Cybersecurity / en U of T teams up with schools in Canada, around the world to share cybersecurity intelligence /news/u-t-teams-schools-canada-around-world-share-cybersecurity-intelligence <span class="field field--name-title field--type-string field--label-hidden">U of T teams up with schools in Canada, around the world to share cybersecurity intelligence</span> <div class="field field--name-field-featured-picture field--type-image field--label-hidden field__item"> <img loading="eager" srcset="/sites/default/files/styles/news_banner_370/public/2023-04/GettyImages-885294104.jpeg?h=afdc3185&amp;itok=s8oGgRli 370w, /sites/default/files/styles/news_banner_740/public/2023-04/GettyImages-885294104.jpeg?h=afdc3185&amp;itok=Td2RvyNk 740w, /sites/default/files/styles/news_banner_1110/public/2023-04/GettyImages-885294104.jpeg?h=afdc3185&amp;itok=IAedYpdv 1110w" sizes="(min-width:1200px) 1110px, (max-width: 1199px) 80vw, (max-width: 767px) 90vw, (max-width: 575px) 95vw" width="740" height="494" src="/sites/default/files/styles/news_banner_370/public/2023-04/GettyImages-885294104.jpeg?h=afdc3185&amp;itok=s8oGgRli" alt="a computer server room with many racks of computers"> </div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>Christopher.Sorensen</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2021-05-25T11:58:56-04:00" title="Tuesday, May 25, 2021 - 11:58" class="datetime">Tue, 05/25/2021 - 11:58</time> </span> <div class="clearfix text-formatted field field--name-field-cutline-long field--type-text-long field--label-above"> <div class="field__label">Cutline</div> <div class="field__item"><p>(Photo by Erik Isakson via Getty Images)</p> </div> </div> <div class="field field--name-field-author-reporters field--type-entity-reference field--label-hidden field__items"> <div class="field__item"><a href="/news/authors-reporters/yanan-wang" hreflang="en">Yanan Wang</a></div> </div> <div class="field field--name-field-topic field--type-entity-reference field--label-above"> <div class="field__label">Topic</div> <div class="field__item"><a href="/news/topics/our-community" hreflang="en">Our Community</a></div> </div> <div class="field field--name-field-story-tags field--type-entity-reference field--label-hidden field__items"> <div class="field__item"><a href="/news/tags/cybersecurity" hreflang="en">Cybersecurity</a></div> <div class="field__item"><a href="/news/tags/scott-mabury" hreflang="en">Scott Mabury</a></div> <div class="field__item"><a href="/news/tags/global" hreflang="en">Global</a></div> </div> <div class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item"><p style="margin-bottom:11px">From ransomware to espionage, educational institutions face a growing number of cybersecurity threats – which is why the Ƶ is working with schools in Canada and abroad to thwart attacks by sharing data in real-time.</p> <p style="margin-bottom:11px">For nearly a year, the <a href="https://canssoc.ca/">Canadian Shared Security Operations Centre (CanSSOC)</a>, for which U of T serves as administrative lead, has been piloting a <a href="https://canssoc.ca/threat-intelligence-pilot-launched/">threat feed</a> that sends members immediate information on suspicious activity and potential breaches, all while protecting the anonymity of affected institutions.</p> <p style="margin-bottom:11px">Now, CanSSOC <a href="https://canssoc.ca/new-global-partnership-helps-education-sector-defend-against-cyber-attacks/">will be partnering with organizations in the United States, Australia and the United Kingdom to extend this intelligence-sharing well beyond Canadian borders</a>.</p> <div class="image-with-caption left"> <p style="margin-bottom:11px"><img alt="Isaac Straley" class="media-element file-media-original lazy" data-delta="1" height="300" loading="lazy" src="/sites/default/files/2023-04/DZ6_7396-crop.jpeg" typeof="foaf:Image" width="200"> Isaac Straley<br> (photo by Lisa Sakulensky)</p> </div> <p style="margin-bottom:11px">“This is unprecedented,” says <b>Isaac Straley</b>, who is the chief information security officer for both CanSSOC and U of T.</p> <p style="margin-bottom:11px">“With this partnership, we’re really building relationships and working together to tackle this international problem.”</p> <p style="margin-bottom:11px">CanSSOC serves universities, colleges, polytechniques and CÉGEPs across Canada. U of T was one of six founding institutions alongside the University of Alberta, University of British Columbia, McGill University, McMaster University and Ryerson University – but the consortium has the goal of serving more than 200 educational institutions of varying sizes.</p> <p style="margin-bottom:11px">Jill Kowalchuk, the organization’s director, says the organization was founded out of a desire to combine essential resources in the war against cyberattacks</p> <p style="margin-bottom:11px">“Our motto at CanSSOC is: ‘Better than what we can do on our own, always in partnership,’” she says. “We recognize the value and strength built through co-ordinated and community-focused approaches to security threats.”</p> <p style="margin-bottom:11px">The new crossborder partnership will see CanSSOC collaborate with <a href="https://www.jisc.ac.uk/">Jisc</a> in the U.K., <a href="https://www.aarnet.edu.au/">AARNet</a> in Australia and <a href="https://omnisoc.iu.edu/">OmniSOC</a> in the U.S., all of which co-ordinate collective approaches similar to CanSSOC in their respective countries.</p> <p style="margin-bottom:11px">“This global threat intelligence gives OmniSOC analysts a unique perspective,” <a href="https://www.jisc.ac.uk/news/new-global-partnership-helps-education-sector-defend-against-cyber-attacks-25-may-2021">says OmniSOC executive director Von Welch in a statement</a>. “This is a great example of global collaboration in the face of a global threat.”</p> <p style="margin-bottom:11px">Experts say universities are highly appealing targets of cyberattacks because they oversee vast amounts of critical infrastructure, research data and personal information. The Canadian Centre for Cyber Security <a href="https://cyber.gc.ca/en/guidance/cyber-security-advice-and-guidance-research-and-development-organizations-during-covid-19">warned last May</a> that cyber threat actors were taking advantage of the pandemic to carry out malicious and fraudulent activities against academic institutions involved in COVID-19 research and development, with attackers posing as legitimate businesses to try to spread misinformation, obtain sensitive information or gain funding.</p> <p style="margin-bottom:11px">Straley says the entities plotting such cyberattacks range from criminal groups using ransomware to extract money to nation-state actors aiming to disrupt public infrastructure or engage in espionage. What they all have in common, he says, is a wealth of resources at their disposal, placing many public educational institutions at a disadvantage when it comes to confronting these threats.</p> <p style="margin-bottom:11px">“We’ve got a high technology footprint that has a high amount of exposure to the Internet, and that just leads to a higher risk,” says Straley. “We [are also facing] very sophisticated actors. It’s not possible to protect everything.”</p> <p style="margin-bottom:11px">“CanSSOC’s threat feed allows institutions to pool resources in a single national service that funnels real-time data, curated for the sector, to members, thereby giving them an opportunity to more quickly respond to threats as they arise,” adds <b>Bo Wandschneider</b>, U of T’s chief information officer.</p> <p style="margin-bottom:11px">The intelligence is gathered from private and governmental sources, and, critically, from the member institutions themselves. The international partners will now also contribute to the knowledge base, which is subsequently curated by CanSSOC and shared. The identity of the affected institution is kept anonymous throughout.</p> <p style="margin-bottom:11px">Organizations have the option to either automatically block suspicious activity or manually monitor and prioritize threats.</p> <p style="margin-bottom:11px">“Through this process, we can get protection sometimes within minutes,” says Straley.</p> <p style="margin-bottom:11px">The threat feed will be provided to all eligible research and education institutions connected to Canada’s <a href="https://www.canarie.ca/nren/">National Research and Education Network</a> (NREN) thanks to funding from <a href="https://www.canarie.ca/about/">CANARIE’s</a>&nbsp;<a href="https://www.canarie.ca/cybersecurity/cip/">Cybersecurity Initiatives Program</a>, which supports initiatives that strengthen the cybersecurity of Canada’s research and education sector.</p> <p style="margin-bottom:11px">“In today’s world, many people see cyber security as the fourth line in our national defence structure, and it is important for us to engage at the local, provincial and national level,” Wandschneider says.</p> <p style="margin-bottom:11px"><b>Scott Mabury</b>, U of T’s vice-president, operations and real estate partnerships, says the university is pleased to be working with partners across Canada, including the provincial organizations in the NREN, and around the world to enhance cybersecurity protections for educational institutions. &nbsp;</p> <p style="margin-bottom:11px">“The valuable data gleaned from threat feed and our global collaboration will enable U of T to more fully safeguard the privacy of our community and the cutting-edge research that our researchers are undertaking,” Mabury says.</p> <p style="margin-bottom:11px">&nbsp;</p> <p style="margin-bottom:11px">&nbsp;</p> <p style="margin-bottom:11px">&nbsp;</p> <p style="margin-bottom:11px">&nbsp;</p> </div> <div class="field field--name-field-news-home-page-banner field--type-boolean field--label-above"> <div class="field__label">News home page banner</div> <div class="field__item">Off</div> </div> Tue, 25 May 2021 15:58:56 +0000 Christopher.Sorensen 301405 at