Securing Critical National Infrastructure From Cyber Attack

Cyber security in India has started gaining attention of Indian government. However, the cyber security initiatives of Indian government are still far from satisfactory. We do not have a cyber security policy in India that clearly stipulates the cyber security strategy of India.

Cyber security of India is also an essential part of National ICT Policy and Strategy of India. However, despite some very good suggestions by experts, India has not taken cyber security seriously. On the other hand, the International Community is focusing really hard to make cyber security an essential part of their day to day lives.

Internationally, it is an accepted fact that to ensure effective cyber security, there must be a coordinated and collaborative approach, metrics and assessment tools must be developed, an effective legal and policy framework for security must be created and the human dimension of security must be addressed.

Although there are numerous aspects of Cyber Security Policy of India yet Critical Infrastructure Protection in India is one of the most important aspects of the same, informs Praveen Dalal, leading techno legal expert of India and managing partner of New Delhi based techno legal law firm Perry4Law. The Critical National Infrastructure of India is under constant cyber attacks and India must urgently do something in this regard, informs Dalal.

Experts like Praveen Dalal also feel that India does not have strong and effective cyber laws to deal with issue pertaining to Critical Infrastructure. India is blind towards cyber law, cyber security and cyber forensics requirements. The IT Act, 2000 is a poorly drafted law and badly implemented legislation. It is weak and ineffective in dealing with growing Cyber Crimes in India as it is the most Soft and Cyber Criminal Friendly Legislation of the World.

Thus, on all the fronts of policy, legal framework and effective cyber security initiatives, India has failed to give proper attention. In these circumstances, critical national infrastructures of India are at grave cyber security risks. They are vulnerable to cyber threats and cyber attacks. India must urgently do something in this regard as soon as possible.

Cyber Security Initiatives Of Home Ministry Of India Are Insufficient

Cyber security in India has always remained an “ignored world” and the same must be strengthened as soon as possible. India is also suffering from the menaces of cyber war and cyber terrorism. Nobody cares about any of these threats in India. In April 2008, Indian intelligence agencies detected Chinese hackers breaking into the computer network of the Ministry of External Affairs. Similarly, for about 3 months the e-mail communications from PMO got affected as the e-mail system was affected by a virus program. With the highest offices of India being so indifferent and adopting wrong cyber security strategies not much can be expected in this crucial direction in future as well.

Recently it was reported that the Chinese intelligence agencies may have planted computer malware and broken into the headquarters of 33 Corps, the army formation looking after most of the north-eastern border with China. The break-in included the planting of trojan viruses which may have given Chinese operatives remote access to the computer network at the 33 Corps headquarters in Sukhna, near Siliguri, West Bengal.

The Union Home Ministry is considering the option to ban the use of Internet by the lower rank staff up to section officers. Many computers of the Home Ministry were found infected with different kinds of computer viruses. However, does this step increase the cyber security of Indian offices?

According to Praveen Dalal, Managing Partner of Perry4Law and the leading Techno-Legal Expert of India, “Home Ministry is barking the wrong tree as security through obscurity and non-access in itself and without further steps is a bad choice. The Government of India must concentrate upon “Capacity Development” of not only its employees but also its core Departments and Offices”.

Another crucial aspect related to a secure and strong cyber security in India pertains to critical ICT infrastructure protection in India. Critical infrastructure is becoming increasingly dependent upon ICT these days. If we are unable to secure an ICT system we are also risking critical ICT infrastructure as well, says Praveen Dalal.

Indian government must concentrate upon many crucial aspects of cyber security. The task is difficult and time consuming hence it must start seeking the help of the right and capable manpower as soon as possible.

SOURCE: ITVOIR