GUEST LECTURE AT IILM, LODHI ROAD By MR.

ANIL SAGAR ON
CYBER SECURITY

July 6th 2010, Anil Sagar- Director CERT- In visited IILM, Lodhi Road campus for
enlightening the first year student(PGP 10-12) on various aspects of Network Security.
Ms. Daminni Grover, faculty of Information Technology in Business introduced the guest
to the management students.

Mr. Sagar initiated the lecture with the basic understanding of Cyber Security. He started
discussing internet infrastructure in India and around the globe and also gave the student
insight on various Internet Service Providers (ISP's) in India. He elaborated that India has
more then 150 ISP's running and the major market players are BHARTI AIRTEL,
MTNL, ERNET etc. Thereon he intimated the domain registration process in India
wherein more than 2 million domains are registered. He also discussed the working of
Internet Data Centers(IDC) and the sectors who are using it, he shared that IDC are used
by both and government and private sector companies; for instance, government uses
IDC in e-governance, hospital management services, driving licenses wherein private
sector uses IDC in IT, Ites, Telecom, Academics, Hospitals,etc.

Mr. Sagar shared, due to complexities in Indian infrastructure,we face problems in

unification of devices while using mobile phones to access information from anywhere.
He also informed the statistical usage of internet by Indian population and our country
being the 4th largest internet user in the world which contributes to 13 percent of the total
internet usage. Around the globe, the commonly accessed portals are YouTube, Google,
MSN, Yahoo, etc. He also discussed the cause of growth in cyber sector due to
innovation in smart devices that include televisions, computers, smart phones, PDA's,
cellphones, etc.

The guest speaker also made us aware about the growing concerns. Information in
Communication and Technology is not only acting as a driver but its also a threat and is
the solution eventually. Another concern is the exponential growth in security incidents
wherein rapid emergence of hacker groups are actively acting worldwide via cyber
attacks and cyber warfare as a prelude to conventional war is reality with civil and
military groups. Above iterated hackers these days are classified into two- state
sponsored and non-state sponsored.

Mr. Anil Sagar also discussed the ways a hacker commit a cyber crime. Web defacement
is one of the way which contributes about 6,000 websites per annum. Scanning-Probing
of infrastructure and denial or distributed denial of service(DOS,DDOS) are the others.
Virus, Bots and Trojans are few ways of injecting malicious codes into target systems.
Another popular way of committing cyber crime is Data theft and Data manipulation
which includes phishing(10 cases per day; 35% phishing sites belongs to banks), identify
theft(7-8 cases per day), financial frauds(ATM and internet Banking), web espionage.
Social engineering scams is also a part of the iterated above.
With comparisons to other countries, India accounts for the 5th rank in countering the
malicious attacks, reason being the unawareness among the people about security aspect
in IT and usage of pirated softwares.

We also learned that Bot-nets, majorly used malicious code is automatic and autonomous
robotically used software could be segregated under two heads- ISC based and P2P
based. A case study on ZEUS botnet was discussed wherein systems are targeted to
attack through links that opens up to malicious sites. Such attacks has influenced more
than 75,000 systems.

After narrow penetration on the various aspects of cyber security we discovered the role
played by CERT-In. The organization was established in January 2004 by the department
of Information and Technology, Government of India. CERT-In plays a significant role
in computer security incident response(Reactive), incident prevention(Proactive) and
managing the services of security quality(Information Exchange).CERT-In are
collaborated internationally with member of FIRST, APCERT, research partner-APWG
and shares a functional relationship with US-CERT and CERT/CC.

Report by
• Deepak Bhatia
• Priyanka Jain