Cyber Crime and Network Security in India
13 likes4,707 views
Cyber crime and network security are growing concerns in India as internet usage has exploded. The document discusses the rapid growth of internet users in India and how cyber crimes like hacking, phishing, and malware infections negatively impact businesses. It also examines perspectives from news media that report on cyber threats to national security and increasing cyber crimes in smaller Indian cities. The challenges of botnets that compromise computers and net neutrality vs censorship are also covered. The document emphasizes that cyber crimes are real threats and that solutions like managed security services can help businesses assess vulnerabilities and combat cyber crime through a defense-in-depth approach.
Cyber Crime and Network Security in India
- 1. Cyber Crime & Network Security in India CIO Focus Security 2008 Presentation by Adam Rice & AJ Vijayakumar ©2008 Tata Communications, Ltd. All Rights Reserved
- 2. Explosive Internet Growth and Impacts to Businesses India Internet Usage Stats and Telecommunications Market Report Internet Usage and Population Statistics: Internet use has been a key driver to enhance both Domestic & Global Trade in India Year Users Population % Pen. Usage Source 1998 1,400,000 1,094,870,677 0.1% ITU % Real GDP Growth Rate 1999 2,800,000 1,094,870,677 0.3% ITU 12 10.5 8.3 7.5 2000 5,500,000 1,094,870,677 0.5% ITU 8 5.6 5.5 5.3 5.1 2001 7,000,000 1,094,870,677 0.7% ITU 4.5 4.0 2002 16,500,000 1,094,870,677 1.6% ITU 4 2003 22,500,000 1,094,870,677 2.1% ITU 0 2004 25,000,000 1,094,870,677 2.28% IAMAI g nd na a e a ea an a on di si or si 2005 38,500,000 1,112,225,812 3.46% IAMAI hi or la iw ne In ay ap K ai C K Ta do g al ng Th 2006 50,600,000 1,112,225,812 4.55% CIA on M In Si H 2007 60,000,000 1,129,667,528 5.31% ITU Source: Morgan Stanley Research E-Commerce Media & Entertainment Government Education Online Banking Business Process Outsourcing
- 3. Defining “Cyber Crime” Webster's New Millennium™ Dictionary of English Entry: Cyber Crime Part of Speech: noun Definition: A crime committed on a computer network, esp. the Internet Example: Identity theft is a Cyber Crime. Spamming Espionage Malware (cont.) DDoS Internet Harassment Downloader Unauthorized access Malware Adware Virus Ransomeware Social Engineering Worm Child Pornography Hacking Trojan Telecom Fraud Phishing Bot Financial Fraud Identity Theft Rootkit Computer Fraud Cyber-stalking Spyware Information warfare Backdoor
- 4. News/Media Perspective of Cyber Crime in the India Cybercrime Threatens National Security in Cyber Crime On A Roll In India India Posted by Rushabh Chokshi on Date: September 27, 2007 November 2nd, 2007 Source: merinews.com It is The New Age in Cyber Crime, according By: Fahim Ahmedi to latest news cyber criminals are now targeting Enterprises and Consumers based in Tier III cities India is now taking steps to fight against the Cybercrime: A threat to national security cyber crime, Indian police are now being Date: September 17, 2007 trained on how the Internet, e-mail, and other Source: merinews.com computer-based tools can be used by By: Fahim Ahmedi criminals to illegally obtain information stored in databases The ever increasing cyber crime is taking the world by storm. Technology is a boon but it also has dangerous implications if left undetected. Cyberspace is one such area that needs to pull all security strings together before things go out of hand.
- 5. News/Media Perspective of Cyber Crime in the India Ankit Fadia, a 21-year-old computer whizkid and author of ’The Unofficial Guide to Ethical Hacking’ said “I could hack a state-owned bank’s website or a government communications website which shows the vulnerability, thousands of Indian websites are being hacked each day”.
- 6. News/Media Perspective of Cyber Crime in the India Cyber crime in India on the decline: Report Posted online: Monday, January 07, 2008 at 12:00:00 Updated: Monday, January 07, 2008 at 10:37:53 New Delhi, January 6: Contrary to popular belief that cyber crime is on the rise, statistics show that the cases of the “new age” crime have declined with the most noticeable difference seen in Gujarat. However, no reasons were attributed in the report for the decline in the registration of cyber crime related cases in Gujarat. A senior official said the decline does not indicate that the incidents of cyber crime in the state had actually decreased. “This is only a statistics based on the number of cases registered,” he added. darkREADING Annual CIS Study: Cost of Cybercrime Is Skyrocketing Average annual loss per company has more than doubled since last year, according to bellwether study September 11, 2007 | 5:55 PM By Tim Wilson Site Editor, Dark Reading
- 7. Net Neutrality vs. Censorship Clean the Pipes
- 8. The Threats are Real Global Activity Maps Source: Arbor Networks 2008
- 9. Internet Service Providers Security Concerns Top Concern Source: Arbor Networks 2007
- 10. The Botnet Problem Starts with Compromised PCs 150 of 600 million online PCs worldwide are The most common infection methods detected by bot infected S21sec include browser exploits (65%), e-mail (Source: BBC 2007 interview with Vint Cerf) attachments (13%), operating system exploits (11%), downloaded Internet files (9%) and other 52,771 new infected PCs daily methods (2%), as illustrated in the figure below. (Source: Symantec 2007) Infection Methods Downloaded Other Rapid growth in tools used by Cyber Files 2% Criminals 9% Victims often do not know that they have OS Exploits been compromised! 11% Easy to use tools with varying levels of Email Browser anonymity offered to cyber criminals Attachments Exploits 13% 65% Source: S21sec
- 11. The Botnet Problem Starts with Compromised PCs 150 of 600 million online PCs Malcode Additions 2007 worldwide are bot infected Spyware 308 (Source: BBC 2007 interview with Vint Cerf) Rootkit 1,138 52,771 new infected PCs daily Keylogger 1,463 (Source: Symantec 2007) Other 14,907 Password Stealer 22,982 Rapid growth in available tools used by Cyber Criminals! Dialer 23,449 Backdoor 25,997 Victims often do not know that they have been compromised! Downloader 41,389 Virus 48,889 Easy to use tools with varying levels of anonymity offered to cyber Adware 55,873 criminals! Worm 64,173 Trojan 109,246 0 20,000 40,000 60,000 80,000 100,000 120,000 Source: IBM ISS x-Force Trend Report 2007
- 12. The Botnet Problem – Devastating Impact to Businesses Common Exploits from Botnets Identity Theft Credit card /Email fraud Theft/Fraud in online banking and auctions Theft storage and distribution of login ID/Password, financial data, etc… DDoS (Distributed Denial of Service) 50% of Botnets used for DDoS attacks (Source: S21 sec) Each bot generates 40kbps Small botnets command up to 10,000 bots Large botnets command up to 1 million bots 20+ Gbps DDoS attacks witnessed in 2007 (Source: Arbor Networks Inc. 2007) Spam Each spam bot can send 3 spam emails per second (259,000/day) 94% of all emails is Spam (Google/Postini 2006)
- 13. There are Solutions in Sight Solutions Commentary Preventing PC compromise Vulnerability assessment, Identity vulnerabilities and enforce a penetration testing, anti-virus, priority based patch management etc… approach to secure PCs from known exploits. Securing against Botnet attacks Employ a Defense in Depth Strategy when Securing your Enterprise! Layer your defenses against network security threats to minimize the impact! Preventing Identity Theft Content filtering services, anti- Combat a variety of Phishing, virus, intrusion detection and Pharming, malware and web/email prevention systems fraud activities that can result in identity theft Preventing DDoS Cloud based and or CPE based Stopping in the cloud within the anti-DDoS services. provider’s network reduces the chance Cloud is recommended. of a last mile bottleneck, which completes the attacker’s work Preventing Spam Cloud-based and or CPE based Stopping in the cloud through a proxy- anti-spam solution based service saves unnecessary bandwidth exhaustion and saves costs
- 14. Tata Communications Has Taken a Stance Against Cyber Crime!
- 15. What are Your Next Actions to Securing your Enterprise from Cyber Crime? Assess your Current state to define your Next steps Take a custom self-assessment to determine your next steps Web-based module www.tatacommunications.com/security/assessment Combat Cyber Crime!
- 16. Thank You www.tatacommunications.com