đŸ’„Join UPSC 2027,2028 Mentorship (July Batch) + XFactor Notes & Microthemes PDF

Subject: Internal Security

  • [pib] Exercise Dustlik-II

    The Second Edition of Joint Exercise Dustlik is scheduled from tomorrow.

    Must read:

    [Prelims Spotlight] Various Defence Exercises in News

    Exercise Dustlik-II

    • It is a bilateral defence exercise held between the Indian Army And Uzbekistan Army.
    • It is named after Dustlik, a town in the Jizzakh region of Uzbekistan.
    • The first edition of the exercise, Dustlik-I was held in Uzbekistan, near Tashkent, from November 3-13, 2019.
    • Defence Minister Rajnath Singh had flagged off the exercise along with his Uzbek counterpart, Major General Bakhodir Kurbanov in 2019 for the first time.
    • The joint exercise focused on counter-insurgency and counter-terrorism operations in urban settings.
  • China’s cyber eye and India

    Amid souring relations between India and China last year, evidence has emerged that a Chinese government-linked company’s attempt led to a power outage in Mumbai yesterday and now in Telangana today.

    Q.The use of cyber offensive tools and espionage is a fairly active element of the People’s Republic of China. Discuss in light of recent incidences of cyber attack in India.

    Red Echo & ShadowPad

    • On February 28, a Massachusetts-based firm published a report saying it had observed a steep rise in the use of resources like malware by a Chinese group called Red Echo.
    • It aimed to target “a large swathe” of India’s power sector.
    • It said 10 distinct Indian power sector organisations were targeted, including four Regional Load Despatch Centres (RLDCs) that are responsible for the smooth operation of the country’s power grid by balancing the supply and demand of electricity.
    • Red Echo used malware called ShadowPad, which involves the use of a backdoor to access servers.

    India confirms cyber attack

    • The Ministry of Power has confirmed these attempts, stating it had been informed in November 2020 about the ShadowPad malware at some control centres.
    • The Ministry said it was informed of Red Echo’s attempts to target the country’s load despatch centres in February.
    • It had said “no data breach/data loss” had been detected due to the incidents.

    What does it imply?

    • This is clearly something that is linked to China’s geopolitical interests.
    • It is established very clearly that the use of cyber offensive tools and espionage is a fairly active element of what the People’s Republic of China seems to be adopting and encouraging.
    • Even when they are not directly in charge of an offensive operation, they seem to be consistently encouraging actors to develop this capability.

    PRC’s long term strategy

    • These cyber-attacks are seen as an attempt to test and lay the grounds for further operations in the future.
    • We need to remember that sometimes these offensive operations are carried out to distract people from other places that they might be targeting or other activities that might be occurring.
    • There was an increase in cyber offensive operations and incidents around the world in the second half of 2020 especially targeting the healthcare and vaccine space.
    • When vaccine companies are targeted, the motive could be competition.
    • The motivation behind Stone Panda’s attack against SII and Bharat Biotech’s IT systems was to extract the companies’ intellectual property and gain a competitive advantage.

    Other such attacks: Stone Panda & vaccines

    • A Chinese hacker group known as Stone Panda had identified gaps and vulnerabilities in the IT infrastructure and supply chain software of Bharat Biotech and the Serum Institute of India.
    • These companies have developed Covaxin and Covishield, which are currently being used in the national vaccination campaign.
    • They are also in the process of testing additional Covid-19 vaccines that could add value to efforts around the world.
  • Pakistan to remain on FATF ‘Greylist’

    The Financial Action Task Force (FATF) has decided to retain Pakistan on the “greylist” till the next review of its performance.

    Practice question for mains:

    Q.What is FATF? Discuss its role in combating global financial crimes and terror financing.

    What is the FATF?

    • FATF is an intergovernmental organization founded in 1989 on the initiative of the G7 to develop policies to combat money laundering.
    • The FATF Secretariat is housed at the OECD headquarters in Paris.
    • It holds three Plenary meetings in the course of each of its 12-month rotating presidencies.
    • As of 2019, FATF consisted of 37 member jurisdictions.
    • India became an Observer at FATF in 2006. Since then, it had been working towards full-fledged membership. On June 25, 2010, India was taken in as the 34th country member of FATF.

    What is the role of FATF?

    • The rise of the global economy and international trade has given rise to financial crimes such as money laundering.
    • The FATF makes recommendations for combating financial crime, reviews members’ policies and procedures, and seeks to increase acceptance of anti-money laundering regulations across the globe.
    • Because money launderers and others alter their techniques to avoid apprehension, the FATF updates its recommendations every few years.

    What is the Black List and the Grey List?

    • Black List: The blacklist, now called the “Call for action” was the common shorthand description for the FATF list of “Non-Cooperative Countries or Territories” (NCCTs).
    • Grey List: Countries that are considered safe haven for supporting terror funding and money laundering are put in the FATF grey list. This inclusion serves as a warning to the country that it may enter the blacklist.

    Consequences of being in the FATF grey list:

    • Economic sanctions from IMF, World Bank, ADB
    • Problem in getting loans from IMF, World Bank, ADB and other countries
    • Reduction in international trade
    • International boycott

    Pakistan and FATF

    • Pakistan, which continues to remain on the “grey list” of FATF, had earlier been given the deadline till the June to ensure compliance with the 27-point action plan against terror funding networks.
    • It has been under the FATF’s scanner since June 2018, when it was put on the Grey List for terror financing and money laundering risks.
    • FATF and its partners such as the Asia Pacific Group (APG) are reviewing Pakistan’s processes, systems, and weaknesses on the basis of a standard matrix for anti-money laundering (AML) and combating the financing of terrorism (CFT) regime.
  • Australia vs Facebook Row

    The social media giant Facebook is locked in a battle with Australia over legislation that would require FB, Google to pay for news outlets.

    Row over the news on social media

    • Australia had proposed a law called the News Media and Digital Platforms Mandatory Bargaining Code Bill 2020.
    • It seeks to mandate a bargaining code that aims to force Google and Facebook to compensate media companies for using their content.

    Imagine if the case arises in India where tons of news channels and impulsive journalists are dying off hard to gather TRPs!

    Response from the ‘giants’

    • Google had threatened to make its search engine unavailable in Australia in response to the legislation, which would create a panel to make pricing decisions on the news.
    • Facebook responded by blocking users from accessing and sharing Australian news.

    Why countries are bringing such legislation?

    • Australia has launched a global diplomatic offensive to support its proposed law to force Internet giants Facebook and Google to pay media companies.
    • Google accounts for 53% of Australian online advertising revenue and Facebook for 23%.
    • The legislation sets a precedent in regulating social media across geographies and is being closely watched the world over.

    What is happening in other countries?

    • Australia’s proposed law would be the first of its kind, but other governments also are pressuring Google, Facebook and other internet companies to pay news outlets and other publishers for the material.
    • In Europe, Google had to negotiate with French publishers after a court last year upheld an order saying such agreements were required by a 2019 EU copyright directive.
    • France is the first government to enforce the rules, but the decision suggests Google, Facebook and other companies will face similar requirements in other parts of the 27-nation trade bloc.

    The ‘doubted’ reluctance

    • Last year, Facebook announced it would pay US news organizations including The Wall Street Journal, The Washington Post and USA Today for headlines.
    • In Spain, Google shut down its news website after a 2014 law required it to pay publishers.

    Why does this matter?

    • Developments in Australia and Europe suggest the financial balance between multibillion-dollar internet companies and news organizations might be shifting.
    • Australia is responding to complaints by news reports, magazine articles and other content that appears on their websites or is shared by users.
    • The government acted after its competition regulator tried and failed to negotiate a voluntary payment plan with Google.
    • The proposed law would create a panel to make binding decisions on the price of news reports to help give individual publishers more negotiating leverage with global internet companies.

    Not losing out revenue gain

    • Google’s agreement means a new revenue stream for news outfits, but whether that translates into more coverage for readers, viewers and listeners is unclear.
    • The union for Australian journalists is calling on media companies to make sure online revenue goes into newsgathering.
  • What is Extinction Rebellion?

    Delhi Police have named some environmental activists who are volunteers of a global environment movement seeking to call attention to the climate change emergency, in the Greta Thunberg ‘toolkit’ case.

    Q.Climate activism is increasingly turning into a propaganda movement. Discuss.

    What is Extinction Rebellion?

    • The global movement Extinction Rebellion also referred to as ‘XR’, describes itself as a decentralized, international and politically non-partisan movement using non-violent direct action and civil disobedience.
    • It aims to persuade governments to act justly on the Climate and Ecological Emergency.
    • XR was launched in the UK on October 31, 2018, as a response to a report by the United Nations Intergovernmental Panel on Climate Change (IPCC).
    • It had then declared that we only have 12 years to stop catastrophic climate change and our understanding that we have entered the 6th mass extinction event.
    • The movement now has a presence in 75 countries, including India.

    What does XR want?

    • The group has “three core demands” of governments around the world.
    • It wants governments to “Tell the Truth”, to “Act Now”, and to “Go Beyond Politics” in order to confront the climate and ecological emergency that the world is faced with.
    • It wants them to communicate the urgency to bring change, and reduce greenhouse gas emissions to net-zero by 2025.
    • XR seeks to “rebel”, and asks groups to “self-organise”, without the need for anyone’s permission, to come up with collective action plans as long as they adhere to the group’s core principles and values.

    What activities have XR done so far?

    • The group had announced a “Declaration of Rebellion” at launch, involving a public act of civil disobedience in London, demanding that the government reduce carbon emission to zero by 2025.
    • The eventual plan was to coordinate actions in other countries and to engage in an “International Rebellion” in March 2019.
    • The XR global website, however, states that the movement is “strictly non-violent”, and that they are “reluctant law-breakers”.
    • In April 2019, Greta Thunberg, the teenage Swedish climate activist, lent her support to the group by speaking to its members in London.

    XR and India

    • The movement claims to have been inspired by 15 major civil disobedience movements around the world, including, apart from Women’s Suffrage and the Arab Spring, India’s struggle for Independence.
    • It refers to Mahatma Gandhi’s Salt March in 1930.
    • XR’s website says there are 19 groups in the country, including in the cities of Mumbai, Pune, Delhi, Hyderabad, Bengaluru, Kolkata, and Chennai.

    Recent events

    • One of the group’s early public events was a “die-in” protest organised at Bandra Reclamation in Mumbai in October 2019.
    • Participants at “die-in” protests lie on the ground, pretending to be dead.
    • Since the city was already seeing protests against the felling of trees at Aarey Colony for the Metro crashed, police did not grant permission for the “die-in” protest.
  • Arjun: Main Battle Tank MK-1A

    PM has recently handed over the indigenously developed Arjun Main Battle Tank (MK-1A) to the Indian Army.

    Q.Discuss India’s preparedness for high-altitude warfare.

    Arjun Main Battle Tank

    • The Arjun Main Battle Tank project was initiated by DRDO in 1972 with the Combat Vehicles Research and Development Establishment (CVRDE) as its lead laboratory.
    • The objective was to create a “state-of-the-art tank with superior firepower, high mobility, and excellent protection”.
    • During the development, the CVRDE achieved breakthroughs in the engine, transmission, hydro-pneumatic suspension, hull and turret as well as the gun control system.
    • Mass production began in 1996 at the Indian Ordnance Factory’s production facility in Avadi, Tamil Nadu.

    Features of the Arjun tank

    • The Arjun tanks stand out for their ‘Fin Stabilised Armour Piercing Discarding Sabot (FSAPDS)’ ammunition and 120-mm calibre rifled gun.
    • It also has a computer-controlled integrated fire control system with a stabilised sighting that works in all lighting conditions.
    • The secondary weapons include a co-axial 7.62-mm machine gun for anti-personnel and a 12.7-mm machine gun for anti-aircraft and ground targets.

    How is Mk-1A different?

    • The Mk-1A version has 14 major upgrades on the earlier version.
    • It is also supposed to have missile firing capability as per the design, but this feature will be added later as final testing of the capability is still on.
    • However, the biggest achievement with the latest version is 54.3 per cent indigenous content against the 41 per cent in the earlier model.
  • What is NetWire Malware?

    This newscard is an excerpt from the original article published in The Hindu.

    Try this question from CSP 2018:

    Q.The terms ‘WannaCry, Petya, Eternal Blue’ sometimes mentioned news recently are related to

    (a) Exoplanets

    (b) Crypto currency

    (c) Cyber attacks

    (d) Mini satellites

    What is NetWire?

    • NetWire, which first surfaced in 2012, is a well-known malware.
    • It is also one of the most active ones around.
    • It is a remote access Trojan, or RAT, which gives control of the infected system to an attacker. Such malware can log keystrokes and compromise passwords.

    Threats posed

    • This malware essentially does two things:
    1. One is data exfiltration, which means stealing data. Most anti-virus software is equipped to prevent this.
    2. The other involves infiltrating a system, and this has proven to be far more challenging for anti-virus software.
    • NetWire is described as an off-the-shelf malware, while something like Pegasus, which used a bug in WhatsApp to infiltrate users’ phones in 2019, is custom-made and sold to nations.

    Back2Basics: Classification of malicious softwares

    Viruses

    • A computer virus is a type of malware that propagates by inserting a copy of itself into and becoming part of another program.
    • It spreads from one computer to another, leaving infections as it travels.
    • Viruses can range in severity from causing mildly annoying effects to damaging data or software and causing denial-of-service (DoS) conditions.
    • Almost all viruses are attached to an executable file, which means the virus may exist on a system but will not be active or able to spread until a user runs or opens the malicious host file or program.
    • When the host code (alternative word for a computer program) is executed, the viral code is executed as well.

    Ransomware

    • Ransomware is a type of malicious software that threatens to publish the victim’s data or perpetually block access to it unless a ransom is paid.
    • While some simple ransomware may lock the system in a way that is not difficult for a knowledgeable person to reverse, more advanced malware uses a technique called cryptoviral extortion.
    • This encrypts the victim’s files, making them inaccessible, and demands a ransom payment to decrypt them.

    Worms

    • Computer worms are similar to viruses in that they replicate functional copies of themselves and can cause the same type of damage.
    • In contrast to viruses, which require the spreading of an infected host file, worms are standalone software and do not require a host program or human help to propagate.
    • To spread, worms either exploit the vulnerability on the target system or use some kind of social engineering to trick users into executing them.
    • A worm enters a computer through a vulnerability in the system and takes advantage of file-transport or information-transport features on the system, allowing it to travel unaided.
    • More advanced worms leverage encryption, wipers, and ransomware technologies to harm their targets.

    Trojans

    • A Trojan is a harmful piece of software that looks legitimate.
    • After it is activated, it can achieve any number of attacks on the host, from irritating the user (popping up windows or changing desktops) to damaging the host (deleting files, stealing data, or activating and spreading other malware, such as viruses).
    • Trojans are also known to create backdoors to give malicious users access to the system.
    • Unlike viruses and worms, Trojans do not reproduce by infecting other files nor do they self-replicate.
    • Trojans must spread through user interaction such as opening an email attachment or downloading and running a file from the Internet.

    Bots

    • “Bot” is derived from the word “robot” and is an automated process that interacts with other network services.
    • Bots often automate tasks and provide information or services that would otherwise be conducted by a human being.
    • A typical use of bots is to gather information, such as web crawlers, or interact automatically with Instant Messaging (IM), Internet Relay Chat (IRC), or other web interfaces.
    • They may also be used to interact dynamically with websites.
  • [pib] Malabar Naval Exercises

    The 24th edition of Malabar maritime exercise, hosted by Indian Navy in 2020, witnessed the participation by Indian Navy, United States Navy, Japan Maritime Self Defence Force and Royal Australian Navy.

    Such news is nothing but the repetitive chunk that occurs every year with few or no new developments. Still, they are significant for the sake of information as Australia has joined it after several apprehensions.

     Question can be expected in CAPF, CDS or AFCAT exams.

    About Ex. Malabar

    • Exercise Malabar is a trilateral naval exercise involving the US, Japan and India as permanent partners.
    • This year Australia has joined as a permanent partner.
    • Originally begun in 1992 as a bilateral exercise between India and the United States, Japan became a permanent partner in 2015.
    • Past non-permanent participants are Australia and Singapore.
    • The annual Malabar series began in 1992 and includes diverse activities, ranging from fighter combat operations from aircraft carriers through Maritime Interdiction Operations Exercises.

    Significance of Australia’s inclusion

    • Earlier, India had concerns that it would give the appearance of a “quadrilateral military alliance” aimed at China.
    • Now both look forward to the cooperation in the ‘Indo-Pacific’ and the strengthening of defence ties.
    • This has led to a convergence of mutual interest in many areas for a better understanding of regional and global issues.
    • Both are expected to conclude the long-pending Mutual Logistics Support Agreement (MLSA) as part of measures to elevate the strategic partnership.
  • Controversial hashtags on twitter and their regulation

    The Centre has issued notice to Twitter after the micro-blogging site restored more than 250 accounts that had been suspended earlier on the government’s ‘legal demand’.

    Take this new term “Hashtags Activism”.

    What is the news?

    • Twitter was asked to block accounts and controversial hashtags that spoke of an impending ‘genocide’ of farmers for allegedly promoting misinformation about the protests, adversely affecting public order.
    • Twitter reinstated the accounts and tweets on its own and later refused to go back on the decision, contending that it found no violation of its policy.

    Concerns with the directive

    • This direction presents a clear breach of fundamental rights but also reveals a complex relationship between the government and large platforms on the understanding of the Constitution of India.
    • The specific legal order issued is secret.
    • This brings into focus the condition of secrecy that is threshold objection to multiple strands of our fundamental rights.
    • It conflicts against the rights of the users who are denied reasons for the censorship.
    • Secrecy also undermines the public’s right to receive information, which is a core component of the fundamental freedom to speech and expression.
    • This is an anti-democratic practice that results in an unchecked growth of irrational censorship but also leads to speculation that fractures trust.
    • The other glaring deficiency is the complete absence of any prior show-cause notice to the actual users of these accounts by the government.
    • This is contrary to the principles of natural justice.
    • This again goes back to the vagueness and the design faults in the process of how directions under Section 69A are issued.

    Are platforms required to comply with legal demands?

    • Cooperation between technology services companies and law enforcement agencies is now deemed a vital part of fighting cybercrime and various other crimes that are committed using computer resources.
    • These cover hacking, digital impersonation and theft of data.
    • The potential of the misuse has led to law enforcement officials constantly seeking to curb the ill-effects of using the medium.
    • Therefore, most nations have framed laws mandating cooperation by Internet service providers or web hosting service providers and other intermediaries to cooperate with law and order authorities in certain circumstances.

    What does the law in India cover?

    • In India, the Information Technology Act, 2000, as amended from time to time, governs all activities related to the use of computer resources.
    • It covers all ‘intermediaries’ who play a role in the use of computer resources and electronic records.
    • The term ‘intermediaries’ includes providers of telecom service, network service, Internet service and web hosting, besides search engines, online payment and auction sites, online marketplaces and cyber cafes.
    • It includes any person who, on behalf of another, “receives, stores or transmits” any electronic record. Social media platforms would fall under this definition.

    What are the Centre’s powers, vis-à-vis intermediaries?

    • Section 69 of the Act confers on the Central and State governments the power to issue directions “to intercept, monitor or decrypt
any information generated, transmitted, received or stored in any computer resource”.

    The grounds on which these powers may be exercised are:

    • in the interest of the sovereignty or integrity of India, defence of India, the security of the state,
    • friendly relations with foreign states,
    • public order, or for preventing incitement to the commission of any cognizable offence relating to these, or
    • for investigating any offence

    How does the government block websites and networks?

    • Section 69A, for similar reasons and grounds, enables the Centre to ask any agency of the government, or any intermediary, to block access.
    • Any such request for blocking access must be based on reasons given in writing.
    • Procedures and safeguards have been incorporated in the rules framed for the purpose.

    Obligations of intermediaries under Indian law

    • Intermediaries are required to preserve and retain specified information in a manner and format prescribed by the Centre for a specified duration.
    • Contravention of this provision may attract a prison term that may go up to three years, besides a fine.
    • When a direction is given for monitoring, the intermediary and any person in charge of a computer resource should extend technical assistance in the form of giving access or securing access to the resource involved.
    • Failure to extend such assistance may entail a prison term of up to seven years, besides a fine.
    • Failure to comply with a direction to block access to the public on a government’s written request also attracts a prison term of up to seven years, besides a fine.

    Is the liability of the intermediary absolute?

    • Section 79 of the Act makes it clear that “an intermediary shall not be liable for any third-party information, data, or communication link made available or hosted by him”.
    • This protects intermediaries such as Internet and data service providers and those hosting websites from being made liable for content that users may post or generate.
    • However, the exemption from liability does not apply if there is evidence that the intermediary abetted or induced the commission of the unlawful act involved.

    Judicial intervention in this regard

    • In Shreya Singhal Case (2015), the Supreme Court read down the provision to mean that the intermediaries ought to act only upon receiving actual knowledge that a court order has been passed.
    • This was because the court felt that intermediaries such as Google or Facebook may receive millions of requests, and it may not be possible for them to judge which of these were legitimate.
    • The role of the intermediaries has been spelt out in separate rules framed for the purpose in 2011.

    Legislative efforts

    • In 2018, the Centre favoured coming up with fresh updates to the existing rules on intermediaries’ responsibilities, but the draft courted controversy.
    • This was because one of the proposed changes was that intermediaries should help identify originators of offensive content.
    • This led to misgivings that this could aid privacy violations and online surveillance.
    • Also, tech companies that use end-to-end encryption argued that they could not open a backdoor for identifying originators, as it would be a breach of promise to their subscribers.
  • ‘Toolkit’ tweeted by Greta Thunberg

    The Delhi Police filed an FIR on charges of sedition, criminal conspiracy and promoting hatred against the creators of a ‘toolkit’ on farmer protests, which was shared by climate activist Greta Thunberg.

    Q.What do you mean by a social media toolkit? Discuss its potential mis-uses.

    What is a Toolkit?

    • A toolkit is essentially a set of adaptable guidelines or suggestions to get something done. The contents differ depending on what the aim of the toolkit is.
    • For example, the Department for Promotion of Industry and Internal Trade (DPIIT) has a toolkit for the implementation of Intellectual Property Rights (IPR).
    • This includes basics such as the guidelines to follow when investigating IPR violations, applicable laws, and definitions of terms such as counterfeit and piracy.
    • In the context of protests, a toolkit usually includes reading material on the context of the protest, news article links and methods of protest (including on social media).

    Why have they gained prominence?

    • While toolkits have been around for decades, the accessibility of social media has brought them into the spotlight over the past few years.
    • References to toolkits for protesters can be found in the Occupy Wall Street protests of 2011, in the Hong Kong protests of 2019, several climate protests across the world, anti-CAA protests across India.
    • During the Hong Kong protests, toolkits advised participants to wear masks and helmets to avoid being recognised and ways to put out tear gas shells.
    • During the anti-CAA protests, a toolkit suggesting twitter hashtags to use, places to hold protests, and a guide on what to do and carry with you if you are detained by the police were shared on social media.

    Toolkit tweeted by Greta Thunberg

    • The 18-year-old shared a toolkit on Twitter on the anti-farm law protests in India.
    • This came on the heels of singer-businesswoman tweeting a news article on internet curbs near protest sites in and around Delhi.
    • The toolkit tweeted by Thunberg was later deleted, with the activist saying it was being updated by people on the ground in India.
    • The toolkit asked those interested to start a ‘Twitter storm’ to share solidarity photo/video message by social media users.

    It is being speculated that the document was proof that an international conspiracy is being hatched to defame India and the central government over the ongoing farmers’ protest.

    What is the recent apprehension?

    • The police have said that during the inquiry it appears that the toolkit was created by Poetic Justice Foundation.
    • It says the prior action section delineated the action plan for January 26, when violence was seen at several areas as a group of farmers diverted from the set route and started marching towards the Red Fort.
    • The unfolding of events over the past few days, including the violence of 26th January, has revealed copycat execution of the ‘action plan’ detailed in the tool kit.
    • The intention of the creators of the tool kits appeared to be to create disharmony among various social, religious and cultural groups and encourage disaffection and ill-will against the state and the nation at large.