Staff and students behind hacks on universities
Who's hacking into university systems? Here's a clue from the UK higher education tech crew at Jisc: the attacks drop dramatically during summer break.
A new study from Jisc (formerly the Joint Information Systems Committee) has suggested that rather than state-backed baddies or common criminals looking to siphon off academic research and personal information, staff or students are often the culprits in attacks against UK higher education institutions.
The non-profit body, which provides among other things internet connectivity to universities, analysed 850 attacks in the 2017-18 academic year and found a consistent pattern that occurred during term time and the UK working day.
Holidays brought with them a sharp reduction in attacks, from a peak 60-plus incidents a week during periods of the autumn term to a low of just one a week at times in the summer. It acknowledged that part of the virtual halt in summer may be down to cops and Feds cracking down on black hat distributed denial-of-service tools in the months prior, however.
Jisc is perhaps better known among Reg readers for providing the Janetnetwork to UK education and research institutions.
Its data covered cyber-attacks against almost 190 universities and colleges and focused on denial-of-service and other large-scale infosec hits rather than phishing frauds and malware.
Staff and students with a grudge or out to cause mischief are more credible suspects in much of this rather than external hackers or spies. More sophisticated hackers might be inclined to use DDoS as some sort of smokescreen.
In a blog post, Jisc security operations centre head John Chapman admitted some of the evidence suggesting staff and students might be behind DDoS attacks is circumstantial. However, he pointed out evidence from law enforcement and detected cyber assaults supported this theory. For example, a four-day DDoS attack the unit was mitigating against was traced back to a university hall of residence – and turned out to be the result of a feud between two rival gamers.
Whoever might be behind them, the number of incidents is growing. Attacks are up 42 per cent to reach this year's 850; the previous academic year (2016-17) witnessed less than 600 attacks against fewer than 140 institutions.
Matt Lock, director of solutions engineers at Varonis, said: "This report is another reminder that some of the biggest threats facing organisations today do not involve some hoodie-wearing, elusive computer genius."
Education is targeted more often than even the finance and retail sectors, according to McAfee research.
Nigel Hawthorn, data privacy expert at McAfee, commented in March.
"The kind of data held by universities (student records/intellectual property) is a valuable commodity for cyber criminals, so it is crucial that the security and education sectors work together to protect it."
- B2B Marketing Manager (Managed Services)
- Up to £45,000
Experienced B2B Marketing Manager is needed for a Managed Services / Cloud Technology provider in London. The B2B Marketing Manager will be responsible for the creation, implementation and improvement of UK digital marketing content, campaigns & strategy. MUST have current experience within a b2b IT environment. Experience with marketing automation platforms such as Marketo, Hubspot etc is highly desirable. New position, actively looking to interview and appoint before the new year. CH7643 London Up to £45,000 (Marketing Jobs, Marketing Manager Jobs, Cloud Computing Jobs)
- Mission Critical Shift Engineer
- Up to £42,000 Base
A Mission Critical Shift Engineer is needed for an international data centre business in St Albans The Mission Critical Shift Engineer will be responsible for M+E engineering (support, installations, reactive/pro-active works etc.) The role will work a continental shift pattern, 4 on – 4 off. Alternating between days and nights. Other responsibilities include; Optimisation of Data Centre Infrastructure Maintenance and upgrades of M+E infrastructure. Smooth operations of the data centre property Developing a draft specification of new and other electrical projects Commission of upgrades a new equipment Requirements Electrical Engineering Degree / HNC / HND NVQ Level 3 & Testing & Inspection Qualifications Current engineering experience in a Data Centre / Data Center Environment Unfortunately, our client is unable to provide sponsorship for this opportunity and the candidate must be commutable to London. (Data Centre Jobs, Data Center Jobs, Electrical Engineering Jobs, Electrical Engineer Jobs) Ref PG7616
- Sales Engineer (Telecoms & Cloud Services)
- Upto £85,000 + 20% bonus + benefits
Sales Engineer / Presales Consultant to focus on Cloud services is needed for this Global Tier 1 carrier. You will be working with Enterprise customers helping to design Cloud solutions. You will be responsible for working alongside sales providing presales technical consultancy around my client's cloud services. You will be responsible for providing support for new business opportunities in terms of responding to RFIs & RFPs, understanding customer network requirements, high-level network architecture & design (including supplier selection on a global basis) and technical handover to network implementation teams. This is a great opportunity to join a global player who are growing their Cloud services. You will require a successful track record in the telecommunications arena ideally from a global tier 1 ISP or network provider, with a demonstrable track record in designing complex enterprise solutions. A Sales Engineer needs to be technically astute and has had experience in the design, presentation, and implementation of Wide Area Networks (WAN). They need to understand a range of Layer 1, 2, and 3 technologies (Ethernet, SDH, MPLS, IP, etc) and build a solution based on the best technology to meet a customer’s requirements. In addition, they should have an understanding and experience in Infrastructure solution design for optimising end-user experience when interacting with enterprise platforms notably MS O365, SFDC, Azure and AWS Unified threat Management security solutions (i.e. firewall, IPS/IDS, web filtering and proxy) Network routing and switching protocols and technologies (esp. Cisco) SD-WAN and SDN technologies Skilled Experience in designing and deploying hybrid cloud architectures and managing migrations from physical to virtual environments If you have any questions about this role, give us a call on 0044208 663 4030 or contact/send your CV to firstname.lastname@example.org Ref RA7292 (Telecommunications Jobs, Telecoms Jobs, Cloud Computing Jobs, Cloud Jobs, Presales Jobs, Sales Engineer Jobs, Sales Engineering Jobs)
- Data Scientist (Analytics)
- Up to £50,000 Base
Data Scientist - Analytics London Up to £50,000 Base Ref: PG7641 We are currently working with a Services business who are currently looking for a Data Scientist (Analytics) who has client-facing experience within the insurance industry. The Data Scientist (Analytics) will be responsible for tasks such as; Developing, deploying & testing state of the art Machine learning technology Framing business questions, testing hypothesis, and demonstrating analytical models. Stakeholder Engagement Pricing Optimisation. BAU Experience Required Client Facing experience within Insurance business's Pricing Optimisation Machine Learning; Clustering, Regression, Decision trees etc. Strong background in Python including modelling knowledge, ideally Pyspark AWS Cloud (Data Processing & Cleaning)