Taking bite out of (cyber) crime
State lawmakers are working to determine how best to thwart cyberattacks, after a surge of recent incidents targeting local governments and small businesses, but have to get creative to address crimes that are almost entirely carried out overseas.
“What we’re trying to do is figure out a way that we can be more helpful,” said state Rep. Angelo Puppolo (D-Wilbraham), chairman of the House committee on technology and intergovernmental affairs. “We’re looking at ways to be proactive instead of reactive.”
Puppolo’s committee has been holding cybersecurity hearings in an effort to understand the best ways to help.
“You have to assume everything on the internet is hackable,” Puppolo said. “With that position, how do we protect as much as we can from a government standpoint?”
While there are no specific proposals, Puppolo said the committee could propose funds for an education campaign, and did not rule out tax credits for businesses buying protective software, but said it had not been discussed. He said there are already some bills that would increase penalties for those convicted of cybercrime.
Still, state government actions are unlikely to dramatically change the course of cybercrime. A vast majority of hacks, including ransomware and phishing schemes, are thought to be committed by foreign nationals, in some cases international crime syndicates. Now, victims of ransomware — where a hacker remotely locks a victim’s computer and demands a ransom to unlock it — are told by local police to report it to the FBI.
Lior Div, chief executive of Bostonbased Cybereason, told the committee a combination of government and industry will be important to make a difference.
“It’s a position where we can join forces to emphasize and say we believe cybersecurity is a big problem,” Div said. “Education is one piece that we need to invest in more.”