ForumIAS announcing GS Foundation Program for UPSC CSE 2025-26 from 19 April. Click Here for more information.
ForumIAS Answer Writing Focus Group (AWFG) for Mains 2024 commencing from 24th June 2024. The Entrance Test for the program will be held on 28th April 2024 at 9 AM. To know more about the program visit: https://forumias.com/blog/awfg2024
As India embraces AI, unique cyber security challenges are emerging in the era of AI, like sophisticated cyberattacks and automated malware development. However, integration of AI responsibly into cyber security solutions can also be a game-changer, like automation of cyber threat detection and response. A rapidly growing digital economy like India requires a proactive approach to address these emerging cyber security threats due to the use of AI.
What are the Cybersecurity challenges in the era of AI?
In a study by Deloitte, ‘Cybersecurity vulnerabilities/Challenges‘ emerged at the top of the list of concerns about various types of AI risks associated with AI.
Cyber security challenges associated with AI-
| Creation of Malware | AI tools can easily create new malware that contains new zero-day vulnerabilities or bypass detection. |
| Phishing Attacks | AI can be used to create new, sophisticated and targeted phishing attacks like intrusions or generation of new hacking tools. |
| Deepfakes | AI can be used to create Deepfakes that can be used to convince victims in social engineering attacks. |
| Missed threats and False Positives | Since the AI often relies on incomplete and biased data sets, it can create a false sense of security by creating false positives. |
What are the challenges to Cybersecurity in India due to AI?
1. Vulnerability of critical Infrastructure- The vulnerability of India’s critical infrastructure (power grids, transportation systems, and communication networks) to AI induced cyberattacks, can disrupt essential services and endanger public safety and national security. For ex- Cyberattack on Kudankulam Nuclear Power Plant.
2. Threat to robust Financial system- Indian Financial system has large cyber presence today with the increased use of digital payments and online banking systems. However, AI powered malware attacks pose threats like financial losses and identity theft to the robustness of financial systems in India. For ex- Malware attack on the City Union Bank’s SWIFT system in March 2020 leading to unauthorised transactions worth USD 2 million.
3. Data Breaches and privacy concerns- Cyber attacks increase the risk of data breaches, where hackers access and leak sensitive information. These can have serious consequences for the privacy and security of individuals and organisations.
4. Cyber Espionage- India can be a target for cyber espionage activities that aim to steal confidential information and gain a strategic edge. For ex- Operation Side Copy, a cyber espionage campaign targeted Indian military and diplomatic personnel with malware and phishing emails.
What are the reasons behind AI becoming a threat to Cybersecurity of India?
1. Fragmented cybersecurity infrastructure- In India, the responsibility for ensuring cybersecurity, is distributed across various government agencies and private entities. This leads to a lack of coordinated and comprehensive strategies.
For ex- Multiple agencies for cybersecurity in India like Indian Cyber Crime Coordination Centre (I4C), Computer Emergency Response Team-India (CERT-In) and National Critical Information Infrastructure Protection Centre (NCIIPC) which sometimes lead to fragmented responses.
2. Apathy towards Data privacy- Despite the passage of Digital Personal Data Protection Act 2023, the private and government entities have not implemented the secured cyber systems to prevent the leak of personal data. For ex- The recent ban on PayTM payments bank highlights the data privacy concerns.
3. Large digital divide- A significant portion of the population lacks access to digital literacy and awareness. This makes them vulnerable to phishing attacks and online scams.
4. Skill Shortage- India faces a shortage of qualified cybersecurity professionals, which hinders effective threat detection and response capabilities.
How Focus on AI integration can be a game changer for Cyber security in India?
Integrating AI responsibly into cybersecurity solutions can be a game-changer for India in the following ways-
1. Threat detection and response- AI-powered systems can analyse network traffic, user behaviour, and system logs to identify anomalies and potential threats in real-time. This will enable faster response in times of cyberattacks and minimising damage.
2. Vulnerability management- AI can automate vulnerability scanning and patching. This will help in ensuring that systems are constantly updated and protected from known exploits.
3. Financial Fraud prevention- AI can analyse financial transactions and identify suspicious patterns to prevent online fraud and financial theft.
4. Cybercrime investigation- AI can assist in analysing forensic data, identifying attackers, and predicting future attack patterns to improve cybercrime investigations.
What Should be the Way forward to use AI to bolster cybersecurity in India?
India needs to adopt a multipronged approach to use AI as a means to bolster cybersecurity in India. The following should be the way Forward-
1. Building a robust cybersecurity ecosystem- This must include strengthening government agencies like CERT-IN, promoting public-private partnerships, and fostering collaboration among stakeholders.
2. Investing in AI-powered cybersecurity solutions- While there are chances of misuse of AI, however, AI also holds immense potential for proactive threat detection and response. Scaling up the investment in research and development of secure AI solutions is crucial to bolster India’s cybersecurity.
3. Promotion of digital literacy and awareness- Educating the public about cyber hygiene,
online scams, and data privacy practices are essential to build a resilient digital society.
4. Developing a strong legal framework- India needs to enact robust cybersecurity laws and regulations to deter cybercrimes, protect critical infrastructure and ensure data privacy.
5. Investing in cybersecurity training and skills development- We must aim to address the skill shortage by providing training programs for long term cybersecurity preparedness.
The government, private sector, academia, and civil society must come together to build a robust cybersecurity ecosystem, promote responsible AI development and empower individuals to safely navigate the digital world.
| Read More- The Indian Express UPSC Syllabus- GS 3- Emerging technologies- Artificial Intelligence |
