- Exclusive
- Technology
- Cybersecurity
Australia’s neglected weapon in the fight against cyberattacks
By David Swan
A review of Australia’s Defence Force Reserves has recommended establishing a cyber-reserve capability and led to calls for retirees to form a “cyber militia” to fight online attacks.
Australian businesses have been hit by a wave of cyberattacks over the past 12 months, Qantas, Genea Fertility Clinic and major superannuation funds being among the victims of data breaches.
The nation is facing a critical shortage of cybersecurity professionals to respond to such incidents, and the number and severity of attacks has led to calls for cyber defences to be bolstered. The shortfall of qualified professionals is forecast to translate to 30,000 unfilled positions over the next three years.
Bond University professor Dan Svantesson has conducted research identifying the potential roles, staffing and structure of a volunteer cyber reserve.
Retirees and other senior Australians could play a key role in defending the nation against such attacks, Professor Dan Svantesson, of the Bond University Faculty of Law’s Centre for Space, Cyberspace & Data Law, said.
The Defence Department completed its “Strategic Review of the Australian Defence Force Reserves” in 2024. Now Bond University has looked into what a cyber reserve should look like.
Svantesson’s research identified the potential roles, staffing and structure of a volunteer cyber reserve.
Older people have been commonly viewed as a vulnerable group online, but they should also be seen as an important resource in a whole-of-society approach to cybersecurity, he said.
“Many senior Australians have the necessary skills and time to make a significant contribution,” Svantesson said.
“Harnessing this capability also has the advantage of not competing with staffing requirements of the private sector and other organisations.”
He said countries including the US, Estonia and Finland already had cyber reserve structures in place that performed functions ranging from raising awareness of cybersecurity issues to incident response. Ukraine’s volunteer “IT Army” has played a crucial role in the war against Russia, launching cyberattacks against the Russian government.
Svantesson, who co-wrote a report on the issue with Dr Samuli Haataja, said there was a large and increasing number of retirees who had worked in an IT environment for most of their working life, and many seniors today were highly competent computer users.
“To facilitate senior Australians’ joining volunteer cyber forces, one could, for example, imagine targeted recruitment campaigns and even some co-operation with the major employers in the cybersecurity field so that those about to retire are informed of the possibility to join a volunteer cyber force,” the report reads.
Senior Australians could play a key role in defending the nation against cyberattacks.Credit: Getty Images
“Involving senior Australians in volunteer cyber forces may facilitate digital inclusion and digital innovation, help seniors stay mentally active, and have a favourable impact on our societal cohesion.”
Beyond data breaches, Australian defence agencies are also scrambling to fight false information aimed at undermining social cohesion.
Senior Australians could also help combat those issues, Svasntesson said, and could contribute through making edits on Wikipedia or reporting misinformation on social media platforms, for example.
“Anyone with time, patience, and basic computer literacy can play a role in information warfare,” he said. “We’ve seen it happen with public health issues such as vaccination, with immigration and representative democracy.
“This state of constant hybrid warfare by those who wish to do us harm is not a temporary inconvenience. It is a persistent and serious threat to Australia, our democracy, and our way of life.”
Jamieson O’Reilly, a researcher who runs cybersecurity outfit Dvuln, welcomed the ideas. Credit: Dominic Lorrimer
The report also recommends expanding the role of existing youth defence networks such as army and air force cadets into cyber defence, free cyber training for the public and looking at how resources such as libraries could play a role.
Australia should also consider developing a dedicated national app to improve communication with the population during crisis or war, Svantesson said.
The ideas have been welcomed by people within Australia’s cybersecurity sector, including Jamieson O’Reilly, a researcher who runs cybersecurity company Dvuln.
O’Reilly welcomed in particular the idea of expanding the army and air force cadet programs to include cyber defence.
“Constant exposure to real-world threats builds an understanding and awareness that would be foolish not to harness,” he said.
“Looking at countries like South Korea and Israel, it’s pretty well documented that their youth grow up highly involved and aware of cyber risk because of the constant and publicly observable examples of nation-state motivated hacks. In my opinion, that exposure drives earlier engagement, stronger awareness and a more capable pipeline of talent.”
The Defence Department has been contacted for comment.
Svantesson said the challenges of online warfare affected the whole of society and therefore required a whole-of-society response.
“We need to strengthen our deterrence, protection and resilience in the cyber environment. Our ability to do so could be what helps prevent a military confrontation and maintain peace in our region.”
The Business Briefing newsletter delivers major stories, exclusive coverage and expert opinion. Sign up to get it every weekday morning.