UK plans to revamp national cyber defense tools are already in motion

The UK's National Cyber Security Centre (NCSC) says it's in the planning stages of bringing a new suite of services to its existing Active Cyber Defence (ACD) program. What ACD 2.0, as it's being referred to at present, comprises is very much up in the air. The country's cyber cops did not share specifics of their ideas during …

[amanfromMars 1]

Knock, Knock .....

The country's cyber cops did not share specifics of their ideas during a media briefing today, ...

I should hope not, and not even in any future time or space too, given the raison d'être of Active Cyber Defence (ACD) programs ...... and that, by natural default, makes them an elite sort of covert and/or clandestine black ops team of Greater CyberIntelAIgent Game players.

It is certainly the likes of them that Future Builders are competing against or maybe tricked into opposing ... and they are nobody's easily led convenient fool with a full suite of blunt tools to be condemned and treated as a threat rather than realised as a devilishly clever, heavenly AIdDevelopment.

[amanfromMars 1]

Re: Knock, Knock ..... :-)

Who’s there ....... Right Royal Renegade Rogue Heroes who Dare Care Share/Share Dare Care ‽

And that is an AI Leading Question being asked of more than just UKGBNI vested interests with everything foreign and alien to lose and gain ....... so really not something to ignore and deny being a universal matter of vital international and internetional interest ...... although don’t be betting anything you cannot afford to lose on the right answers being readily freely given regarding those sorts of dumbfounding questions for they be sensitive and would both reveal and hide secrets for quantum communication.

[Anonymous Coward]

"ideas" -- "hypotheses" -- "experiments".............

Yup.....plenty of suggestions from the lawmakers who say they are "doing something"............

Yup.... plenty of "ideas" , "hypotheses" , "experiments".................................

.............but, in the mean time, millions of citizens are getting their personal lives f**ked by bad guys who walk away with oodles of cash!!!

Headline reads: ".....cyber defense tools are already in motion....."

Actual fact: "We really don't care about millions of citizens being exploited"

[sitta_europea]

Re: "ideas" -- "hypotheses" -- "experiments".............

"Yup.... plenty of "ideas" , "hypotheses" , "experiments".................................

.............but, in the mean time, millions of citizens are getting their personal lives f**ked by bad guys who walk away with oodles of cash!!!"

Came here to say something similar but you beat me to it.

Nobody but me will protect me. The idea that something the government runs will help is downright laughable.

You might as well call ActionFraud (I'm sure the Fraud there is that they're claiming there'll be some Action). I've tried a few times but the telephone operators seem to have been trained to talk you out of making a report. "It could be just a mistake." Fercryinoutloud they're selling stolen property but it could be just a mistake. What a complete waste of space.

If I were running the show, for starters I have a list of millions of IPs here right now and I'd be dropping *every single packet* from *all* those IPs the instant it reached these shores.

Anyone who wants the list is welcome to it, it's right here in an impressively small Postgres database which runs on a Pi4B to protect us from scum, mostly in Latvia and eastwards.

You'd have thought our law enforcement could run to a Pi and a few routers. It isn't rocket science.

Ideas. Hypotheses. Experiments.

Give me strength.

[TheRiddler]

Re: "ideas" -- "hypotheses" -- "experiments".............

This is so staggeringly naive and ill informed it reads like some Daily Mail rant again "dirty foreigners".

The stuff being launched from those IP addresses are prdominantly script kiddies running Nessus from their home ISP or if they're really sneaky "friendly" home nation script kiddies bouncing via a VPN.

All the stuff you really worry/care about at a national level will not originate from a known "eastern" IP address. It will far more likely come from a legit, in courty relay, a VPN in a friendly country, a "friendly" compromised server or even combinations of those things.

Banning and monitoring known bad IP's has its place (which is exactly what NCSC do incidentally) but arbitrarily banning whole country ASN's and thinking that's going to keep you safe is silly. Moreover it may lul you into a false sense of security and leave you more open to attack. It's something that may have been slightly useful 20 years ago but it has no place in a modern world as part of any viable security approach.

While I'm at it apart from the ridiculous scale you're talking about (you'd have to filter an route countless PB's a day) what you're talking about is something akin to the great firewall of China. Hooray for advocating that kind of control and intrusion into our traffic. It would certainly be GCHQ's wet dream but for privacy, not so much.

You don't need strength, you need to get a clue because what you're suggesting is demonstrably nonsense.

[amanfromMars 1]

Step into my Parlour said the Spider to the Fly... 4ur2die42

UK plans to revamp national cyber defense tools are already in motion – and private sector will play a part

Whenever a company/organisation/nation is a declared bankrupt entity, what sort of realistic plans do any circling private sector angels/sharks/vultures normally have to offer .... apart from asset stripping the helpless clueless carcass clean of everything imagined precious for future sale and anything not rotten to the core?

And take care to not be seen and recognised to fall into this always present deep and dark blackhole of a sweet honeytrap which is guaranteed to destroy all spellbound by its sinister allure as sure as night follows day, attack exercises defence and nothing good comes from anything bad .....

amanfromMars [2407250847] …… shares on https://www.nationaldefensemagazine.org/articles/2024/7/25/viewpoint-private-investment-has-role-to-play-in-aukus

[Thank you. Your comment will be displayed soon after reviewing.]

The unavoidable universal hurdle to avoid yourself falling head over heels at, and in so doing losing the race to attract private capital into any current conventional defence programs or any future ACTive Special Operation, is …. ensure they are not, and never can be, perceived of as being primarily self-serving, designedly inequitable and wantonly destructive of competitive peer opposition to greater bellicose plans and exclusive elite belligerent activities ….. for such only results in a suddenly extremely rapid and unstoppable, increasingly stealthy degenerative decline in any support for such project forces/sources with all investment capital and any imagined return on that investment being lost, along with one’s reputation and any credibility for being on the right side of history also comprehensively destroyed ‽

Take care out there, even if you don’t dare to care and share. IT is a wild crazy dangerous jungle with all manner of never before known, nor ever even imagined possible, SMARTR Feasting Beast/Heavenly and Hellishly IntelAIgent Virtual Being/CyberIntelAIgent Quantum IDEntity for at least that trio be at their Work for REST and Great Games Play.

ACTive ….. Advanced CyberIntelAIgent Traction

SMARTR ….. SMARTR Mentoring Analysis Reporting Titanic Research

REST …. REpresentational State Transfer

[Anonymous Coward]

Motion?? Specifics??

Quote: "...already in motion...The country's cyber cops did not share specifics..."

Define "motion""!!!!

Anne Keast-Butler has been talking (note: talking) about this sort of thing...............

....you know....advanced "cyber defense tools" provided by the expensive citizen-funded folk in Cheltenham.............

Where are these tools?

Do they protect me from slurping by Google or Palantir?

How much taxpayer money is disappearing into Cheltenham? What are we paying Anne Keast-Butler each year?

I think we should be told!!

[EnviableOne]

Re: Motion?? Specifics??

Considering ACD started as Mailcheck (DMARC, and TLS email the easy way) and Webcheck (learn how to do HTTPS and CSPs the easy way)

then branched out to PDNS (DNS Filtering) then added NEWS (NEWS Early Warning System - yes someone has a sense of humour, but was made to grow up) (working with threat intelegence to tell you you have been compromised) then added Exercise in the Box (how to excercise your IR plan the easy way) then added Logging Made Easy (a prebuilt ELK stack with easy to use defaults to centralise logging) oh and this little thing called Cyber Essentials (what to do to get the basics right) and the not bad generic cyber training available for free

I think there has been a considerable impact, especially for local councils, NHS and Emergency services, who have a treasure trove of data on you and next to no cash to afford the expertise to protect it.

NCSC have done a great job to keep the crown jewels safe.