Hidden peril

The massive online attack by unknown hackers using ransomware WannaCry is a grim reminder to policymakers, software companies and users of technology in general of the hidden perils of a connected world. The mass cyber attack seized control of computers at hospitals, retail shops, logistics firms and individuals across 100 countries. India was not exempt, with the attack once again exposing the country’s unpreparedness to deal with such threats. Over the last few years, online users have been hit by many such attacks including the Heartbleed bug that is estimated to have affected nearly 17 per cent of all websites, and the hack on Yahoo which compromised nearly 500 million users. In India too, there have been a number of incidents of cyber thieves stealing information from the Aadhaar database. More recently, online restaurant guide and food ordering app Zomato admitted that about 17 million user records have been stolen from its database.

It is now a proven fact that connecting any strategic infrastructure to the internet makes it vulnerable to security threats. Yet, most users continue to be extremely vulnerable to hacking, data leakages and hijacking. That’s because hackers, sometimes backed by state actors, find new ways to break into online systems. The WannaCry attack showed that even vulnerabilities thought to be under control by responsible state actors can find themselves in the wrong hands. Clearly, the overall approach to online security needs a fresh perspective. There are three things that Indian policymakers and technology companies should do immediately. First, embed security into everything planned and implemented, without compromising on the quality or cost of implementation. Be it mobile payments or the Digital India initiative, everything has to be built on a secure environment for users. Companies, especially in the financial sector, will also have to give online security the highest priority by investing in next generation tools. Second, as India increasingly relies on electronic information storage and communication, it is imperative that laws around data security and information protection are put in place quickly. Third and most importantly, there is a need to build a strong perimeter around end-users, through education and awareness.

The majority of internet consumers in India have got online only recently and would not be aware of all the dangers that lurk in the world wide web. Already, there are many instances across the country of unsuspecting users becoming easy targets for fraudsters. Therefore, digital security and topics related to online hygiene such as creating strong passwords, opening email attachments from trusted sources, and detecting fake users on social media should be made a part of the school curriculum. All stakeholders in India’s digital transformation need to understand that it’s not enough to merely bring more people online — it is necessary to keep them secure too.

COMMENT NOW