Cyberwarfare… who cares?

For an IT superpower, India’s armed forces aren’t focussed on this emergent threat.

Today’s NYT reveals the story of the cyberwar competition held among various services training academies in the US. It also explains how each unit and formation in the US armed forces is taking this threat very seriously and preparing for a catastrophic eventuality.

These are the war games at West Point, at least last month, when a team of cadets spent four days struggling around the clock to establish a computer network and keep it operating while hackers from the National Security Agency in Maryland tried to infiltrate it with methods that an enemy might use. The N.S.A. made the cadets’ task more difficult by planting viruses on some of the equipment, just as real-world hackers have done on millions of computers around the world.

The competition was a final exam of sorts for a senior elective class. The cadets, who were computer science and information technology majors, competed against teams from the Navy, Air Force, Coast Guard and Merchant Marine as well as the Naval Postgraduate Academy and the Air Force Institute of Technology. Each team was judged on how well it subdued the threats from the N.S.A.

The cyberwar games at West Point are just one example of a heightened awareness across the military that it must treat the threat of a computer attack as seriously as it does an attack carried out by a bomber or combat brigade. There is hardly an American military unit or headquarters that has not been ordered to analyze the risk of cyberattacks to its mission — and to train to counter them. If the hackers were to succeed, they could change information on the network and cripple Internet communications.[NYT]

As India is an emergent IT superpower, cyber war should naturally be the forte of the Indian defence services. If it is not so, it is only due to the limited interaction between the private sector and the defence services. The archaic concept of security classifications, inherited from the pre-WW2 British army, has to be blamed for restraining the Indian armed forces from exploiting the full potential of the vibrant private sector. In an interview to the DSSC journal in the mid-1980s, the then MoS for defence, Arun Singh had identified the antediluvian mindset of the defence services on security classification of its material as one of the biggest bane of the Indian armed forces. Nothing much has changed in the last 20 years in the way Indian armed forces classify and secure their information. In the same period, the world has moved from a Web 0.0 to Web 2.0 and the paradigm of preparing, holding, communicating and securing information (civil and military) has undergone a sea change.

Some cynics would point out that Indian armed forces are too much of an Industrial age [even Maginot line, if one looks at the LoC] armed forces, which will succeed in the event of a cyber attack because they haven’t really embraced technology at functional and operational levels. This may be a source of comfort for some today but the latest weapon systems, gadgetry and equipment being inducted into the arsenal of the Indian armed forces will make this argument redundant very soon.

Moreover, Indian armed forces can not afford to live on past glories and prepare for the battles of the past. When will the they learn to prepare for the wars of the future — wars of an information age? Pakistan may be fighting the Taliban — who wish to take the region back to the Stone age — but the jehadis still use the tools of information warfare to the fullest. The Chinese have a reputation of sorts about initiating cyber attacks, which has caused concern in the US security establishment. And lest we forget, China still happens to be India’s neighbour.

It seems that the Indian defence establishment will wake up only after all their digital communication are fully crippled by a cyber attack, as witnessed earlier in Russia’s neighbouring countries and also in certain US defence establishments. Foresight, vision, plannning… what’s that? As the ole’ Brit officer would have uttered, they’re going to lock the damned barn door only after the horse has bolted.

, , , , , , ,

21 Responses to Cyberwarfare… who cares?

  1. Amit May 12, 2009 at 9:10 pm #

    Is it that only comments that do NOT question the authors antecedents will be published ? Why did you delete my previous comment questioning the author regarding his knowledge about mil affairs ?

    • Pragmatic May 12, 2009 at 9:16 pm #

      Mr. Amit:

      It is about the message, not the messenger. Please focus on the message. This is not a forum for petty personal attacks or rants. And there are commenting rules just above the commenting box which you have failed to read. Expunging and editing comments to prevent this forum from degrading into a street side slanging match thus remains my prerogative.

      Moreover, this blog has nearly 600 posts, and has been on the INI platform for last 21 months. Please use the search engine to find blog posts on topics close to your heart and of your interest. Thanks but no thanks.

  2. Amit May 13, 2009 at 1:39 pm #

    Dear Pragmatic ,
    when such a serious issue of cyber warfare and abilities of India to counter it is being raised , would it not be wise to first of all ,scientifically analyse the “existing capability” , Critically carry out a threat assessment and then write a piece , rather than passing a generalised statement saying that the existing conditions are poor/bad and put fear in the minds of people reading this article , resulting in them losing any faith that they may have had in the ability of the nation-state to protect them and their interests against such an attack ? your comments please !!

    • Pragmatic May 13, 2009 at 3:37 pm #

      Mr. Amit:

      The serious readers of the blog are well-aware of the existing capabilities in this field. They do not need a recounting of the GS pamphlets or policies from Signals directorate. There is other data that I can’t share on public forums for various reasons that you’d perhaps understand.

      To satsify your query, let me give an example. Go and read this article at Stratfor about Chinese capabilities (you’ll need a subscription). You will be surprised to know the same Huawei Technologies is firmly embedded into India’s critical military communications infrastructure systems. BSNL has all Huawei switches simply because they are 1/10 th of cost and hence L1 during bidding. Has anyone in the defence services woken up to that threat?

  3. Amit May 13, 2009 at 4:55 pm #

    Dear pragmatic ,
    Firstly , In case you are REALLY in possesion of classified data , that itself is an offense !! However , just trying to use some fundu word to impress people is incorrect !!

    Secondly , If you are not discussing a problem in its nitty gritties , then a generalised comment is of no use !!

    Both of these statements are contradictory , therefore , my advice is to stick to openly available “incidents” or events that have taken place to justify your comments !! Thats all !!
    As far as Huawei technologies is concerned , the less said the better ! We have our own communist brethren trying to help the chinese !!

    Best wishes

  4. Amit May 13, 2009 at 5:09 pm #

    ps : Are indian armed forces using BSNL as a data backbone ? I have my doubts !!

    • Pragmatic May 13, 2009 at 6:00 pm #

      Mr. Amit:

      Even your esteemed Corps of Signals is using these Huawei switches. BSNL is also using them.

  5. Amit May 13, 2009 at 9:23 pm #

    Dear pragmatic ,

    I have a huawei modem at home and so do you , perhaps , but the software is opensource , If I am not mistaken , it would be easy to inspect and rewrite the code !! I really am not aware if Huawei switches are being used by Army or not , but I would suppose if till date nothing has come out , it means the switches are good and safe !! No? For that matter even reliance , and other operators use these switches !!

    But since you have raised the question , it is possible that you may have inspected the software to find a flaw that people missed !! I do hope that you will share the flaw !!

    • Pragmatic May 13, 2009 at 9:42 pm #

      Mr. Amit:

      Try and get the larger point being made in the post and the example of Chinese switches wrt the Stratfor article. The post wasn’t about the switches and nor is this a technology or telecom blog. Neither do I have an intention of converting this into one. May I request you to go and read the post again to understand the actual subject I am raising.

      This isn’t a high-school debating society or a street-side slanging match a la politicians on TV, where the aim is to obfuscate the issue by indulging in petty arguments and raising diversionary issues. Let’s keep flippancy and frivolity out of serious subjects. Period.

  6. Atanu Dey May 13, 2009 at 9:32 pm #

    I agree with the analysis above but I would like some clarification on one point that has been asserted which says, “As India is an emergent IT superpower, cyber war should naturally be the forte of the Indian defence services.”

    I have seen this “IT superpower” bit asserted many times in various places. I am looking for some empirical evidence of India’s IT superdom.

    What are they? Is it in the number of innovations that Indians produced in IT? Hardware? Software? Percentage of the global IT industry revenues? Percentage of Indians engaged in IT relative to, say, engaged in unskilled labor? Fraction of Indian GDP accounted by IT?

    By those measures, is USA an IT superpower? How about China? Or for that matter, how about Rwanda?

    Shouldn’t we call Pakistan a manufacturing superpower? Sure they have very little manufacturing but it is comparable to what India has in IT.

    Inquiring minds would like to know.

    • Pragmatic May 13, 2009 at 9:56 pm #

      Atanu:

      I can never hope to win against you in an argument. In fact, not many people can. Let me still offer a weak defence. The term I used was “emergent IT superpower”. Emergent as in something that is coming into existence.

      As you rightly point out, this is a commonly used misnomer and I have used it without giving it much thought. Or backing it up with facts. I plead guilty to hyperbole on this count. But it was used make a larger point about defence services being disassociated from the private sector.

  7. Amit May 13, 2009 at 9:56 pm #

    Dear Pragmatic ,
    I am sincerely asking that in this era of globalisation , what is the supposed harm in using switches/routers from a specific company ? In fact , is there an Indian manufacturer of routers or modems ? I do not think so !! We cannot manufacture chips in India , and in case the person//company concerned has to play dirty they can do so at the manufacturing stage itself for the chips and various components of the technology !! As far as India NOT trying to become secure in cyber space , I think the website of the Indian army amply gives out its stated objective as ,
    I quote , ” The aim and objective of Signals Corps is to make the Indian Army Network Enabled Force by 2012 and Network Centric Force by 2017.” Unquote . Ref : http://indianarmy.nic.in/arms/index_sig.htm

    and there seems to be no doubt in the intention of that !!

    So how can the statement in your last paragraph be justified , I quote ,” It seems that the Indian defence establishment will wake up only after all their digital communication are fully crippled by a cyber attack, as witnessed earlier in Russia’s neighbouring countries and also in certain US defence establishments ” , Unquote .

    waiting for a reply .

    ps : I know it is not a school debate , and the questions serious but then untruth should not be allowed to be spread !! :)

    • Pragmatic May 13, 2009 at 10:06 pm #

      Mr. Amit:

      and there seems to be no doubt in the intention of that !!

      That’s your opinion and not a fact. Intention and execution are two different kettles of fish.

      Where has the Signals directorate reached so far in their vision? Please try and find that out before preaching about truth. And you’ll have the answer to my concluding statement.

      I have neither the time nor the intention of continuing with this fruitless discussion unless you choose to focus on some substantive issues.Thank you.

  8. Pukhraj May 14, 2009 at 2:43 am #

    Pragmatic,

    It seems that you just want to raise rancor to gather more hits to this blog; and act like a typical, overly-educated Indian – dissatisfied and brought down by his fellow citizens.

    Dude, do the homework before you talk. And if some domain is not your forte, then stay away from being the strategic guru on it.

    Best,
    Pukhraj

  9. Atanu Dey May 14, 2009 at 10:10 am #

    Pragmatic:

    Oh please! I am not getting into an argument with you — I rarely argue with people whom I respect and know to be experts in their field. I am smart enough to realize that.

    My objection is merely semantic. The larger issue is that I want to understand what the reality of a specific situation is. In this case, I want to inquire into the “IT superpower” or even “emergent IT superpower” bit. Sure, it is possible that India is emerging as an IT superpower. But by that measure, so is other country. What’s so distinctive about India, in that case?

    Labeling India an IT superpower is akin to the claim that Islam is a “religion of peace.” But then so are all other religions — they are all “religions of peace.” When used so loosely, words lose their meaning and communication is a futile endeavor.

    Regards,
    Atanu

  10. Atanu Dey May 14, 2009 at 10:12 am #

    I meant “so is every other country” when I wrote “so is other country.”

  11. Siddharth Menon May 14, 2009 at 10:50 am #

    Network security is a serious topic and Indian govt is least concerned on it. They know a bit about and all they is take some stupid measures and spend a lot. I just can’t image as network security consultant I feel they are so dumb to do so.

    Recently there was a lot of thoughts on WiFi security. Some terrorist where able to get access to internet and send threat mail to govt using unsecured wifi. For this govt spend a lot on securing wifi all over, which is rubbish.
    Cause if the guy is smart he can always find anonymous access to internet and send mail using proxy or other sources.

    Regards,
    Siddharth Menon
    Borget Solutions

  12. Ravi May 14, 2009 at 12:24 pm #

    Dear Siddharth ,
    i could not agree more !! The step by govt to register wifi networks makes no sense !! what about people buying a normal adsl modem and attaching it to a wifi router ?

    something similar to licence required to view TV and radio that existed till late 80s!!

  13. Kannan May 14, 2009 at 6:35 pm #

    Its good to secure wifi..and also its better to force corporations,colleges,schools and universities to migrate their platforms to GNU/Linux or FreeBSD like China is doing now..Today viruses are ploughing though Windows systems like there is no tomorow..and most of the such systems connected to broadband will serve as malicious spam mail relays and potential DDoS nodes and other cyber crimes..Better late than never..We should also forget about implementing WiMaX type wireless network..it will be a nightmare with jehadis all around..
    Better would be old fashioned fiber-optic line..

  14. Col VT Venkatesh(Retd) May 14, 2009 at 10:18 pm #

    Does any intelligence agency in India has the capability to intercept SMS & MMS and analyse them online?
    Has any Intelligence agency tried to hack into systems like power plants,airports,nuclear plants etc
    If the answer to above is in the negative , be rest assured that some hacker will be doing it in the near future since flaws in these system may not have been plugged
    There are serious cyber threats facing the country & the veil of secrecy is not going to help
    Cyber warfare can not be fought by armed force alone.It is strategic at the highest level & we need to look at it in a totally different way.

  15. Pragmatic May 22, 2009 at 10:10 am #

    Finally BSNL decides not to source equipment from Huawei in west zone. Report

Leave a Reply