How cybersecurity could become a Danish competitive advantage
Denmark needs to do more than defend itself against cyberattacks. The ability to develop secure digital solutions could become a competitive advantage for Danish companies. In the city of Aarhus, a growing ecosystem is bringing together some of the country’s leading cybersecurity researchers with companies, startups, educational programmes - and young hackers who spend their spare time honing their skills.
They sit in front of screens, searching for flaws that everyone else has missed.
A vulnerability in a piece of software. An overlooked way into a system. Perhaps a tiny crack in the digital defences that might open the door to everything else.
When some of Europe’s most talented young cybersecurity specialists meet in Germany from 12 to 16 October for the European Cybersecurity Challenge, ECSC, finding those cracks faster than their competitors is exactly what they will be trying to do.
But the competition is also part of a much bigger story.
Europe’s digital security is not simply about keeping hackers out. It is also about having the people, research and companies capable of developing the secure digital solutions that an increasingly digital society depends on. And about creating environments where people can come together around a shared fascination with hacking and cybersecurity.
This is where Denmark may have an opportunity.
In the city of Aarhus, a major cybersecurity initiative is taking shape. Aarhus University is investing DKK 300 million in cybersecurity research, education and innovation. Across the university, researchers are working on everything from cryptography and software security to networks and complex digital systems. New educational initiatives will train more cybersecurity specialists, while companies, startups and organisations such as Security Tech Space will help turn knowledge into practical solutions.
“We already have some very strong research environments. But what is particularly interesting is that strong communities have also emerged around cybersecurity. We see that at universities, in volunteer communities and through cybersecurity competitions and the ECSC, where young people meet, compete and improve their skills together,” says Jens Myrup Pedersen, professor of cybersecurity at Aarhus University and coach of the Danish Cybersecurity Team.
In Aarhus, the links between the different parts of the cybersecurity ecosystem are becoming increasingly strong. The university contributes research, education and new talent, while companies, startups, volunteer communities, innovation environments and the City of Aarhus all contribute to developing the field in different ways.
It is through these connections that Aarhus’ cybersecurity ecosystem is beginning to take shape.
The pieces are already there
If Aarhus is to develop into a stronger international hub for cybersecurity, much of the foundation is already in place, according to Peer H. Kristensen, CEO of Security Tech Space, an innovation environment that connects companies and other players in the cybersecurity field.
In the Katrinebjerg district of Aarhus, educational programmes, research environments, talent communities, startups and companies are already located close to one another.
“We have the educational programmes, the talent and some very strong research environments here. We have the foundations for innovation and a number of companies that are either based here or have grown out of the ecosystem. In other words, many of the pieces are already in place. The crucial thing now is to connect them even more effectively,” says Peer H. Kristensen.
Those connections between different communities matter. Ivan Damgård, professor of cryptography at Aarhus University, has spent decades researching cryptography and educating researchers who have gone on to work in companies and university spinouts.
“It is important to understand that this cannot be a one-way street where knowledge simply flows from research into companies. We need dialogue, so that people learn to speak the same language and understand each other’s needs. And very often, challenges from the real world also inspire new research,” he says.
Close interaction also creates links between the young people educated at the university and new companies, including spinouts from Aarhus University.
“Talent is key. When a field develops this quickly, it is crucial that the latest knowledge from universities reaches companies rapidly and is put to use,” says Peer H. Kristensen.
From research to an international company
One example of what can emerge from this ecosystem is Coana, a company that grew out of research at the Department of Computer Science at Aarhus University.
The company develops technology that helps businesses identify security problems in the open-source components on which much of modern software is built. According to Professor Anders Møller, who co-founded Coana, its technology is now used by hundreds of major companies around the world.
For him, the company’s connection to research and the wider environment at Katrinebjerg has been essential.
“The fundamental research and the environment at Katrinebjerg have been absolutely crucial in getting Coana to where it is today. Without them, we would never have developed the technical solutions that we can now apply at this scale,” says Anders Møller.
At the same time, knowledge flows in both directions. Anders Møller remains a professor at the Department of Computer Science, and his work with the company gives him first-hand insight into the security challenges facing major IT companies. He brings that knowledge back into his research.
Coana is therefore also a concrete example of the exchange between research and industry that Ivan Damgård describes.
Denmark needs to step up
But if cybersecurity is to develop into a genuine Danish competitive strength, both Peer H. Kristensen and Anders Møller believe that more needs to be done.
Anders Møller sees Aarhus University’s new cybersecurity initiative as an important step. At the same time, he points to countries such as Sweden, Germany and France, which are investing heavily in the field.
“It is very positive that we now have initiatives such as AU Cyber. But if we genuinely want to compete internationally, we need to step up significantly,” says Anders Møller.
The point, he argues, is not that Denmark lacks expertise. On the contrary, the research environments, companies such as Coana and the young cybersecurity talents all suggest that the foundations are already there.
Back at their screens, the young cyber talents continue searching for the next crack in a digital system. Some of them may become the researchers, specialists or entrepreneurs of the future.
If cybersecurity is to develop from a necessary line of defence into a Danish competitive strength, the experience from Aarhus points to the importance of connecting precisely these people and environments: talent, research, education and companies.
“We already have many of the things we need: talented young people, strong research environments and companies looking for new knowledge. If we become even better at connecting these communities, Denmark has an opportunity to build a very strong position in cybersecurity,” says Jens Myrup Pedersen.
Contact
Professor Jens Myrup Pedersen
Department of Electrical and Computer Engineering
Mail: jensmyrup@ece.au.dk
Tel.: +4521847931
Jesper Bruun
Journalist, Aarhus Universitet
Mail: bruun@au.dk
Tel.: +4542404140
Professor Ivan Damgård
Department of Computer Science
Mail: ivan@cs.au.dk
Tel.: +4520837137
Professor Anders Møller
Department of Computer Science
Mail: amoeller@cs.au.dk
Tel.: +4523309994
CEO Peer Kristensen
Security Tech Space
Mail: peer.kristensen@securitytechspace.dk