Topics: Challenges to Internal Security through Communication Networks | Role of Media and Social Networking Sites in Internal Security Challenges | Basics of Cyber Security | Money-Laundering and its Prevention
Questions
Q1. Social media has huge potential to disrupt societal peace and political stability. Discuss the threats to internal security due to social media and also enumerate the steps that can be taken. (15 Marks)
Q2. Enumerate the measures taken by the Government of India to thwart cyber security threats in India. Also, critically evaluate the issues in the Information Technology Act, 2000. (15 Marks)
Q3. The "dark net", though it has certain advantages, has turned into a hotbed of illegal activities posing multi-dimensional threats. In light of this statement, define 'darknet' and how does it pose a security challenge for India? (10 Marks)
Q4. Money laundering has become a more sophisticated activity with time. Discuss. Also mention the steps taken at national and international level to deal with it. (15 Marks)
Q5. In the light of growing incidences of money laundering, bring out the role played by the Financial Action Task Force in tackling the menace of money laundering. (10 Marks)
Model Structures
Q1. Social Media — Threats to Internal Security (15 Marks)
Introduction
The advent of social media led to decentralization of service delivery, grievance redressal, information dissemination and a wide array of other benefits. But with time, it has been used for other acts like cyber frauds, terrorism, and organized crime.
Main Body
Not just non-state actors — state actors too use social media to create instability, spread propaganda and cause social unrest, enabled by internet penetration, accessibility and affordability.
Threats to internal security from social media:
- Crowding of cyberspace by sophisticated operators who are difficult to trace — cyber-planners identify recruits, train them and plan terror attacks.
- Radicalisation of youth through propaganda and brainwashing on various platforms.
- Lack of data localization makes it difficult to gather information in time to hold these groups accountable.
- Social media allows operators to work in a target country without any physical presence — adding complexity and minimizing deterrence.
- Use of social media by political parties for polarization aids external agents in threatening internal security.
- Fake news and its quick spread results in false propaganda and sensitive issues being amplified, triggering issues detrimental to societal peace.
Steps that can be taken:
- Update current e-surveillance infrastructure — National Intelligence Grid (NATGRID), CERT-In, Network and Traffic Analysis System (NETRA) and the National Critical Information Infrastructure Protection Centre — as per the need of the time.
- Review the IT Act to make it stronger, and set up a crack team to respond to unusual incidents on a war footing.
- Promote fact-checking websites that can verify authenticity on a real-time basis.
- Dedicated institutes to train ethical hackers — preventive checks against hacking and quick response when attacked.
Conclusion
Certainty of punishment is a better deterrent than severity of punishment. There must be provisions which ensure punishment for spreading fake news.
Q2. Cyber Security Measures & the IT Act, 2000 (15 Marks)
Introduction
- From ransomware attacks on AIIMS and Safdarjung Hospital to attacks on the Kudankulam Nuclear Plant, India has been facing increasing cyber security threats in recent years. (Current-based)
- According to CERT-In data, more than 13 lakh cyber security incidents were observed in 2022. (Data-based)
- It is imperative that the Government of India take stringent measures to protect crucial areas — defence installations, sensitive documents, communication networks, air traffic control, railway traffic control etc.
Main Body
Steps and measures by the Government of India:
- National Critical Information Infrastructure Protection Centre (NCIIPC): Nodal agency created in January 2014 to protect the nation's critical information infrastructure.
- Cyber Swachhta Kendra: To combat cyber security violations.
- CERT-In: The nodal crisis-response agency, now being replicated on a smaller scale for specific sectors.
- National Cyber Coordination Centre: A multi-agency body to assess cyber threats and share information with stakeholders.
- National Cyber Security Policy, 2013: To build a secure and resilient cyberspace for citizens, businesses and government.
- Indian Cyber-Crime Coordination Centre (I4C) and Cyber Warrior Police Force: To tackle internet crimes such as cyber threats, child pornography and online stalking.
- Cyber Crisis Management Plan (CCMP): Countering cyber threats and cyber-terrorism.
- Information Security Education and Awareness Project (ISEA): Training personnel and providing research, education and training in information security.
- Capacity building and skill development programmes to create a pool of trained cyber security professionals.
The Information Technology Act, 2000: The IT Act was a crucial step in recognizing the importance of cyber security and regulating electronic transactions — giving statutory recognition to electronic contracts, electronic authentication, digital signatures, cybercrimes, and the liability of network service providers.
Issues in the Act:
- Outdated provisions: Enacted more than two decades ago, it has not kept pace with rapid technological advancement and evolving threats (e.g., Artificial Intelligence).
- Lack of clarity: Certain sections lack precision, leading to ambiguity in interpretation and implementation.
- Investigation and prosecution: Mechanisms for cybercrime investigation and prosecution need further strengthening.
- Data protection and privacy: Not comprehensively addressed — with proliferating digital platforms and data breaches, robust data protection legislation aligned with international best practices is needed.
- International cooperation: Cyber threats transcend national boundaries, necessitating cooperation for effective prevention and prosecution.
Conclusion
While the Government of India has taken several steps to enhance cyber security, the legal framework needs continuous improvement. The IT Act, 2000 requires revisions to address emerging challenges, provide clarity, strengthen investigation and prosecution, safeguard data protection and privacy, and promote international cooperation.
PSIR Test Series (16 Tests) + Mentorship
Questions prepared keeping in mind the changing nature of UPSC CSE
Q3. The Darknet — Advantages & Security Challenges (10 Marks)
Introduction
The dark net (dark web) is part of the deep web and refers to encrypted networks on the Internet that are not indexed by search engines such as Google, Yahoo or Bing.
Main Body
Importance/features of the darknet:
- Free access to various resources (e.g., academic research papers), secrecy in communication, and protection when leaking or transferring information.
- Avoiding censorship: Individuals in closed societies facing extreme censorship can communicate with the outside world.
- Anonymity and secrecy amid growing concerns about government snooping and data collection.
- Useful for whistleblowers and journalists.
Security challenges for India:
- Illegal activities: Sale of drugs and firearms, fake currencies, child pornography, human trafficking — e.g., darknet narcotics operatives shipping psychotropic drugs.
- Cyber fraud: Bank account details and registered phone numbers on sale — e.g., a database of more than 4,50,000 payment card details of Indian banks was uploaded on the darknet (Group-IB).
- Culpability of offence: Anonymity prevents enforcement agencies from tracing those engaging in illegal activities.
- Use of cryptocurrencies: Deals are mostly through cryptocurrencies like Bitcoin.
- Terrorism: Organizations like Al-Qaeda use the dark net to spread propaganda, recruit supporters, protect identities and raise funds.
Recent developments:
- C-DAC is working with CSIR on a darknet/network-telescope-based cyber security monitoring and interference framework.
- Kerala Police established a specialised darknet lab in its Cyberdome, with officers trained as darknet analysts.
Suggestions to counter the challenges:
- Strengthen the cybersecurity framework — e.g., remove loopholes in the IT Act, 2000.
- Cooperate with like-minded countries through intelligence, information, technology and expertise sharing.
- Invest in R&D, training and capacity building of cybersecurity personnel.
Conclusion
The dark net has proved a menace for the world and a safe haven for rogue elements. The need of the hour is strict vigil so that citizens can enjoy their right to privacy.
Q4. Money Laundering — Sophistication & Countermeasures (15 Marks)
Introduction
Money laundering is a method to hide or conceal the sources of money generated by illegal activities like trafficking of arms, drugs and humans, corruption etc.
Main Body
Money laundering has become more sophisticated because of ever-developing technologies and methods:
- Use of cryptocurrencies, alternative finance and digital currency — unregulated, with huge potential for misuse.
- Placing money followed by integration into the global financial system creates coordination issues between government institutions and jurisdictions.
- Structuring deposits through a large number of channels ("smurfs") helps launderers hide illegitimate money from anti-money-laundering agencies.
- Shell companies operate without active business presence and use fake invoices to channel laundered money into illegitimate businesses.
- Use of tax havens like the Cayman Islands and Panama for tax evasion and round-tripping.
Steps taken at national and international level:
- The Black Money (Undisclosed Foreign Income and Assets) and Imposition of Tax Act, 2015 to address black money and undisclosed income and assets.
- Prevention of Money Laundering Act, 2002: Criminalized money laundering as a cognizable and non-bailable offence.
- Financial Intelligence Unit (FIU) under the Ministry of Finance — coordinates and shares information on money laundering with national and international intelligence agencies.
- Financial Action Task Force (FATF): Established by G7 countries — sets standard procedures and ensures implementation of legal and regulatory measures against money laundering and terror financing.
- Vienna Convention: Ratifying countries are obligated to criminalize money laundering from drug trafficking.
- OECD forum convention against money laundering — supporting safeguards and tax administration access to suspicious transactions based on FIU information.
Conclusion
Money laundering transcends international boundaries and requires a global effort. All stakeholders must collaborate to strengthen data sharing to eliminate the problem.
Q5. Role of FATF in Tackling Money Laundering (10 Marks)
Introduction
- Money laundering is the process where financial transactions are structured to show money earned from illegal/illicit routes as proceeds of legitimate business. OR
- In response to increasing concerns over money laundering, the Financial Action Task Force (FATF) was established by the G-7 Summit in Paris in 1989 to develop a coordinated international response.
Main Body
Objectives of FATF:
- Combating money laundering; strengthening the financial system; international cooperation.
Role of FATF in combating money laundering:
- Developing recommendations and providing support to member countries.
- Monitoring members' progress in implementing necessary measures; reviewing laundering and terror-financing techniques and counter-measures.
- Identifying vulnerabilities at the national level to protect the international financial system from misuse.
- Setting global standards to combat terrorist financing, as laundered money is used in terror financing.
- Evaluating countries' ability to prevent, detect, investigate and prosecute terror financing — through two lists:
- Black list: Countries subjected to economic sanctions and prohibitive measures.
- Grey list: Countries subjected to increased monitoring by the FATF.
- Identifying new risks — such as the regulation of virtual assets as cryptocurrencies gain popularity.
Conclusion
FATF needs to be further strengthened by increasing cooperation — information exchange among financial units and competent authorities — and by formulating a standard definition of fugitive economic offenders.
