Jisc launches automated intelligence platform for education

A new cyber security threat intelligence sharing system has been launched to help research and education organisations across the globe prevent and mitigate cyber attacks.   

In response to the rise in cyber crime against the sector, particularly ransomware attacks, a global threat intelligence sharing partnership has been set up by five tertiary education and research sector security and technology bodies in the UK, US, Canada and Australia.  

The partnership uses MISP, the open-source threat intelligence platform used world-wide by more than 6,000 organisations.  

Jisc says cyber crime does not respect international borders, and there are often strong similarities in the method of attacks seen in different countries. Using the MISP’s automated warning system, the partner organisations can inform each other of attacks in real time, increasing the likelihood that they can either put in effective preventative measures, or reduce the impact of attacks. 

Instigated by Jisc’s Executive Director of E-infrastructure, Steve Kennett, and delivered by his team, the formal partnership has just been launched following the signing of a memorandum of understanding in April. 

Jisc is the UK’s technology body for tertiary education and runs the National Research and Education Network (NREN)https://www.jisc.ac.uk/ which has in-built cyber security protection.  

Other founding partners in the collaboration include:  

• AARNet, Australia’s NREN. 
• The Canadian Shared Security Operations Centre (CanSSOC), a partnership between higher education institutions in Canada that is working with Canada’s NREN to deliver a sector specific curated threat feed service to eligible NREN-connected institutions.  
• The US higher education shared cyber security operations centre, OmniSOC and the US Research and Education Networks Information Sharing and Analysis Center (REN-ISAC). 

Kennett says: “The threat from cyber criminals is growing and constantly evolving and, if we are to stay ahead of the curve, we must continually update our knowledge and adopt agile response mechanisms.  

“As an automated platform, with real-time data sharing capability, MISP will help us to do that. 

“Jisc already works closely with other UK security agencies and its members to gather and share intelligence, which is crucial to maintaining robust cyber defences. I’m delighted that we can now help extend that benefit internationally.” 

Isaac Straley, Chief Information Security Officer at CanSSOC and the University of Toronto, says: “CanSSOC’s motto is ‘Better than what we can do on our own, always in partnership’ because we recognise the value and strength built through coordinated and community-focused approaches to security threats.  

“This international partnership aligns closely with our ongoing efforts in Canada to bring together and provide services that can be consumed by a diverse set of institutions for broad benefit and protection against cyber threats.  

“We’re eager to build on our existing relationships with Canadian sector partners and Canada’s NREN to tap into the services, expertise, and leadership of the international community, for the benefit of our sector as a whole.”    

Charles Sterner, Chief Information Security Officer at AARNet, adds: “AARNet has been an active driver of security uplift initiatives for the research and education sector in recent years, spearheaded by the development of our security operations centre for Australian universities.  

“We see AARNet playing a key role in creating opportunities for people and groups with common challenges, both in Australia and globally, to achieve far better outcomes by collaborating than they would alone.”