Jun
22

Germany Launches Cyber Defense Center

Germany launched a national cyber defense center whose primary task will be to protect critical computer infrastructure from cyber attacks.

The Nationale Cyber-Abwehrzentrum (National Cyber-Defense Center) is based in Bonn in the same building as the Federal Office for Information Security (BSI).

For now, it has ten permanent employees and represents a joint effort between the BSI, the Federal Office for Civil Protection and Disaster Assistance (BKK) and the Federal Office for Protection of the Constitution (BFV).

Other agencies, like the German Federal Police, the Federal Intelligence Service and the Armed Forces will join the effort in the upcoming months.

“At the heart of cyber-security is the protection of critical infrastructures,” said Federal Interior Minister Friedrich. Organizations and agencies with important significance for the community are part of this infrastructure.

“Stuxnet and the most recent example of the hacker attack on the French nuclear company EDF (Electricité de France) have shown that IT systems represent critical infrastructure in the context of cyber-attacks,” he added.

The Interior Ministry announced a sharp rise in cyber attacks against critical infrastructure last year, nearly doubling in number compared to 2009. China is seen a major player in this area.

“To successfully protect critical infrastructures against attacks, we focus on prevention, response and early warning. We have been doing this for several years in various ways within the federal government.

“However, the attacks are increasing in complexity and are exceeding the responsibility of individual authorities. Therefore, the establishing of the National Cyber-Defense Center is an important step for the advancement of cyber-security in Germany,” said BSI president and Cyber-Defense Center spokesperson Michael Hange.

Germany follows the lead of other countries that have already set up similar centers, like UK’s Cyber Security Operations Centre (CSOC) and the US Cyber Command. Countries like India or Estonia have also announced plans to set up cyber defense units.

Last month China launched a cyber defense program which aims to protect the country’s critical networks against cyber attacks and also to establish a cyber training program for army officers.

Jun
21

Bank machine that sniffs out credit fraud

MOSCOW – Russia’s biggest retail bank is testing something that the old K.G.B. might have loved, an automated teller machine with a built-in lie detector intended to prevent consumer credit fraud.

New customers could talk to the machine to apply for a credit card, with no human intervention required on the bank’s end.

The machine scans a passport, records fingerprints and takes a three-dimensional scan for facial recognition. And it uses voice-analysis software to help assess whether the person is truthfully answering questions that include “Are you employed?” and “At this moment, do you have any other outstanding loans?”

The voice-analysis system was developed by the Speech Technology Center, a company whose other big clients include the Federal Security Service – the Russian domestic intelligence agency descended from the Soviet K.G.B.

Dmitri V. Dyrmovsky, director of the center’s Moscow offices, said the new system was designed in part by sampling Russian law enforcement databases of recorded voices of people found to be lying during police interrogations.

The big bank involved, Sberbank, whose majority owner is the Russian government, said it intended to install the machines in malls and bank branches around the country, but had not yet scheduled the rollout. Technology consultants say it would be the banking world’s first use of voice analysis in automated teller machines.

It was the global financial crisis, partly prompted by loans that people could not or would not repay, that prompted Sberbank to tap Russia’s national security experts as it set out to automate banking activities, said Victor M. Orlovsky, a senior vice president for technology at the bank.

The software detects nervousness or emotional distress, possible indications that a credit applicant is dissembling. That information, Mr. Orlovsky said, would be used in combination with other data, including credit history.

Sberbank says that to comply with Russian privacy law, the bank plans to store customers’ voice prints on chips contained in their credit cards rather than on a central database.

In addition, Mr. Orlovsky said the bank planned to make consumers aware of the types of information, including biometrics, that the machine would be collecting. But the technology center says even people who know about the voice-stress program would have trouble fooling it.

One of the center’s other products measures anger and is already installed at the telephone call center of the Russian national railways.

“We are not violating a client’s privacy,” Mr. Orlovsky said.

“We are not climbing into the client’s brain. We aren’t invading their personal lives. We are just trying to find out if they are telling the truth. I don’t see any reason to be alarmed.”

Jun
18

LulzSec discloses 62,000+ random login credentials

LulzSec rampages on.

They claimed they took out cia.gov for a couple of hours tonight, but its difficult to say whether they really did it or whether the site was made unavailable because of a large number of people trying to access it after seeing the “Tango down – cia.gov – for the lulz” message on the group’s Twitter feed.

The group also redirected the incoming phone calls to their dedicated and likely untraceable phone line to online retailer Magnets.com, then the Detroit offices of the FBI, and finally to HBGary offices.

As the latest prank, they made available for download a text document containing 62,000+ emails/passwords and encouraged Internet users to try and use them on various online services and social networks in order to hijack the accounts.

“In return for flooding /b/ this morning, have 62,000 passwords and emails,” they said. “The top half is ‘password | email’, and the bottom half is ‘email | password’; these are random assortments from a collection, so don’t ask which site they’re from or how old they are, because we have no idea. We also can’t confirm what percentage still work, but be creative or something.”

And judging by the comments of various users, some rose to the challenge. The worst thing is, the file is hosted on MediaFire, and as I’m writing this, is still available for download.

Older posts «

Videos, Slideshows and Podcasts by Cincopa Wordpress Plugin