By Ashwani Mishra, Editor-Technology, 63SATS
Hong Kong took a decisive step in fortifying its digital defenses today with the launch of the Cybersecurity Attack and Defence Drill 2024, a groundbreaking initiative that brings together the best minds in cybersecurity to simulate the digital battles of tomorrow.
The 60-hour exercise, spanning three intense days, is orchestrated by the Digital Policy Office (DPO) in partnership with the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force, the Hong Kong Internet Registration Corporation Limited, and the Hong Kong Institute of Information Technology (HKIIT).
This first-of-its-kind drill seeks to arm government departments and public organisations with enhanced technical expertise and real-world defensive capabilities.
In a meticulously controlled environment, cybersecurity professionals are testing their mettle in a high-stakes simulation that pits attackers against defenders—highlighting the constant vigilance required to stay ahead in the digital age.
The Alarming Rise in Cybercrime
A recent October report revealed the urgency behind such initiatives. Hong Kong recorded 34,112 technology-related crime cases in 2023, marking a 50% increase from 2022. Financial losses surged by a staggering 71% to HK$5.49 billion (US$706.5 million).
Among the crimes, “unauthorised access to online service accounts” saw the sharpest rise, climbing from 168 cases in 2022 to 3,434 in 2023.
According to the Digital Policy Commissioner, these incidents were largely driven by online phishing scams, where victims were tricked into providing sensitive information on counterfeit websites set up by fraudsters.
A Drill Like No Other: Red vs. Blue in Action
The drill operates on a Red Team-Blue Team model, where Red Teams—cybersecurity experts acting as attackers—launch simulated assaults on designated information systems. These systems, already operational, serve as the testing ground for identifying vulnerabilities and exposing potential risks.
Blue Teams, on the other hand, work to deploy their technical skills and strategies to fend off these attacks.
Leadership Insights: A Proactive Vision
At the opening ceremony, Professor Sun Dong, Secretary for Innovation, Technology, and Industry, highlighted the broader goal:
“This exercise embodies the concept of ‘knowing your opponent and yourself well.’ It examines the defense capabilities of government departments and public organisations through practical combat scenarios, while conducting in-depth security assessments and vulnerability detection.”
Such drills are also essential to bridge the gap and strengthen defenses across organizations of all sizes.
A Critical Step Towards Resilience
As Hong Kong grapples with a rising tide of cyber threats, the Cybersecurity Attack and Defence Drill 2024 marks a significant step forward in building a robust defense against digital adversaries.
By combining real-world scenarios with practical solutions, the exercise reflects a city-wide commitment to enhancing resilience in the face of evolving cyber risks.
With financial losses escalating and cybercrime growing in sophistication, Hong Kong’s proactive approach sets an example for other regions.
The lessons learned over the next 60 hours will undoubtedly serve as a blueprint for safeguarding digital infrastructures and fostering a culture of cybersecurity awareness across countries and sectors.
