Feeds

GCHQ to share threat intel – and declassify SECRET inventions

Inspector Gadget watch? Nope, IP with no 'secret applications', sadly

Intelligent flash storage arrays

IA14 Blighty intelligence and security bods at GCHQ will share classified info on cyber threats with organisations running the UK’s critical national infrastructure as well as declassifying some of the spy agency's intellectual property.

It's all part of a series of moves designed to share its expertise.

The agency used its IA14 cyber security conference in London to announce the pilot, which will start with communications service providers supplying the UK state sector.

The surveillance and information security agency is starting with such providers as it already works with them, with information shared with appropriately cleared people within the firms, it said.

GCHQ has previously warned organisations about specific threats, but has not run a structured programme. It now aims to pass on regular information with more analysis as part of broader moves to increase its protection of the UK’s critical national infrastructure.

The agency also plans to declassify some of its intellectual property, potentially through joint ventures with businesses and releases of open source software, as part of a programme to promote innovation and the economy. As might be expected, this will focus on innovations that do not have secret applications, but could have use in areas such as business and healthcare. GCHQ is also doing more to encourage small and medium-sized enterprises to trade with it.

“There are opportunities for business and government from cyber – it enables innovation and enterprise and also supports jobs and greater prosperity. We need to pull together, in the same direction to make us stronger and more aware, leaving us better placed to tackle the threats that cyber presents,” minister for the Cabinet Office Francis Maude told the event, in comments released through a press statement.

GCHQ has previously preferred to keep its innovations under its hat. In 1969, employee James Ellis invented public key infrastructure, but it was kept secret. The technique was only made publicly available when it was independently developed by Whitfield Diffie and associates, to become a standard online technology. The agency has since acknowledged Ellis’ achievements.

In a speech this evening, outgoing GCHQ director Sir Iain Lobban is expected to speak about the agency's part in disrupting the GameOverZeus malware, along with its US partner the National Security Agency and the UK’s National Crime Agency.

The agency has been working with the National Crime Agency and individual police forces. It has seen nation states, people acting as their proxies and serious and organised criminals carrying out cyber-attacks against Britain, but has not yet seen terrorists attempt to use such methods for destructive attacks.

GCHQ passed on some of this information in what is thought to have been its first formal press briefing, held before the IA14 conference started yesterday. The briefing took place on the basis that journalists avoided quoting or directly attributing comments to those speaking.

While the atmosphere was a little awkward, most reporters’ queries were answered directly – although a question concerning NSA whistle-blower Edward Snowden was batted away.

As an indication of the tension between security and openness, the IA14 conference is closed to the media and public, but is nevertheless being tweeted with the hashtag #IA14Event.

It is also no threat to national security to disclose that the first GCHQ press briefing was held in a black-walled, windowless room with low lighting. In other words, it was a bit shadowy. ®

Internet Security Threat Report 2014

More from The Register

next story
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
Doctor Who's Flatline: Cool monsters, yes, but utterly limp subplots
We know what the Doctor does, stop going on about it already
'Cowardly, venomous trolls' threatened with TWO-YEAR sentences for menacing posts
UK government: 'Taking a stand against a baying cyber-mob'
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
Arab States make play for greater government control of the internet
Nerds told to get lost in last-minute power grab bid at UN meeting
Zippy one-liners, broken promises: Doctor Who on the Orient Express
Series finally hits stride, but Clara's U-turn is baffling
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
Apple SILENCES Bose, YANKS headphones from stores
The, er, Beats go on after noise-cancelling spat
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.