India, US, Indonesia, and China accounted for 45% of total cyberattacks on government agencies worldwide in the second half of 2022, according to a report by cybersecurity firm CloudSek, released on 30 December. The number of attacks on government agencies were up 95% year-on-year, the report claimed.

The government itself has acknowledged that 18 million cyberattacks and 200,000 online threats daily in the first quarter of 2022.

India was the most targeted country in 2022 as attacks on government agencies more than doubled. CloudSek attributed this to an increase in activities of Malaysia-based hacktivist group Dragon Force, which ran campaigns such as #OpIndia and #OpsPatuk against India in retaliation to the controversial comments by an Indian politician on Prophet Mohammed.

Another hacker group Khalifah Cyber Crew intensified attacks on India in protest against alleged “Muslim discrimination” by the government, the report said.

Attacks on government agencies in China declined to 4.5% of all attacks from 13.10% last year. On the other hand, in India, US, and Indonesia, the share of all attacks grew from 6.3% to 13.7%, 7.4% to 9.6%, and 4.6% to 9.3%, respectively.

CERT-In Data

Government data, collated by the Ministry of Electronics and Information Technology’s Indian Computer Emergency Response Team (CERT-In), is available only till 2021, but that too shows an increase in cyberattacks in India.

In 2019, CERT-In handled close to 3,94,499 incidents in total, in which it suggested remedial measures for organisations and shared notes on “cyber threats and vulnerabilities”. In the same year, CERT-In issued 204 security alerts and 38 advisories.

The number of incidents handled by CERT-In surged in 2020 to 11,58,208, a near-tripling over the previous year. This surge continued in 2021, which saw 14,02,809 incidents, a 21 per cent increase.

The matters CERT-In looks into include website intrusion and malware propagation, malicious code, phishing, distributed denial-of-service (DDoS) attacks, website defacements, unauthorised network scanning or probing activities, ransomware attacks, data breaches and vulnerable services.

Trends

The Indian Computer Emergency Response Team said: “Threat actors were leveraging tools that are already available in the cyber environment rather than making custom tools and malwares. By this way, they were being able to bypass many security controls.”

Threat actors are also able to execute scripts that reboot victim’s machine into ‘safe mode’, and thus bypass security solutions.

In terms of mitigation, the agency recommended victims to immediately disconnect and isolate infected systems from the network. IT also recommended to turn off any wireless internet connectivity and isolate all system backups.

Spike in Ransomware Attacks in India

In a first of its kind report, the Indian Computer Emergency Response Team (CERT-In) said that it had observed a 51 percent increase in ransomware incidents in the country in the first half of the business year (H1) in 2022.

The information technology sector was the most affected when it came to these attacks, CERT-In said, followed by manufacturing and finance.

CERT-In attributed the rise in attacks in India to Djvu, a ‘high-risk’ virus that majorly targets citizens. The agency also named Phobos, a ransomware which “strikes smaller companies and individuals that have less capacity to pay relative to larger businesses”, to have played a role in the increase.

It also attributed the increase to Hive, a year-old ransomware which has grown into one of the most prevalent ransomware payloads in the ransomware-as-a-service (RaaS) ecosystem, according to Microsoft.

“Ransomware as a Service”

A ransomware is a type of malicious software designed to block access to a computer system until a sum of money is paid. Ransomware as a service (RaaS) is a subscription-based model that enables affiliates to use already-developed ransomware tools to execute ransomware attacks, said Upguard, a cybersecurity company.

In the report CERT-In said, “Ransomware-As-A-Service (RAAS) ecosystem is evolving with sophisticated double and triple extortion tactics and a wide range of ransomware campaigns through affiliates.”

“This is leading to higher probability of monetization and further rise in attack campaigns. Post covid accelerated digitalisation and hybrid work culture are also aiding this threat emergence,” it added.

Modus Operandi

The agency noted that ransomware gangs were focusing on penetrating known unpatched vulnerabilities of public facing applications for gaining entry into the network.

“Compromised credentials of remote access services (VPN/ RDP) are being used by threat actors to gain entry into the network,” it said.

Apart from that, CERT-In said phishing campaigns are also another major source of ransomware infections.

Zerofox describes a phishing campaign as a scam created by cybercriminals to steal financial resources or sensitive data from victims using manipulative emails or other fraudulent digital assets.

State of Affairs

In recent times the three most notorious members of the ransomware family- Ryuk, Purga, and Stop made major headlines in the nation.

The Stop ransomware caused about 10.10% of the ransomware attacks followed by Ryuk making about 5.84% attacks along with Purga for deploying 0.80% of ransomware attacks

Ryuk seemed to have been the most active threat landscape in the Indian public as well as private sectors. On the other hand, brute-force attacks on RDP and SMBs seemed to have steadily increased in the last five years.

According to Forbes, there was one ransomware attack every 10 seconds in 2020.

Reportedly, organizations have faced double extortion in 2020 across the globe. Moreover, the cost of ransomware damage is predicted to hit around $20 billion by 2021.

Although, this figure may vary later depending upon the cost of attacks and their devastating consequences. To know how brutal ransomware attacks can get, here are the top devastating ransomware attacks that took place in India.

Hacktivism

In 2022, hacktivism accounted for 9% of the cyberattacks on the government sector. Hacktivism is a form of cyberattack where the hacker’s motivation is not financial gains but to promote a political agenda or protest against certain policies. Last year, attacks on China also increased due to its aggressive stance towards Taiwan and the Uyghur community.

In addition to hacktivism, government agencies in India are also increasingly being targeted by phishing campaigns, according to the report.

Ransomware Attacks

CloudSek also found that ransomware groups were very active and accounted for 6% of the attacks on governments. LockBIT, which provides ransomware-as-a-service (RaaS) was the most prominent ransomware operator. Its targets in 2022 included government agencies in the US, Canada, and Italy. In November, a Russian national was arrested in Canada for alleged involvement in LockBIT ransomware campaigns in the US.

In November 2022, India’s top government-run hospital All India Institute of Medical Science (AIIMS) was also hit by a cyberattack causing disruption of online services that lasted over two weeks. India’s nodal cybersecurity agency Computer Emergency Response Team (CERT-In) found in its investigation that five AIIMS’ servers were compromised during the attack and nearly 1.3 terabytes of data was encrypted by hackers.

What to Expect in 2023

Experts believe that state-sponsored hackers will go after cloud services in 2023 due to growing digital transformation. “Nation states will begin to target cloud service provider (CSP) managed services as companies migrate more of their attack surface to these managed services,” according to Bob Huber, chief security officer at Tenable, a cybersecurity firm.

India’s had its worst year of cyberattacks, but 2023 will see govt & firms ramp up defences

India was a top target for cyberattacks in 2022, shows study by web security firm Indusface. As govt tries to address policy vacuum, companies likely to spend more on cybersecurity.

According to a study released Tuesday by Indusface, a Tata Capital-funded software-as-a-service (SaaS) security firm, India has become one of the most attacked and breached countries in the world. Among the 829 million cyber-attacks detected and blocked globally by the firm in the fourth quarter of 2022, close to 59 per cent were directed towards India.

In this backdrop, what will the government and companies do differently in the coming year?

As the government readies its legislation on cybersecurity, numerous industry-wide surveys and sector experts say that 2023 will see companies spending significant amounts to secure their digital systems from attacks.

According to Sajan Paul, managing director & country manager, India & SAARC, Juniper Networks, a “zero trust” policy will be an “essential security strategy” for India, going forward. ‘Zero trust’ model assumes breach and verifies each request as though it originates from an open network.

Data protection Bill and CERT-In rules

India’s IT ministry has come up with the Digital Personal Data Protection Bill, 2022, defining some roles of data fiduciaries and introducing appellate committees that will deal with redressals and grievances. Many have termed it a “step in the right direction” to ensure data security.

The draft law, alongside CERT-In rules, has been part of core policy discussions in India. The rules now require companies to report cybersecurity incidents within six hours. While this seems stringent, it might not be practical, some experts believe. This was perhaps the most significant development in the cybersecurity domain in 2022.

Commentary

Cyberattacks on government agencies are not new. Many of these attacks state sponsored and are aimed at stealing sensitive information or cripple critical infrastructure of other countries. Indian entities are often targeted by hacker groups with links to China. Similarly, many of the attacks on US agencies often originate from Russia or North Korea.

According to IBM’s ‘Cost of Data Breach Report 2022’, the average cost of data breaches in the government sector has increased from $1.93 million in 2021 to $2.07 million this year.

Threat actors have modernised their attack methodologies, evolved sophisticated tactics and adopted a wide range of attack campaigns.

==

Top Six Attacks in 2020-21

Telangana and AP Power

A malicious software attacked the power utility systems of  Telangana and Andhra Pradesh in 2020 where all the servers went down until the glitch was rectified. Since the computer systems of Telangana and Andhra Pradesh power utilities were interlinked, the virus attack quickly spread, taking down all the systems.

UHBVN Ransomware Attack

Uttar Haryana Bijli Vitran Nigam was hit by a ransomware attack where the hackers gained access to the computer systems of the power company and stole the billing data of customers. The attackers demanded Rs.1 crore or $10 million in return for giving back the data.

WannaCry

India was the third worst-hit nation by WannaCry ransomware, affecting more than 2 lakh computer systems. During the first wave of attacks, this ransomware attack had hit banks in India including few enterprises in Tamil Nadu and Gujarat. The ransomware majorly affected the US healthcare system and a well-known French car manufacturing firm.

Mirai Botnet Malware Attack

This botnet malware took over the internet, targeting home routers and IoT devices. This malware affected 2.5 million IoT devices including a large number of computer systems in India. This self-propagating malware was capable of using exploitable unpatched vulnerabilities to access networks and systems.

Petya

India was one of the top 10 countries to be hit by Petya ransomware. This ransomware attack halted work at one of the terminals of India’s largest seaport causing computer lockdown and serious consequences for the country’s exports.

BSNL Malware Attack

The state-owned telecom operator BSNL was hit by a major malware attack, impacting nearly 2000 broadband modems! 60,000 modems became dysfunctional after the malware attack hit the Telecom Circle.

The post Cyber Year in Review appeared first on IMR.

The elusive computer experts issued the stark announcement on their Twitter account on 24 February evening.

They said shortly before 10pm: ‘The Anonymous collective is officially in cyber war against the Russian government.’

Around 30 minutes later, they announced that they had taken down the website of the Kremlin-backed TV channel RT, which broadcasts in Britain and has been heavily criticised for its coverage.

When MailOnline attempted to access the site this morning, it was still inaccessible and only displayed an error message that said ‘this site can’t be reached’.

The cyber war declaration raises the prospect that Russia could be subjected to systematic hacking attempts in the coming days.

Prior to the invasion of Ukraine, on 24 February, the country’s government and banks were targeted by a massive cyber attack that was believed to have been carried out by Russia.

People on social media responded positively to Anonymous’s cyber war declaration against Putin.

The post Hacking group Anonymous declares cyber war on Putin’s government appeared first on IMR.

There is good reason to suspect China-Pak collaboration in cyberspace. In recent years, Beijing and Islamabad have deepened their co-operation in the information technology domain. Digital and cyber co-operation are crucial elements of the ‘Long-Term Plan for China-Pakistan Economic Corridor (2017-2030)’. The plan emphasises ICT-enabled development and promotion of e-commerce in Pakistan.

But beyond this benign collaboration, China-Pakistan collusion has become a reality where Pakistan has emerged as a proxy for China’s malicious designs. This is particularly true with respect to anti-India propaganda on social media platforms.

During the ongoing border stand-off between India and China along the Line of Actual Control, Pakistan-based Twitter handles posing as Chinese nationals have peddled anti-India propaganda. These Twitter handles have regularly peddled misleading reports related to the violent clash at Galwan Valley in June 2020, as well as about India’s military preparedness. China and Pakistan are also potentially exploring establishing an international news media outlet that will significantly advance their propaganda efforts. Besides, in 2018, both had reportedly joined hands to honey trap Indian Army officers into revealing information regarding troop deployments along the borders with China and Pakistan.

The Chinese side has taken the lead by providing the technology and content, while Pakistan acts as the implementer and disseminator. This collaboration is symbiotic: China needs Pakistan because mainstream social media platforms such as Twitter and Facebook are banned in China, and command over the English and Hindi languages is very limited in most parts of China’s populace. Moreover, by not directly getting involved and making Pakistan the front end of the anti-India activity, China is able to skirt attribution. For Pakistan, collaborating with China strengthens its strategic partnership and lends the technical edge, which Islamabad’s cyber activities wouldn’t have been able to achieve otherwise.

This cyber collusion is also likely to extend to malicious cyber activities such as APT attacks, with the intention to collect valuable geopolitical, business, and military data. Indian cybersecurity researchers have suspected Chinese assistance to Pakistani cyber campaigns like APT36’s ‘Operation Sidecopy.’ The APT36 is a known threat actor that has used fake COVID-19 health advisory to launch phishing attacks against Indian defence networks to steal confidential information. The threat vector had been active since 2016, indicative of its long duration. Most recently, Pakistan-based hackers conducted a major cyber-attack targeting India’s power generation and transmission sector using the platform supplied by China Mobile Limited, which operates under the brand Zong 4G in Pakistan.

Evidence of Pakistan’s emergence as China’s proxy in cyberspace lies not only in China’s active role in enhancing Pakistan’s ICT infrastructure as part of the China-Pakistan Economic Corridor (CPEC), but more so in the modus operandi of cyber actors in both countries at the tactical level involving fake propaganda-based influence operations, and espionage using malware as well as honey traps.

With China-Pakistan cyber collusion becoming a reality, India must prepare for the spectre of a ‘two-front war’ in cyberspace. While their cyber-espionage operations cause loss of sensitive information, their disinformation campaigns — based on anonymity and deniability — pose the real danger of accentuating the existing political polarisation, and social divisions within India.

Moreover, these disinformation campaigns can yield a significant advantage to Pakistan and China by sowing the seeds of doubt among the citizens about their national institutions’ credibility. Therefore, India needs to effectively counter the menace of China-Pakistan cyber collaboration as it has not just national security implications, but indeed implications for India’s democracy as a whole.

In recent years, India has taken steps to plug its cyber vulnerabilities through several legal and institutional measures. Yet, Chinese and Pakistani hackers continue to capitalise on the lack of adequate cybersecurity awareness and poor cyber hygiene practices, such as not checking the veracity of ‘fake news’, clicking on unsolicited web links, among average Indian Internet users, to ensure that their propaganda efforts get the necessary traction, and their malwares breach sensitive computer networks.

Therefore, even as India strengthens its cyber defences by plugging its vulnerabilities, it must implement two steps. At the micro-level, India should increase the citizens’ resilience to emerging cyber threats, and expand cyber hygiene initiatives. At the macro-level, India must amplify its offensive cyber posture to clearly signal its intentions and deter its adversaries.

These steps are necessary for India to prepare for China-Pakistan’s ‘hybrid warfare’.

The post Pakistan collaborating with China in cyber attacks against India appeared first on IMR.

The present multi-domain warfare and impending theaterisation demand coordination and integration across all domains. Communication enables this coordination with real time interaction and transmission of data amongst the fighting forces in all domains. All this is facilitated now with digitisation of the communication in all dimensions.

The aim of Digitisation and Network Centric Operations (NCO) in the Armed Forces webinar & virtual expo was to provide a forum for the stakeholders in the Services and Industry to enable information exchange on latest technologies particularly relating to the digitisation in the Army, effective network-centric operations, C4ISR, communication systems, decision support information systems for exchange of data and big Data including its challenges and vulnerabilities, the space domain and impact of new technologies (5G, IoT, AI, VR/AR) on warfare.

The event brought together stakeholders from the armed forces, DRDO, public sector, industry and academia and provided them a platform to present their views and discuss pathways.

Inaugural Session

Welcome Address. Lt Gen Sunil Srivastava, Director, Centre for Joint Warfare Studies put the theme of the Webinar in context and highlighted the present multidomain warfighting environment. He emphasized that digitization and net-centric operations were the core of battlefield dominance. All actors were leveraging digitization and NCO by weaponising information technology. He said that we must embrace digital jointness to unlock the digital battle space. Seamless sharing of warfighting information will generate shared operational awareness, effects and tempo which we could use to our advantage to paralise the adversaries OODA cycle. There is a need to seamlessly share info, link sensors & shooters and decision makers, even in a degraded environment, aggregating the combat capabilities of Services while remaining physically disaggregated. C2 Agility brings Force Agility which enhances Force Effectiveness.

Special Address. Vice Admiral Atul Kumar Jain, Chief of Integrated Staff to Chairman Chiefs of Staff Committee (CISC) spoke of the contextual relevance of the webinar with the urgent operational need of Services to move forward towards joint networking and digitisation especially as our adversaries and particularly the Northern neighbour was already exploiting it, leaving no choice but to move forward at a faster pace in this direction. He opined that in modern warfighting the one who dominates in the information domain will stand to win. Space and cyber domains while being independent also influence operations in other domains. In his address, he brought out the relevance of satellite surveillance and satellite communication and several new technologies such as 5G, Artificial intelligence etc., all of which enhance the warfighting capability.

Keynote Address. Lt Gen Upendra Dwivedi, Deputy Chief of Army Staff (Information Systems & Communications), Army HQ gave the Keynote Address and an outline of new initiatives and consolidation of the earlier efforts undertaken by the Indian Army in its journey towards induction of modern technology for conduct of military affairs at all levels involving operational, logistics and human resources. He talked of new generation technologies like Artificial intelligence, 5G, Quantum technology, Robotics, drones and so on. In this journey, the Army is also coordinating with several agencies under the Ministry of information technology, DRDO and academic institutions like IITs and has ordered studies and conducting seminars to remain in step with the new technologies for conduct of military affairs both in peace and war. He was critical of the long process of our defence procurement since by the time products are inducted, these are at the verge of obsolescence. To infuse efficiency in the process, he suggested to pin point accountability for the delays in the procurement process and also suggested a layered GSQR concept which would give time to the concerned staff to introduce workable amendment in the GSQRs so as to stay abreast with the technology. As regards communication, he informed that, as dug in cable communication remains vulnerable, the focus now is on wireless and digitised communication and net centricity between services. He mentioned that an integrated operational and intelligence system will facilitate Theaterisation.

Technology Perspective. Dr Ranjana N, Director, Directorate of Systems and Technology Analysis (DSTA), DRDO HQ, pointed out that digitisation was inevitable. She said that data was a strategic asset. Improved knowledge at all levels could naturally lead to integration in all layers of operations which may even call for changes in the tactics and doctrines. Data must be protected and managed to attain immediate and long-term strategic advantage to the military. Designing of systems is a challenge since it not only has to be robust in hardware and software but, their modularity and scalability is also essential. Cyber hardening of storage, NW and Sensors is equally important. Obsolescence of equipment and their upgradation is big challenge. We are constrained to run old systems with systems of new technologies. Thus, along with old systems, we should able to operate/integrate new sensors and technologies such as 5/6G, AI, big data etc. She cautioned that conceptualisation is the big challenge since the product may not exactly be as visualised. Further, layered architecture and modularity are the key to the modern comn equipment and will have to be developed indigenously. She highlighted that DRDO is working on GIS, Adhoc NW, MANETS, SDR, EW, AI, XL-UUVs, change detection and mine hunting.

Industry Perspective. Col KV Kuber, Director Defence & Aerospace, Ernst & Young gave the industry perspective. He asserted that COVID-19 pandemic had forced digitisation in the country including in the Services. He felt that digitisation in the Services was lagging behind the civil side. Therefore, the pace of digitisation in the Services needed to be hastened particularly in procurement, which could be faster with digitisation. He said that since legacy systems could not be changed in one go, digitisation should be able to integrate the old legacy systems as well. Compatibility, interoperability and backward integration were important. He highlighted the AKANKSHA model of DRDO. He recommended adoption of the waterfall/Agile approach and exhorted that procurement should not be an imprisoned by procedures.

Session 2 was earmarked for Digitisation issues related to the Army. The session was chaired by Lt Gen Dr RS Panwar, former Commandant of Military Collete of Telecom Engineering. Brig Ulhas Kirpekar, Brig Information Systems, Army HQ spoke on “The Digital Army and Initiatives.” Maj Gen K Shankar, Additional Director General Telecom in the Directorate of Signals, Army HQ spoke on the “Role of Army Cloud Centre and Digi Locker.” Brig SS Soin, Brig Telecom, Signals Directorate, Army HQ gave a presentation on “Future of ASCON and AREN Networks.”

The theme of Session 3 was Network Centric Operations and was chaired by Vice Adm Shekhar Sinha, former FOC-in-C Western Naval Command. Capt JS Sachdeva, Captain NCO, Naval HQ spoke on “Technology Perspective and Capability Roadmap requirements of the Navy for NCO.” Col Vineet Jaiswal, from Directorate of Information Systems gave the “Technology Perspective and Capability Roadmap requirements of the Army for NCO.” Air Cmde KN Santosh, Principal Director, Operational Networks, Air HQ spoke on “IAF Technology Perspective & Capability Roadmap requirements.” Gp Capt Parijat Saurabh, Air HQ spoke on “Meeting Electronic Warfare Threats.”

Session 4 was on C4ISR, Command & Control, Communications, Computers and Intelligence. The session chairman was Lt Gen PJS Pannu, former Dy Chief IDS (Operations). Dr K Rajalakshmi Menon, Program Director (ISTAR), Centre for Airborne Studies, DRDO gave a talk on “ISTARS for Indian Armed Forces.” Col Abhijit Singh, Colonel Artillery-9, in the Directorate of Artillery, spoke on “Aerostats for surveillance and C2.”  Gp Capt P Batra, Gp Capt (Airborne Sensors & Networking), Air HQ gave a talk on “Airborne Early Warning Aircraft as Force Multipliers.”

Session 5 was devoted to Communication Systems. Lt Gen Rajeev Sabherwal, former SOC-in-C and Commandant MCTE chaired the session. Col Gurmeet Singh, HQ IDS, gave a talk on “Tri-Services Strategic / Operational Communications.” Brig Rajiv Singh, Brig Tactical Communication Systems, from Signals Directorate spoke on “Battlefield Tri-Services Tactical Communications.” Himansu Kumar Swamy, Scientist E, Centre for Artificial Intelligence Research, DRDO spoke on “Maritime Data analysis & visualization.”

Session 6 was on Information, Data and Big Data – Challenges and Vulnerabilities. The session was chaired by Maj Gen Pritam Bishnoi, former Additional DG Tactical Communications, Signals Directorate, Army HQ. Brig Inder Sethi, Brig CICP, Ordnance Services Directorate spoke on “Data Sovereignty and Big Data Analytics.” Devsena Mishra, Promoter Advanced Technologies gave a talk on “How Big Data and Big Tech undermine national security.” Maj Gen Manjit Singh, Joint Secretary (Cyber) NSC Secretariat gave a talk on “Emerging cyber security threats.”

Session 7 dealt with Space Domination and Satellites under the chairmanship of Lt Gen Satish Dua, former CISC. Air Cmde Prem Kumar, from the Defence Space Agency spoke on “Requirement of robust space situational awareness.” Gp Capt Amarendra Samal, Gp Capt Operations (Space), Air HQ gave a talk on “Steering India towards military space domination.” Capt Manish Kumar, Capt NSO-SA, Naval HQ gave a presentation on “Security of satellite-based Communication networks.”

Session 8 covered New Technologies – 5G, Internet of Things, Artificial Intelligence, Virtual Reality/ Augmented Reality and was chaired by Lt Gen MU Nair, Commandant MCTE. Dr Santu Sardar, Director DRDO Young Scientists Lab gave a talk on “Relevance of Quantum Communications Technology for Armed Forces.” Brig Navjot Singh Bedi, Commander Defence Communications Agency. Spoke on “Relevance of 5G for the armed forces.”  Maj Gen Harsh Chibber, Maj Gen ASC HQ Western Command spoke on “Transforming and Reducing Costs of Military Logistics Through IoT.”

The Closing Remarks were given by Lt Gen Sunil Srivastava, Director CENJOWS while the Vote of Thanks was delivered by Maj Gen Ravi Arora, Chief Editor, Indian Military Review.

Key Points Needing Attention

The key points which emerged in the eight sessions of the webinar are tabulated below:-

• Theaterisation would need tri-service digital infrastructure to support seamless op, decision support structure and battlefield management & C2 constructs.            

•  One of the challenges in integration is to have an attitudinal change towards automation and adopting agile processes. This also involves breaking away from silos.                                                                                                                 

•  The architecture of NCO system will require individual Service data centres and secure linkages with the joint regional data centre with a robust and secure cloud storage. The cloud storage will reduce the burden of forward fighting formations, which could retrieve relevant information, as required.

• The ongoing transformation in the strategic and tactical communication network i.e., Army Static Switched Communication Network (ASCON) to Network for Spectrum (NFS) and Army Radio Engineered Network (AREN) to Tactical Communication System (TCS) with overarching presence of satellite communication must continue to achieve the transformational targets. In that, the fibre optics based NFS is the back bone and integrator of three services. This is planned to be supplemented with satellites and microwave communication to extend it till the forward edge of the battle through TCS.

•   Besides three Services, the data and information also emanate from several other sources and also from other domains such as space, cyber etc in different formats which need standardisation.

•  To pick up relevant intelligence, about the adversary’s capabilities / limitations, information sharing will not only be between Services but, could even be from other national/ international sources. This requires synergy with various national and international organisations. With introduction of core strategic network NFS, the Army, Naval and Air force Strategic networks should handshake with it for integration of their data, video and voice communication.                

•  It is important to invest in infrastructure for safe, secure and seamless joint operations with holistic evolution in organisations, doctrine, strategy and tactics.

•   Legal Aspects of Warfighting. We also need to invest in legal aspects of war fighting which are often ignored or do not get due attention.                                                                                                                                  

•   IACCS. Indigenous IACCS of Indian Air Force in its 10 years of operations and in quite robust. Phase 5 would be implemented now. Trigun and Akash Teer projects of Sister services when linked to this system will enhance NCW capability of the Services hence, must be pursued actively.

•   Slow Modernisation. One major challenge is to use the legacy system along with modern equipment. The industry, academia and services have to find an answer to this challenge.

•   Upgradable Systems. Technology upgrades faster than we acquire systems. Therefore, we need to draw a line up what we can absorb and implement and periodically upgrade, say in 5 or 10 years, to reap the benefit of the changing technology.

•   An incremental and evolutionary approach is required in NCW where end state cannot be defined since it is always evolving but, our efforts must be measurable to stay on course towards our goal.

• Role of EW. Dominance in frequency spectrum would aid in gaining advantage over the adversary in the land, sea and air and space domains.

•  ISTAR Development. Integrated Surveillance Targeting and Reconnaissance (ISTAR) under development by DRDO, with close interaction with IAF, utilises several high technologies for offensive and defensive roles in one platform. All three Services must be involved in the project at this stage of evolution, especially since the system identifies surface targets.

•  Possible Naval Role for ISTAR. Inclusion of additional sensors like anomaly detector, pollution detector and AIS in ISTAR will broaden its employment potential in naval role.

•   Broader Exploitation of ISTAR. ISTAR should have seamless integration with other national intelligence networks for gauging the intent and moves of the adversary. The potential of ISTAR for broader exploitation should be examined.

•   Use of Aerostats. Aerostats have been used by the IAF for surveillance. Other Services can examine their employment with due consideration of disadvantages like vulnerability, blind zone, limited employment in mountains, shorter life and endurance.

•  AWACS. It provides immense force multiplier capability. However, it remains a lucrative target using LR SAMs and LR Anti radiation missiles. The number of AWACS required would depend on the expanse of op area needing coverage.

•  C4I2 Requirement for the TBA. To implement the C4I2, we need robust, secure, high bandwidth wireless communication for formations particularly in the TBA due to requirements of mobility. Apart from the common standards, formats and protocols, joint encryption, mission specific applications, the bandwidth requirement of the communication is vital and must be ensured. Systems with self healing capability are required for the TBA.

•  GIS, AI and Robotics. Common Geographic information for the three Services is vital and should be prioritised.

•   Wargaming and Simulation. The robustness and the reliability of the communication systems can be tested in realistic wargaming and simulation exercises.

•   Situational Awareness Model for the Indian Navy. DRDO has developed Maritime Domain Awareness (MDA) for the Indian Navy, followed by Indian Navy Situational Awareness System (INSAS) and finally by 2027, Navy aims to develop Indian Navy Common Operating Picture (INCOP) with many more analytic features using new technologies and communication systems. With these developments DRDO and Indian Navy have shown the way for indigenisation for the other Services to emulate.

•   In TBA, three services besides their inherent conceptual variances use varied types of legacy and IP based modern communications. The communications are static, deployable and mobile. It is recommended to check the efficacy and status of integration in operations and test bed to identify variances and then find solutions to integration challenges.

•   Info, Data and Big Data Challenges. The big tech companies while serving our communication needs, also pose challenge to our security since the data collected by them is stored beyond the national boundaries, thus, beyond the purview and jurisdiction of national law. This opens possibilities of its misuse which is inimical to our sovereignty, national and security interests. Hence, the data sourced with in the country must be stored with in the country so that these remain under the purview of our law enforcement agencies.

•   Security. With increase in digitisation in defence, the threats too proportionally have increased in this domain. Therefore, communication products and contents must be sourced from the trusted sources only.

•   Space Domination. Space situational awareness is vital for collision avoidance as well as to keep an eye on developing threats in the space domain. While collision avoidance would be ensured by ISRO, the threatening satellite or anti-satellite activity is the domain of the defence. Optimum solution for generating required warning / data is vital for both. The first step towards this is building of robust SSA.              .

•   Space Observation/Surveillance. To enhance security, we need to enhance our observation in the area of interest with dedicated capabilities at LEO.

•   Vulnerability of Satcom. Satellite communication is vulnerable to external interference at various levels i.e., at satellite level, in command-and-control link as well as its ground infralstructure. Such attacks/ interferences are difficult to attribute to an adversary. Hence, the diversity and robustness of satellites and its infrastructure is vital.

•   Quantum Comn. Unlike other forms of comn, which remain vulnerable, the quantum communication will ensure secure military communication. Several countries are engaged in the research in the field, eg, China and US have achieved considerable success. Indian defence forces, too, should not lag behind. DRDO (young scientist laboratory) is following a road map and is moving ahead with research in this new area comprising several applications.

•   Relevance of 5 GTechnology in the Armed

contd on page 48

contd from page 46

Forces. 5G will enable monitoring, collation and present relevant data of all activities for better coordination and informed decision taking of high order. Thus, it acts as a force multiplier. It will facilitate transition from old archaic procedures to new processes, increasing efficiency of the defence systems. Armed forces require low to high frequency bands from below 3GHZ band to above 6GHZ band to cover all operations. Dedicated specialist teams should be established to interact with the industry and monitor progress of rolling of 5 G in the armed forces for various facets of its use.              

•   Reducing Cost of Military logistics through IOT. The use of the emerging technology will overcome challenges and bring in transparency, reliability efficiency and decision making with use of less man-hours. Following actions will help to implement use of technology in logistics:-

(i)            Institute inhouse system studies to explore potential use of IOT and Blockchain.

(ii)           Standardize protocols for data sharing.

(iii)          Nominate lead agencies as per domain expertise.

(iv)         Earmark test beds and evaluate.

(v)          Expand scope throughout the organisation.

The post EVENT REVIEW: Digitisation & Netcentric Ops in the Armed Forces appeared first on IMR.

The agreement was signed on 15 July, between the Director-General of Israel’s National Cyber Directorate (INCD), Yigal Unna, and India’s Ambassador to Israel, Sanjeev Singla.

“Deepening cooperation with India is another important step in confronting global cyber threats,” Unna said.

“The accelerated digitisation processes that accompany the enormous challenge of dealing with the COVID-19 epidemic and the increase in threats in cyberspace bring with them challenges and the need to quickly build protected services and systems,” Unna told after signing the agreement.

“Israel can contribute from its experience and can benefit from the vast experience gained in India in dealing with cyber attacks,” he added.

Announcing the signing of the MoU on operational collaboration in cyber security, the Indian embassy’s twitter handle described it as a “new normal” in “staying the course and reaching newer heights together”.

“Cyber security is a growing and natural area of close cooperation between India and Israel. It has been emphasised strongly by our two Prime Ministers. And its relevance has been underscored by the latest COVID-19 pandemic,” Singla told .

The MoU signed between the Indian Computer Emergency Response Team (CERT), a unit of the Ministry of Electronics and Information Technology, and INCD deepens the operational cooperation between the two sides and will expand the scope of exchange of information on cyber threats in order to raise the levels of protection in the field.

The agreement lays down the framework for dialogue, cooperation in capacity building, mutual exchange of best practices in the field and facilitates regular exchanges.

Cyber security was identified as an important area of cooperation during Prime Minister Narendra Modi’s visit to Israel in July 2017 and an agreement was signed between the two sides during Israeli Prime Minister Benjamin Netanyahu’s visit to India the following year.

“India and Israel have been cooperating in the cyber field since January 2018, so a new agreement is another opportunity to reaffirm the mutual commitment between the two countries. Since the initial agreement, professional seminars have been held among industry and government officials and many reciprocal visits have taken place,” a press release by INCD said.

Several meetings have been held between the Indian and Israeli side since 2018 to strengthen cooperation in the field of cyber security.

Lt General (Retd) (Dr) Rajesh Pant, National Cyber Security Coordinator (NCSC) of India had also visited Israel to attend the Cyber Week in June 2019.

The last five months of global lockdown has witnessed the expanding scope of the digital world and in the process, it has also exposed the vulnerabilities of protecting vital national infrastructure from the threat of cyber attacks.

Source link

The post India and Israel agree to expand ties in dealing with cyber threats – Indian Military Review appeared first on IMR.