Q.Cyber warfare is considered by some defense analysts to be a larger threat than even Al Qaeda or terrorism. What do you understand by Cyber warfare? Outline the cyber threats which India is vulnerable to and bring out the state of the country’s preparedness to deal with the same.

Body

Cyber Threats India is Vulnerable To

• Critical Infrastructure Attacks: India’s critical infrastructure, including power grids, transportation systems, financial institutions, and healthcare services, are highly vulnerable to cyber-attacks. For example, in 2020, a suspected cyberattack targeted the Mumbai power grid, causing widespread outages and raising concerns about vulnerabilities in essential infrastructure.
• Government and Military Cyber Espionage: Cyber warfare often includes cyber espionage, where state-sponsored hackers infiltrate government systems to steal sensitive defense and intelligence data. For instance, India’s military and defense agencies have been targeted by foreign hackers, especially from neighboring countries like China and Pakistan.
• Financial Sector Attacks: India’s financial institutions are increasingly targeted by cybercriminals and state-sponsored actors seeking to disrupt the economy or steal financial data. For example, in 2018, a cyber-attack on the Cosmos Bank in Pune resulted in the theft of ₹94 crores through fraudulent transactions.
• Ransomware and Malware Attacks: India is frequently targeted by ransomware and malware attacks, where hackers lock users out of their systems and demand payment to restore access. In November 2022, the All India Institute of Medical Sciences (AIIMS) in Delhi was the victim of a cyber attack that encrypted data on five servers and shut down several systems.
• Misinformation and Psychological Warfare: Cyber warfare can also involve the spread of misinformation and fake news to create political instability, manipulate public opinion, and provoke social unrest. For example, during recent elections, social media platforms have been used to spread false information, attempting to influence the outcome of elections and sow discord within the population.

India’s Preparedness to Deal with Cyber Warfare

• National Cyber Security Policy (NCSP): India’s National Cyber Security Policy, 2013, aims to protect the country’s critical information infrastructure and build resilience against cyber threats. However, this policy requires regular updates to keep pace with evolving threats and the increasing digitization of various sectors.
• National Critical Information Infrastructure Protection Centre (NCIIPC): The NCIIPC was established to protect critical information infrastructure in sectors like defense, energy, banking, and telecommunications. It acts as the nodal agency for cyber defense, coordinating efforts to safeguard essential networks from cyber threats.
• Indian Computer Emergency Response Team (CERT-In): CERT-In is the national nodal agency responsible for incident response and cybersecurity coordination. It tracks cyber incidents, issues advisories, and works with private and public organizations to prevent and mitigate cyber-attacks.
• Cyber Command for the Military: India has established a dedicated Defense Cyber Agency (DCA) under the Ministry of Defense to handle military-specific cyber threats. This agency is responsible for monitoring and defending against cyberattacks that target military systems and defense infrastructure.
• Cybersecurity Legislation and International Cooperation: India has enacted the Information Technology Act, 2000, to address cybersecurity concerns and regulate cyber activities. India also collaborates internationally through platforms like the Global Forum on Cyber Expertise (GFCE) and the Shanghai Cooperation Organization (SCO) to strengthen global cybersecurity frameworks.

Challenges in India’s Cyber Preparedness

• Lack of Skilled Cybersecurity Professionals: India faces a shortage of skilled cybersecurity professionals, which hampers its ability to prevent, detect, and respond to sophisticated cyberattacks. Despite growing demand, there are gaps in education and training in the field of cybersecurity.
• Outdated Cybersecurity Infrastructure: Many public and private organizations in India still rely on outdated technology and cybersecurity infrastructure, making them easy targets for cybercriminals. There is a need for continuous investment in modernizing cybersecurity frameworks and technologies.
• Slow Policy Implementation: Although India has a National Cyber Security Policy, its implementation has been slow. There is a need for a more comprehensive and updated policy that can address emerging cyber threats, backed by timely execution.
• Public Awareness and Cyber Hygiene: Awareness about cyber hygiene and the importance of cybersecurity remains low among the general public. This makes individuals and smaller organizations vulnerable to phishing, malware, and ransomware attacks.