solution for managing and mitigating cyber risk based on key compliance frameworks.

Semperis

Semperis

Semperis is an enterprise identity protection company that enables organizations to quickly recover from accidental or malicious changes and disasters that compromise Active Directory.

Cognni

Cognni

Cognni (formerly Shieldox) will make your InfoSec think like a human, right out of the box, so you can focus on the bigger picture, keeping the information flow safe.

CyberGRX

CyberGRX

The CyberGRX Exchange and our risk assessments-as-a-service help Enterprises and Third Parties cost-effectively identify, prioritize and mitigate risk.

C3.ai

C3.ai

The C3 AI Suite supports configurable, pre-built, high value AI applications for predictive maintenance, fraud detection, anti-money laundering, sensor network health and more.

LUCY Security

LUCY Security

LUCY is the answer when you want to increase your IT security, maintain your cyber security awareness, or test your IT defenses.

Alias Robotics

Alias Robotics

Alias Robotics is a robot cyber security company. We deliver cyber security solutions for robots and robot components.

Resilience Cyber Insurance Solutions

Resilience Cyber Insurance Solutions

Resilience Cyber Insurance combines insurance expertise with cybersecurity and data talent to deliver clear, effective solutions to protect you for the cyberrisks of today—and tomorrow.

US Army Cyber Command (ARCYBER)

US Army Cyber Command (ARCYBER)

US Army’s Cyber Command (ARCYBER) is engaged in the real-world cyberspace fight today, against near-peer adversaries, ISIS, and other global cyber threats.

Navisite

Navisite

Navisite is a combination of eight respected IT consulting and managed service providers that were brought together under the Navisite brand.

Saporo

Saporo

Saporo helps organizations increase their cyber-resistance. Continuously map your attack surface and get the recommendations you need to make your organization more resistant to attacks.

Cyber Tzar

Cyber Tzar

Cyber Tzar is a new approach at dealing with an old problem; assessing and managing risks to your IT estate.

Technology Mindz

Technology Mindz

Technology Mindz is a leading provider of cybersecurity services. We offer a wide range of services to help businesses. Our services are Identity and access management, Governance risk and compliance.

Tausight

Tausight

Tausight is an AI-Powered patient data security startup with a mission of reducing healthcare cyber incidents using a more proactive, risk management philosophy.