THE CYBER SECURITY CHALLENGE Identifying, inspiring and enabling new cyber security talent

Transcription

1 THE CYBER SECURITY CHALLENGE Identifying, inspiring and enabling new cyber security talent Dr Robert L Nowill The Cyber Security Challenge UK ( ) runs a series of national inspirational competitions aimed at attracting talented people into the Information and Network Security profession or cyber, informing them about cyber security careers and learning opportunities. Now in its fourth year it is running an ambitious programme of competitions and activities designed to spread the word about why cyber security is such a fulfilling and varied career and to help talented people get their first cyber security jobs. It is sponsored by some of the UK s most prestigious public, private and academic organisations and is making a notable difference to the career prospects of those with the talents and aptitude to become cyber security professionals. THE 2014 FINALS VENUE The culmination of last year s programme of activities took place on March 2014 in London at the Churchill War Rooms, when The Challenge s two-day Masterclass final was held over the Friday and Saturday. The final this year was developed by a team of security professionals and enthusiastic

2 volunteers from BT, GCHQ and the National Crime Agency (NCA) with The Challenge s support, and used technology from Juniper Networks and Lockheed Martin. The new Cyber Security Champion was announced at the Awards ceremony afterwards at The Institute of Directors, Pall Mall. Will Shackleton, an 19 year student at the University of Cambridge who develops mobile apps in his spare time, and recently secured a Summer internship at Facebook, beat over 3,000 entrants and 41 fellow finalists, selected during 12 months of online and face-to-face cyber battles to uncover the cream of UK amateur cyber talent. Perhaps the ethos of the Challenge was captured by our winner he is in the centre of the picture below - when he said: I never considered a career in cyber security before taking part in The Challenge but playing their competitions and meeting the industry leaders has shown me there are exciting jobs which need filling TEAM BLACK ON THE CASE AND ULTIMATE WINNER WILL SHACKLETON This year s Masterclass was a highly realistic simulation described an evolving, sustained cyberattack on UK national security that brought whole industries to a halt and put the lives of UK citizens in danger. During two days of gameplay finalists worked in teams to investigate and nullify a determined enemy whose campaign of virtual terror struck first within London's financial district, making online banking platforms inaccessible, new stock market flotations impossible, and compromising BACS systems.

3 WINNING TEAM BURGUNDY AT WORK ON THE MASTERCLASS CHALLENGE Initial suggestions of a DDoS attack proved false as finalists uncovered a sophisticated spearfishing ransom-ware campaign utilising s that appear to come from trusted sources but contained links or downloadable files that infected entire networks when opened. The malicious code released by these s encrypted the contents of those networks before demanding money from the victims in exchange for their recovery. After spreading beyond the City to affect the transport, power and utilities sectors, the scenario culminated in a potentially life threatening attack on a nuclear power plant which thankfully competitors managed to avert. Stephanie Daman, CEO, Cyber Security Challenge UK summarised the achievement afterwards: Over the past three days we have given our candidates the most authentic experience of a what a real cyber-attack will look and feel like ever created for civilians in the UK. We have put them in the situations they can expect to experience as full time professionals. They have all done incredibly well to get here and the quality of skills on show is amazing. What is most impressive it that none of these finalists are cyber professionals already, the majority of them are self-taught. It s a real demonstration that the hidden talent is there to be discovered in every corner of the UK we just need to find it.

4 TEAM GREEN - PRESENTING TO THE BOARD The Challenges for the year ahead have already started, registrations are open for the 2014/15 programme of competitions. There is a fearsome message from the new cyber foe, a sinister-looking group calling themselves the Flag Day Associates: their creepy message for the UK cyber security community can be viewed here Given the recent upsurge in interest in attracting more people into Cyber through encouraging more diversity of applicants, greater uptake of STEM subjects at school, and into relevant apprenticeships, the Cyber Security Challenge Schools Programme is also making a significant impact ( ). The Challenge offers schools a series of fun, exciting and accessible activities that help younger audiences discover why cyber security matters and inspire them to want to defend the UK online. There is a great radio interview with Brian Higgins for The Challenge talking about our Schools competitions: The Challenge also offers teaching resources that enable schools quickly and easily to encourage the exhibition of practical skills that are relevant to job roles in cyber security. These include kits explaining how to crack pre-prepared codes, and lesson plans with exercises that help students build their own ciphers. Overall, The Challenge is a catalyst for cyber security career changes, and the first point of contact for anyone seeking guidance on how to transition to a role in this sector and is the only single point of access to the combination of UK public sector, industry and academic cyber security communities. The various competitions test more than technical skill. They represent the true scope of competencies required to succeed as a cyber-security professional, and enable candidates to understand the breadth of opportunity the sector offers as a result.

5 What can you do to help? That depends if you are individual or an organisation, but in short: Offer Work experience, internships, apprenticeships Consider being a STEM ambassador or supporting computer clubs at local schools Work with local Universities Consider employing & developing those without a traditional CV And of course sponsor The Cyber Security Challenge and help bring Talent into the cyber security profession As well as the main website, further information about The Challenge and its activities and participants can be found on Twitter and various tags like #cybermasterclass, and on Facebook as Cyber Security Challenge UK Bob Nowill of Herne Hill Consulting Ltd is a Director of The Cyber Security Challenge Ltd, and is the Chair of the IISP Accreditation Committee