{"id":177308,"date":"2025-03-31T14:06:32","date_gmt":"2025-03-31T12:06:32","guid":{"rendered":"https:\/\/www.erasmusmagazine.nl\/en\/?p=177308"},"modified":"2025-12-19T11:27:45","modified_gmt":"2025-12-19T10:27:45","slug":"cyberattack-exercise-angry-students-bring-education-to-a-halt","status":"publish","type":"post","link":"https:\/\/www.erasmusmagazine.nl\/en\/2025\/03\/31\/cyberattack-exercise-angry-students-bring-education-to-a-halt\/","title":{"rendered":"Cyberattack exercise: angry students bring education to a halt"},"content":{"rendered":"

Oh dear, a cyberattack disrupts the IT systems and the press poses difficult questions! Spread over three days, all kinds of educational institutions participated in a crisis exercise.<\/p>\n

\"\"

\n\t\n\n<\/svg>\n<\/span>\n\tImage by:<\/span>\n\n\t\t\t\n\t\t\t\t\t\t\tUnsplash \/ Philipp Katzenberger<\/span>\t\t\t\t\t<\/span>\n\t<\/p>\n<\/figcaption><\/figure>

For the fifth time, the IT organisation SURF devised a national exercise on cybersecurity: what do educational institutions and the Ministry of Education, Culture and Science do in the event of a nationwide attack on their systems? Last week, around two thousand employees from ninety different institutions took part.<\/p>\n

Such a crisis is not unimaginable: last January, Eindhoven University of Technology had to fend off<\/a> a dangerous attack. The most notorious hack occurred five years ago at Maastricht University, where ransomware locked down<\/a> systems and files.<\/p>\n

Protest<\/h2>

The story of these exercise days<\/a>: a peaceful student protest takes a grim turn when a small splinter group of hackers disrupts the systems in vocational and higher education out of anger over budget cuts.<\/p>\n

But how do they achieve this? According to the scenario, by signing a petition, people accidentally download malware that unwittingly turns their computers and phones into participants in a DDoS attack.<\/p>\n

'Hard work'<\/h2>

\u201cIt was a bit of hard work\u201d, says Tom Hoven. He is the spokesperson for SURF and participated in the exercise. Therefore, he was also unaware of the situation when it began. \u201cThe scenario is packed into six hours, so we had to switch quickly. But it was very educational. You see on such a day how the lines of communication work and where the gaps are. It is good to do something like this with the whole sector.\u201d<\/p>\n

It turns out to be useful to know each other in advance, he says. \u201cThen you don\u2019t have to start from scratch with an introduction. That really helps.\u201d<\/p>\n

Is it realistic that students turn out to be the enemy, rather than, say, Russians or North Koreans? \u201cThe scenario is always intentionally a bit exaggerated\u201d, says Hoven, \u2018but the crisis itself is realistic enough.\u201d<\/p>\n

Local protests<\/h2>

In the office of SURF, the crisis team gathered. The institutions participated from their own locations and sometimes faced their own issues. \u201cFor example, they had to deal with local protests\u201d, says Hoven. \u201cWe didn\u2019t have that at SURF.\u201d<\/p>\n

Students acted as journalists with challenging questions. The Association of Universities of Professional Education and the universities\u2019 association UNL also practiced, but not together: higher education and universities each had their own training day. The Ministry of Education, Culture and Science participated on a different day, along with the vocational education institutions.<\/p>\n

The staff, for instance, needed to exchange technical information: what are the \u2018fingerprints\u2019 of the cyberattack and how can they be neutralised? Who needs to receive this information?<\/p>\n

Wise lessons<\/h2>

Hoven is not yet sure what the wise lessons from this exercise will be, but he found it helpful to experience the structure of the crisis meetings. \u201cSuch a meeting has to be as concise as possible because, in a crisis, you cannot spend an hour and a half talking. It was very valuable to practice this once. By the third crisis meeting, you can already tell that things are moving much faster.\u201d<\/p>\n

SURF will evaluate the proceedings and share the lessons learned. The outcomes of previous exercises have also been shared<\/a>.<\/p>\n\n\t

\n\t\t\n\t\t
\n\n\t\t\t\t\t\t\t

Read more<\/h2>\n\t\t\t\n\t\t\t