Cyber Security Initiatives in India

Cyber Security Initiatives in India

• India's primary cyber security agency is CERT-In
• The National Cyber Security Policy of India was released in 2013
• The National Critical Information Infrastructure Protection Centre (NCIIPC) protects critical infrastructure like power, water, and telecom
• The Information Technology Act in India was amended in 2008 to address cybercrimes and cyber terrorism
• The National Information Centre (NIC) is responsible for developing a secure government cyber ecosystem
• Cyber Surakshit Bharat is an initiative focusing on cyber security training and certification

Counter Cyber Security Initiatives in India

• Cyber Surakshit Bharat is an initiative to spread awareness about cyber safety
• India collaborates with the USA in the 'Digital India and Cyber Security Forum'
• The Cyber Swachhta Kendra was launched under the Digital India program
• Public-private partnerships, enhanced data encryption laws, and international cyber security cooperation are part of India's cyber security strategies
• The Cyber Security Exercise is known as Cyber Drill
• CERT-In conducts cyber security exercises annually for critical sectors.

Cyber Security Incident Handling

• The first step in cyber security incident handling is identification
• CERT-In handles cyber incidents reported in India.
• Containment limits the spread of a cyber incident
• Incident handling includes reporting.

Cyber Security Assurance

• Cyber security assurance provides confidence in system defenses
• The National Critical Information Protection Centre (NCIIPC) is responsible for cyber security assurance in Indian critical infrastructure
• Cyber security frameworks in India typically involve risk assessments
• Regular audits and testing in cyber security assurance help identify and address vulnerabilities.

General Cyber Security in India

• The Information Technology Act regulates data protection in India
• The Indian government launched the Cyber Suraksha Mission to provide safe internet access for all
• Phishing attacks are primarily aimed at gaining unauthorized access to data
• In incident response, "eradication" refers to removing malicious elements
• Cyber hygiene refers to maintaining security practices in digital environments.

Credit Card and UPI Security

• CVV is used to verify credit cards for online payments
• Two-factor authentication (2FA) is a common security feature of UPI transactions
• UPI PIN is required to complete transactions
• Contactless payments without a PIN are possible for certain amounts with UPI.
• Virtual Payment Addresses (VPAs) protect user privacy in UPI transactions
• Online banking platforms often use CAPTCHA to prevent bots
• Phishing attacks are a common threat for financial transactions.

Mobile Banking Security

• Regularly updating mobile banking apps is a best practice
• Enabling fingerprint or facial recognition enhances security for mobile banking.
• Mobile banking apps should have screen lock to prevent unauthorized access
• Downloads should come from official app stores to avoid vulnerabilities
• Mobile banking security involves password security and avoiding public Wi-Fi.
• Mobile banking apps should enable two-factor authentication

Web-based Implementation

• JavaScript is the primary programming language for implementing geolocking systems in web applications
• Google Maps API is integrated into web applications for real-time location services
• CryptoJS enables strong encryption algorithms for JavaScript
• HTTPS ensures secure data transmission in web-based geolocking systems.
• Validating user locations and employing secure protocols is critical

Advanced System Security Topics

• Geo-encryption secures data based on geographical locations
• Geolocking restricts data access to specific locations
• Geo-encryption adds security by tying data to geographical location
• Performance issues (overhead) are a concern for geo-encryption
• Accurate location data is crucial for effective geolocking implementations.

Micro ATM, e-Wallet, and POS Security

• Micro ATMs provide banking services in rural and remote areas
• e-Wallets use UPI PINs or OTPs for verification of transactions
• POS systems are vulnerable to malware attacks if firewalls and antivirus software are not present.
• Secure POS systems should have regularly updated software

Security Guidelines

• Installing antivirus software is a security guideline for POS systems
• Strong passwords and biometric authentication are crucial for e-wallet security
• Regular security updates are essential to prevent malware attacks on POS systems.
• Data encryption protects sensitive data in POS transactions
• Firewalls prevent unauthorized access to POS systems

Advanced Topics in Geolocation Security

• Geo-encryption protects data based on location.
• Geolocking restricts data access to particular areas
• Accurate location data is key to effective geolocking implementation
• Performance overhead is a concern in geo-encryption implementation
• Regular auditing helps to identify and address any vulnerabilities
• Multi-factor authentication helps secure systems better.

Security with Network and Configurations

• WiFi is a common technology for indoor geolocation
• BLE stands for Bluetooth Low Energy, designed for low-power consumption.
• Signal strength measurement estimates user location using WiFi signals.
• SDN helps to manage network resources and improve network efficiency
• Regular updates to software, use of encryption, and employing strong passwords are essential for security.

Role-Based and Attribute-Based Access Control

• Role-Based Access Control (RBAC) ties access rights to user roles
• Attribute-Based Access Control (ABAC) uses attributes to determine access rights dynamically
• Policy Decision Point (PDP) evaluates access control policies and makes decisions
• RBAC is simpler but less flexible compared to ABAC.
• Robust encryption standards provide further security in ABAC

This quiz covers key cyber security initiatives implemented in India, including important agencies, policies, and programs aimed at protecting critical infrastructure. It highlights collaboration with international partners and the role of public-private partnerships in enhancing cyber safety awareness across the nation.