Skip to main content

Why cyber attacks threaten our freedom

By Stephen Miller, special for CNN
March 21, 2013 -- Updated 1308 GMT (2108 HKT)
Although cybercrime is growing there is still not much information about cyber security as a career option, says Stephen Miller
Although cybercrime is growing there is still not much information about cyber security as a career option, says Stephen Miller
STORY HIGHLIGHTS
  • Stephen Miller is the reigning UK cyber security champion
  • Miller: Cybercrime has grown exponentially in scale and sophistication in recent years
  • Cybercrime is backed by a highly organized black market and is worth billions of dollars
  • Cyber security is often regarded as hobby for young people rather than "genuine" career

Editor's note: Stephen Miller is a lab team manager at pharmaceutical giant GSK in Hertfordshire, southern England. Earlier this month Stephen was named UK cyber security champion, beating thousands of registered players during a yearlong competition to find the most talented amateur cyber defenders.

London (CNN) -- Cyber security is big news right now. It seems a new high-profile breach is reported almost daily and yet this represents only the very tip of the iceberg. Backed by a highly organized black market worth billions of dollars, cybercrime has grown exponentially in scale and sophistication in recent years. In the face of this mounting threat, government and industry are manning the defenses. But finding the right people to protect some of our most valuable data isn't straightforward and requires a new approach.

Over the past three years I have competed in a unique set of security games, backed by UK government, industry, academics and professional bodies, known as the Cyber Security Challenge. This aims to find talented amateurs by testing their skills with realistic competitions.

Read more: International cyber attacks on the rise

In my time playing the Challenge I have come face to face (or face to screen) with many dangerous viruses and computer code, and defended networks from simulated live-hacking attempts carried out by the UK's leading cyber defense experts. Last week, I was fortunate enough to be crowned the UK's cyber security champion. It's an experience that has taught me much about the skills required to defend a computer system, but also about the difficulties the industry faces finding people with these skills.

Cyber attacks have U.S. worried
New report looks at cyber attack threats
Cybersecurity scares on the rise

This is a major problem as cyber-attacks become more frequent and threaten us on various levels.

The first aspect is the threat posed to the internet-using public. Scam emails and infected websites still represent a major source of income for cyber criminals. From a technical point these threats are easily solved through freely available anti-virus software and the use of decent solid passwords for your online accounts. However, the attacks continue due to the ease of bypassing these defenses by compromising the user. Technical defenses are of little use if the user clicks on the wrong link or accepts security warnings automatically without question. The fact these scams are still out there shows they are still effective and we have some way to go to educate the public on safe use of the internet.

Above this sits corporate and industrial vulnerability that threatens organisations' most valuable data -- be it financial records, customer data or intellectual property. The UK government has placed the potential cost of a single corporate cyber-attack in the hundreds of millions and it's not just traditional technology and internet-based companies that are at risk. Whether it is the pharmaceutical industry where I work, aerospace companies or even the food industry, all own private information that could be of significant value and potentially accessible for those who know how.

The highest level of threat represents the potential for state-sponsored attacks and future "cyber warfare" exposing vulnerabilities of our critical national infrastructure to online attack. While the nature of this threat landscape is uncertain, the potential damage a cyber-attack could pose to our internet-dependent telecommunications, power and even water infrastructure, has seen cyber security rise sharply up government agendas around the world in the last five years.

There is still limited information out there about cyber security as a career option.
Stephen Miller

With cyber security a recognized priority at all levels of society, it is not that surprising that employers of this profession such as those I have met through playing the Challenge are on the lookout for new talent to fill increasing job vacancies.

However they face their own challenge uncovering people for these jobs. Our education system in the UK has yet to catch up with a young, rapidly growing and ever-changing industry. My IT lessons focused on the use of software rather than its development or how to secure it.

And while there are people who like me developed this knowledge and skills off their own back, there is still limited information out there about cyber security as a career option. I always saw it as more of a hobby, or a source of intellectual challenges, but never a genuine job possibility with the potential to progress upwards within a business or organization.

Stephen Miller winning the 2013 Cyber Security Challenge
Stephen Miller winning the 2013 Cyber Security Challenge

This has all changed since playing the Challenge where the excitement of the profession, and the variety and diversity of employers has shown myself and many of the thousands of other Challenge participants, what this sector could offer them. The key is how they have gone about it using realistic and engaging games and exciting problem-solving activities developed by the professions themselves that inspire talented potential recruits to utilize and hone their skills to tackle real-life problems.

While the Challenge won't solve our recruitment issues on its own it is vital that countries like the UK look outside of the traditional academic pathways if they are to build a healthy pipeline of cyber defenders to protect internet users from those that wish them harm. As someone with no formal training in this sector, I know as well as anyone that the skills for the good fight can be in anyone and as a nation we must not ignore this pool of untapped talent if we are to keep the internet a safe place for us all to enjoy.

The views expressed in this column are solely those of Stephen Miller.

ADVERTISEMENT
Part of complete coverage on
September 22, 2014 -- Updated 2001 GMT (0401 HKT)
The U.S. has promised to supply and train "acceptable" rebels in Syria to counter ISIS. But who are they and are can the strategy work?
September 23, 2014 -- Updated 0257 GMT (1057 HKT)
Do the Chinese really like to mix their Bordeaux with Coca-Cola?
September 23, 2014 -- Updated 1034 GMT (1834 HKT)
Al Qaeda's new Syrian branch, Khorasan, is seeking new ways to attack America and Europe, with a top U.S. intelligence official saying it has "aspirations for attacks on the homeland."
September 23, 2014 -- Updated 0039 GMT (0839 HKT)
Branded an "extremist" by China's state-run media, Joshua Wong isn't even old enough to drive.
September 22, 2014 -- Updated 0655 GMT (1455 HKT)
Indian Prime Minister Narendra Modi surprised political pundits with his rapid rise to power. CNN meets the man behind the enigma.
September 22, 2014 -- Updated 1144 GMT (1944 HKT)
Liverpool's Italian forward Mario Balotelli reacts during the UEFA Champions League Group B match between Liverpool and Ludogorets Razgrad at the Anfield stadium in Liverpool on September 16, 2014.
British police launched an investigation into abusive tweets sent to Liverpool striker Mario Balotelli.
September 21, 2014 -- Updated 2344 GMT (0744 HKT)
A woman who was texting her husband before he was killed reflects on the Westgate attack.
September 22, 2014 -- Updated 1554 GMT (2354 HKT)
The real secret to a faster commute has been with us all along -- the bus.
September 22, 2014 -- Updated 1316 GMT (2116 HKT)
13 brands retained their Top 20 status from last year, according to an annual survey.
September 22, 2014 -- Updated 1549 GMT (2349 HKT)
Think your new tattoo is cool? Look at how our ancestors did it and think again.
September 22, 2014 -- Updated 1100 GMT (1900 HKT)
Each day, CNN brings you an image capturing a moment to remember, defining the present in our changing world.
Browse through images from CNN teams around the world that you don't always see on news reports.
ADVERTISEMENT