1 of 16

CYBER CONFERENCE 2018

MANTHAN CYBER SURAKSHA

Keynote Presentation

By

Shri Navtesh Goyal

Executive Director, CSAI

At

Raipur, 19th July 2018 

2 of 16

WHO WE ARE

CSAI is cyber Security Association of India with Stakeholders from Interpol, Cyber Security Experts from Canada, USA , UK, Thailand etc and also from various states in India. CSAI also has membership from Ex- defense Personnel’s, Ethical Hackers, Information Security experts, Legal Luminaries.

CMAI is also in the planning stage of Cyber Security network of one of African Country, Three IIT Lab and at least two Technical University in India. CMAI has great demand and vacancies for all this. CMAI is also working closely with several State Governments, UN, Interpol, EU and assisting in solving the cyber issues. There is also great need for cyber experts’ at all State levels.

Background of Cyber Security Risks

 CMAI Association of India is the largest ICT Association with 48,500 members and 54 MOU partners worldwide. CMAI is broad based including mobile, telecom, equipments, IT, infrastructure, Multimedia, Infrastructure, SME’s, Radiation, E-Waste, Aviation, Education etc. 

CMAI is actively engaged for strategic co ordination between Education Institutes and Industry for employability and curriculum up gradation. CMAI is represented on the board of several educational institutes. CMAI was made chairman of the vocational educational qualification framework committee for ICT by MOHRD along with AICTE and co-coordinator for other sectors.

3 of 16

WHAT WE DO

Under cyber security most so called experts understand antivirus/firewalls, which is  far away from factual life. Real cyber security means hacking and ways to prevent hacking, cyber security means how to do safe cyber surfing, so that nobody is able to encroach in your Cyber Space.

Hacking is intelligence that comes from dedicated minds not necessarily from text books. And it is difficult to find on record good ethical hackers knowing the subject. 

We at CSAI is trying to Strengthen the Cyber Security Ecosystem in the country

  • Opening up of Centre of Excellence

  • Programs & Courses - Developing curriculum & providing faculties for 1/3/6/12 months Certificates,

Diploma Courses in Cyber Security.

  • Classroom trainings and Online programs in the area of Cyber Threat Intelligence,

Cyber Security, Cyber Crime Investigation, Malware Analysis & Cyber Law.

  • Educate and facilitate awareness of applicable cyber regulatory framework and compliances.

  • Research & Development

  •   Providing services for Scanning of websites/ Systems to make it Cyber Safe.

4 of 16

BIG HACKS IN CYBER SECURITY IN THE YEAR 2017

THE BIG HACK

2017

Hitachi Payment Services, February

Cloudbleed, February 

Zomato, May 

WannaCry, May

Equifax,

July

Ethereum, July

Yahoo, October

Uber, November

5 of 16

DATA THE MOST IMPORTANT SOURCE FOR FUTURE

It is said that one who controls data will control the world

Prime Minister Narendra Modi during his address in Davos, Jan 2018

And now, it is not only about the battlefield. Cyber security is becoming vital…I dream of Digital India where cyber security becomes an integral part of national security…”

Shri Narendra Modi, Hon’ble Prime Minister of India

Cyber Security Is A Business Risk, Not Just An IT Problem Forbes

6 of 16

GOOD JOB OPPORTUNITIES FOR CYBER WARRIORS AS COMAPARE TO ENGINEERING

7 of 16

WHAT DOES NATIONAL AGENCIES SAY

India facing shortage of over 4 lakh cyber security experts.

The country needs at least one million skilled people by 2020.

Companies Act, 2013 has increased director's liabilities with respect to cyber security and thus companies are spending more cyber security requirements including skilled security professionals

The Cyber Security market is expected to grow to USD 35 billion by 2025

Data Security Council of India

Companies Act, 2013

 NASSCOM

CISCO

Considering the ever evolving threats in cyber space, the NCS Policy 2013 says India requires 5 Lakh Cyber Security professionals over next 5 years.

National Cyber Security Policy, 2013

8 of 16

Schools: Cyber Security Programmes best suited to Students, Teachers, Parents and School Management

Engineering Colleges: Cyber Security, Cyber Forensics, Malware & Reverse Engineering, Cyber Threat Intelligence, Cloud Security, SOC Analyst, Open Source Intelligence

Law Schools: Cyber Law, Cyber Crime Investigation, Electronic Crime Scene Investigation, Data Privacy

EDUCATION IS THE FIRST LINE OF DEFENCE

9 of 16

CYBER SECURITY NOT A SMALL WORLD TO UNDERSTAND

  • Confidentiality – Information to be hidden from the unauthorized access.

  • Integrity – The information to be protected from unauthorized change.

  • Availability – Information to be made available to an authorized entity when it is needed.

Secured Information means What?

10 of 16

High User Knowledge of IT Systems

Theft, Sabotage, Misuse

Virus Attacks

Systems & Network Failure

Lack Of Documentation

Lapse in Physical Security

Natural Calamities & Fire

TYPES OF THREATS

11 of 16

PEOPLE WHO CREATES NETWORK SECURITY PROBLEMS AND WHY

12 of 16

NATIONAL CYBER SECURITY POLICY 2013

2nd July 2013

As rightly said in NCSP – Cyber space is a complex environment for interactions b/w people, software and services with support of ict, devices and networks.

Cyber Space is common tool used by all.

One of the booming sectors in India which has provided lot of new business opportunities, employment etc.

13 of 16

14 of 16

WHY I AM HERE - TO DISCUSS

National Cyber Security Policy 2013 - possible changes and Amendments.

Suggestions –

 

1 - Build a Cadre for Cyber Security Experts

 

Just like all other cadres such as IAS, IFS, IPS etc there should be a cadre for Cyber Security Experts as well.. If there is a well defined cadre for Cyber Security profession then youth will aim for being a Cyber Security expert right from the schooling stage.

 

2 – Create Cyber academies

 

Just like we have academies for creating manpower for defense forces, we must have academies for Cyber workforce. There must be infrastructure meant to produce good quality Cyber experts especially for the Higher education. There is a demand for quality Cyber experts all over the world. 

3 – Experts for policy making from Private sector –

 

Instead of depending upon experts from IITs etc, government should seek inputs from Private sector for decision, support system and for new policies.

 

15 of 16

 4 – Opening up of Cyber Security sector for foreign Universities –

 

There should be focus on twin programs involving foreign Universities with the local ones. This will bring a level up effect as far as quality standard is concerned. Similarly, Indian institutions be encouraged to open their centers outside India.

 5 – Injecting Cyber courses in schools for students right from class 1 as a subject so that they become aware of Cyber attacks.

6 – If feasible Set up a central Board for evaluation

 

7 – Dedicated Universities  for Cyber Security

8 - Cloud Computing

9 - Citizen Privacy

10 - Governance of Social Media

11 - Policy for data collection, handling, storage and transmission methods

WHY I AM HERE - TO DISCUSS

National Cyber Security Policy 2013 - possible changes and Amendments.

16 of 16

THANK YOU

Navtesh Goyal, ED, CSAI

navteshgoyal@yahoo.com

+919711869771