Professional Documents
Culture Documents
7/14/13
Asia and South Asia would seem to bear this out, especially with regard to why such attacks have not crossed any red lines, despite threats to bring down the financial systems and so on. The near equivalence of hackers in the countries of South Asia would point to a low level form of deterrence in existence. Nearly all upswings in defacements and hacking, which normally follow a tit-for-tat pattern, have ended in truces being called by the hackers on various sides. The invisible hand of the intelligence agencies has been seen to be present wherever in the world patriotic hacking has taken place, and South Asia would be no exception. That there have not been any major incidents of hacking ascribed to hackers in the sub-continent despite the low levels of computer security would lead one to speculate that these agencies have had a restraining effect on such activities. That said, the scope for losing control is quite high, especially as more and more critical services go online and become potential targets. One of the biggest drawbacks to securing cyberspace in the Indian context is the lack of adequate data. Whatever data is available does not adequately convey the full picture, or worse, can be misleading. Skewed data also results in skewed priorities; the continued highlighting of website hackings leads to a great deal of time being spent on securing government websites, irrespective of their importance, at a time when greater attention should be paid to other facets of cyber security such as securing critical infrastructure or auditing the cyber security preparedness of companies in critical sectors. To illustrate, according to the annual report of the National Crime Records Bureau, cyber-related crimes were a mere 1,322 in 2010, making up 0.19 per cent of all crimes in the country. At the same time, according to figures from the Reserve Bank of India as recently reported to Parliament, the total amount involved in cases of financial fraud over the Internet in 2011 was Rs.787.39 lakh or US $1.6 million. And finally, according to the Computer Emergency Response Team-India (CERT-In), 13,301 security incidents were reported to it in 2011. While these indices have been monitored over the past few years and provide a general idea of the upward trend in cyber-related incidents, they do not lend themselves easily to further analysis in the absence of more detailed data. For instance, in the case of financial fraud, it would be useful to know whether these were perpetrated by exploiting technical vulnerabilities or through other means such as social engineering, or by a combination of the two. The absence of more precise figures creates an information gap between the various stakeholders, be it the government, the various service providers primarily in the private sector, and the end users of these services. Much of the data lies with different organisations and is not available in the public domain. With cyber infrastructure and data largely in the hands of the private sector, there needs to be much more by way of standardisation and sharing of data between the government and the private critical information infrastructure companies such as the Internet Service Providers. These issues highlight the complex and inter-connected challenges in cyber security, and demonstrate how the short sighted approach towards these challenges is taking us further away from the oft-vaunted goals of an open, secure and stable cyberspace.
Source URL: http://idsa.in/idsacomments/EmergingTrendsinCyberSecurity_csamuel_280312
www.idsa.in/idsacomments/EmergingTrendsinCyberSecurity_csamuel_280312?q=print/8927
2/3
7/14/13
www.idsa.in/idsacomments/EmergingTrendsinCyberSecurity_csamuel_280312?q=print/8927
3/3