Offensive And Defensive Cyber Security Capabilities Of India

There are many glaring cyber security problems of India and challenges and the chief among them is to protect the critical infrastructure of India that is dependent upon information technology. Cyber security issues in India like cyber warfare, cyber terrorism, cyber espionage, critical infrastructure protection, etc cannot be ignored by Indian government any more.

The cyber security reflections of India have not shown a good picture about India. We have no dedicated cyber security laws in India as well. Indian critical infrastructures are vulnerable to cyber attacks and we must ensure sufficient cyber security for the same. We at Perry4Law Techno Legal Base (PTLB) are managing some very effective techno legal cyber security in initiatives in India.

These include cyber security research and development centre of India (CSRDCI), national cyber security database of India (NCSDI), cyber forensics research centre of India, cyber crime investigation centre of India, cyber security centre of India, etc. These initiatives intend to strengthen the cyber security capabilities of India and resolve the cyber security issues and problems in India.  

Maintaining cyber security at the international level is a tedious task. This is so because cyberspace does not recognizes any boundary and cyber attacks can be launched from any part of the world. While cyber attacks upon various computer systems and computer resources are cause of concern yet cyber attacks upon critical infrastructures is of grave concern.

Meanwhile, India is increasingly facing cyber attacks and cyber threats from foreign nationals. Cyber terrorism against India, cyber warfare against India, cyber espionage against India and cyber attacks against India has already increased a lot. Even the cyber law trends of India 2012 by various sources have also projected an increased rate of cyber crimes in India and cyber attacks against India in the year 2012.

The biggest cyber threat against India is originating in the form of cyber attacks upon Indian critical infrastructures. Critical infrastructure protection in India requires a well formulated policy. Presently we have no critical infrastructure protection policy of India. Further, critical ICT (Information and Communication Technology) infrastructure protection in India  is one area that requires special attention of Indian government.

In the present interconnected world, cyber security capabilities of India must be urgently developed. In fact, Indian critical infrastructure and cyber security challenges and issues have assumed so much significance that Indian government declared the establishment of National Critical Information Protection Centre (NCIPC) of India. It intends to ensure critical infrastructure protection and critical ICT infrastructure protection in India. 

This is a good beginning and we at PTLB welcome this initiative of Indian government. At the same time we would keep on strengthening the techno legal cyber security capabilities of India from time to time.  

Why Indian Critical Infrastructure Are Vulnerable To Cyber Attacks?

In the present interconnected world, cyber security capabilities of India must be urgently developed. In fact, Indian critical infrastructure and cyber security challenges and issues have assumed so much significance that Indian government declared the establishment of National Critical Information Protection Centre (NCIPC) of India.

The best way to ensure critical infrastructure protection in India is to make it a part of national cyber security policy of India. Various cyber security issues of India must also be part of such cyber security policy of India. Further, besides energy, defense, transportation and telecommunication, the financial sector which includes banks and stock exchanges must be suitably protected in India. Unfortunately, till now cyber security challenges of India remain unredressed.

The reliance of consumers and businesses on the cyberspace and interconnected networks would continue to increase. Critical industries like electric, water, oil and natural gas, transportation, automotive, and aerospace are increasingly dependent upon Industrial Control Systems like Supervisory Control And Data Acquisition (SCADA).

In fact, SCADA has become the new cyber attacks battlefield against India. An attack upon SCADA is essentially an attack upon the critical infrastructure of a nation. The SCADA systems may involve a human machine interface (HMI), a supervisory system managing the processes, remote terminal units (RTUs) interacting with the supervisory systems, programmable logic controller (PLCs) usable as field devices, etc.

Initially, running on proprietary control these have evolved with the availability of low-cost Internet Protocol (IP) devices, thus increasing the possibility of cyber security vulnerabilities and incidents.

The arrival of technology and augmented accessibility of broadband connectivity together with smart phones have eased the way in which consumer interacts and transacts online. Moreover, with the mass use of e-governance applications under the mission mode projects (MMPs) where citizen services are being provided online, human rights protection in cyberspace of digital citizens (netizens) must be ensured. This has resulted in the emergence of some very unique “Digital Issues” that were not available before the traditional governmental functioning.

Businesses are trying to cater this digital citizen by providing a whole host of applications operating at various platforms through various channels. Cyber security of these platforms, channels and applications are utmost important for the government and industry to ensure trust in the customer.

We must focus on the national cyber security elements- Framework, Machinery, Responsibility and Operations for all the critical information sectors like power, energy and finance. Suitable deliberations must take place with cyber security stakeholders of India on operating technologies like smart grid and industrial control system; the security and privacy imperatives of e-commerce, m-commerce and e-governance application and platforms. The cyber security ramifications at the global level must also be analysed. If Indian government is willing to protect t its critical infrastructures all these issues must be kept in mind.

Cyber Security In India: Its Challenges And Problems

Cyber Security in India is gaining importance day by day. However, the same is not a result of any Cyber Security Policy of India but due to the problems that India is facing. India has for long ignored Cyber Security aspect and this has caused tremendous loss to it. Now Cyber Security Problems of India have reached a stage where if immediate action is not taken, it may cause irreversible and irreparable loss to India.

The chief problem that India is facing from cyber front pertains to threats emanating form Cyber Warfare field. Cyber Warfare against India and its Defences is one area that requires special attention of our Policy Makers. We need a dedicated work force to take care of this sensitive and crucial field.

Another concern that is repeatedly conveyed to Indian Government is that Critical Infrastructure Protection in India is needed. As on date India is not vulnerable to Cyber Attacks targeting Critical Infrastructure of India. However, this is not because India has advance Critical Infrastructure Protection (CIP) Mechanism at place but because India has outdated and ancient Infrastructure at place. The moment modern and ICT enabled Infrastructure would be used by India to support its Critical Infrastructure, the problems of India would increase manifolds.

For instance, the recent power failure of India has raised concerns not only in India but also World wide. Although the power outrage was claimed to be caused due to Defective Power Infrastructure, yet even in modern Power Infrastructure such a situation can occur. Cyber Security of automated Power Grids of India has not been contemplated by Indian Government so far.

Sophisticated Malware like Stuxnet and Duqu have already proved that Critical Infrastructures around the World like Power Grids, Nuclear Facilities, Satellites, Defense Networks, Governmental Informatics Infrastructures, etc are vulnerable to diverse range of Cyber Attacks. The truth is that Cyber Attacks are affecting Indian Critical Infrastructure and we are not even aware of the same.

Another area that must be on “Priority List” of Indian Government pertains to Cyber Terrorism. Cyber Terrorism against India and its Defences and Solutions has not been developed by India so far. This must be done now to prevent any further loss due to activities of Cyber Terrorists against India.

We must develop Cyber Security Capabilities of India as soon as possible. Further, we must also keep in mind the Importance of Cyber Forensics for India. Keeping this in mind, development of suitable Cyber Forensic Investigation Solutions in India are needed to Prevent and Defend various types of Cyber Attacks.

The list is endless and this article is not intended to cover all the aspects of Cyber security Problems of India. However, the top three Cyber Security Problems of India have been discussed by me. I would discuss more in this regard in my subsequent articles.

Cyber Terrorism Against India And Its Defences And Solutions

Cyber terrorism in India is not a new concept. However, for long concepts like cyber warfare, cyber terrorism, etc were not taken seriously by Indian government. Naturally, cyber security in India also could not flourish. The cyber security capabilities of India also could not develop in such circumstances.

Techno legal experts of India have been warning against growing incidences of cyber attacks, cyber crimes, cyber espionages, etc against India. Further, the fact that critical infrastructure protection in India is needed has also been reiterated from time to time.

Sophisticated malware like Stuxnet and Duqu have already proved that critical infrastructures around the world like power grids, nuclear facilities, satellites, defense networks, governmental informatics infrastructures, etc are vulnerable to diverse range of cyber attacks. The truth is that cyber attacks are affecting Indian critical infrastructure and we are not even aware of the same.

The cyber law, cyber crimes and cyber security trends by Perry4Law and Perry4Law Techno Legal Base (PTLB) have shown the loopholes of Indian cyber security capabilities. It is high time to plug in these loopholes and deficiencies of Indian cyber security capabilities.

Menaces like cyber terrorism and cyber warfare cannot be effectively tackled till we have both offensive and defensive cyber security capabilities. Further, cyber crisis management plan of India must be urgently formulated and effectively implemented so that cyber terrorism can be prevented in India.  

These anti cyber terrorism solutions must be implemented by India as soon as possible. Cyber security skills development in India must also be ensured so that we have a skilled cyber security workforce in India.

Cyber Security In India

Cyber security in India has been increasingly seen as prerequisite to protect Indian cyberspace. However, it never remained a priority for Indian government and it always received an indifferent treatment.

Cyber security issues in India cannot be ignored in India any more. Even the Indian government has realised this bitter truth. However, this realisation has still not made much difference towards India’s approach to secure its cyberspace in general and critical infrastructure protection in particular.

The scenario has become more complicated when state actors have also joined the cyber attack scenario. In many cases cyber attacks are launched by state sponsored attackers. Such cyber attacks are more stealth and deadly in nature. At times such attacks also remain undetected for years.

The traditional methodology of securing computers by installing anti virus, firewalls and anti malware tools are also ineffective in such a situation. Although ensuring cyber security in absolute terms is next to impossible yet with patience and adequate cyber security skills development, India can develop cyber security capabilities.

There are many missing links that are hindering in the development of cyber security capabilities in India. Not only India must formulate suitable cyber security policy but India must also actually implement the same.

Cyber Security In India: Some Reflections

Cyber security in India is one of the areas that have received a low priority attention of Indian government. Early warnings regarding lack of cyber security in India were given from time to time. However, as the issue has little political significance, it always remained a non existing issue for the political community of India. Naturally, there are many missing links existing in the cyber security of India.

Meanwhile, cyber attacks against India kept on increasing. Strategic and military computers of India were targeted and successfully compromised for months till India became aware of such compromise. Cases of cyber espionage, cyber warfare and cyber terrorism also increased against India, some known and some still unknown. There is no second opinion that the cyber security capabilities of India must be strengthened.

The cyber security of Indian satellites and critical infrastructure is also required to be strengthened. An implementable critical ICT infrastructure policy of India is also required to be formulated as soon as possible. Although the establishment of a national critical information infrastructure protection centre (NCIPC) of India has been proposed, till now no such centre has been established.

The cyber laws and cyber security trends of India 2011 by Perry4Law and Perry4Law Techno Legal Base (PTLB) has clearly showed the cyber security vulnerabilities of India. The cyber law trends of India 2012 have also projected an increased rate of cyber crimes in India and cyber attacks against India in the year 2012. These projections have now come true and India has become really vulnerable to cyber crimes and cyber attacks.

While protecting its cyberspace, India must maintain a balance between national security and civil liberty protection requirements. Human rights protection in Indian cyberspace must be ensured. Even United Nations must actively come in support of human rights in cyberspace. Protecting civil liberties in cyberspace must be a top priority for UN and national governments.

With this background note, we welcome all our readers to this platform. We would cover both national and international cyber security issues, developments, policies and news at this platform. As far as possible, we would also try to add supplemental contents pertaining to cyber forensics, ICT policies, e-discovery, open source movement, cyber security trainings, etc. Thanks for showing interest in our platform and visiting this blog.