Pembroke King's Programme Summer School

"United we stand, divided we fall..." -- Aesop
For the second year in a row, I have had the pleasure of running the Social Engineering and Cyber-security at the University of Cambridge.

The idea is simple, to take excellent high performing students from across the world, from multi disciplines and to teach them how to conduct open-source intelligence and social engineering exercises to identify, target, and exploit individuals and organisations, as proposed at the ICR 2019 paper [1]. In using these skills, we can put together with intelligence and security reports that we can use to reduce the risk from internal and aggressive threats and to learn and inform others of the impact of their exposed digital footprint, to themselves and to the organisations they work for. 

With the Pembroke & King's College (University of Cambridge) International Programme, in conjunction with Tallinn University of Technology Computer Emergency Response Team and some excellent guest speakers and mentors, this year has yet again been an amazing success;
  • CRRT Programme, Ministry of Defence, Eglė Vasiliauskaitė
  • Tallinn University of Technology, University of Adelaide, Dr. Matthew Sorell
  • Swedbank Estonia, Data Protection Specialist, Merike Kaev
  • Keystroke DNA, CEO, Jeff Gawley
  • The University of Ljubljana, research material and partner in crime, Dr. David Modic
In having this multidisciplinary approach; the ideas are creative, they are not bound by "the same old approaches" used by others and are inspired. They are focused on getting their target to click the link, to identify weak services and research exploits and then.... end game.

Egle Vasiliauskaite & Kieren Lovell
So far, this approach has had some interesting results, mainly being that they are 100% successful in identifying and exploiting a possible threat. In looking at the issue from a human intelligence angle, they understand how to work around systems like firewalls, IDS, physical security and two-factor authentication systems. 

This year has been no exception. The students have excelled themselves, showing us that the issue is indeed a human one and not a technical exercise.

I just want to thank everyone that made this event the best one yet; TalTech for being such excellent sports and providing their world-class expertise, for Pembroke and King's College for providing excellent facilities and in bringing together some of the best, excellent creative students I have had the pleasure to work with, and of course my guest speakers for making this event what it is. 
[1]  Cyber Game to Cyber Exercise: A New Methodology for Cybersecurity Simulations
[2] TalTech Centre for Digital Forensics and Cyber Security
[3] University of Cambridge, Pembroke & King's International Programme
TalTech & Pembroke King's Summer (University of Cambridge) Programme
Social distancing Tips

Add a comment

Email again: