Cyber Security | Legal Literacy | ASTC | Nepal

Presentation delivered on Cyber Security in Nepal in program Legal Literacy for Citizens Empowerment organised by A Step: Towards Change

Transcript

1. 2020-08-01 (C) A STEP: TOWARDS CHANGE 1
2. CYBER SECURITY / साइबर सुरक्षा आलोक श्रेष्ठ कोषाध्यक्ष / डिजिटल समुह, एक पाईला: पररवर्तनर्र् त DATA ANALYST
3. CYBER SECURITY ALOK SHRESTHA TREASURER / DIGITAL TEAM, A STEP: TOWARDS CHANGE
4. 2020-08-01 (C) A STEP: TOWARDS CHANGE 4
5. CYBER SECURITY • Cyber - involving, using, or relating to computers, especially the internet • Security - protection of a person, building, organization, or country against threats such as crime or attacks by foreign countries • Cyber security is the practice of defending computers, servers, mobile devices, electronic systems, networks, and data from malicious attacks. It's also known as information technology security or electronic information security. The term applies in a variety of contexts, from business to mobile computing,. • Data, Digital Signature 2020-08-01 (C) A STEP: TOWARDS CHANGE 5
6. 3 KEY OBJECTIVES OF COMPUTER SECURITY • Confidentiality • Integrity • Availability (C) A STEP: TOWARDS CHANGE 2020-08-01 6
7. THE IMPORTANCE OF CYBER SECURITY • The internet service in Nepal started in 1993 in a venture of the Royal Nepal Academy of Science and Technology (RONAST) and Mercantile Office System (MOS). • Cyber security is important because government, military, corporate, financial, and medical organizations collect, process, and store unprecedented amounts of data on computers and other devices. 2020-08-01 (C) A STEP: TOWARDS CHANGE 7
8. CATEGORIES • Network security - practice of securing a computer network from intruders, whether targeted attackers or opportunistic malware • Application security - keeping software and devices free of threats. A compromised application could provide access to the data its designed to protect. Successful security begins in the design stage, well before a program or device is deployed. • Information security - protects the integrity and privacy of data, both in storage and in transit. (C) A STEP: TOWARDS CHANGE 2020-08-01 8
9. CATEGORIES • Operational security - processes and decisions for handling and protecting data assets. The permissions users have when accessing a network and the procedures that determine how and where data may be stored or shared all fall under this umbrella. • Disaster recovery and business continuity - how an organization responds to a cyber-security incident or any other event that causes the loss of operations or data. Business continuity is the plan the organization falls back on while trying to operate without certain resources. • End-user education - addresses the most unpredictable cyber-security factor: people (C) A STEP: TOWARDS CHANGE 2020-08-01 9
10. “ ” A CHAIN IS AS STRONG AS THE WEAKEST LINK 2020-08-01 (C) A STEP: TOWARDS CHANGE 10
11. MEDIUM OF ATTACK • Malware • Virus, Trojans, Spyware, Ransomware, Adware, Botnets • SQL injection • Phishing – Fake acting as genuine (Fake Profile, Website, Information) • Man-in-the-middle attack • Denial-of-service attack 2020-08-01 (C) A STEP: TOWARDS CHANGE 12
12. BASIC CYBER SAFETY TIPS • Password/PIN: Strong, different for different site, avoid writing them down, never share, keep safe, regularly change • Links: Avoid clicking suspicious • Unknown emails, calls, messages: Avoid opening, replying, clicking on any links • Website: Check Secure, Logout after you finish • Public: Do not post, share privte info, or login from public Wifi • Update: Always use updated software • Antivirus: Use it • Educate yourself and others • (Firewalls, Implementation of Authentication, Digital Signatures, Email Security, Web security, Wifi Security,...) (C) A STEP: TOWARDS CHANGE 2020-08-01 13
13. RELEVANT LAWS IN NEPAL (C) A STEP: TOWARDS CHANGE 2020-08-01 14
14. RELEVANT LAWS IN NEPAL • मुलुकी अपराध संहहर्ा, २०७४ • ववद्युर्ीय (इलेक्ट्रोननक) कारोबार ऐन, २०६३ • Chapter 9 Offence Relating To Computer – Crimes and Punishments • Information Technology Bill, 2075 (C) A STEP: TOWARDS CHANGE 2020-08-01 15
15. मुलुकी अपराध संहहर्ा, २०७४ • @@$= of}g b'Jo{jxf/ ug{ gx'g] - s;}n] cfk\mgf] klt jf kTgL afx]s cGo JolQmnfO{ lghsf] d~h'/L ljgf s/0fLsf cfzon] ;dft]df jf lghsf] ;+j]bgzLn cË 5f]Pdf jf 5'g k|of; u/]df, lghsf] leqL kf]zfs vf]n]df jf vf]Ng] k|of; u/]df, lghn] nufpg] leqL kf]zfs nufpg jf k'msfNg s'g} lsl;dn] afwf cj/f]w u/]df jf lghnfO{ c:jfefljs ?kdf s'g} PsfGt 7fpFdf nu]df, of}g ;DaGwL cfk\mgf] cË lghnfO{ 5'g, ;dfpg nufPdf, lgh;Fu clZnn jf cGo To:t} k|sf/sf] zAb df}lvs, lnlvt jf ;fÍ]lts ?kdf jf ljB'tLo dfWodaf6 k|of]u u/]df, clZnn lrq jf t:jL/ b]vfPdf, of}gsf cfzon] lh:SofPdf jf x}/fgL lbPdf jf lgh;Fu c:jfefljs, cjfl~5t jf cdof{lbt Jojxf/ u/]df lghn] of}g b'Jo{jxf/ u/]sf] dflgg]5 . - tLg jif{;Dd s}b / tL; xhf/ ?k}ofF;Dd hl/afgf • @(*= ljB'tLo dfWodåf/f uf]kgLotf eË ug{ gx'g]M s;}n] ljB'tLo dfWoddf /x]sf] jf k|jfx x'g] ;"rgf, hfgsf/L, kqfrf/ cglws[t ?kdf k|fKt ug{ To;sf] uf]kgLotf eË ug{ jf cglws[t ?kdf s;}nfO{ x:tfGt/0f ug{ jf u/fpg x'Fb}g . - ug]{ jf u/fpg] JolQmnfO{ b'O{ jif{;Dd s}b jf aL; xhf/ ?k}ofF;Dd hl/afgf jf b'j} • #))= x}/fg kfg]{ ab\lgotn] lr¶L kq n]Vg gx'g] M -!_ s;}nfO{ 8/, qf; jf b'Mv jf x}/fgL lbg], ckdfg jf a]OHht ug]{ ablgotn] s'g} lr¶L kq, krf{ jf cGo s'g} lsl;dsf] lnvt n]vL, n]vfO{ jf ljB'tLo dfWodåf/f wDsL lbg], ;tfpg], lh:Sofpg] jf cGo s'g} lsl;dn] cg'lrt Jojxf/ ug{ jf u/fpg x'Fb}g . - ug]{ jf u/fpg] JolQmnfO{ Ps jif{;Dd s}b jf bz xhf/ ?k}ofF;Dd hl/afgf jf b'j} 2020-08-01 (C) A STEP: TOWARDS CHANGE 16
16. मुलुकी अपराध संहहर्ा, २०७४ • #)#= Ifltk"lt{ e/fO{ lbg' kg]{ M o; kl/R5]b adf]lhdsf] s;"/ u/L s;}n] s'g} nfe k|fKt u/]sf] jf s;}nfO{ s'g} lsl;dsf] xflg, gf]S;fgL, x}/fgL jf Iflt k'¥ofPsf] /x]5 eg] s;"/af6 To:tf] nfe, xflg, gf]S;fgL, x}/fgL jf Ifltsf] Ifltk"lt{ ;d]t e/fO{ lbg' kg]{5 . • #)$= xbDofb - s;"/ eP u/]sf] ldltn] tLg dlxgf gf3]kl5 ph'/ nfUg] 5}g . • #)&= a]OHhtL u/]df x'g] ;hfo M -!_ s;}n] s;}sf] a]OHhtL u/] jf u/fPdf lghnfO{ b'O{ jif{;Dd s}b jf aL; xhf/ ?k}ofF;Dd hl/afgf jf b'j} ;hfo x'g]5 . t/ ljB'tLo jf cGo cfd ;~rf/sf dfWodaf6 a]OHhtL u/] jf u/fPdf To:tf] ;hfodf yk Ps jif{;Dd s}b / bz xhf/ ?k}ofF;Dd hl/afgf x'g]5 . • #)*= xbDofb - s;"/ ePsf] s'/f yfxf kfPsf] ldltn] tLg dlxgf gf3]kl5 ph'/ nfUg] 5}g . 2020-08-01 (C) A STEP: TOWARDS CHANGE 17
17. 2020-08-01 (C) A STEP: TOWARDS CHANGE 18
18. ववद्युर्ीय (इलेक्ट्रोननक) कारोबार ऐन, २०६३ • $$= sDKo'6/ ;|f]t ;Í]tsf] rf]/L, gi6 jf kl/jt{g ug{] - tLg jif{;Dd s}b jf b'O{ nfv ?k}ofF;Dd hl/afgf jf b'j} • $%= sDKo'6/ ;fdu|Ldf cglws[t kx’Fr - s;"/sf] uDeL/tf x]/L b'O{ nfv ?k}ofF;Dd hl/afgf jf tLg jif{;Dd s}b jf b'j} • $^= sDKo'6/ / ;"rgf k|0ffnLdf Iflt k'¥ofpg] M b'O{ nfv ?k}ofF;Dd hl/afgf jf tLg jif{;Dd s}b jf b'j} • $&= ljB'tLo :j?kdf u}/sfg"gL s'/f k|sfzg ug]{ M Ps nfv ?k}ofF;Dd hl/afgf jf kfFr jif{;Dd s}b jf b'j} , k6s k6s u/]df cl3Nnf] k6s ePsf] ;hfosf] 8]9L ;hfo 2020-08-01 (C) A STEP: TOWARDS CHANGE 19
19. ववद्युर्ीय (इलेक्ट्रोननक) कारोबार ऐन, २०६३ • $*= uf]kgLotf eË ug]{ M s;"/sf] dfqf x]/L Ps nfv ?k}ofF;Dd hl/afgf jf b'O{ jif{;Dd s}b jf b'j} • $(= e'm§f Joxf]/fsf] ;"rgf lbg] M Ps nfv ?k}ofF;Dd hl/afgf jf b'O{ jif{;Dd s}b jf b'j} • %)= e'm§f Ohfhtkq jf k|df0fkq k]z ug]{ jf b]vfpg]M s;"/sf] uDeL/tf x]/L Ps nfv ?k}ofF;Dd hl/afgf jf b'O{ jif{;Dd s}b jf b'j} • %!= tf]lsPsf] ljj/0f jf sfuhft bflvnf gug]{ M krf; xhf/ ?k}ofF;Dd hl/afgf 2020-08-01 (C) A STEP: TOWARDS CHANGE 20
20. ववद्युर्ीय (इलेक्ट्रोननक) कारोबार ऐन, २०६३ • %@= sDKo'6/ hfn;fhL ug]{ M s;"/ ug{]af6 e/fO{ Ps nfv ?k}ofF;Dd hl/afgf jf b'O{ jif{;Dd s}b jf b'j} ;hfo x'g]5 . • %#= sDKo'6/ ;DaGwL s;"/ ug{ b'?T;fxg M s;"/sf] dfqf x]/L krf; xhf/ ?k}ofF;Dd hl/afgf jf 5 dlxgf;Dd s}b jf b'j} • %$= dltof/nfO{ ;hfo M d'Vo s;"/bf/nfO{ ePsf] ;hfosf] cfwf ;hfo • %%= g]kfn /fHoaflx/ u/]sf] s;"/df x'g] ;hfo M o; P]g adf]lhd d'2f rnfO{ ;hfo ug{ ;lsg]5 2020-08-01 (C) A STEP: TOWARDS CHANGE 21
21. ववद्युर्ीय (इलेक्ट्रोननक) कारोबार ऐन, २०६३ • %^= hkmt ug]{ • %&= ;Ël7t ;+:yfn] u/]sf] s;"/ M k|d'v ?kdf lhDd]jf/ JolQmn] ;f] s;"/ u/]sf] dflgg]5 . cfˆgf] hfgsf/L lagf ePsf] jf s;"/ x'g glbg lghn] dgfl;a dflkmssf ;a} k|oTgx? u/]sf] lyof] egL k|dfl0ft ug{ ;s]df lghnfO{ ;f] s;"/sf] nflu bf]ifL 7x¥ofOg] 5}g . • %*= cGo ;hfo M pNn+3gsf] dfqf x]/L krf; xhf/ ?k}ofF;Dd hl/afgf jf 5 dlxgf;Dd s}b jf b’j} • %*s=Ifltk"lt{ e/fO{ lbg] M o; kl/R5]b adf]lhdsf] s;"/af6 kLl8t JolQmnfO{ x'g uPsf] xfgL gf]S;fgL ljrf/ u/L Gofoflws/0fn] s;"/bf/af6 dgfl;j Ifltk"lt{ e/fO{ lbg ;Sg]5 . • %(= k|rlnt sfg"g adf]lhd ;hfo ug{ afwf gk'Ug] M o; P]g cGtu{t s;"/ 7xl/g] s'g} sfd cGo s'g} k|rlnt sfg"g adf]lhd klg s;"/ 7xl/g] /x]5 eg] To:tf] s;"/ pk/ 5'6[} sf/afxL rnfO{ ;hfo ug{ o; P]gn]afwf k'¥ofPsf] dflgg] 5}g . 2020-08-01 (C) A STEP: TOWARDS CHANGE 22
22. ववद्युर्ीय (इलेक्ट्रोननक) कारोबार ऐन, २०६३ • &$= ph'/ ug]{ xbDofb M pNn+3g jf s;"/ eP u/]sf] yfxf kfPsf] ldltn] k}+tL; lbgleq ph'/ ug'{ kg]{5 . • &%= g]kfn ;/sf/ jfbL x'g]M -!_ o; P]g adf]lhd s;"/ 7xg]{ d'2f g]kfn ;/sf/ jfbL eO{ rNg]5 / To:tf] d'2f d'n'sL kmf}hbf/L sfo{ljlw ;+lxtf, @)&$ sf] cg';"rL –! df ;dfj]z ePsf] dflgg]5 . • -@_ pkbkmf -!_ adf]lhdsf] d'2fdf cg';Gwfg ubf{ k|x/Ln] lgoGqs jf cGo ;DalGwt ljz]if1sf] ;xof]u lng' kg{]5 . &^= Ifltk"lt{ e/fpg' kg]{ M o; P]g adf]lhd s;"/ u/]sf] sf/0faf6 s;}nfO{ s'g} lsl;dsf] xflg gf]S;fgL ePsf] /x]5 eg] To:tf] xflg gf]S;fgLsf] Ifltk"lt{ ;d]t s;"/bf/af6 e/fO{ lbg' kg]{5 . 2020-08-01 (C) A STEP: TOWARDS CHANGE 23
23. INFORMATION TECHNOLOGY BILL, 2075 • Debated, Not approved yet, will replace Electronic Transaction Act, 2063 • Several Improvements and new addition (Domain Regulation, Personal Information Collection) • Several question raising (Example: Recent Government hijacking of elearning.com.np, Threats to edigitalnepal.com / Doubtable words (teasing) (83) / Social Media Registration (91) / Government can intercept calls (113) / Fine up to 10 lakhs and 5 years imprisonment (96)) (C) A STEP: TOWARDS CHANGE 2020-08-01 24
24. OUTRO (C) A STEP: TOWARDS CHANGE 2020-08-01 25
25. BE AWARE, STAY SAFE. 2020-08-01 (C) A STEP: TOWARDS CHANGE 26
26. REFERENCES • Electronic Transaction Act, 2063: http://www.lawcommission.gov.np/en/wp- content/uploads/2018/10/electronic-transaction-act-2063-2008.pdf • मुलुकी-अपराध-संहहर्ा-ऐन-२०७४ - http://www.lawcommission.gov.np/np/wp- content/uploads/2019/05/%E0%A4%AE%E0%A5%81%E0%A4%B2%E0%A5%81%E0%A4%95%E0%A5 %80-%E0%A4%85%E0%A4%AA%E0%A4%B0%E0%A4%BE%E0%A4%A7- %E0%A4%B8%E0%A4%82%E0%A4%B9%E0%A4%BF%E0%A4%A4%E0%A4%BE- %E0%A4%90%E0%A4%A8-%E0%A5%A8%E0%A5%A6%E0%A5%AD%E0%A5%AA.pdf • साइबर अपराध र सो संग सम्बजधध िानकारी - https://www.facebook.com/occnepal/videos/109136317208401/ • https://english.khabarhub.com/2020/22/90611 • Digital Signature in Nepal -https://www.youtube.com/watch?v=YRDxTJjFq4M • SQL injection (Computerphile) - https://www.youtube.com/watch?v=ciNHn38EyRc 2020-08-01 (C) A STEP: TOWARDS CHANGE 27
27. REFERENCES – NEWS ARTICLES • Domain Hijacked: https://ictframe.com/elearning-nepal-our-companys-official-domain-name-hijacked/ • Unauthorised Site devolver removing article: https://kathmandupost.com/national/2020/04/02/kathmandu-press-accuses-its-site-developer- of-removing-a-news-article-without-consent • IT Ministry Threat: https://dgs.com.np/news/it-ministry-threatens-to-shut-down-edigital-nepal-for-blocking-governmental-digital-campaign-to- rank-on-google/ • Foodmandu data hacked: https://myrepublica.nagariknetwork.com/news/foodmandu-s-website-hacked-50-thousand-users-data-dumped/ • Vianet Data Breach: https://kathmandupost.com/national/2020/04/08/vianet-suffers-data-breach-leaking-personal-customer-details-online • Youtube exploit: https://gamerant.com/youtube-diamond-play-button-creator-award-exploit/ • https://www.facebook.com/NepalPolicePHQ/posts/4085104924896208 • Unauthorise Data Stealing: https://ictframe.com/attempts-made-to-steal-data-from-nepses-website/ • Women online: https://kathmandupost.com/national/2020/05/07/for-nepali-women-rampant-objectification-and-sexualisation-on-the-internet • Nepal fails to protect women online: https://www.hrw.org/news/2020/05/18/nepal-failing-protect-women-online-abuse 2020-08-01 (C) A STEP: TOWARDS CHANGE 28
28. ANY QUESTIONS? 2020-08-01 (C) A STEP: TOWARDS CHANGE 29
29. THANK YOU. 2020-08-01 (C) A STEP: TOWARDS CHANGE 30