Feeds

Hong Kong cops open £700k cyber security centre

27-man centre will try to spot and combat CNI attacks

Combat fraud and increase customer satisfaction

The Hong Kong government has thrown HK$9 million (£730,000) at a new Cyber Security Centre in a bid to tackle the growing threat to critical infrastructure in the Special Administrative Region of China.

Police commissioner Tsang Wai-hung said at the opening ceremony last Friday that the 27-man centre would be staffed by officers from the small Technology Crime Division and heralded it as the first step towards working more closely with public and private sector organisations.

“Extensive research indicates that the global community continues to suffer from increasingly sophisticated and elusive cyber attacks and if such attacks were successful on critical infrastructure systems the consequences to society would be serious and far reaching,” he said.

“So in recognising this global threat as well as drawing references from overseas experience, the force has decided that the setting up of this centre will - in collaboration with the stakeholders – strengthen our resilience against such threats.”

The centre will be used to support the division’s efforts at spotting and preventing hi-tech crime; analyse and respond to cyber attacks in real-time; and strengthen industry collaboration domestically and internationally.

However, the force was immediately put on the back foot over its plans to monitor data traffic over critical infrastructure systems, despite giving assurances it would only be looking at general data flows and not inspecting specific content.

Lawmaker and founder Charles Mok told the local South China Morning Post that independent experts should be called in to audit the technology and report back on whether web users’ privacy rights will be respected.

"Now, the law enforcers and banks have agreed to monitor certain data. The banks may not find this a problem, but its clients may be worried," he said.

While Hong Kong has had a CERT for over a decade, there have been mutterings that it is under-resourced to deal with the growing online threat to businesses.

Roy Ko, manager of the HKCERT, told The Reg that it will work closely with the Centre to share info on compromised machines and other intelligence.

"Our work will focus on cleaning up compromised machines in Hong Kong as these compromised machines may launch attacks on others. The police focus mainly on attacks targeting HK organisations and to warn or protect these organisations," he explained.

"A mechanism to analyse cyber threat-related traffic is necessary to provide early warning and quick response to attacks, in particular DDoS attacks. HKCERT proposed a similar system a few years back and I am glad that the HK police force finally got the funding and resource to do that. But there is still a lot to be done."

Financial losses due to “technology crime cases” in the SAR have jumped from HK$45m (£3.6m) in 2009 to HK$148.5m (£12m) last year, with online fraud, DDoS-related blackmail and hacktivism among the most common threats. ®

SANS - Survey on application security programs

More from The Register

next story
Android engineer: We DIDN'T copy Apple OR follow Samsung's orders
Veep testifies for Samsung during Apple patent trial
MtGox chief Karpelès refuses to come to US for g-men's grilling
Bitcoin baron says he needs another lawyer for FinCEN chat
Did a date calculation bug just cost hard-up Co-op Bank £110m?
And just when Brit banking org needs £400m to stay afloat
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Don't let no-hire pact suit witnesses call Steve Jobs a bullyboy, plead Apple and Google
'Irrelevant' character evidence should be excluded – lawyers
EFF: Feds plan to put 52 MILLION FACES into recognition database
System would identify faces as part of biometrics collection
Ex-Tony Blair adviser is new top boss at UK spy-hive GCHQ
Robert Hannigan to replace Sir Iain Lobban in the autumn
Alphadex fires back at British Gas with overcharging allegation
Brit colo outfit says it paid for 347KVA, has been charged for 1940KVA
Jack the RIPA: Blighty cops ignore law, retain innocents' comms data
Prime minister: Nothing to see here, go about your business
Banks slap Olympus with £160 MEEELLION lawsuit
Scandal hit camera maker just can't shake off its past
prev story

Whitepapers

Designing a defence for mobile apps
In this whitepaper learn the various considerations for defending mobile applications; from the mobile application architecture itself to the myriad testing technologies needed to properly assess mobile applications risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.