Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Nitin Pandey at The Hackers Meetup

Nitin Pandey
September 03, 2020

Nitin Pandey at The Hackers Meetup

Presentation on "National Security: Data Privacy & Emerged Threats" at The Hacker's Meetup by Nitin Pandey.

Nitin Pandey

September 03, 2020
Tweet

More Decks by Nitin Pandey

Other Decks in Research

Transcript

  1. ABOUT ME NITIN PANDEY Cyber Security Professional Chairman of National

    Information Security Council Founder of Hackers Day htttp://nitinpandey.tech
  2. OUR DATA PRIVACY IS A MAJOR CHALLENGE WE ARE LIVING

    IN VIRTUAL WORLD WHERE OUR EACH AND EVERY ACTIVITY IS BEING MONITORED BY THE APPS WE USE. WE SHOULD THINK TWICE BEFORE SHARING ANYTHING PUBLICLY & INSTALLING ANY APP.
  3. DATA REALLY MATTERS! DATA IS THE NEW GOLD ! HAVING

    ACCESS TO DATA GIVES ONE THE ABILITY TO ACCESS & CONTROL SOMEONE’S IDs, BANK ACCOUNTS & ALL SORTS OF OTHER INFORMATIONS.
  4. CHINESE APPS BANNED ON JUNE 29,2020, GOI BANNED 59 CHINESE

    APPS INCLUDING “TIKTOK” WHICH WAS A MUCH APPRECIATIVE STEP TAKEN BY GOVERNMENT OF INDIA TO PROTECT OUR DATA & PRIVACY.
  5. SECTION 69A OF IT ACT GIVES GOVERNMENT THE POWER TO

    ISSUE DIRECTIONS FOR BLOCKING FOR PUBLIC ACCESS OF ANY INFORMATION THROUGH ANY COMPUTER OR MOBILE RESOURCE.
  6. DANGEROUS APPS !  APPS LIKE TIKTOK & GAMES LIKE

    PUBG WERE TOO MUCH DANGEROUS  CHANGE IN BEHAVIOUR OF USERS  TOOK SO MANY LIVES  USERS WERE SO MUCH ADDICTIVE
  7. SO MANY POLITICIANS & YOUTH HAVE STARTED TARGETING GOVERNMENT WITH

    THEIR FAMOUS DIALOGUE: “CHINA IS OCCUPYING LAND AND INDIA BANS PUBG !” WHY POLITICIZING A GOOD STEP?
  8. PUBG PLAYERS ARE CRITICIZING GOVERNMENT OF INDIA FOR BANNING PUBG

    WITHOUT UNDERSTANDING THE CONCEPT BEHIND BANNING THESE APPS, PEOPLE ARE SAYING: “PUBG IS A KOREAN GAME, NOT CHINESE!” I
  9. TENCENT TENCENT HOLDINGS LTD, ALSO KNOWN AS TENCENT, IS A

    CHINESE BASED MULTINATIONAL COMPANY FOUNDED IN 1998. I
  10. PUBG IS WORLD’S ONE OF THE LARGEST MOBILE & PC

    GAMES WITH A HUGE NUMBER OF USERS BASE OF 50 MILLION DOWNLOADS & 33 MILLION ACTIVE USERS. PUBG IS OWNED BY KRAFTON, A SOUTH KOREAN COMPANY. I
  11. THE CHINESE CONNECTION “GAME FOR PEACE” IS A CHINESE VERSION

    OF PUBG MOBILE, LAUNCHED BY TENCENT, A CHINESE COMPANY. BETWEEN 2017-2018, TENCENT SUBSIDIARY IMAGE FRAME INVESTMENT BECAME KRAFTON’S 2ND LARGEST SHAREHOLDER, WITH A 13.2% STAKE. HENCE, THE CHINESE CONNECTION ! I
  12. HOW BANNING PUBG WILL HELP INDIA? FIRSTLY, ECONOMY! WE STOP

    THE OUTFLOW OF FUNDS TO OVERSEAS & THAT’S MAINLY CHINA. IT WILL ALSO GIVE AN OPPORTUNITY TO INDIAN IT COMPANIES TO VENTURE INTO GAMING WORLD, WHICH HAS BEEN ALMOST NON-EXISTENT SO FAR. I
  13. ANOTHER MAJOR THING IS THE INTELLIGENCE & DATA ISSUE. WITH

    SO MANY APPS ENGRAINED IN INDIAN PHONES & A HUGE PORTION OF THEM ON CHINESE PHONES ITSELF, IT IS VERY EASY FOR CHINA TO ACCESS THE DATA OF INDIVIDUAL USERS. I
  14. AS SAID EARLIER, DATA IS THE NEW GOLD & MOST

    PRECIOUS THING FOR ANY COMPANY, THEREFORE THE GAMING COMPANIES EASILY MINE DATA & SELL IT TO THIRD PARTIES FOR LARGE AMOUNTS. I
  15. THE GOVERNMENT OF INDIA REALLY DID A GREAT JOB OF

    NIPPING THESE PROBLEMS IN THE BUD. LET’S NOT GIVE AN OPPORTUNITY TO THE ENEMY CYBER MILITIA & ITS UNITS TO TAKE ADVANTAGE OF OUR CITIZENS. I
  16. ON GAMERS BEHALF ! THIS BAN ON PUBG IS INDEED

    TAKING AWAY FROM PEOPLE WHAT THEY ENJOY. SO, A GOOD STRATEGY WOULD BE TO DEVELOP OUR OWN CONTENT & PROVIDE A PLATFORM TO INDIAN GAMERS. I
  17. DATA PRIVACY & SAFETY OUR ALL ACTIVITIES ARE BEING MONITORED

    BY APPS PRIVACY IS AT RISK MOSTLY KIDS & WOMEN ARE BEING TARGETED GAMES LIKE PUBG ARE MAKING CHILDREN & TEENS VOILENT AND AGGRESSIVE SOME APPS ARE HIGHLY DANGEROUS LIKE “FACEAPP”
  18. DATA PRIVACY & SAFETY EVEN OUR E-MAILS ARE BEING MONITORED!

    C.S: GMAIL-> BOY SENDS AN E-MAIL TO HIS MOTHER “I HAVE BROKEN UP WITH MY GIRLFRIEND & FEELING DEPRESSED” Keyword filters technique
  19. PERSONAL DATA PROTECTION BILL IS MUCH REQUIRED IN INDIA IN

    2017, MINISTRY OF IT & E HAD FORMED A COMMITTEE TO STUDY ISSUES RELATED TO DATA PROTECTION. COMMITTEE WAS CHAIRMED BY RETD SUPREME COURT JUDGE JUSTICE B.N. SRIKRISHNA. COMMITTEE SUBMITTED THE DRAFT PERSONAL DATA PROTECTION BILL IN JULY 2018. GOVERNMENT OF INDIA SHOULD PASS THE PERSONAL DATA PROTECTION BILL OF INDIA AS SOON AS POSSIBLE.
  20. INCREASING CYBER CRIMES IN INDIA CYBER CRIME IS HAPPENING EVERYDAY!

    IT HAS RAPIDLY INCREASED IN COVID-19 PANDEMIC! CYBER ATTACKS ARE:  UNEXPECTED  UNSEEN  UNAPPROACHABLE  UNKNOWN
  21. IN INDIA, EVERYDAY CASES OF CYBER BULLYING, EXTORTION, FRAUDS, HARASSMENT

    ARE INCREASING RAPIDLY, ESPECIALLY AGAINST WOMEN & TEENS. CYBER THREATS ARE RAPIDLY INCREASING MASSIVE GROWTH IN CYBER CRIME !
  22. LACK OF AWARENESS ONE OF THE MAJOR REASONS IS LACK

    OF AWARENESS IN CITIZENS AGAINST CYBER THREATS WHY HAPPENING?
  23. LOOPHOLES IN LAW ENFORCEMENT LAW ENFORCEMENT AGENCIES OF INDIA ARE

    OUTDATED, UNTRAINED AND MOST OF THE CYBER CRIME CELLS ARE INCAPABLE IN SOLVING CYBER CRIME RELATED CASES WHY HAPPENING?
  24. MASSIVE AWARENESS NEEDS TO BE CREATED AMONG WOMEN AND CHILDREN

    REGARDING THE SAFE USE OF MOBILE PHONES, COMPUTERS AND THE INTERNET.
  25. ATTENTION SEEKING SYNDROME IS DEVELOPING IN CHILDREN AND TEENS. DESIRE

    TO BECOME A FAMOUS PERSON RELATIONSHIP TREND. CRAZE OF VERIFIED ACCOUNT (BLUE TICK BADGE)
  26. DO NOT TRUST BLINDLY! A BLUE TICK BADGE DOES NOT

    MEAN THE PERSON IS AUTHENTIC. TERMS LIKE “CYBERCOP” OR “CYBERPOLICE” IN USERNAMES DOES NOT MEAN THE PERSON IS REAL. OUR SAFETY IS IN OUR HANDS!
  27. MALICIOUS LINKS ON NAME OF COVID-19 DO NOT CLICK ANY

    UNKNOWN LINK WHICH IS CLAIMING OFFERS, DISCOUNTS, FREE GIFTS, COVID TESTS, JOB OFFERS OF WORK FROM HOME BECAUSE IT COULD BE A PHISHING PAGE OR MALICIOUS LINK OR A MALWARE OR A RANSOMWARE AND ONCE YOU CLICK ANY MALICIOUS LINK, YOUR ACCOUNT CAN BE HACKED, YOUR FILES CAN BE ENCYPTED BY RANSOMWARES, SPYWARES COULD GET INSTALLED SILENTLY AND SO ON…
  28. 01 REPORT WOMEN/CHILD RELATED CRIME WOMEN & CHILDREN CAN VISIT

    CYBERCRIME.GOV.IN & DIRECTLY FILE AN ONLINE COMPLAINT. 02 REPORT ANONYMOUSLY IF YOU DO NOT WANT TO KEEP YOUR IDENTITY SAFE THEN THERE IS AN OPTION TO REPORT YOUR COMPLAINT ANONYMOUSLY. 03 REPORT OTHER CYBER CRIME THIS OPTION IS GIVEN TO REPORT OTHER CYBER CRIMES SUCH AS BANKING FRAUDS, ACCOUNT HACKS ETC. An initiative of Ministry of Home Affairs NATIONAL CYBER CRIME REPORTING PORTAL
  29. DELHI M H U P M P H R T

    N R J cybercrime.gov.in INTERCONNECTED WITH EVERY POLICE STATION ACROSS THE NATION
  30. HOW IT WORKS? cybercrime.gov.in portal STEP 1 STEP 2 STEP

    3 You file an online complaint at cybercrime.gov.in Your complaint goes to your nearest Police Station/Cyber Crime Branch You receive a call from your Police Station & need to visit the station in person for the written statement
  31. ALWAYS KEEP ALL THE SCREENSHOTS, MESSAGES, CALL RECORDINGS AND/OR ALL

    TYPE OF EVIDENCES SECURELY & ENCLOSE THEM WHILE FILLING THE COMPLAINT FORM. NEVER EVER DELETE ANY EVIDENCE. KEEP ALL THE EVIDENCES SECURED
  32. LOOPHOLES IN LAW ENFORCEMENT 04 SO MANY FAKE CYBER EXPERTS

    ARE WAITING FOR YOU TO APPROACH THEM. THEY MISUSE YOUR EVIDENCES OR COULD MAKE YOU A VICTIM AGAIN. 02 DISTRICT CYBER CELLS ARE INCAPABLE TO SOLVE CYBER CRIME CASES, ESPECIALLY IN RURAL AREAS. 03 MOSTLY LOCAL POLICE STATIONS/CYBER CELLS TRY TO CONVINCE THE VICTIM NOT TO FILE THE CASE BY MISGUIDING AND CONFUSING THEM 01 IT’S NOT NECESSARY THAT YOU GET RESPONSE AFTER FILING ONLINE COMPLAINT.
  33. CYBER CRIME CELLS NEED TO BE TRAINED  CYBER CELLS

    NEED TO BE UPGRADED  COPS NEED TO BE TRAINED  MORE FORENSIC LABS ARE REQUIRED IN INDIA
  34. BE SAFE & SECURED ON INTERNET  REPLACE CHROME WITH

    FIREFOX  BLOCK DEVICE FINGERPRINT DETECTION USING CANVAS BLOCKER  TELEGRAM IS SAFER THAN WHATSAPP  DO NOT ALLOW COOKIE, USE COOOKIE AUTO DELETE EXTENSION
  35. +91 7705049191 Instagram: @initinpandey [email protected] THANK YOU Facebook: @initinpandey Twitter:

    @initinpandey CONTACT ME FOR ANY QUERY -NITIN PANDEY http://nitinpandey.tech