Cyber Crime and Network Security in India

8/14/2019 Cyber Crime and Network Security in India

1/18

2008 Tata Communications, Ltd. All Rights Reserved

Cyber Crime & Network

Security in India

CIO Focus Security 2008Presentation by Adam Rice & AJ Vijayakumar


2/18

Explosive Internet Growth and Impacts to Businesses

ITU5.31%1,129,667,52860,000,0002007

CIA4.55%1,112,225,81250,600,0002006

IAMAI3.46%1,112,225,81238,500,0002005

IAMAI2.28%1,094,870,67725,000,0002004

ITU2.1%1,094,870,67722,500,0002003

ITU1.6%1,094,870,67716,500,0002002

ITU0.7%1,094,870,6777,000,0002001

ITU0.5%1,094,870,6775,500,0002000

ITU0.3%1,094,870,6772,800,0001999

ITU0.1%1,094,870,6771,400,0001998

Usage Source% Pen.PopulationUsersYear

Source: Morgan Stanley Research

E-Commerce Online Banking Government EducationMedia & Entertainment

Business Process Outsourcing

Internet use has been a key driver to enhanceboth Domestic & Global Trade in India

IndiaInternet Usage Stats and Telecommunications Market Report

Internet Usage and Population Statistics:

Real GDP Growth Rate

10.5

8.37.5

5.6 5.5 5.3 5.1 4.5 4.0

0

4

8

12

Chin

aIn

dia

Sing

apore

Hong

Kon

g

Malaysia

Indo

nesia

Korea

Thailand

Taiw

an

%


3/18

Defining Cyber Crime

Webster's New Millennium Dictionary of English

Entry: Cyber Crime

Part of Speech: nounDefinition: A crime committed on a computer network, esp. the Internet

Example: Identity theft is a Cyber Crime.

Malware (cont.) Downloader

Adware

Ransomeware

Child Pornography

Telecom Fraud

Financial Fraud

Computer Fraud

Espionage

Internet Harassment Malware

Virus

Worm

Trojan

Bot

Rootkit

Spyware Backdoor

Spamming

DDoS Unauthorized access

Social Engineering

Hacking

Phishing

Identity Theft

Cyber-stalking Information warfare


4/18

News/Media Perspective of Cyber Crime in the India

Cybercrime Threatens National Security inIndia

Date: September 27, 2007Source: merinews.comBy: Fahim Ahmedi

Cyber Crime On A Roll In India

Posted by Rushabh Chokshi onNovember 2nd, 2007

It is The New Age in Cyber Crime, accordingto latest news cyber criminals are nowtargeting Enterprises and Consumers based inTier III cities

India is now taking steps to fight against thecyber crime, Indian police are now beingtrained on how the Internet, e-mail, and othercomputer-based tools can be used bycriminals to illegally obtain information storedin databases

Cybercrime: A threat to national securityDate: September 17, 2007Source: merinews.comBy: Fahim Ahmedi

The ever increasing cyber crime is taking theworld by storm. Technology is a boon but it alsohas dangerous implications if left undetected.

Cyberspace is one such area that needs to pullall security strings together before things go outof hand.


5/18


Ankit Fadia, a 21-year-old computer whizkidand author of The Unofficial Guide to EthicalHacking said I could hack a state-ownedbanks website or a governmentcommunications website which shows thevulnerability, thousands of Indian websitesare being hacked each day.


6/18


darkREADINGAnnual CIS Study: Cost of Cybercrime Is Skyrocketing

Average annual loss per company has more than doubled since last year, according

to bellwether studySeptember 11, 2007 | 5:55 PM

By Tim WilsonSite Editor, Dark Reading

Cyber crime in India on the decline: ReportCyber crime in India on the decline: Report

Posted online: Monday, January 07, 2008 at 12:00:00Updated: Monday, January 07, 2008 at 10:37:53

New Delhi, January 6: Contrary to popular belief that cyber crime is on the rise, statistics show that the cases of thenew age crime have declined with the most noticeable difference seen in Gujarat.

However, no reasons were attributed in the report for the decline in the registration of cyber crime related cases inGujarat.

A senior official said the decline does not indicate that the incidents of cyber crime in the state had actuallydecreased. This is only a statistics based on the number of cases registered, he added.


7/18

Net Neutrality vs. Censorship

Clean the Pipes


8/18

The Threats are Real

Source: Arbor Networks 2008

Global Activity Maps


9/18

Internet Service Providers Security Concerns

Source: Arbor Networks 2007

TopConcern


10/18

The Botnet Problem Starts with Compromised PCs

150 of 600 million online PCs worldwide arebot infected(Source: BBC 2007 interview with Vint Cerf)

52,771 new infected PCs daily(Source: Symantec 2007)

Rapid growth in tools used by CyberCriminals

Victims often do not know that they havebeen compromised!

Easy to use tools with varying levels ofanonymity offered to cyber criminals

The most common infection methods detected byS21sec include browser exploits (65%), e-mailattachments (13%), operating system exploits(11%), downloaded Internet files (9%) and other

methods (2%), as illustrated in the figure below.

Source: S21sec

DownloadedFiles9%

OS Exploits11%

EmailAttachments

13%

BrowserExploits

65%

Other2%

Infection Methods


11/18

The Botnet Problem Starts with Compromised PCs

150 of 600 million online PCsworldwide are bot infected(Source: BBC 2007 interview with Vint Cerf)

52,771 new infected PCs daily(Source: Symantec 2007)

Rapid growth in available tools usedby Cyber Criminals!

Victims often do not know that theyhave been compromised!

Easy to use tools with varying levelsof anonymity offered to cybercriminals!

109,246

64,173

55,873

48,889

41,389

25,997

23,449

22,982

14,907

1,463

1,138

308

0 20,000 40,000 60,000 80,000 100,000 120,000

Trojan

Worm

Adware

Virus

Downloader

Backdoor

Dialer

Password Stealer

Other

Keylogger

Rootkit

Spyware

Malcode Additions 2007

Source: IBM ISS x-Force Trend Report 2007


12/18

The Botnet Problem Devastating Impact to Businesses

Common Exploits from Botnets

Identity Theft Credit card /Email fraud

Theft/Fraud in online banking and auctions Theft storage and distribution of login ID/Password, financial

data, etc

DDoS (Distributed Denial of Service) 50% of Botnets used for DDoS attacks

(Source: S21 sec)

Each bot generates 40kbps Small botnets command up to 10,000 bots

Large botnets command up to 1 million bots

20+ Gbps DDoS attacks witnessed in 2007(Source: Arbor Networks Inc. 2007)

Spam

Each spam bot can send 3 spam emails per second(259,000/day)

94% of all emails is Spam (Google/Postini 2006)


13/18

There are Solutions in Sight

Securing against Botnet attacks

Stopping in the cloud through a proxy-based service saves unnecessarybandwidth exhaustion and saves costs

Cloud-based and or CPE basedanti-spam solution

Preventing Spam

Stopping in the cloud within theproviders network reduces the chanceof a last mile bottleneck, whichcompletes the attackers work

Cloud based and or CPE basedanti-DDoS services.

Cloud is recommended.

Preventing DDoS

Combat a variety of Phishing,

Pharming, malware and web/emailfraud activities that can result inidentity theft

Content filtering services, anti-

virus, intrusion detection andprevention systems

Preventing Identity Theft

Layer your defenses against networksecurity threats to minimize theimpact!

Employ a Defense in Depth Strategy when Securing your Enterprise!

Identity vulnerabilities and enforce apriority based patch managementapproach to secure PCs from known

exploits.

Vulnerability assessment,penetration testing, anti-virus,etc

Preventing PC compromise

CommentarySolutions


14/18

Tata Communications Has Taken a Stance Against Cyber Crime!


15/18

What are Your Next Actions to Securing your Enterprise from CyberCrime?

Assess your Current state to define your Next steps

Take a custom self-assessment to determine your next steps

Web-based module www.tatacommunications.com/security/assessment

Combat

Cyber

Crime!


16/18


17/18

Managed Services Portfolio


18/18

Managed Security Services

Documents

Cyber Crime and Network Security in India