Academic life

It has been a long time since my last post and a lot has happened since. The last year has been interesting, as I was searching for my next challenge. I'll try rebooting this blog, as well.

I left the NATO Cooperative Cyber Defence Centre of Excellence at the turn of the year. I had been involved with it since January of 2005, when I first joined the team that was doing the preparation work to get the Centre established. When that happened in May of 2008, I took on the role of a scientist (first at R&D, later at Training and Doctrine). This time was instrumental in my personal and professional growth and I am very grateful to the Centre and the Estonian Defence Forces for the opportunities I was offered during my service. However, after five years at CCD COE, it was time to move on, lest I get too comfortable in my role there.

Therefore, I did some soul searching and job searching last year. My job search revealed that there are many empty slots to fill, so I opted for the approach that allows me to address the qualified manpower shortage in the most direct way. Last September I took on a part-time teaching position in University of Jyväskylä, Finland, in order to get experience and to see a bit more of the academic world. As of last month, I am also an Associate Professor in Tallinn University of Technology, working on cyber security topics (a 50% position). Both of these Universities have ambitious goals for building up a strong cyber security program, so I will have some interesting years ahead.

I have also reserved a fraction of my time for other interesting projects (consulting, etc.) that come up, such as cyber exercises and targeted short term research projects. All in all, this arrangement gives me a lot of flexibility and a wider net to fish for exciting challenges.

So far, I am enjoying myself. Life is very busy, but fun as well. 

Baltic Cyber Shield 2010

I spent the first two days of this week engaged in a multinational distributed cyber defence exercise - Baltic Cyber Shield. It was a tech-centric exercise organized by CCD COE and various Swedish defence organizations, particularly the Swedish National Defence College and the Swedish Defence Research Agency. The Estonian Cyber Defence League, a volunteer cyber defence organization, also provided invaluable support. All in all, about 100 people from about 10 countries took part in the exercise.

According to the scenario, six blue teams (3 Swedish, a Latvian, a Lithuanian and a NATO team) of up to ten experts were deployed to take over compromised and poorly set up networks targeted by an extremist environmental group's "cyber warfare division" (multi-national red team). The exercise was distributed, so the participants performed the defence and attack missions remotely.

I must say it was a lot of fun. As expected, there were all kinds of issues, but in the end, everything went quite well. The attackers were able to maintain a steady push, compromising well over a hundred systems over the two days, while the defenders tried different strategies to maintain their services while locking the attackers out of their networks.

As a member of the referee team, I got another good experience, and learned some things that can contribute to my PhD research (the attackers were, after all, supposedly a non-government volunteer group who engaged in politically motivated cyber attacks). Congratulations are in order to the members of Blue 5, a Swedish expert team, who won the exercise.

Next week I will be at the SMi's Cyber Defence Conference in Tallinn.