Cyber Security Problems, Issues and Challenges Management In India

In this guest column, Perry4Law Techno Legal Base (PTLB) has discussed the Indian Cyber Security Problems, Issues and Challenges Management. The article is a very comprehensive literature on cyber security problems and challenges of India. The article has been reproduced with approval from PTLB so that all the cyber security stakeholders of India may be benefited form the same.  

Cyber security initiatives of India have started gaining momentum. However, cyber security initiatives in India in India are still deficient on many aspects. After all, managing India’s cyber security problems, issues and challenges is not an easy task. In these circumstances establishment of the national cyber security database of India (NCSDI) assumes great cyber security significance. The cyber security research and development centre of India (CSRDCI) is also a timely initiative.

Undoubtedly, there are many cyber security issues of India that have still been left unattended. The cyber security issues and challenges in India require urgent attention of Indian government as we have already delayed this process.

India is facing cyber threats from cyber terrorism, cyber warfare, cyber espionage, etc and we must develop both offensive and defensive cyber security capabilities in India. India is also facing continuous and serious cyber threats that have been endangering the critical infrastructures of India. In these circumstances, there is an urgent need to strengthen critical infrastructure protection in India. We cannot achieve this task without ensuring cyber security skills development in India.

Concerns regarding insufficient cyber security in India have been raised for long but the Indian government remained indifferent to cyber security of India for long. However, some committed and dedicated private players have been playing a pro active role in strengthening the cyber security of India.

We at Perry4Law, PTLB and Perry4Law Techno Legal ICT Training Centre (PTLITC) have launched exclusive techno legal Cyber Forensics Research Centre Of India, Cyber Security Research Centre Of India And Cyber Crimes Investigation Centre Of India To Strengthen Indian Cyber Security And Cyber Forensics Capabilities.

Another major lacuna in the cyber security field is absence of implementable cyber security policy of India. Till various cyber security declarations and promises are actually implemented, they are of no use. As on date we have no implementable national cyber security policy of India.

Even basic level techno legal frameworks are missing in India. For instance, we have no dedicated cyber security laws in India. We also do not have dedicated encryption laws and regulations in India. Even Legal Framework For Mandatory E-Governance In India And Legal Framework For Cloud Computing In India are missing. The Mandatory E-Delivery Of Services In India is also missing.

India has to cover a long road in order to make its cyber security effective. It is high time to move beyond declarations and promises as they would not serve any purpose in the present times.

Cyber Terrorism In India And Its Preparedness

Cyber terrorism in India is no more a new concept. India has been facing constant cyber security attacks. Further, cyber terrorism attacks are also common in Indian cyberspace though their execution and detection is by and large unnoticeable and undetected in India.

Cyber terrorism is becoming a big nuisance for India and India has to be technologically as well as legally sound to tackle the same. There is an emergent need to amend the cyber law of India, i.e. Information Technology Act, 2000 (IT Act, 2000) in this regard as a single provision is not sufficient as per the cyber law experts.

Even there is no national ICT crisis management plan of India that is addressing the menace of cyber terrorism in India. The critical infrastructure of India has become vulnerable due to inadequate cyber security. This vulnerability can not only be exploited by cyber criminals but also be the cyber terrorists.

Securing the critical national infrastructure of India from cyber attacks should be a priority area for India. This requires formulating a cyber security policy of India that is presently missing. Without a cyber security policy and strategy of India, the cyber security initiatives of India are directionless.

Even there is no legal framework for cyber security in India. By incorporating a few ineffective and irrelevant provisions in the IT Act 2000, Indian government thinks that it has the cyber security law in India.

In fact, cyber terrorism preparedness must be an essential part of the homeland security of India. Homeland security of India must be strengthened and in order to do so we must take care of issues like cyber law, cyber security, cyber espionage, cyber terrorism, cyber warfare, etc.

Homeland Security is in infancy stage in India, says Praveen Dalal, Managing Partner of Perry4Law and leading techno legal expert of India. Further, India also needs a separate Framework for Cyber Security, Critical Infrastructure Protection (CIP), Cyber Terrorism, Cyber Warfare, Homeland Security issues, etc suggest Praveen Dalal.

Clearly, India has not yet taken enough initiatives to tackle the menace of cyber terrorism. Lack of legislative skills seems to be the main reason why India is running short of good and effective cyber legislations.

India must urgently enact a suitable cyber security policy and homeland security that clearly demarcates its preparedness to deal with growing menace of cyber attacks and cyber terrorism activities against India.

Securing Critical National Infrastructure From Cyber Attack

Cyber security in India has started gaining attention of Indian government. However, the cyber security initiatives of Indian government are still far from satisfactory. We do not have a cyber security policy in India that clearly stipulates the cyber security strategy of India.

Cyber security of India is also an essential part of National ICT Policy and Strategy of India. However, despite some very good suggestions by experts, India has not taken cyber security seriously. On the other hand, the International Community is focusing really hard to make cyber security an essential part of their day to day lives.

Internationally, it is an accepted fact that to ensure effective cyber security, there must be a coordinated and collaborative approach, metrics and assessment tools must be developed, an effective legal and policy framework for security must be created and the human dimension of security must be addressed.

Although there are numerous aspects of Cyber Security Policy of India yet Critical Infrastructure Protection in India is one of the most important aspects of the same, informs Praveen Dalal, leading techno legal expert of India and managing partner of New Delhi based techno legal law firm Perry4Law. The Critical National Infrastructure of India is under constant cyber attacks and India must urgently do something in this regard, informs Dalal.

Experts like Praveen Dalal also feel that India does not have strong and effective cyber laws to deal with issue pertaining to Critical Infrastructure. India is blind towards cyber law, cyber security and cyber forensics requirements. The IT Act, 2000 is a poorly drafted law and badly implemented legislation. It is weak and ineffective in dealing with growing Cyber Crimes in India as it is the most Soft and Cyber Criminal Friendly Legislation of the World.

Thus, on all the fronts of policy, legal framework and effective cyber security initiatives, India has failed to give proper attention. In these circumstances, critical national infrastructures of India are at grave cyber security risks. They are vulnerable to cyber threats and cyber attacks. India must urgently do something in this regard as soon as possible.

India Is A Sitting Duck Says NTRO

The government of India (GOI) is least bothered about cyber security in India and critical infrastructure protection in India. According to Praveen Dalal, the leading techno-legal expert of India, we must pay more attention towards securing India’s cyberspace not only from internal but also external threats. Now even NTRO has admitted that India needs to have a dedicate cyber security organisation.

There is nothing to stop China, unless India develops its own tools for cyber warfare, National Technical Research Organisation (NTRO), the agency principally involved with investigating the depth of the damage caused by Chinese hackers, has warned. The Chinese hacking force uses malware, spyware, key loggers, trojans, bots and malicious code generators to break into Indian computers, copy documents, ex-filtrate sensitive material and bug classified correspondence. Without a dedicated Indian cyber-security organisation, this country will remain a sitting duck.

Indian National Security And Information Warfare

Recently it was reported that Chinese crackers have compromised many top secret military files of Indian defence ministry and embassies around the world. Cyber security is very important to protect businesses, governments and general public at large. The same must be a part of the national policy of a nation. Another crucial aspect related to a secure and strong cyber security in India pertains to critical ICT infrastructure protection in India. Critical infrastructure is becoming increasingly dependent upon ICT these days. If we are unable to secure an ICT system we are also risking critical ICT infrastructure as well. India must do something as soon as possible to prevent further damage.

Information Warfare and Cyber Terrorism are issues that cannot be taken lightly by any country. From these threats emerge the necessity of having a robust cyber security for defense forces in India. These issues are important as they strike at the very root of the critical ICT infrastructure protection in India. However, India is not doing the needful in this regard. Cyber War Capabilities should be an Integral Part of Indian National Defense and Security says India’s leading Techno-Legal Expert Praveen Dalal.

Today countries all over the World are actively engaged in some form or other of Cyber war/Information warfare. For instance, the US Air Force has had Information Warfare Squadrons since the 1980s. In fact, the official mission of the US Air Force is now, "To provide sovereign options for the defense of the United States and its global interests. To fly and fight in Air, Space, and Cyberspace", with the latter referring to its Information Warfare role.

As the Air Force often risks aircraft and aircrews to attack strategic enemy communications targets, remotely disabling such targets using software and other means can provide a safer alternative. In addition, disabling such networks electronically (instead of explosively) also allows them to be quickly re-enabled after the enemy territory is occupied. Similarly, counter information warfare units are employed to deny such capability to the enemy. The first application of these techniques was used against Iraqi communications networks in the first Gulf War.

Also during the 1991 Gulf War, Dutch hackers stole information about U.S. troop movements from U.S. Defense Department computers and tried to sell it to the Iraqis, who thought it was a hoax and turned it down. In January 1999, U.S. Air Intelligence computers were hit by a coordinated attack, part of which appeared to come from Israeli and French hacking. These are some of the examples how Internet is becoming an essential part of modern warfare.

According to Praveen Dalal, Managing Partner of Perry4Law and the leading Techno-Legal Expert of India, “India needs a sophisticated and robust technological command centre to defend its global network of computer systems. It must develop both offensive and defensive capabilities under one roof. Strategic information and tactical inputs are essential part of modern warfare that can be lost or gained through Cyber war methods”.

There is no doubt that India needs good cyber war capabilities to meet the growing threats of information warfare. It would be a good idea to have a “Centralised ICT Command Center” in this regard as suggested by Perry4Law for intelligence agencies of India.

SOURCE: ITVOIR

Indian Secret Defence Documents Compromised

Recently it was reported that Chinese crackers have compromised many top secret military files of Indian defence ministry and embassies around the world. Cyber security is very important to protect businesses, governments and general public at large. The same must be a part of the national policy of a nation. Another crucial aspect related to a secure and strong cyber security in India pertains to critical ICT infrastructure protection in India. Critical infrastructure is becoming increasingly dependent upon ICT these days. If we are unable to secure an ICT system we are also risking critical ICT infrastructure as well. India must do something as soon as possible to prevent further damage.

Techno-Legal Cyber Security Is Needed In India

Cyber security in India is not in a good shape. India is on the verge of a technology revolution and the driving force behind the same is the acceptance and adoption of Information and Communication Technology (ICT) and its benefits. This technology revolution may, however, fail to bring the desired and much needed result if we do not adopt a sound and country oriented e-governance policy. A sound e-governance policy presupposes the existence of a sound and secure e-governance base as well. The security and safety of various ICT platforms and projects in India must be considered on a priority basis before any e-governance base is made fully functional. This presupposes the adoption and use of security measures more particularly empowering judiciary and law enforcement manpower with the knowledge and use of cyber forensics and digital evidencing, says India’s leading techno-legal expert Praveen Dalal.

India cannot achieve a good cyber security till it takes care of both technical as well as legal aspects of cyber security. There is no doubt about the proposition that Indian Parliament is not technology sound and we need to empower it through ICT. At the same time we must also train the governmental officials holding key positions in crucial ministries and departments about basic technology, cyber law and cyber security. These individuals must be trained suitably so that cyber security of crucial systems may not be compromised.

Cyber security is very important to protect businesses, governments and general public at large. The same must be a part of the national policy of a nation. Another crucial aspect related to a secure and strong cyber security in India pertains to critical ICT infrastructure protection in India. Critical infrastructure is becoming increasingly dependent upon ICT these days. If we are unable to secure an ICT system we are also risking critical ICT infrastructure as well.

On the one hand India has a weak and criminal friendly cyber law whereas on the other hand it does not possess tech-savvy law enforcement machinery. Even lawyers and judges are not that much aware about the nitty-gritty of cyber laws. It is high time for India to take some serious steps towards not only making the cyber law of India stronger but also to streamline cyber security of India.

AUTHOR: RAM K KAUSHIK

SOURCE: ITVOIR

Indian National Security Needs Information Warfare Capabilities

Information Warfare and Cyber Terrorism are issues that cannot be taken lightly by any country. From these threats emerge the necessity of having a robust cyber security for defense forces in India. These issues are important as they strike at the very root of the critical ICT infrastructure protection in India. However, India is not doing the needful in this regard. Cyber War Capabilities should be an Integral Part of Indian National Defense and Security says India’s leading Techno-Legal Expert Praveen Dalal.

Today countries all over the World are actively engaged in some form or other of Cyber war/Information warfare. For instance, the US Air Force has had Information Warfare Squadrons since the 1980s. In fact, the official mission of the US Air Force is now, "To provide sovereign options for the defense of the United States and its global interests. To fly and fight in Air, Space, and Cyberspace", with the latter referring to its Information Warfare role.

As the Air Force often risks aircraft and aircrews to attack strategic enemy communications targets, remotely disabling such targets using software and other means can provide a safer alternative. In addition, disabling such networks electronically (instead of explosively) also allows them to be quickly re-enabled after the enemy territory is occupied. Similarly, counter information warfare units are employed to deny such capability to the enemy. The first application of these techniques was used against Iraqi communications networks in the first Gulf War.

Also during the 1991 Gulf War, Dutch hackers stole information about U.S. troop movements from U.S. Defense Department computers and tried to sell it to the Iraqis, who thought it was a hoax and turned it down. In January 1999, U.S. Air Intelligence computers were hit by a coordinated attack, part of which appeared to come from Israeli and French hacking. These are some of the examples how Internet is becoming an essential part of modern warfare.

According to Praveen Dalal, Managing Partner of Perry4Law and the leading Techno-Legal Expert of India, “India needs a sophisticated and robust technological command centre to defend its global network of computer systems. It must develop both offensive and defensive capabilities under one roof. Strategic information and tactical inputs are essential part of modern warfare that can be lost or gained through Cyber war methods”.

There is no doubt that India needs good cyber war capabilities to meet the growing threats of information warfare. It would be a good idea to have a “Centralised ICT Command Center” in this regard as suggested by Perry4Law for intelligence agencies of India.

SOURCE: ITVOIR

India Needs Good Cyber War Capabilities

Cyber War and Cyber Terrorism are matters of grave concern to all countries. Equally important are the issue pertaining to cyber security of defense forces in India. These issues are important as they strike at the very root of the critical ICT infrastructure protection in India. While countries like US and Russia are negotiating to limit the impact of cyber wars, India is not doing the needful in this regard. Cyber War Capabilities should be an Integral Part of Indian National Defense and Security says India’s leading Techno-Legal Expert Praveen Dalal.

The military version of cyber war has the potential to be as serious as a nuclear war in terms of creating chaos. It could crash power and water supplies, as well as trashing the global financial systems and information systems. Russia is in favour of an internet disarmament treaty, but the practical aspects are tougher than nukes ever were.

Malware are posing significant threat to India yet there is no attention towards cyber security in India. For instance, we need express provisions and specified procedures to deal with issues like denial of service (DOS), distributed denial of services (DDOS), bot, botnets, trojans, backdoors, viruses and worms, sniffers, SQL injections, buffer overflows etc. Till now India has done nothing in this crucial direction.

India is also suffering from the menaces of cyber war and cyber terrorism. Nobody cares about any these threats in India. Media reports claim that China’s intensified cyber warfare against India is becoming a serious threat to national security. In October 2007, Chinese hackers defaced over 143 Indian websites.

In April 2008, Indian intelligence agencies detected Chinese hackers breaking into the computer network of the Ministry of External Affairs forcing the government to think about devising a new strategy to fortify the system.

As a countermeasure, the Indian armed forces are trying to enhance their C4ISR capabilities, so that the country can launch its own cyber offensive if the need arises.

Similarly, Pakistan is taking steps to intensify its cyber war propaganda against India with the help of its intelligence outfit, the ISI by carrying reports of alleged communal fissures taking place on the Indian side of Kashmir. Issues like these have to be resolved as well.

India must immediately start working upon the issues like cyber war, cyber terrorism, critical infrastructure protection, etc in the larger national interest and national security.

SOURCE: MYNEWS

US and Russia Wish To Curb Cyber War

Cyber War and Cyber Terrorism are matters of grave concern to all countries. Equally important are the issue pertaining to cyber security of defense forces in India. These issues are important as they strike at the very root of the critical ICT infrastructure protection in India. While countries like US and Russia are negotiating to limit the impact of cyber wars, India is not doing the needful in this regard.

The military version of cyber war has the potential to be as serious as a nuclear war in terms of creating chaos. It could crash power and water supplies, as well as trashing the global financial systems and information systems. Russia is in favour of an internet disarmament treaty, but the practical aspects are tougher than nukes ever were.

Malware are posing significant threat to India yet there is no attention towards cyber security in India. For instance, we need express provisions and specified procedures to deal with issues like denial of service (DOS), distributed denial of services (DDOS), bot, botnets, trojans, backdoors, viruses and worms, sniffers, SQL injections, buffer overflows etc. Till now India has done nothing in this crucial direction.

India is also suffering from the menaces of cyber war and cyber terrorism. Nobody cares about any these threats in India. Media reports claim that China’s intensified cyber warfare against India is becoming a serious threat to national security. In October 2007, Chinese hackers defaced over 143 Indian websites.

In April 2008, Indian intelligence agencies detected Chinese hackers breaking into the computer network of the Ministry of External Affairs forcing the government to think about devising a new strategy to fortify the system.

As a countermeasure, the Indian armed forces are trying to enhance their C4ISR capabilities, so that the country can launch its own cyber offensive if the need arises. Similarly, Pakistan is taking steps to intensify its cyber war propaganda against India with the help of its intelligence outfit, the ISI by carrying reports of alleged communal fissures taking place on the Indian side of Kashmir. Issues like these have to be resolved as well.

India must immediately start working upon the issues like cyber warm, cyber terrorism, critical infrastructure protection, etc in the larger national interest and national security.

SOURCE: GROUND REPORT

Cyber Security For Cyber Terrorism In India

Cyber security is very important to protect businesses, governments and general public at large. The same must be a part of the national policy of a nation. Unfortunately, cyber security in India is an ignored world. There are many factors that are ailing cyber security in India.

In the Indian context, we have a very weak cyber law, negligible cyber security and cyber forensics and almost missing legal enablement of ICT systems. In fact legal enablement of ICT in India is in doldrums.

The already weak cyber law of India has further been degraded by the recent amendment through Information Technology Act, 2008. The position is even worst when it comes to wireless security in India. Wireless security has become a headache due to its misuse by terrorists in India.

A weak cyber security policy in India is also resulting in increased cyber terrorism activities in India. We have to device methods to tackle cyber terrorism in India. Cyber law of India is incorporated in the Information Technology Act 2000. The same has to be suitably amended to keep itself updated of the contemporary needs.

Another crucial aspect related to a secure and strong cyber security in India pertains to critical ICT infrastructure protection in India. Critical infrastructure is becoming increasingly dependent upon ICT these days. If we are unable to secure an ICT system we are also risking critical ICT infrastructure as well. India must address these issues as soon as possible in the largest interests of all concerned.

SOURCE: GROUND REPORT

Indian National ICT Crisis Management Plan

The government of India (GOI) has accepted one more suggestion of Praveen Dalal, Managing Partner of Perry4Law and the Leading Techno-Legal Expert of India. It has recently finalised a “National Crisis Management Plan”, in a bid to protect IT infrastructure in critical sectors such as petroleum, aviation, banking, power and telecom.

This plan is in conformity with the suggestions of Praveen Dalal regarding protecting critical ICT infrastructure of India as well as formulating good crisis management plan for India. The details of the plan are still awaited but it would require tremendous expertise to meet the challenging requirements of an ambitious plan like this.

However, issues of human rights in cyberspace, strong cyber law, secure e-governance base, adequate cyber security, effective cyber forensics capabilities, etc have still not been resolved by GOI. In the absence of strong cyber law and cyber security as well as inadequate e-governance infrastructure, the crisis management plan of GOI is bound to fail. Further, this ambitious plan requires domain specific techno-legal expertise that is presently missing in India.

However, at least a beginning has been made in the right direction. But only time will tell whether this would be useful initiative of just another wishful claim by the GOI.

SOURCE: ITVOIR