CYBER THREAT FROM IMPORTED DEFENSE SYSTEM

India faces major cyber security from imported defense products which are with snooping virus and malwares. Equipment like C-17 and C-130J super Hercules aircraft are brought from US and India has no control over the same as most foreign countries do not provide source code for the equipment. There is need to ensure that the hackers are not able to target the “critical core systems”.

Some measures:

• Guidelines to protect systems against subversion and requires new paradigm in purchase processes.
• DRDO developing cyber technology tools and also taken installation work of controlled networks and securing local networks. It is working on own security mobile system, development of Avdhani processors and developing its own routers operating systems and analysis systems.
• The defence forces on their part have adopted information warfare doctrines, which include information security as vital element.
• Development of ‘TRINETRA’ an encryption system for secure communication by Indian navy in collaboration with IIT Kanpur.
• The dilemma of selecting an appropriate vendor has been to a large extend addressed by CII online defence directory- a web based listing of Indian software related systems and applications.
• The private companies offer a wide base of security solutions ranging from security auditing and consulting to implementation of solution like firewalls, encryption technology and intrusion detection devices.

Holistic approach to address the issue:

• Legislation- need to identify the minimum critical information infrastructure and secure it with utmost resolve. Critical areas include- Banking, finance, energy, transportation (railways, NHAI, civil aviation), defence, telecommunication, vital public conveniences.

A national strategy should issue guidelines and determine mandatory practices for government, defence, industry and individuals.

• Policy- Information shall be categorized. Restricting access to internet and relying on isolated frame computers to store vital information resources.
• Technology- Customized security solutions comprising smart cards, firewalls, intrusion detection devices, encryption algorithms, biometric systems.