InfoSecurity Europe 2005
InfoSecurity Europe 2005

Most computer hacking an 'inside job'

Biggest threat from current or former employees, warns Met Police

Written by Iain Thomson at InfoSec in London

The vast majority of computer hacking is done by current and former employees, according to the Metropolitan Police.

In a panel session at this year's InfoSecurity Europe conference, Detective Inspector Chris Simpson of the Metropolitan Police Computer Crime Unit told delegates that one of the first steps in any investigation is to check employee details.

Advertisement

"In the vast majority of cases we investigate the culprits are current or former employees," he said.

"They are not hacking into systems using flaws in software. Instead they are using flaws in the security procedures of the company to carry out their attack."

Simpson added that electronic crime is definitely on the rise and outlined the main threat vectors.

Online organised crime is originating predominantly from eastern Europe, while the biggest spammers are found in the US, China and Germany. Script kiddies are predominantly from the US, Canada or Britain and their numbers are on the rise thanks to the popularity of virus creation kits.

Meanwhile the Crown Prosecution Service (CPS) is gearing up for more computer crime.

"We have come to the conclusion that computer crime is here to stay," said Ester George, policy advisor to the CPS.

"Computers now touch almost every case, hacking or otherwise. The convergence of phones and PDAs is increasing this."

George cited two non-hacking events where computers were crucial to the case. In one a man went berserk and attacked passers by, claiming diminished responsibility. But his internet logs showed that he'd been researching his likely sentence online before carrying out the attacks.

In the other case a child was brought into hospital and died of pneumonia. The parent was charged after internet logs showed that sites had been visited that identified factors in catching the infection.

To prepare for this, the CPS has set up a training scheme which teaches barristers how to handle high-tech cases. To date 110 prosecutors have attended the course.

Tags:

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Ministry of Defence

MoD data loss total could hit 1.7 million

New figures far higher than initial estimates   More...

Sun Microsystems

Sun Sparc server shatters seven standards

T5440 sets new benchmark records   More...

Gary McKinnon

Home Office turns down latest McKinnon appeal

Home Secretary informs lawyers of arrangements for US extradition   More...

Network cables

Network Instruments touts nanosecond apps troubleshooting

Observer 13 offers upgraded performance and forensic network analysis   More...

Primary Navigation