Danger in the Download

It was a pleasure to be interviewed by the BBC World Service for their interesting documentary series: Danger in the Download.  The series considers the growing threats of cyber crime, hacking and cyber warfare with contributions from the likes of Vint Cerf, Ralph Langner and Professor Peter Sommer.

In it I briefly discuss the threats from organised cyber crime and the digital shadows organisations are often unaware of on the so called ‘dark web’.

You can listen to episode two of the series here.

Read full story
Posted in news | Leave a comment

Digital Shadows on the BBC


I spent an interesting evening yesterday as part of the radio debate covering the ‘dark web’ on BBC Radio 5.  Adrian Goldberg covered many angles supported by the excellent Joseph Menn and Andrew Lewman, Executive Director of the Tor project amongst others.

It’s easy to be sensational and focus on the availability of drugs, weapons and other negative material on the ‘dark web’ enabled by services such as Tor but at least the debate also covered the vital role Tor performs in helping individuals communicate freely under the threat of oppressive regimes.

My own views on the risks the dark web poses to organisations and our experiences in removing the risks associated with their digital shadows begins 37 minutes in to the programme.

Thanks to the BBC for inviting us on the show.

Read full story
Posted in news, Uncategorized | 1 Comment

Digital Shadows take the audience vote at TechPitch4.5

Many thanks to the organisers of TechPitch4.5.  We had a great time there this week and met many excellent people.  Thanks to all of those who voted for us – it was much appreciated.  Hopefully we will catch up with you again in the New Year.  Exciting times are ahead.

 

 

Read full story
Posted in Uncategorized | Leave a comment

Digital Shadows featured in World Defence Systems

The new edition of World Defence Systems features an article co-authored by Digital Shadows.

In the article we argue alongside Dr Christopher Hobbs, an expert in OSINT from Kings College London, that organisations can lower their risk of cyber attack by first understanding the vulnerabilities in their digital shadow, then taking steps to regain control of the information they expose online.

The full article is viewable online here.

 

 

 

Read full story
Posted in Uncategorized | Leave a comment

Mitsubishi Heavy Industries (MHI) the latest in a long line of attacks

This week a Japanese defence company has indicated it has been a victim of a spear phishing attack.

Mitsubishi Heavy Industries (MHI) stated that 10 locations, 38 computers and 45 network servers were compromised in the attack, but claim that they are confident that no data went missing.  They appear to have identified malware running on the servers.  It is not yet clear if this malware was detected by their routine security measures.   The locations that have been compromised included a submarine manufacturing plant in Kobe and a missile plant in Nagoya which makes engine parts for missiles.

The attack came to light in August of this year and the company has since been compiling a detailed report to establish the extent of the compromise.  The Japanese government appear to be displeased with MHI.  The BBC writes that a second Japanese defence company (IHI) claim to have been receiving spear phishing emails for some time, but believe their systems have resisted all attempts of illegal access.

Read full story
Posted in Uncategorized | Leave a comment

A legend departs, but Apple’s culture will see them through

It has of course been a sad week for technologists everywhere with the news that Steve Jobs has stepped down as Apple’s CEO.

Steve has been an icon and inspiration to many of us and we wish him all the best in overcoming his medical issues.

I believe Apple will continue to go from strength to strength as I argued in my interview with AFP below.  One of Steve’s great skills was in assembling such a strong team around him that can take Apple forward even without his daily leadership.  I cannot think of a company with a stronger culture than Apple and this will no doubt continue long into the future.

Although Steve’s departure was always going to be a shock, it will long have been planned for.  There is no sudden panic at Apple – they will have had the plans in place for a considerable length of time, including an agreed roadmap for the next few years.

That’s not to say that Tim Cook’s life will be easy: Apple are only Apple because they disrupt industries and create new markets.  In the longer term Tim will have to prove that he can fill the very big shoes Steve has left behind him.

I believe that Apple’s innovative culture, the talented team in place, and the guidance Steve will still provide as Chairman will see them continue to lead the technology world forwards.

It seems that many people agree with this positive assessment.  The Guardian’s poll currently stands at around 70% of  you who believe that even without Steve, Apple will continue to innovate.

All the best Steve.

Read full story
Posted in Uncategorized | Leave a comment

Digital Shadows in the news

Digital Shadows were approached this week to provide opinion on the use of social media in the London riots:

Our opinions are covered in more detail in the post below.

Read full story
Posted in news | Leave a comment

Should social networks be banned during civil unrest?

The recent riots in the UK have had a devastating impact on the country. The riots resulted in extensive damage to property and the deaths of five people – the impact of which will be felt in those affected communities for many years to come.

A great deal of debate has already taken place about what can and should be done to prevent a reoccurrence of these events.  MP for Tottenham, David Lammy, called for a ban on Blackberry messenger (BBM) during the riots as it is alleged to have played a key role in helping rioters co-ordinate themselves and evade the police.  BBM reported that it did not suspend its services during the riots, but it did indicate that it was working co-operatively with the Metropolitan police.

This collaboration between the BBM and the police has proved contentious because BBM is a closed system that users perceive as being private.  Research in Motion (RIM) who operate BBM’s service were hacked by a group called team Poison who disagreed with their collaborating with the police.

In his address to Parliament, the UK’s Prime Minister David Cameron stated “we are working with the Police, the intelligence services and industry to look at whether it would be right to stop people communicating via these websites and services when we know they are plotting violence, disorder and criminality”. 

The issue has also been discussed at some length by Conservative MP Louise Mensch, who asserts that the government is seriously considering such a ban.  The suggestion is that all social media services should be blocked during a time of civil unrest, albeit for a very brief period.

It seems that the UK is not alone in experiencing civil disruption that is co-ordinated by the use of social media.  In Philadelphia, riots are similarly organised by groups of youngsters using social networking and are creating a huge headache for the authorities.

So should we agree to a temporary ban on the use of social media during times of civil unrest?

It is certainly true that had BBM services become unavailable during the UK’s recent riots, it would have stopped it being used to co-ordinate violence.   But it was not the only form of social networking used during the riots. Other social media were used to spread rumours and mis-information which spread fear and undoubtedly increased the chaos in the streets.

Undoubtedly, social media is taking the blame for the irresponsible actions of its users.  Many argue that social media is neutral as it is simply a medium through which messages are sent.  In that respect it is the same as blaming the telephone system for abusive calls, or the postal system for the perpetuation of hate mail.

The key point is that, If a method of communication is ceased, another will be used.  If BBM were to be ‘turned off’ traffic would flow to alternative closed messaging systems, such as What’s App, or Skype.  Both of those are US based, and would not be subject to English law or the demands of our Government.   That would mean that a social media ban could only be implemented by installing a national firewall that all UK Internet Service Providers are mandated to use.  The ‘Great firewalls’ used by China and certain regimes in the Middle East to protect themselves against civil unrest. The question is, do we wish to implement the same security measures as these countries? Controlling social media in this way goes against net neutrality. The proposals are not dissimilar to the recent US idea of a ‘kill switch for the Internet

As stated earlier, law enforcement can freely monitor and use information obtained from open social networks to locate and prosecute those engaged in illegal activities. For example, the case of Joanne Frial, a juror who was found to be communicating with a defendant in a drugs trial and Paul Chambers, who tweeted that he’d planted a bomb at an airport, and was prosecuted for his actions.  We have also seen some of the looters from the riots caught this way.

BBM itself is a ‘closed’ network, but as a telecommunications service it is subject to the same regulations that govern all communications in the UK.  This means that the home secretary can apply for a licence to intercept messages.  This can be done in very quickly, so it’s likely that BBM did provide critical evidence to the police and authorities throughout the riots.

We have also seen that social media can be used for good as campaigns such as #riotcleanup [http://www.riotcleanup.co.uk/] and do something nice for ashraf [http://somethingniceforashraf.tumblr.com/].  Both were responses to the riots which helped communities come together in the aftermath.  During the riots themselves social media are invaluable in allowing people to contact loved ones to check they are safe or indeed to warn of danger in their vicinity.

So in summary, whilst BBM played a role in the riots, it would seem banning social media is not the answer. The Authorities already have significant power to monitor social media and the evidence obtained can assist them in achieving a co-ordinated response. Removing access, even temporarily, will force opponents to seek channels which are more difficult to monitor, or not subject to regulation, and as such will force them underground.  The role that social media can play in supplying evidence, and bringing the guilty to justice, far outweighs any temporary advantage to switching off a social media channel of choice.

Read full story
Posted in incidents, news | Leave a comment

Digital Shadows launch night, Innovation Warehouse

The Digital Shadows launch event went off with a bang last week.

We would like to thank everyone who came along and helped it to go so fantastically well.  Our presentation has sparked a number of interesting leads and conversations that we are now following up.

The slides from the night are now on SlideShare for anyone who missed the event.

Please get in touch if you would like to discuss any of the points we brought up in more detail – there is only so much we could fit into 30 minutes!

Thanks to the Innovation Warehouse for their help in hosting the event.  Here are some photos from the night:

Alastair presenting at the launch of Digital Shadows

Alastair Paterson, Digital Shadows CEO describes the extent to which an organisation's digital shadow is exposed through the open Internet

James, Digital Shadows CTO explains that digital shadows are not benign

James, Digital Shadows CTO explains that digital shadows are not benign

The ever-attentive audience at the Digital Shadows launch event

The ever-attentive audience at the Digital Shadows launch event

Read full story
Posted in news | Leave a comment

Digital Shadows – launched

Today is the formal launch of Digital Shadows – we are open for business!  You can read our press release here.

As you may have noticed we are gradually adding more content to the site all the time.  We are always open to suggestions for more content so let us know if there is something you would like to see.

Of course, we have a busy week ahead with many client meetings and our launch party on 3rd August – contact us if you would like to come along.

Read full story
Posted in Uncategorized | Leave a comment