Centre mulls cyber security policy focused on R&D

To reduce dependence on foreign vendors for anti-virus tools, the government is preparing a cyber security policy framework focused on indigenous research and development (R&D).

Sources said a decision “to evolve a common research agenda outlining the current capabilities of different organisations, existing gaps and R&D priorities for the future” was taken at a recent high-level meeting of top representatives of National Security Agency, department of telecommunications, department of information technology and National Technical Research Organisation.

They said the policy framework would be considered after various agencies working on R&D in cyber security share information. A top-level meeting in December is expected to review the progress on ensuring cyber security.

Among the major points raised at the recent meeting was that most data collection regarding vulnerabilities was done through tie-ups with foreign vendors such as McAfee and Symantec.

“International companies are unlikely to share information beyond data concerning India-specific domains,” it was observed at the meeting.
The officials attending the meeting are learnt to have deliberated at

length on putting in place a system that mandates reporting of vulnerabilities.

“Dependence on foreign vendors for supply of anti-virus tools creates vulnerabilities because these vendors need access to Indian cyber space for remote updates,” an internal government note reviewed by DNA said. These issues need to be addressed through robust regulatory and R&D strategies, the note added.
Yet another significant issue discussed at the meeting was that of developing standards and patents in next-generation technologies “in order to control cyber space”.

Only then will India be in a bargaining position on cyber security related issues, a source explained.