Gov't working with hackers; moves to boost cyber security
BY ALICIA DUNKLEY-WILLIS Senior staff reporter dunkleys@jamaicaobserver.com
Tuesday, June 11, 2013
GOVERNMENT has formed an alliance with a group of 'ethical hackers' as
part of efforts to beef up the country's resistance to cybercrimes.
An ethical hacker is a computer and network wizard who attacks a
security system on behalf of its owners with the aim of finding
weaknesses a malicious hacker could abuse. In testing a security system,
ethical hackers use the same techniques as their ill-intentioned
counterparts, but report problems instead of taking advantage of them.
According to minister of state in the Ministry of Science, Technology,
Energy and Mining Julian Robinson, the renegade step is beneficial.
"It's quite legitimate to get somebody and say go and test what I have
put together (website) and see where the loopholes are so I can build a
defence against it. That is commonplace in the private sector and that's
not an issue, you just have to hope that the ethical hackers remain
ethical," he noted.
"There are some that we are in touch with, a group of youngsters who
have done some good work in identifying Government agencies that have
been the subject of attack and have actually come to us and said "this
has been done" even before some of the agencies know," Robinson told
reporters and editors at the weekly Jamaica Observer Monday Exchange at
the newspaper's Beechwood Avenue head office in St Andrew yesterday.
He, however, noted that not all hackers who regarded themselves as "ethical" have pure motives.
"We know those who are genuinely trying to assist and we are working
with those, but you have another category who do it for financial gain,"
Robinson said.
In the meantime, he said the Government has taken other specific steps
to ensure that Jamaica can adequately respond to cybercrimes and deal
with what is now becoming a major threat.
"There are a number of activities we have done on the legislative side,
the Cybercrimes Act 2010, which is to be reviewed every two years. We
have established a Joint Select Committee, we have considered all the
recommendations from the submissions that have been made and we intend
to table a report to both Houses of Parliament by July," Robinson
outlined.
He said while Jamaica might be seen as "a soft target" in the sense that
it is not at loggerheads with any global figures, its systems still
needed protection. Furthermore, Robinson said the country has already
had "serious examples where the systems of the Attorney General's
Department, the office of the Director of Public Prosecutions and the
Ministry of Justice were hacked into".
"Given the critical nature of the data they have, that can prove a
threat to national security. We also have institutions like the
Electoral Office of Jamaica which have data on every single elector, not
just names and address but fingerprints and other bio-data. You
have assets which, if they are derailed, can disrupt national life in a
significant way," Robinson noted.
"You have people who will do it for money, you have people who will do
it to prove a point, but we in Jamaica can't be (careless) so we have
taken it seriously," he added.
According to data from the Communication Forensics and Cybercrime Unit,
some 229 websites belonging to Government entities, tertiary
institutions, and the private sector were hacked last year while just
over 140 Government websites were defaced by the hackers.