Feeds

GCHQ to share threat intel – and declassify SECRET inventions

Inspector Gadget watch? Nope, IP with no 'secret applications', sadly

Beginner's guide to SSL certificates

IA14 Blighty intelligence and security bods at GCHQ will share classified info on cyber threats with organisations running the UK’s critical national infrastructure as well as declassifying some of the spy agency's intellectual property.

It's all part of a series of moves designed to share its expertise.

The agency used its IA14 cyber security conference in London to announce the pilot, which will start with communications service providers supplying the UK state sector.

The surveillance and information security agency is starting with such providers as it already works with them, with information shared with appropriately cleared people within the firms, it said.

GCHQ has previously warned organisations about specific threats, but has not run a structured programme. It now aims to pass on regular information with more analysis as part of broader moves to increase its protection of the UK’s critical national infrastructure.

The agency also plans to declassify some of its intellectual property, potentially through joint ventures with businesses and releases of open source software, as part of a programme to promote innovation and the economy. As might be expected, this will focus on innovations that do not have secret applications, but could have use in areas such as business and healthcare. GCHQ is also doing more to encourage small and medium-sized enterprises to trade with it.

“There are opportunities for business and government from cyber – it enables innovation and enterprise and also supports jobs and greater prosperity. We need to pull together, in the same direction to make us stronger and more aware, leaving us better placed to tackle the threats that cyber presents,” minister for the Cabinet Office Francis Maude told the event, in comments released through a press statement.

GCHQ has previously preferred to keep its innovations under its hat. In 1969, employee James Ellis invented public key infrastructure, but it was kept secret. The technique was only made publicly available when it was independently developed by Whitfield Diffie and associates, to become a standard online technology. The agency has since acknowledged Ellis’ achievements.

In a speech this evening, outgoing GCHQ director Sir Iain Lobban is expected to speak about the agency's part in disrupting the GameOverZeus malware, along with its US partner the National Security Agency and the UK’s National Crime Agency.

The agency has been working with the National Crime Agency and individual police forces. It has seen nation states, people acting as their proxies and serious and organised criminals carrying out cyber-attacks against Britain, but has not yet seen terrorists attempt to use such methods for destructive attacks.

GCHQ passed on some of this information in what is thought to have been its first formal press briefing, held before the IA14 conference started yesterday. The briefing took place on the basis that journalists avoided quoting or directly attributing comments to those speaking.

While the atmosphere was a little awkward, most reporters’ queries were answered directly – although a question concerning NSA whistle-blower Edward Snowden was batted away.

As an indication of the tension between security and openness, the IA14 conference is closed to the media and public, but is nevertheless being tweeted with the hashtag #IA14Event.

It is also no threat to national security to disclose that the first GCHQ press briefing was held in a black-walled, windowless room with low lighting. In other words, it was a bit shadowy. ®

Protecting against web application threats using SSL

More from The Register

next story
Hey, Scots. Microsoft's Bing thinks you'll vote NO to independence
World's top Google-finding website calls it for the UK
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
Apple CEO Tim Cook: TV is TERRIBLE and stuck in the 1970s
The iKing thinks telly is far too fiddly and ugly – basically, iTunes
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Huawei ditches new Windows Phone mobe plans, blames poor sales
Giganto mobe firm slams door shut on Microsoft. OH DEAR
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Found inside ISIS terror chap's laptop: CELINE DION tunes
REPORT: Stash of terrorist material found in Syria Dell box
OECD lashes out at tax avoiding globocorps' location-flipping antics
You hear that, Amazon, Google, Microsoft et al?
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.