Feeds

Hong Kong cops open £700k cyber security centre

27-man centre will try to spot and combat CNI attacks

Next gen security for virtualised datacentres

The Hong Kong government has thrown HK$9 million (£730,000) at a new Cyber Security Centre in a bid to tackle the growing threat to critical infrastructure in the Special Administrative Region of China.

Police commissioner Tsang Wai-hung said at the opening ceremony last Friday that the 27-man centre would be staffed by officers from the small Technology Crime Division and heralded it as the first step towards working more closely with public and private sector organisations.

“Extensive research indicates that the global community continues to suffer from increasingly sophisticated and elusive cyber attacks and if such attacks were successful on critical infrastructure systems the consequences to society would be serious and far reaching,” he said.

“So in recognising this global threat as well as drawing references from overseas experience, the force has decided that the setting up of this centre will - in collaboration with the stakeholders – strengthen our resilience against such threats.”

The centre will be used to support the division’s efforts at spotting and preventing hi-tech crime; analyse and respond to cyber attacks in real-time; and strengthen industry collaboration domestically and internationally.

However, the force was immediately put on the back foot over its plans to monitor data traffic over critical infrastructure systems, despite giving assurances it would only be looking at general data flows and not inspecting specific content.

Lawmaker and founder Charles Mok told the local South China Morning Post that independent experts should be called in to audit the technology and report back on whether web users’ privacy rights will be respected.

"Now, the law enforcers and banks have agreed to monitor certain data. The banks may not find this a problem, but its clients may be worried," he said.

While Hong Kong has had a CERT for over a decade, there have been mutterings that it is under-resourced to deal with the growing online threat to businesses.

Roy Ko, manager of the HKCERT, told The Reg that it will work closely with the Centre to share info on compromised machines and other intelligence.

"Our work will focus on cleaning up compromised machines in Hong Kong as these compromised machines may launch attacks on others. The police focus mainly on attacks targeting HK organisations and to warn or protect these organisations," he explained.

"A mechanism to analyse cyber threat-related traffic is necessary to provide early warning and quick response to attacks, in particular DDoS attacks. HKCERT proposed a similar system a few years back and I am glad that the HK police force finally got the funding and resource to do that. But there is still a lot to be done."

Financial losses due to “technology crime cases” in the SAR have jumped from HK$45m (£3.6m) in 2009 to HK$148.5m (£12m) last year, with online fraud, DDoS-related blackmail and hacktivism among the most common threats. ®

The essential guide to IT transformation

More from The Register

next story
GCHQ protesters stick it to British spooks ... by drinking urine
Activists told NOT to snap pics of staff at the concrete doughnut
Britain's housing crisis: What are we going to do about it?
Rent control: Better than bombs at destroying housing
What do you mean, I have to POST a PHYSICAL CHEQUE to get my gun licence?
Stop bitching about firearms fees - we need computerisation
Top beak: UK privacy law may be reconsidered because of social media
Rise of Twitter etc creates 'enormous challenges'
Redmond resists order to hand over overseas email
Court wanted peek as related to US investigation
Ex US cybersecurity czar guilty in child sex abuse website case
Health and Human Services IT security chief headed online to share vile images
NZ Justice Minister scalped as hacker leaks emails
Grab your popcorn: Subterfuge and slur disrupts election run up
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?