Critical ICT Infrastructure Protection In India

Critical ICT infrastructure protection (CIIP) is becoming more and more crucial these days. The reason is very simple to understand. These days many crucial functions of private and government are essentially connected with the computers and computers systems. If these computers or computer systems are compromised, much damage can be done to the country where such breach has occurred.

Although the importance of CIIP is well understood by India yet it has not taken any active steps in this regard. There is neither a cyber security policy of India nor is there any strategy in this regard. Even there is absence of basic level of cyber security training in India and cyber security research and development in India.

Till now we have just one techno-legal cyber security research and training centre in India (CSRTCI). The same is managed by Perry4Law, the exclusive techno-legal firm of India. The CSRTCI has been managing the techno-legal aspects of cyber security for long. Some of the areas of its specialisation pertain to cyber law, cyber security, cyber forensics, cyber war, cyber terrorism, cyber espionage, corporate espionage, critical ICT infrastructure protection, CCTNS, Natgrid, NCTC, etc.

However, CSRTCI is also a part of much larger and highly specialised initiative providing protection to human rights in cyberspace. The human rights initiative is also the exclusive initiative providing techno-legal measures and remedies against cyber terrorism in India and cyber war in India.

Except this private initiative, there is no other initiative that is providing techno-legal solutions against cyber terrorism, cyber war, cyber espionage, etc. Sooner or later India would also need to take measures to protect CIIP.

India Is A Sitting Duck Says NTRO

The government of India (GOI) is least bothered about cyber security in India and critical infrastructure protection in India. According to Praveen Dalal, the leading techno-legal expert of India, we must pay more attention towards securing India’s cyberspace not only from internal but also external threats. Now even NTRO has admitted that India needs to have a dedicate cyber security organisation.

There is nothing to stop China, unless India develops its own tools for cyber warfare, National Technical Research Organisation (NTRO), the agency principally involved with investigating the depth of the damage caused by Chinese hackers, has warned. The Chinese hacking force uses malware, spyware, key loggers, trojans, bots and malicious code generators to break into Indian computers, copy documents, ex-filtrate sensitive material and bug classified correspondence. Without a dedicated Indian cyber-security organisation, this country will remain a sitting duck.

Cyber Security Initiatives Of Home Ministry Of India Are Insufficient

Cyber security in India has always remained an “ignored world” and the same must be strengthened as soon as possible. India is also suffering from the menaces of cyber war and cyber terrorism. Nobody cares about any of these threats in India. In April 2008, Indian intelligence agencies detected Chinese hackers breaking into the computer network of the Ministry of External Affairs. Similarly, for about 3 months the e-mail communications from PMO got affected as the e-mail system was affected by a virus program. With the highest offices of India being so indifferent and adopting wrong cyber security strategies not much can be expected in this crucial direction in future as well.

Recently it was reported that the Chinese intelligence agencies may have planted computer malware and broken into the headquarters of 33 Corps, the army formation looking after most of the north-eastern border with China. The break-in included the planting of trojan viruses which may have given Chinese operatives remote access to the computer network at the 33 Corps headquarters in Sukhna, near Siliguri, West Bengal.

The Union Home Ministry is considering the option to ban the use of Internet by the lower rank staff up to section officers. Many computers of the Home Ministry were found infected with different kinds of computer viruses. However, does this step increase the cyber security of Indian offices?

According to Praveen Dalal, Managing Partner of Perry4Law and the leading Techno-Legal Expert of India, “Home Ministry is barking the wrong tree as security through obscurity and non-access in itself and without further steps is a bad choice. The Government of India must concentrate upon “Capacity Development” of not only its employees but also its core Departments and Offices”.

Another crucial aspect related to a secure and strong cyber security in India pertains to critical ICT infrastructure protection in India. Critical infrastructure is becoming increasingly dependent upon ICT these days. If we are unable to secure an ICT system we are also risking critical ICT infrastructure as well, says Praveen Dalal.

Indian government must concentrate upon many crucial aspects of cyber security. The task is difficult and time consuming hence it must start seeking the help of the right and capable manpower as soon as possible.

SOURCE: ITVOIR