Polish universities have become a constant target of cybercriminals, with ransomware, data leaks and phishing turning from isolated incidents into everyday reality. Institutions holding valuable research results, intellectual property and high-end technologies are particularly exposed, according to Dr. Jarosław Homa, the rector’s plenipotentiary for cybersecurity at the Silesian University of Technology and a member of the KRASP cybersecurity team.
The problem will be among topics at the „Science. Development. Business” conference scheduled for 25-26 November in Warsaw. Not all Polish universities approach the challenge with the same intensity, but the largest research centres have already invested heavily in protection.
Among the best-prepared institutions are the Warsaw University of Technology, University of Warsaw, AGH University of Science and Technology, Wrocław University of Science and Technology, Poznań University of Technology and Silesian University of Technology.
Large universities are ahead, smaller ones are catching up
– These universities have a very high level of cybersecurity in their telecommunications infrastructure. Network monitoring solutions and incident analysis tools have been in place there for a long time – said Dr. Jarosław Homa.
The situation is much harder for smaller academic centres, which have limited financial resources and fewer IT staff. Yet they remain just as appealing to attackers because of the scientific data they hold.
– Universities remain an attractive target for cybercriminal groups because they gather valuable research results, intellectual property and high-value technologies – emphasised Homa.
Stolen data, ransomware and phishing
Among the most common incidents on campuses are thefts of personal data and research data, ransomware attacks that encrypt previously stolen information, and phishing campaigns aimed at taking over employee and student accounts.
– We are observing thefts of personal data, research data, as well as incidents resulting from phishing aimed at taking over accounts and gaining access to systems – explained the expert.
The human factor matters, but the biggest weakness is the shortage of cybersecurity specialists. Universities cannot easily compete with the private sector for such talent.
– Universities are not very competitive on the labour market in cybersecurity. Lack of adequate staff can be considered the soft underbelly of this sector – Homa said.
The specific nature of universities adds another layer of difficulty. Unlike a corporation, an academic institution must stay open to thousands of students and employees while maintaining many different systems and research projects.
– This is not a corporation. Universities operate differently: they have autonomy, conduct research, use many systems and at the same time must remain open to the academic community – noted Jarosław Homa.
Research teams also face new obligations, including risk analysis for numerous projects. For many scientists, this requires skills that were previously unnecessary.
– For many research teams, this is a relatively new task, requiring skills that were not needed before – he added.
Attacks through suppliers and software
Recent incidents show that university security depends on internal networks and external vendors. On 10 June, the University of Nottingham reported unauthorised activity in a system storing student data. Earlier in June, Oxford University said cybercriminals had exploited a vulnerability in a platform used by students and alumni for career planning, gaining access to names and e-mail addresses.
These cases illustrate the growing importance of external suppliers, since most universities rely on cloud services and commercial software.
– We are largely dependent on suppliers. If systems used by universities were compromised, the problem would automatically affect us too – admitted Homa.
Software producers generally react quickly to discovered vulnerabilities, but universities must also do their part by installing security updates without delay. The same applies to content management systems behind university websites; any lag increases the risk of a successful attack.
– Our role is to efficiently implement security updates. This is how we can reduce the risk of exploitation of new vulnerabilities – concluded the expert.
Źródło: WNP.PL, Fot. PTWP
