Finding the Needle in the Lawful Intercept Haystack

Modern encryption techniques have resulted in Law Enforcement and Intelligence Agencies losing the benefits that came from carrying out Lawful Intercept activities. Indeed the time required to investigate a lawful intercept PCAP file for relevant and useful information is now such that should any artefact be found, it is almost certainly found long after the time when the information could have been at its most useful.

Communications channels have gone way beyond the simple calls and text messages of the past. The proliferation of messaging apps (WhatsApp, Signal, Telegram etc.), the ability to send messages via social media platforms (Facebook, Nextdoor, Instagram etc.) and the use of video communication platforms (FaceTime, Zoom etc.) has resulted in a very complex environment to investigate and analyse when looking for that particular artefact that will break the case, or that specific piece of intelligence that will lead the investigators to where they need to go, and this is before you add the problem that all investigators have when these communications are encrypted.

Additional information and intelligence you may want to know is which websites have been visited, when, with what frequency, for how long, etc. Another thing that Wireshark won’t do for you here, but a good LEA workflow will, is categorise each website into a category; is it Ads, Shopping, Food, Travel, Furniture, Pornography, Social Networking, Political Ideology, Terrorism, etc.

What is required is a tool that examines the lawful intercept network data (most likely a PCAP) and synthesises the output into a clear website profiling view. When that kind of analysis takes seconds and can be immediately reflected from a large collection of PCAPs, then we’re really cooking on gas. 

Today Lawful Intercept of data services can still be an effective tool against communication apps. What is being said is lost to unbreakable encryption, but that is not what is often needed to progress an investigation. Each call leaves a digital footprint in the packet captures, and that is clearly visible to the right tool, regardless of if that app is WhatsApp or some obscure dialler you have never heard of. Some of these applications are quite challenging to ‘fingerprint’ within the network noise, but the right application of machine learning can classify these applications with high confidence. 

If you would like to find out more about how to find that Needle in the Lawful Intercept Haystack and work in Law Enforcement or Intelligence, then subscribe to Digital Forensics Magazine and read the full article, and join Sandvine for a Live Demonstration of Digital Witness.

Digital Witness Webinar Registration (sandvine.com)

(249)

Share

7 Technologies To Watch in 2023

How IoT Solutions Are Taking Tech Into The Future

By Matthew Margetts, Director, Smarter Technologies

The Internet of Things (IoT) is becoming a household name – and one that has found unique applicability in not only our homes, but in our businesses, workplaces, and cities. The number of installed IoT devices is expected to surge to around 30.9 billion units by 2025. The myriad of different forms of technology has the potential to provide incredible business value.

They are vital tools for digital transformation and datafication – and their power lies in performance improvements, as well as problem-solving capabilities. IoT’s importance as a technology trend this year and into the future is the role it plays in the successes of other technologies. For business owners looking to drive evolution, keeping a finger on the pulse of the latest IoT trends is important for agility into 2023 and beyond.

WHAT IS IoT?

Broadly speaking, IoT is the ecosystem of internet-connected smart devices and technologies in our homes, cities, and workplaces that continuously collect data.

IoT FACTS AND FIGURES IN 2022 AND BEYOND

There are more than 7 billion connected IoT devices currently in operation.

By 2030, 75% of all devices are expected to be IoT.

Worldwide IoT spending is anticipated to reach $1 trillion and this growth rate is predicted to continue in 2023 and beyond.

WHY IS IoT IMPORTANT?

A Quick View of the Benefits of IoT in Business

IoT solutions help to build resilient supply chains

Improved health, wellbeing, safety, and security

Optimised asset usage and maintenance

Reduced overheads

Improved communication and engagement

Meaningful sustainability and environmental advances

TECHNOLOGY TRENDS: POWERED BY IoT

1. Remote Monitoring

According to McKinsey, the COVID-19 pandemic accelerated the adoption of digital technologies by seven years. Off the back of global lockdowns, this naturally includes the requirement for remote monitoring and the move towards automated systems. These IoT-based technologies are being adopted to transform everything from building monitoring and machine performance to building occupancy and machine learning.

2. Modular Smart Technologies Solutions

The preference for individual devices performing multiple functions has given way to networks of devices. This network of devices creates a modular system of individual utilities and processes. The result is a granular view of whole operations, which works toward holistic network benefits.

3. Data Analysis

Data is arguably one of the top strategic tools for businesses. High-quality data plays a role in designing business strategy (what can be monitored can be more effectively managed) and ensuring the integrity of supply chains. Through alerts around deviations from “normal” data sets, real-time action is also inspired, which can avert disaster and save costs.

Data also has the ability to inspire high-level compliance, machine learning, customer service, maintenance schedules, safety and security. Additionally, it gives invaluable insights for the purposes of gauging return on investment and preventing wastefulness.

4. Artificial Intelligence, Machine Learning, and Visual Inspection

The concepts of artificial intelligence, machine learning, visual inspections, and automation are becoming increasingly commonplace. These functions are all best guided by data insights – removing the unpredictability and margin of error from human processes.

5. Advanced Networks

As IoT technologies evolve, so too do the networks around them. Improved speed, security, and reliability of networks and connectivity infrastructure are the precursor to IoT sensors, wearables, smart cities and homes.

6. Smart Buildings, Smart Cities

IoT and smart technologies are being used to optimise various functions within the city environment. This is being done as a means of creating a more engaged public and improving everything from public transport systems to responsible and environmentally conscientious resource utilisation.

IoT technologies and smart technology solutions have also found their way into businesses, buildingshealthcareretailagriculture, and manufacturing. IoT technologies stand to have a bearing on many different facets of these different sectors. This includes vaccination cold chains, predictive maintenance for enhanced equipment management, transport and logistics. The applications are endless – and are easily tailored to the specifics of a project or long-term strategic objective.

7. Digital Twins 

Digital twins are virtual replicas of a physical product, process, or system that bridge the physical and digital worlds. Today’s digital twins use sensors to collect real-time data about a physical item, which is used to create a virtual duplicate of the item. The digital duplicate can be optimised, manipulated and analysed to test different scenarios in a risk-free environment.

WHAT ARE THE CHALLENGES FOR IoT?

Security

According to Kaspersky research published in the first quarter of 2022, 43% of businesses have unprotected IoT infrastructure – and cybersecurity concerns remain a barrier to IoT systems implementation (as reported by 57% of surveyed businesses).

As IoT devices become more prevalent – and as our reliance on them increases – so security concerns take on renewed importance. Gartner reports that 20% of organisations have experienced cyber attacks on IoT devices over the past three years.

Chip Shortages

The supply of semiconductor chips for IoT solutions has been put under strain by the high demand in recent times, resulting in a chip shortage. This is expected to limit IoT growth by 10-15% in 2022. The good news is that public and private sector efforts by the European Union are designed to meet the challenges of the shortage and make way for achieved growth potential.

Latency

Traditionally, the optimal effectiveness and speed of data transmission of IoT technologies has hinged on bandwidth capabilities. Network advances will ensure not only that data is transmitted in real time as required by many applications, but also that this process is done securely.

ABOUT THE AUTHOR

Matthew Margetts is a Director at Smarter Technologies. His background includes working for blue-chip companies such as AppNexus, AOL/ Verizon, and Microsoft in the UK, Far East and Australia.

(346)

Share

Cyber Outstanding Security Performance Awards (OSPAs) – Nominations Closing Soon

Entries for the 2022 Cyber OSPAs are open until 15th August

For any enquiries please email enquiries@theospas.com

The categories and criteria for the Cyber OSPAs are listed below.

Please note that it is important that all the entry criteria are covered in the submission, as judges can only provide their scores against the information that is submitted on the entry. External links and attachments are not permitted.

(103)

Share

APM GROUP (APMG) and THE CYBER SCHEME Join Forces to Create Exams and Accreditation Programmes in Cyber Security?

The Cyber Scheme and APMG  have announced a new collaborative working arrangement designed to help professionals develop and grow their cyber security career.

The Cyber Scheme and APMG are committed to improving entry routes and career pathways, which will be adopted as ‘best practice’ by the Cyber Security industry. Both APMG  and The Cyber Scheme are prioritising making career pathways simpler, more regulated and more accessible for people from a wide range of backgrounds. By following appropriate governance under internationally recognised standards, * this joint venture will assure the exams they create will be of the highest quality, and a benchmark for anyone wishing to further their education in this dynamic industry.

Exams and assessments for career pathways will be available through The Cyber Scheme and APMG  for several international recognised schemes. APMG  are an accreditation body with an established relationship with the newly established UK Cyber Security Council, and both they and The Cyber Scheme are keen to develop a working relationship with the Council, helping to underpin the quality of service offerings as they are developed. The organisations will be working with the Sponsors of The Cyber Scheme, a consortium of industry thought leaders and experts dedicated to the development and improvement of the Cyber Security industry.

* APMG’s certification and accreditation processes are developed and managed in accordance with a robust quality management system accredited by the United Kingdom Accreditation Service (UKAS). 

Richard Pharro, CEO of APMG says: “There are thousands of competent Cyber Security professionals in the UK, but not enough. There are excellent cyber security university courses, but they cannot educate enough people. A main focus of this collaboration is to help people get onto the first rung of a career in cyber security; to build a workforce that over time can develop and grow into the wide range of cyber security roles that need to be filled . We look forward to working with Charles and his team to help make this happen”

Charles White, MD of The Cyber Scheme adds: “I echo the sentiment from Richard; being able to construct a suitable entry level standard with industry collaboration is critical to help thousands of people either career transition or join the workforce and to get themselves on the first rung of the Cyber ladder. In addition, our professional sponsors’ ability to devise more modern standards that meet today’s market is vital. And so our collaboration with APMG allows The Cyber Scheme to be sound in the knowledge that any standard or qualification grades will have the scrutiny and due governance provided by the most reputable global accreditation and examination institute”.


(108)

Share

UK Cyber Security Council Hosts International Women’s Day Event To Celebrate Vital Role Women Play In The Sector

Ahead of International Women’s Day (8th March), The UK Cyber Security Council has revealed how a more diverse workforce can plug the cyber industry’s skills gap and bolster the UK’s resilience against online threats.

With an ambition to ensure the UK becomes the safest place to live and work online, the UK Cyber Security Council has partnered with Women in Cyber Security (WiCyS UK) for an event on 8th March 2022. 

Exploring sector diversity and barriers to entry, the virtual sessions will hear from high-profile individuals working within cyber, which aims to inspire current practitioners and educate potential entrants to the industry.

The event will be chaired by Laura Wellstead (WiCyS), with keynote talks given by thought leaders from across the industry, including Dr Claudia Natanson (Chair, UK Cyber Security Council), Lindy Cameron (CEO, NCSC) and Angelique Faye Loe (Head of Cryptography, Jaguar Land Rover). 

Although the UK’s cyber sector employs an estimated 52,700 individuals, diversity has been identified as a key area of growth as the sector tackles increased cyber risks. An estimated 16 percent of the workforce are women, 17 percent come from ethnically diverse backgrounds, and just 9 percent self-describe as being neurodiverse.

According to the UK Cyber Security Council, the importance of the sector is growing exponentially in line with our increasingly connected and digital lives, however increased demand has also created a skills gap. The Council believes overcoming barriers to entry and a push for greater diversity is a pivotal issue for the sector which, if overlooked, could leave the country more vulnerable to future cyber-attacks.

The UK Cyber Security Council’s CEO, Simon Hepburn, said: “One of the government’s key aims is to establish the UK as one of the safest places to live and do business online and to do that, the Council will work to bridge the industry’s skills gap.

An intrinsic element for that ambition will be for the Council to help remove barriers for entry, helping individuals across a broad range of demographics and backgrounds to recognise just how rewarding a career in the sector can be.”

Despite contributing £5.3 billion in GVA to the UK economy, there is an annual reported shortfall of 10,000 practitioners within the industry, and half of businesses in the UK report a basic skills gap when it comes to cyber, despite the increasing importance of digital resilience to counter threats.

Dr. Claudia Natanson, The UK Cyber Security Council’s Chair, said: “We want the sector to be truly representative of all sections of society, and for every employee, contractor or supplier to feel acknowledged, respected and able to be their best”.

Dr Claudia Natanson (Chair, UK Cyber Security Council)

Ethics aside, it also makes for a compelling business argument. According to a recent study by Cleverpop, more gender-diverse teams make better business decisions due to fresh perspectives being brought to the table.

In addition to worsening the sector’s skills gap, a less diverse workforce can stifle innovation and can lead to intrinsic biases within organisations, which cyber criminals can, and will, take full advantage of.

The sector has a long way to go to achieve gender parity, but we’re excited to be partnering with WiCyS for this event to take initial steps to overcome the problems. It’ll be a great session for people to engage with each other, learn more about routes into the profession, career development opportunities and best practice in this exciting industry.

Formed as the voice of the UK’s cyber security profession, the Council provides broad representation for the industry and promotes excellence across the profession. In accordance with the UK government’s National Cyber Security Strategy, its role is to develop, promote and align professional standards, and encourage progression along cyber security career paths.

For more information on the UK Cyber Security Council, please visit:https://www.ukcybersecuritycouncil.org.uk/events

And to sign up to the International Women’s Day event, please visit:
https://hopin.com/events/uk-cyber-security-council-iwd

(174)

Share

TIGERBOND DECODES BRIEF TO BRING UK CYBER SECURITY COUNCIL ON BOARD

The UK Cyber Security Council has appointed tigerbond as its lead agency to devise a structured PR and marketing programme to raise awareness of its aims.

The Council, which became operational in 2021, was formed as the voice of the UK’s cyber security profession. Its role is to develop, promote and align professional standards, and encourage progression along cyber security career paths, in accordance with the UK government’s National Cyber Security Strategy.

Following a competitive tender process, the UK Cyber Security Council has chosen tigerbond on an initial three month contract, with an option for a further 12 months as it enters a new funding cycle.

Simon Hepburn, chief executive of the UK Cyber Security Council, said: “From online shopping to banking, cyber security plays an intrinsic role in our increasingly digital personal and professional lives. We want the Council to be leading the charge at the forefront of the rapidly growing cyber security sector.

“Our objective is to develop and promote the highest professional and ethical standards across the profession to ensure the UK becomes the safest place to live and work online, and for that we need support from an agency partner. “According to a recent DCMS report, the sector is rapidly expanding and employs 52,700 individuals and contributes around £5.3 billion GVA to the UK economy, a 33% increase on the previous year. Comparatively, that’s roughly half the size of the GVA added by the UK’s agricultural industry – but not enough people know the scale of the sector or the rapid growth that’s still to come.

“Our tender process was extremely competitive and the standard of submissions we received was very high, but tigerbond stood out. Tigerbond will support by engaging with the cyber security sector and those seeking to enter it, alongside government, industry and academia, with the combined aim of developing and promoting UK cyber security excellence globally and growing the UK’s skills base.”

Tigerbond has long-standing experience of working with membership organisations and trade bodies, and will support the Council with increased awareness and positioning. The comms activity for the Council will seek to raise awareness of its purpose, vision and mission, whilst positioning it at the forefront of an inclusive and diverse cyber industry.
This will include refining the organisation’s messaging in order to reach and engage with key stakeholders including existing sector organisations and professionals, the public sector, and those in education or currently working in other sectors who may consider a career in cyber security.

Chris Gilmour, co-founder at tigerbond, said: “It was evident early in the tendering process just how significant the UK Cyber Security Council’s role will be in providing stewardship for this rapidly expanding and increasingly vital sector, and we were inspired to assist in this journey.

“The team’s experience working across public and private sector, trade bodies and membership organisations has put us in good stead for delivering impact. We can’t wait to kick off our campaigns this year and generate some strong results for Simon and his team.”

Headquartered in London, tigerbond’s office network includes Manchester, Glasgow, Leeds, Belfast and four cities across Canada. It delivers the full mix of integrated communications services from PR and social to digital, design, branding and web. It was recently named as one of PR Week’s top 12 agencies to watch in the UK in 2022. For more information on tigerbond, please visit:https://www.tigerbond.com/  and to learn more about the UK Cyber Security Council, visit:https://www.ukcybersecuritycouncil.org.uk/ 

(117)

Share

Simon Hepburn Is The New Permanent CEO appointed to lead the UK Cyber Security Council

The UK Cyber Security Council – the charitable, self-regulatory body for the cyber security education and skills sector – today announced the appointment of Simon Hepburn, a charity and education executive with over twenty years’ experience in a variety of national and international organisations, as its chief executive.

Hepburn has previously been chief executive of a charity and founded two others, and has held director positions with a variety of charities, academy trusts and businesses. He was also a Trustee Board member of ACEVO (Association for Chief Executives of Voluntary Organisations) and has also sat on the BBC Charities Advisory Board.

“Simon Hepburn’s record is one of delivering at the sharp end of education and careers, for charitable organisations like the Council,” said Dr. Claudia Natanson, chair of the Board of Trustees of the UK Cyber Security Council. “The Council may well be the voice for the profession, but it is absolutely intended to be a ‘doing’ organisation rather than just a ‘talking’ organisation, so this attribute made him an excellent candidate for CEO; we welcome his passion and energy and look forward to him driving the organisation forwards.”

“I make no secret of my passion for supporting people and organisations to reach their full potential and make a positive contribution to society – it has been at the heart of my career to date. I intend to bring the full weight of that knowledge and experience to bear on the activities of the Council, benefiting the cyber security profession,” said Simon Hepburn, CEO of the UK Cyber Security Council. I’m excited by the opportunity to work with one of the most critical sectors in our country, delivering education and skills support and resources to organisations and the professionals that are essential to the safe, secure and prosperous operation of the UK economy.”

Hepburn’s other career roles include:

  • Founder of Black Star Inc., advising on diversity and inclusion, leadership and management, people and change, strategy and organisation development, careers and employability
  • UK Director at international social action charity City Year UK, leading on school partnerships, programme design and delivery, leadership programme development, mentor experience and programme impact
  • Director of Education and Policy at ed-tech company U-Explore Ltd, supporting schools, colleges, local authorities and businesses on careers and employability programme development and partnerships
  • Director of Pathways and Partnerships for Academies Enterprise Trust Careers, leading on the development of the Championing Careers Guidance Programme working in partnership with the Greater London Authority (GLA)

Simon Hepburn succeeds Don MacIntyre, who was appointed as interim CEO by the Board of Trustees in January 2021 during the Council’s formation.

(224)

Share

University of Warwick Wins Veracode’s First-Ever Hacker Games

Next Generation of Developers Establish Secure Coding Skills Through Two-Week Competition

BURLINGTON, Mass. – March 31, 2021 – Veracode, the largest global provider of application security testing (AST) solutions, announced today the winner of its first-ever Hacker Games competition, which challenged students to hack and patch real-life apps online. WMG Cyber Security Centre at the University of Warwick was crowned the winner and awarded a $10,000 charitable donation after successfully completing 1,854 challenges over the course of two weeks, while Tufts University took second place and a $5,000 donation. In addition, each individual player from the winning teams and overall top scorers won prize money.

Professor Tim Watson, Director of the WMG Cyber Security Centre at the University of Warwick, said, “The Hacker Games were a fantastic way to promote secure software development and provided our students with a highly challenging experience. The labs are tremendous resources and we will be encouraging our students to take advantage of them to further their skills and experience. We are very grateful to Veracode for creating such a wonderful environment and competition.”

Setting Future Software Developers Up for Success

By empowering the next generation of software developers to write secure code, the Veracode Hacker Games aim to help plug the cybersecurity skills gap. The two-week collegiate competition saw nearly 90 computer science and cybersecurity students from leading universities across the U.S. and U.K. complete hands-on challenges in Veracode Security Labs. Altogether, participants solved a total of 8,500 labs and accumulated nearly 100,000 points.

Chris Wysopal, Founder and Chief Technology Officer at Veracode, said: “The cybersecurity skills gap is proving costly to corporations worldwide. The Hacker Games are a way for us to demonstrate the importance of secure coding to the next generation of software developers. The passion, competitive spirit and commitment from each participating university was impressive and we’re excited to work with each of these schools to make software security a more regular part of their curriculum.”

All participating universities in the Hacker Games will be given complimentary Veracode software for a year. For more information about the universities and teams, visit www.hackergames.io.

About Veracode

Veracode is the leading independent AppSec partner for creating secure software, reducing the risk of security breach, and increasing security and development teams’ productivity. As a result, companies using Veracode can move their business, and the world, forward. With its combination of process automation, integrations, speed, and responsiveness, Veracode helps companies get accurate and reliable results to focus their efforts on fixing, not just finding, potential vulnerabilities. 

Veracode serves 2,500 customers worldwide across a wide range of industries. The Veracode solution has assessed more than 25 trillion lines of code and helped companies fix more than 59 million security flaws. Learn more at www.veracode.com, on the Veracode blog, and on Twitter.

(390)

Share

UK Cyber Security Council Begins As Independent Body

The Cyber Security Alliance-led Formation Project has created an umbrella body that will grow to champion cyber security education, training and skills

LONDON – March 31st 2021 – The UK Cyber Security Council – the self-regulatory body for the cyber security education and skills sector – today announced that the Formation Project to create the Council has completed, allowing the Government-mandated Council to officially become an independent entity, fully and only accountable to its Trustees.

The Council will champion the cyber security profession across the UK, providing broad representation for the industry, accelerating awareness and promoting excellence in the profession. It will do this by delivering thought leadership, career tools and education resources to the cyber security sector and those seeking a career in the industry, alongside helping influence government, industry and academia with the aim of developing and promoting UK cyber security excellence globally and growing the skills base.

Dr Claudia Natanson, chair of the Council’s Board of Trustees, said: “The Formation Project has put down solid foundations on which the Council can build, and that is what the Council is able to, and will do, from today. The next few months will be especially busy; we are now able to hire and start work on gaining traction and momentum across and beyond the profession. We’ll also be engaging with Government to ensure the delivery of the standards and governance needed to ensure a strong cyber security profession now and in the future. The trustees assure all those involved in the Council to date of our maximum efforts to take their work forward.”

Near-term tasks for the Council include:

  • the appointment of a permanent leadership team, who will work with the Board of Trustees to establish the Council as a leader in the profession, influencing its standing and reputation within the UK and globally; and
  • the recruitment of personnel to take forward the work of the Formation Project on elements of the Council’s remit, including recognition for cyber security practitioners, professional ethics, diversity and inclusivity in the profession and thought leadership

Dr Natanson also thanked the Cyber Security Alliance and the member organisations that supported the Formation Project. “For twenty months, scores of volunteers from the 16 forward-thinking organisations of the Cyber Security Alliance have devoted countless hours to getting the Council to this date. We cannot thank them enough, because without them there would be no Council. In the teeth of a pandemic, to reach this date with the Council on schedule is remarkable,” she said.

Dr Budgie Dhanda, managing director of 3BDA and co-chair of UK Cyber Security Council Formation Project, said: “The volunteers from the members of the Cyber Security Alliance have put heart and soul into the Formation Project, and the members of the Alliance itself have supported their staff all the way. We’re all very proud of what we’re handing over today and look forward to its evolution into a fully functioning, effective Council to represent our profession through the changes ahead.”

Dr Bill Mitchell OBE, chair of the Cyber Security Alliance, “Today marks a significant milestone for the many people who are today and will be in the future handed the enormously important task of protecting the United Kingdom and its economy from cyber threats that undermine the foundations of modern society.  Handing over the Council to its trustees is the culmination of over four years of commitment to a shared vision and shared values of public benefit from 16 organisations that came together in recognition of the breadth of skills and disciplines that go into this task. Now a new profession for the UK can be officially recognised and supported. The Alliance remains fully committed to supporting the new Council and ensuring it succeeds at the pace and with the reach the UK needs as we recover from the pandemic and find our place outside the EU.”

The Council has been invited by the NCSC to participate at CYBERUK, the UK government’s flagship cyber security conference in May. It will outline some initial plans at the event.

History of the Council to date

  • In November 2016, the UK Government’s National Cyber Security Strategy 2016-2021 set out “the UK Government’s plan to make Britain secure and resilient in cyberspace”.
    It included ambitions to develop and accredit the cyber security profession by: “…reinforcing the recognised body of cyber security excellence within the industry and providing a focal point which can advise, shape and inform national policy.”
  • In December 2018, the Government’s Initial National Cyber Security Skills Strategy policy paper specifically prescribed a new, independent body: the UK Cyber Security Council.
    The policy stated that: “Our ambition is for there to be a new, independent UK Cyber Security Council that will embolden the profession to structure and develop itself in a way that meets current and future demands. The Council will be charged with the development of a framework that speaks across the different specialisms, setting out a comprehensive alignment of career pathways, including the certifications and qualifications required within certain levels. The Council will lay the structural foundations of the cyber security profession that will enable it to respond to the evolving needs of industry and the wider economy.”
  • In August 2019, the Department for Digital, Culture, Media and Sport (DCMS) appointed the Cyber Security Alliance following a competitive tender process, with the  Institution of Engineering and Technology (IET)serving as the lead organisation, to design and deliver the UK Cyber Security Council.

The Cyber Security Alliance
The Cyber Security Alliance brings together a range of established knowledge and disciplines, each of which currently has a leadership role in underpinning UK expertise in the digital environment.  With an overall aim to provide clarity around the skills, competences and career pathways within this fast-moving area of cyber security, the initial objective is to support commitments expressed within the UK National Cyber Security Strategy, including the stated intent to recognise professionals through Chartered status. Members include:

About the UK Cyber Security Council
The UK Cyber Security Council is the regulatory body, and voice, for UK cyber security education, training and skills. It drives progress towards meeting the key challenges the profession faces and develops, promotes and stewards nationally recognised standards for cyber security qualification and learning. The Council, working closely with the National Cyber Security Centre (NCSC), the UK’s national technical authority for cyber security, supports the UK Government’s National Cyber Security Strategy to make the UK the safest place to live and work online.

The establishment of the Council by the Cyber Security Alliance consortium of cyber security professional bodies was commissioned by the Department for Digital, Culture, Media and Sport (DCMS) in September 2019.

(274)

Share

British Army Digital Forensic Specialists Win Two Top International Awards

A British Army Sergeant and digital forensics expert and a forensics team from the British Army’s Royal Military Police (RMP) have proved they are the best in their field, having won two top awards the International Digital Investigation Awards 2020. The IDIA celebrates innovative action by law enforcement agencies from around the world.

The virtual ceremony hosted nominations from world renowned organisations including the Federal Bureau of Investigation (FBI) and the Metropolitan Police in categories including digital forensic techniques, collaborative investigation and digital investigator of the year, to name a few.

Use of Advanced Digital Forensic Techniques Award

Sergeant James Stubbs, of the Service Police Cyber Crime Centre (SP3C) scooped the Exceptional Use of Advanced Digital Forensic Techniques Award, beating other highly skilled specialists and team finalists from the Metropolitan Police Service Cybercrime Unit and Leicestershire Police’s Digital Media Intelligence unit.

On receiving the award, Sgt Stubbs said: “I’m delighted to have been nominated and to have won the award for what was a challenging and rewarding investigation. Details of the techniques I used have been requested by INTERPOL Cyber Crime, raising SP3C’s profile internationally.

“I am also proud of SP3C, SPCB, FIIU and FIB for receiving the award for Collaborative Investigation, both awards have provided positive exposure of the Service Police and its efforts to our international counterparts,” he said.

Sgt Stubbs was nominated for his ground-breaking work and carrying out digital forensic investigations to support a US Service Police CID investigation into a sudden death in Iraq in 2019. He was able to retrieve the data from the deceased’s very damaged fitness watch, despite the fact that there was no forensic support for this type of device at the time.

RMP digital forensic investigator at work.

This was of immense importance for the investigation, meaning that time and place of death could be established, enabling the investigators to determine whether any criminal activity had occurred.

More broadly, Sgt Stubbs’s work will also benefit the wider law enforcement community as his work has significantly enhanced understanding of how to forensically analyse such devices, so could be used in future cases to determine time of death and posthumous movements in sudden death or murder cases.

Team Collaborative Award

The RMP Specialist Operations Regiment was recognised in the Team Collaborative Award for their work alongside members of the Royal Navy Police Special Investigation Branch (RNP SIB) for their work in extracting, decoding and interpreting electronic information from a number of devices seized as part of an investigation into alleged possession of indecent images of children.

Corporal Sam Ward, Royal Military Police, and Chief Petty Officer (Master at Arms) Jason Briant, Royal Naval Police, both of Spec Ops Regiment RMP.

Spec Ops Regt continued to support the investigation when jurisdiction was passed to Northumbria Police. As a result, a former serviceman was sentenced to 14 years in jail, made subject to a sexual harm prevention order, a restraining order for life and is on the sexual offender’s register for life.

The team was shortlisted alongside Op BLEAK (a collaboration between North West Regional Organised Crime Unit, the National Cyber Crime Unit and the Australian Federal Police), and National Undercover Online.

‘Best of the best’

Brigadier Viv Buck, Provost Marshal (Army) said: “I am incredibly proud that the RMP has won two awards in the International Digital Investigation Awards 2020, particularly against such high-quality competition from other UK and international law enforcement agencies.

“This is a true reflection of the credibility, competency and excellence of the Service Police team working in digital forensics; they truly are among the best of the best.”

(333)

Share