securitylinkindia

MassMediaLink India LLP SecurityLink India

dormakaba Strengthens Position in Electronic Access & Data with Acquisition of Indian Company Solus Security Systems

Solus Security Systems (Solus) provides integrated solutions for access control, time and attendance, visitor management, vehicle access and security, as well as the services required for managing these solutions. Based in Bangalore (India) with multiple further locations, Solus is a reputable brand recognized for its dedicated, customer-centric solutions. It offers pan-Indian coverage for systems integrators and mid-sized end-customers in nearly all verticals, supported by around 200 employees, thereof around 130 service technicians. The company generated single-digit million sales in Swiss francs in financial year 2020-21 ending 31 March 2021. The parties have agreed to not disclose further financial details of the transaction, which dormakaba expects to be accretive to Group EPS and EBITDA margin from day 1. “The acquisition of Solus fits into our strategy to become a leader in smart, secure and seamless access solutions. Solus provides excellent growth opportunities as we expand our electronic access & data business in India with a wide range of products, additional sales channels, and a large customer base. We will furthermore leverage the companies’ products and software expertise to grow in other Asian markets, as Solus becomes an integral part of our Asia-Pacific platform. We are looking forward to welcoming the team,” said Jim-Heng Lee, dormakaba COO AS APAC. Solus Owner and Managing Director Narasimha Swamy added, “The business combination will lead to multiple synergies with expanded product portfolio and market presence and will enhance our customers’ value in terms of better solution offering and services.” dormakaba makes access in life smart and secure. As one of the top three companies in the industry, dormakaba is the trusted partner for products, solutions and services for access to buildings and rooms from a single source. With strong brands in its portfolio, the company and its numerous cooperation partners are represented in over 130 countries worldwide.  

Read More

Grene Robotics Designs and Develops India’s 1st Autonomous Drone Defence Dome System: ‘Indrajaal’

Grene Robotics has designed and developed India’s first 100% indigenous unified, distributed and wide-area autonomous drone defence dome called Indrajaal. Indrajaal will protect a large area of 1000-2000sq.km. per system against threats such as UAV’s, Incoming Weapons, Loitering Munitions, Low RCS targets autonomously. Grene Robotics has developed extensive AC6ISRT capabilities in the form of Defence OS over an 8 year of R&D journey backed by decades of system development experience for the armed forces. Grene Robotics advisory board consists of Retired Defence Scientific Advisor, Deputy Chief of Army Staff, BEL Director and Air Force veteran who was instrumental for designing India’s most comprehensive command and control system for the Indian Air Force called IACCS. Why is this critical?  India must stop adopting reactive measures and embark on responsive and autonomous systems to be prepared for modern warfare. Manual weapons and point based defence systems cannot fight modern warfare driven by AI and robotics. For the first time in India and many times globally rogue forces have adopted cutting-edge technologies such as UAV’s, Smart Swarms etc. Jammu Air Base on June 27th was attacked by such technologies to drop explosives next to Mi-17 hangar. PLA is already toying with advanced weaponry in Western Theatre Command (WTC) tasked with military operations against India along the Line of Actual Control (LAC). Drones are being used to train the infantry to conduct beyond visual line of sight targeting. The PLA also developed a high-altitude and high-speed armed drone, the WJ-700, in 2021. In 2020, it introduced armed robots, and in 2021, reconnaissance robots, in its military exercises. Limitation of current deployments Point defence Anti-UAV systems will not be able to counter and protect large defence bases, NCR and linear infrastructure like international borders and such sensitive areas against afore mentioned threats. A minimum of 300 systems are required to be deployed to protect the entire western border and this is financially not a viable option. On the contrary 6-7 sectorally deployed Indrajaal systems with their seamless connectivity can protect the entire western border. How does Indrajaal work  Autonomous defence/ weapon systems is the 3rd revolution of the warfare and Indrajaal’s design principles are based on delivering such autonomy to the defence forces leveraging a combination of 9-10 modern technologies powered by artificial intelligence, cybersecurity and robotics that is capable of identifying, assessing, deciding, acting and evolving autonomously in real-time. Whether the threat is single or multiple or a combination of UAVs, Low-RCS, loitering munitions and such, Indrajaal is capable of countering all such threats. Real-time situational awareness. Distributed, decentralised and mobile. Integrated and intelligent meshed network. Ability to integrate with all current weapons suite and infrastructure. Honeycombed cell structure seamlessly built over a combination of 9-10 technologies . 24x7x365 persistent and autonomous monitoring, tracking and action. Wg Cdr MVN Sai (Retd), CEO Defence, Grene Robotics said, “I urge the defence leadership to take an integrated and comprehensive approach against all the UAVs, loiter ammunition swarm drones and low RCS threats with indigenously developed autonomous defence systems. Conventional defences will be overwhelmed in a swarm attack scenario and an AI enabled autonomous dome with its own ecosystem of sensors and processing is the way forward. The process of establishing a fully functional system is an evolutionary process and needs technology vision and user involvement.” Earlier this year Grene Robotics announced their partnership with (BEL) to jointly develop first-of-its-kind autonomous air defence technology, bringing India on par with the best autonomous defence systems of the world. They believe that technology augments human capability, not replace it. The answer to some of the greatest challenges faced by humanity can be found in nature. What is stopping from learning from them is the lack of tools to transfer knowledge from nature to human design. At Grene Robotics they are leveraging artificial intelligence, machine learning and cognitive computing to building future autonomous technologies that can self-learn and self-adapt to foster mankind’s vision towards a better planet. They believe autonomy is the future and they are delivering it NOW. They put in over 12 years of R&D to build Grene Robotics. Today, they are an innovation-led, robust, cutting-edge technology organisation that delivers autonomy as a service, augmenting human capabilities. Their solutions are helping Governments and organisations across the globe to run efficiently.  

Read More

Fortinet Wins Google Cloud Technology Partner of the Year Award for Security

Fortinet®, a leading global provider of broad, integrated and automated cybersecurity solutions, has recently received the 2020 Google Cloud Global Technology Partner of the Year award for Security.  Fortinet was recognized for the company’s achievements in the Google Cloud ecosystem, helping joint customers: Simplify security management with single-pane control across Google Cloud and on-premises data centers. Gain cloud-native visibility and control into Google Cloud workloads and applications. Strengthen endpoint security with cloud-native endpoint protection, detection and response that is behavior-based rather than signature-based. Leverage Fortinet Cloud Security Services Hub for scalable and multi-layer secure connectivity. Optimize cost management with various consumption models based on customer choice, easily deploying native cloud security offerings in VM, and SaaS form factors with the flexibility of BYOL and PAYG (pay as you go) billing options. Fortinet’s Adaptive Cloud Security for Google Cloud Fortinet has partnered with Google Cloud for more than 5 years and has been significant[1]ly accelerating the partnership to support mutual customers in their transformation and journey to cloud. With Google Cloud, Fortinet has now established a mutual top-tier partnership across companies to ensure customers’ workloads are secure and compliant, helping ease the burden around company overall brand protection. Fortinet is an established Google Cloud premier partner and Google Cloud is an established Fortinet Fabric-ready partner. Fortinet being recognized as Google Cloud Technology Partner of the Year for security is a natural continuation of the work the companies are doing together to help solve customers’ security concerns and simplify the migration to Google Cloud. The Fortinet adaptive cloud security for Google Cloud provides consistent, advanced enterprise security for customers with Google Cloud-based environments. The Fortinet Security Fabric protects business workloads across on-premises, data centers and cloud environments – providing multi-layered security for cloud-based applications. The solution offers network, application and cloud platform security capabilities provided in a variety of form factors including VM-, container-, and SaaS delivered protection that natively integrates Fortinet security functionality into Google Cloud. Fortinet offers its advanced series of network security solutions integrated with Google Cloud’s platform, enabling protection for cloud-based infrastructure and applications. These solutions include: FortiGate-VM and Secure SD-WAN on Google Cloud’s platform delivers next-generation firewall (NGFW) capabilities for organizations of all sizes, with the flexibility to be deployed as a NGFW and/ or a VPN gateway. FortiGate-VM delivers integration with Google Cloud’s recently announced Network Connectivity Center (NCC). NCC bridges a first-party native cloud underlay from Google Cloud with Secure SD-WAN and cloud on-ramp service from Fortinet across hybrid and multi-clouds. FortiWeb Web Application Firewall (WAF & WAFaaS) complements IaaS Cloud provider security with features and AI-based machine learning detection engines that defend web applications from vulnerability exploits. More specifically bots, malware uploads, DDoS attacks, advanced persistent threats (APTs), and zero-day attacks. FortiManager provides single-pane-of-glass management for unified, end-to-end protection across the extended enterprise. It delivers insight into network traffic and offers enterprise-class features for threat containment. FortiCWP delivers cloud workload protection and cloud security posture management for workloads running on Google Cloud using API level integration into Google Cloud management and security services. This enables organizations to monitor and track cloud resources including their configurations, activity and traffic flows. FortiCWP also integrates with Google Security Command Center (SCC) for visibility and integration of threat feeds across platforms. Secure SAP S/4HANA on Google Cloud provides customers with enhanced security and orchestration that scales across cloud workloads. The Fortinet Security Fabric for Google Cloud protects attack surfaces that span hybrid- & multi-cloud infrastructures providing flexibility for SAP projects. Cloud Native Edge and Endpoint Security  Fortinet has also partnered with Google Cloud to deliver modern endpoint protection, detection and response to reduce the risk of compromised devices that enable user productivity and application delivery anywhere, any time. Specifically, Fortinet FortiEDR enhances Google Cloud’s edge and zero trust solutions and provides customers patented, behavior-based capability. These capabilities detect violations of legitimate operating system activity, defuse violations in real-time without interrupting normal system operations and classifies them with the help of both Artificial Intelligence in the cloud and remote expert human analysis in FortiGuard Labs. This capability has been consistently validated through independent, comparative tests run by AV Comparatives, MITRE Engenuity and customers themselves. Fortinet’s FortiEDR will also soon be available directly from the Google Cloud Marketplace. Rajesh Maurya, Regional Vice President, India & SAARC at Fortinet, “We’re proud to be named a Google Cloud Technology Partner of the Year for Security. This award recognizes our outstanding success in 2020, using a winning combination of Google Cloud technologies with Fortinet’s industry-leading Security Fabric offerings to deliver innovative cloud security and customer satisfaction. Winning this award is an exciting testament to a long-standing partnership with Google Cloud. We’re looking forward to continuing to work together to provide mutual customers with advanced cloud security.” Kevin Ichhpurani, Corporate Vice President, Global Partner Ecosystem at Google Cloud, “We’re proud to recognize Fortinet as our Technology Partner of the Year for Security. This award recognizes Fortinet’s commitment to customer success, and its delivery of innovative and impactful solutions on Google Cloud in security. We look forward to building together with Fortinet and creating business value for customers with cloud technologies.”  

Read More

Hikvision India Partners with National Skill Development Corporation to Impart Security Technology Training for Youth

With an aim to provide impetus to the Skill India mission, Hikvision India has partnered with the National Skill Development Corporation (NSDC) to offer security technology training for India’s youth. The company will be providing security and video surveillance products and technology related training and certification programs Hikvision Certified Security Associate (HCSA) and Hikvision Certified Security Professional (HCSP) by collaborating with NSDC. This partnership will help in promoting security sector specific skills and ecosystem development, which will further prepare India’s technical workforce for getting jobs or setting up their own business enterprises. “We are happy and proud to be associated with the National Skill Development Corporation (NSDC) with this unique two year partnership. It is our endeavour to impart training with all the necessary technical skills so that India’s youth can turn into successful entrepreneurs in the security industry. The HCSA and HCSP training and certification programs are helpful to enhance the skills and knowhow of installers, system integrators and security professionals and have the requisite skills needed for the future,” said Ashish P. Dhakan, MD & CEO, Prama Hikvision India Pvt. Ltd. Hikvision India offers HCSA and HCSP certification programs to young engineers and security industry aspirants with technical skills. Besides training and knowledge sharing, the company provides meaningful endorsement to those who pass and become Hikvision Certified Professionals. Hikvision Certified Security and Protection Associate training is focused on basic and essential operation and maintenance training of Hikvision security devices. It is designed for security technical engineers, who have worked in the security industry for several years and gained some security industry knowledge and superior skills. The key advantages of the HCSA and HCSP certification programs are quite evident, but it is good to know them beforehand. The certification program helps validate advanced level of knowledge. It helps individuals (System Integrators, Partners and Installers) and companies (end-users) install, integrate and apply the skills and competence in video surveillance. This certification program is a unique differentiator for end-users while selecting their system integrator for video surveillance systems. After the successful completion, individuals will get Hikvision certification program certificate. Eligibility criteria  The certification is open to anyone who aspires to hone their skills and expertise in video surveillance and total security solution. The trainee should have experience of working in the security industry for at least 1 year. The trainee applicant (male or female) should be familiar with the security products and technologies. National Skill Development Corporation (NSDC) is a not-for-profit public limited company. NSDC, a public private partnership (PPP) organization, aims to promote skill development by catalyzing the creation of large, quality and for-profit vocational institutions. Further, the organisation provides funding to build scalable and profitable vocational training initiatives. It focuses on building capacity, quality assurance, information systems, and training of trainers, among other initiatives. In the last one decade, NSDC has trained over 2.5 crore people through its network of 600+ training partners around the country. The organisation is implementing the government’s flagship schemes such as Pradhan Mantri Kaushal Vikas Yojana (PMKVY), National Apprenticeship Promotion Scheme (NAPS), among others.  

Read More

Cybersecurity to be Prioritized in Cryptocurrency Transactions

By Vikas Bhonsle, CEO, Crayon Software Experts India Cryptocurrency is currently one of the most trending financial tools or currencies, grabbing attention across the globe. Bitcoin, Ethereum, Cardano, Dogecoin are some of the most popular cryptocurrencies we have heard or read about in the media. If predictions are to be believed, then these cryptocurrencies can impact global finance in the coming times. However, the rise and increasing popularity of cryptos also increase the added risk of cybercrimes that need speculation. But first, let’s understand more about cryptocurrencies. It is an electronic form of a digital asset or currency that operates as a medium of exchange like any other legacy currency. However, it’s an encrypted form of electronic payment that uses cryptography for safe transactions. Cryptos are decentralized digital assets that allow individuals or institutions to make transactions without any dependency on legacy banking institutions and governments. This very fact alone represents both the boon and bane of this technology. The absence of any regulators or legal structures is also free ground for cybercriminals to romp. Cryptocurrency is already the most preferred medium of payment in ransomware attacks. Cybercriminals hide their true identities while they make ransom demands in digital currencies. When making an exchange, they can easily convert cryptocurrencies into traditional forms without ever being discovered. Cybercriminals can hack into cryptocurrency trading platforms and redirect the funds. They can attack any business and demand ransom in digital currencies as this form of cybercrime is outside the legal grid, and no evidence leads back to the perpetrators. With cryptocurrencies spreading across the business world, cybercrime has become a real threat. Cryptocurrencies have also evolved as an excellent money laundering channel. Businesses or even individuals who make exchanges using cryptocurrencies are thereby potential cyber-attack targets. The following cybersecurity risks are to be looked out for: Phishing: In a phishing attack, trading platforms are targeted with malicious emails or links with the primary goal aimed at stealing user’s credentials that scammers can use to ask for profit or ransom. Hacked trading platforms: Here, cybercriminals compromise the trading platforms by stealing funds from the users. Compromised registration forms: The registered data by the user can be compromised, and hackers can or will then sell it in the illegal market for profit. Third-party applications: An excellent way for cybercriminals to breach and access user data and target further attacks. Malware: cryptocurrency-related malware enters the mining machines, steals the infected computer’s mining resources, along with the cryptocurrencies from online wallets. Thus, it is primarily essential that the security measures of any crypto transaction platform are full-proof and have a multi-pronged approach to cybersecurity solutions. Until and unless regulations and strict monitoring come in place, caution and instinct can go a long way in keeping our crypto transactions safe.  

Read More

IPSA Announces the Appointment of an Alliance Ambassador for India

The International Professional Security Association (IPSA) is determined to support and be available for all the front-line members. With the launch of its new app and the free membership offer, IPSA is now taking a huge step towards expanding its membership in India. IPSA has announced the appointment of Jitendra Shukla CCSMS, CCPS AA. IPSA as the IPSA Alliance Ambassador for India. Along with a post-nominal, the role fetches many responsibilities and important undertakings which are in sync with IPSA’s core missions and values. The IPSA AA will be expected to raise the importance and criticality of the front-line teams with the clients, end users and wider industry. One of the goals to be achieved by the role would be to encourage the ongoing professionalism of the sector in India through the membership of a professional body like IPSA and training enhancements. Apart from working closely with the IPSA Chair and CE, the AA will also provide feedback on local market trends or regional specifics that need to be captured within the IPSA organization. They will monitor international situations related to the AA region and IPSA. Jitendra Shukla IPSA Alliance Ambassador for India “I am extremely honoured by the role bestowed on me by IPSA and I would like to thank the Chair and CE for that. As India AA IPSA I will strive to get us the due recognition as a professional body for the security industry. IPSA should be a common platform or a single voice for improving the service standards and infrastructure required for us to deliver world class services and at the same time enhance the lifestyle of the security practitioners. IPSA will be able to deliver this by imparting world class training and certification. I am counting on my colleagues who are the leaders in the security industry to help IPSA achieve the goals” With the introduction of an AA, IPSA’s vision is to represent all front-line personnel and companies, and promote diversity, inclusion, training, mentoring and career development. By providing representation and working closely with the sety companies to raise the standards and encourage professionalism, IPSA aims to give ‘One Voice’ to the private security industry. Simon Pears, Chairman of IPSA said, “IPSA continues to gather strength and represent our frontline membership. India is part of this growth and continues on the journey to raise the professionalism of the sector. Jitendra Shukla has a wealth of industry experience and understands the market and growth opportunities and I am proud that he has agreed to be the IPSA Ambassador for India and be part of the exciting journey ahead.” Jitendra’s experience and passion for the industry makes him the perfect candidate for the role. He specializes in corporate security management which entails staffing and training, business analytics, operations, vendor management, emergency protocols and disaster management. Prior to working within the private security sector Jitendra was a member of the Indian Air Force and is a trained commando. He has extensive knowledge of security regulations and is instrumental in ensuring the alignment of security solutions with the local regulations. He has built a network of key contacts within security and other industries. With his connections and expertise, Jitendra will be playing a pivotal role in empowering the front-line security teams of India. “I am extremely honoured by the role bestowed on me by IPSA and I would like to thank the Chair and CE for that. As India AA IPSA I will strive to get us the due recognition as a professional body for the security industry. IPSA should be a common platform or a single voice for improving the service standards and infrastructure required for us to deliver world class services and at the same time enhance the lifestyle of the security practitioners. IPSA will be able to deliver this by imparting world class training and certification. I am counting on my colleagues who are the leaders in the security industry to help IPSA achieve the goals,” said Jitendra. Simon Pears Chairman of IPSA “IPSA continues to gather strength and represent our front-line membership. India is part of this growth and continues on the journey to raise the professionalism of the sector. Jitendra Shukla has a wealth of industry experience and understands the market and growth opportunities and I am proud that he has agreed to be the IPSA Ambassador for India and be part of the exciting journey ahead” The International Professional Security Association (IPSA) is a membership body for individuals and companies working in security and associated roles. The Association was formed more than 60 years ago to ensure professionalism in the management of security operations. IPSA is an established and recognised worldwide professional organization and provides, in accordance with growing demand, a specialised unrivalled service to industry/ commerce. There are no geographical boundaries in operation and the highest technical standards are stringently applied in all our dealings. The Association operates within the framework of fourteen regions which includes many overseas countries.  

Read More

9 Core Elements that Ensure Businesses Have the Best System for their Needs

By Rishi Lodhia Managing Director for EMEA and India, Eagle Eye Networks  Today’s video management system (VMS) is not your simple solution of the past. Gone are the days when the VMS was used solely for surveillance and security. A modern cloud-based system goes far beyond that, providing analytics and business intelligence to make your organization smarter and more efficient, and your business a safer place. Whether you’re trying to create a more customer-centric restaurant, efficient retail operation, safe gym environment, or healthy campus, a true cloud VMS can be paramount to your success. Who will benefit from this guide? Eagle Eye Networks experts speak every day with people seeking to better understand cloud video surveillance, but many don’t know where to begin. These individuals are often owners or operators of multisite commercial businesses who are responsible for: Managing 10 to 50 sites such as retail shops, gymnasiums, and quick serve restaurants. Operating 10 to 35 video surveillance cameras per site. Selecting a new video surveillance system with a budget over $75,000, or upgrading an existing system with a budget over $25,000. Continually finding ways to make their business more efficient, effective, and secure. If any or all of these points resonate with you, this guide to cloud video management system (VMS) key elements will serve you well. That said, everyone from small business owners to enterprise customers can glean takeaways from these pages. At a high level, this guide explains the top nine key features of a cloud video surveillance system. Cloud for video surveillance What exactly is ‘cloud computing’ and how do businesses like yours use it for physical security and video surveillance? Cloud computing simply means storing and accessing data on the internet versus storing and accessing data on a computer that’s ‘on-premise’ (installed in your business). While the term ‘cloud’ is often used loosely, with a true cloud video solution, the video is processed and managed in the cloud. The true cloud system may have an onsite appliance, but that appliance is simply a communication conduit that conveys information from security cameras to the cloud. The move to cloud-based systems of all kinds, not just video surveillance, was well under way by the beginning of 2020. It’s not always obvious, but cloud systems are mainstream in most circles – for example, if you have systems that manage payroll, customer relationships, or workflows, they’re likely in the cloud. But the onslaught of COVID-19 greatly accelerated the adoption of cloud systems. In fact, research indicates the percentage of companies that have more than one critical business application in the cloud jumped from 60 percent pre-pandemic to 90 percent today. The top reason given is data access from anywhere, any time. The global pandemic brought with it quarantines, remote work, and new ways of communicating with colleagues and customers. These changes have helped illuminate and amplify the benefits of cloud for video surveillance. Let’s take a look at how multisite commercial businesses benefit from cloud technology for video surveillance:  Cost and maintenance Cloud offers a much lower total cost of ownership (TCO), with substantial economies of scale. A cloud system should offer a subscription-based model, so you only pay for what you actually need and use. You can also save money by choosing a VMS partner that doesn’t lock you into purchasing its cameras. Instead, choose a VMS partner that lets you use the cameras you’ve already installed, select your preferred cameras, or use those of the cloud vendor. With cloud, the cost of maintenance is also significantly reduced. That’s because you don’t need to worry about updating your system. New features and security enhancements happen automatically. Cloud systems continuously deliver updates over-the-air. “The onslaught of COVID-19 greatly accelerated the adoption of cloud systems. The percentage of companies that have more than one critical business application in the cloud jumped from 60 to 90%“   Cybersecurity With your video surveillance system connected to the internet, cybersecurity should be fully addressed by the cloud vendor, and it should provide the end user features for secure sign-in, user permissions, and audit trails if needed. System cybersecurity should include: Secure encryption to buffered and locally-recorded video. Constant monitoring against threats. No open ports or onsite firewalls. No onsite software to patch (updates are automatic). Triple redundant storage for events. Two-factor authentication. Scalability Adding locations and cameras, increasing the number of users, adjusting camera resolution, and extending video retention periods are just some of the reasons that multisite commercial customers and others demand a scalable solution. Traditional premise-based VMS systems make it difficult to do this and lack the infrastructure and flexibility to meet these needs. Conversely, cloud-based solutions are designed to run on a scalable set of computing and network resources. With a true cloud system, it’s easy to centralize your video surveillance across multiple locations, add and delete users, and adjust retention and resolution in real time. PRO TIP Look for a cloud that’s purpose built for video There are public clouds, some of the most well known being Amazon Web Services (AWS) and Microsoft Azure, that companies pay to store and manage their data. These public clouds cater to large numbers of users who pay as needed, but are subject to the policies and security measures implemented by the cloud provider. Then, there are private (often called hosted) clouds, such as the Eagle Eye Cloud, which is purpose-built to store and manage video.   Anywhere access A well-engineered cloud VMS will include a modern mobile app so users can conveniently access video and manage features anywhere in the world with internet collectivity from their computers or mobile devices. Cloud VMS subscribers can activate features, such as video analytics, with the click of a button, without needing to install any additional software. Camera flexibility Cameras are to your VMS as tyres are to your car. Because just as a car relies on its tyres to run, a VMS relies on cameras to be its source of data … to drive security…

Read More

Ransomware Ravaging the World

Iqbal Singh Technology Expert & Senior Corporate Executive in a European MNC Imagine you booting your laptop in the morning to start your workday and you have the below message staring at you from your laptop screen. This is an example of a screen-locking ransomware that holds your computer hostage by blocking your access to the operating system and there is almost nothing you can do to access your files and data on your laptop. Now imagine the victim of ransomware instead of being a single user in an organization, maybe an oil pipeline company with a pipeline network of nearly 9000kms or a meat company with plants across the globe or a 800 store retail company. Yes, all of these are real examples of organizations who have been recent high profile victims of ransomware. Ransomware is ravaging the world | Andrey Popov / Getty Images WannaCry ransomware note. Image: Cisco Talos  On 07 May 2021 an employee of Colonial Pipeline – the company with the largest pipeline in the USA found a ransom note from hackers on a control-room computer. This provoked a shutdown of their operations for five days, which resulted in a temporary fuel shortage along the East Coast, leading to spike in gas prices and huge queues of consumers at gas stations. The CEO of the company confirmed that they paid a ransom of $4.4 million. 30 May 2021 JBS, the largest beef supplier in the world, suffered a cyberattack, disabling its beef and pork slaughterhouses. The attack impacted facilities in the United States, Canada, and Australia. The company paid a ransom of $11m to the hackers. The Swedish Coop grocery store chain closed all its 800 stores on 03 Jul 2021 after a ransomware attack on American IT provider Kaseya left it unable to operate its cash registers. Hundreds of American businesses were also hit by an unusually sophisticated attack that hijacked the widely used Kaseya software.  What is Ransomware? Ransomware is a form of malicious software – malware – that encrypts files and documents on anything from a single PC all the way up to an entire network, including servers. The attacker then demands a ransom from the victim to restore access to the data upon payment. Victims can often be left with limited choices; they can either regain access to their encrypted network by paying a ransom to the criminals behind the ransomware or restore from backups or hope that there is a decryption key freely available. Or start again from scratch. Hackers have been mostly unforgiving and ruthless in choosing their ransomware targets. They have not spared even health-care providers, municipalities and schools, big commercial organizations, of course, are expected tempting targets. The Washington Post found that ransomware attacks in the United States more than doubled from 2019 to 2020. One of the unfortunate success stories of the coronavirus times has been ransomware. Studies consistently show that the scale and cost of ransomware continues to grow. Methods of Infection Understanding how ransomware infects and spreads is the key to avoiding falling victim to an attack. Post-infection, ransomware can spread to other machines or encrypt network filers in the organization’s network. In some cases, it can spread across organizational boundaries to infect supply chains, customers and other organizations.  All of the following can be vectors of infection for ransomware attacks: Phishing. Compromised websites. Malvertising. Exploit kits. Downloads. Messaging applications. Brute force via RDP (remote desk protocol) History of Ransomware Even though ransomware is making headlines in recent years the scheme is not new. The idea of taking user files or computers hostage by encrypting files, hindering system access or other methods and then demanding a ransom to return them is a few decades old. In the late 1980s, criminals were already holding encrypted files hostage in exchange for cash sent via the postal service. One of the first ransomware attacks ever documented was the AIDS trojan (PC Cyborg Virus) that was released via floppy disk in 1989. Victims needed to send $189 to a P.O. box in Panama to restore access to their systems, even though it was a simple virus. The AIDS demand for payment – by post. Image: Sophos Ransomware attacks were still not that common well into the 2000s – probably due to difficulties with payment collection. It was the emergence of cryptocurrencies such as Bitcoin in 2010, that completely altered the landscape. It provided an easy and untraceable method for receiving payment from victims, virtual currencies created the opportunity for ransomware to become a lucrative business. Cyber criminals were quick to latch on to the monetization opportunity that Bitcoin created. This resulted in a substantial proliferation of ransomware beginning in 2012. Intro of CryptoLockers Ransomware was now moving from a petty crime into the realm of financial windfalls. Accordingly, the cyber criminals’ degree of technical sophistication also increased. The levels of encryption started improving from a 56 bit to 660-bit RSA public key encryption to 2048-bits RSA encryption keys by 2014. One significant development was the emergence of cryptolocking ransomware in 2013. CryptoLocker is a strain of ransomware so potent and dangerous that it took a dedicated global government task force to bring it down — but not before the cybercriminals behind it raked in millions of dollars from their hapless victims. It encrypts files on Windows computers, then demands a ransom payment in exchange for the decryption key. It first emerged in September 2013 in a sustained attack that lasted until May of the following year. CryptoLocker fooled targets into downloading malicious attachments sent via emails. Once opened, these Trojan horse attachments would execute the malware hidden in[1]side. Just to give you an idea of the impact CryptoLocker raked in a revenue of $30m within the first 100 days of its appearance. Earlier the encryptions used symmetric keys (same key to crypt as well as decrypt), however, CryptoLocker uses an asymmetric encryption method that makes it difficult to crack. This two-key system uses one public key for…

Read More

Resilient Approach has Helped Us Win Over the Odds

Ashish P. Dhakan MD & CEO Prama Hikvision India Pvt. Ltd. SecurityLinkIndia (SLI): Nearly 18 months of pandemic disruption so far and the third wave is largely anticipated – it has not yet been ruled out – what are the impacts on your business, and the security industry at large? It was a great learning experience as it had taught us to be alert, resilient and compliant in the face of adversity. The pandemic disruptions were so sudden and unprecedented that it impacted everybody in some or other way. The security Industry was adversely impacted due to supply chain disruptions and various challenges during this period. We too faced multiple challenges of disruptions, but resilience helped us to overcome the odds. When the entire world and humanity is fighting a crusade against the pandemic and trying to overcome the devastating impact of the second wave, we are setting up a new agenda for the future and acting up on it for the growth of the security industry with a profound human approach. It was a great learning experience for all of us to go through the various phases of pandemic challenges and recovery. We have the resilience and innovative marketing strategies on our side to communicate and engage the target audience in a simple and effective manner. SLI: What are the CSR initiatives you have taken during the pandemic situation? While continuing with our fight against the pandemic, Hikvision India has organised a vaccination drive for its employees, workers and their family members. The vaccination drive was conducted on 20 and 26 June 2021. Through this vaccination drive approximately all employees got covered. The vaccination drive for employees and their family members was organised by Hikvision India as a part of employee welfare initiative to support them in providing protection from the pandemic. The vaccination drive covered the vast pool of employees, which include not only our employees, workers and their families, but also those in the extended ecosystem. Hikvision India had helped the ecosystem partners in the pandemic by providing oxygen concentrators. It has delivered a substantial number of oxygen concentrators to the applicants across India as a part of its CSR Initiative to support its employees, partners, end-users and extended security professional community. The company has launched this CSR Initiative on 27 May 2021 to provide timely support to security business community, system integrators, distributors, vendors and employees and their family members. Under this CSR initiative, oxygen concentrators were successfully delivered free of cost to the verified applicants across India. SLI: How do you foresee the future of security industry amid third wave, and beyond? The medical expert and government bodies had predicted that third wave of the pandemic will have a less severe impact due to vaccination and enhanced awareness. Security Industry ecosystem should continue to be alert, resilient and compliant to the pandemic guidelines and protocols. One thing is clear at no point, we can afford to be complacent about the risks of the third wave and other threats related to pandemic. The security industry has to move forward with planning their future beyond the spectrum of pandemic. They need to identify the emerging opportunities and trends. Hikvision India has lived up to the challenge of the pandemic situation by doing extensive research and development to offer pandemic safety solutions (temperature screening, face mask wearing alerts, social distancing and flow control solutions). We were one of the first movers in the industry to offer temperature screening solutions. We are grateful to our partners and end-users for their consistent support and unshakable trust. We are hopeful that security market will get back to its peak performance level. Though the pandemic situation had created a major challenge for the security industry, but a resilient approach has helped us to win over the odds. SLI: Which new initiatives Hikvision India is taking especially for Indian market? We had the resilience and innovative marketing strategies on our side to communicate and engage the target audience in a simple and effective manner. There are no easy solutions, but the resilience and compliance of the pandemic protocols are the best solutions in these times. We are following stratagem from the market’s own alchemist to ensure a perfect roadmap to recovery. The key priority for us at Hikvision India is to keep on innovating and evolving as an organization while navigating through these challenging times. We have set the strategic priorities of our marketing initiatives to tackle constraints on capacity, capital and capability. It also involves strategic decision making and prioritizing budget for key initiatives and media engagements. Our focused initiatives are based on the evolving market trends, technology advantages, customer and employee demand for societal impact. We have a dedicated special R&D center in India to do the research and development on India specific products and solutions to provide the security solutions as per the requirements. Here some of our innovations go beyond the customization needs of the end-users and create a unique solution as per changing needs.  SLI: Which are the significant milestones achieved by Hikvision India? Hikvision India is the leading video security solution provider in the security market. There are three most significant milestones Hikvision India has achieved in the recent times, one is the undisputed market leadership position, the second is ‘Make-in-India’ 2.0 manufacturing plant and the third is going digital across the channels. These three initiatives were rolled out with foresight and missionary zeal. The company has the leading position in the Indian security market and management has shown incredible skills in handling supply chain disruptions and resolving core issues faced by the partner community. We are implementing a series of digital transformation initiatives to keep customers engaged and satisfied undisputed market leadership position, the second is ‘Make-in-India’ 2.0 manufacturing plant and the third is going digital across the channels. These three initiatives were rolled out with foresight and missionary zeal. The company has the leading position in the Indian security market and management has shown…

Read More

Future of Loss Prevention-II

  Anil Puri CMD, APS group A thought leader and an action catalyzer rolled into one – Anil Puri is a rare combination of a visionary, and one who has mastered the art of strategic and tactical thinking to the core. He has been using this combination to seed new ideas and to lead them to their implementation on-ground. This has been a consistent feature of his career. He has rich experience of approximately 35 years in corporate in diverse domains & from functional managerial level to the apex as chairman of a corporate group. To him, The loss prevention (LP) has always occupied central place when planning the security protocols for the shopping malls, warehouses, large shopping complexes, standalone retail stores and manufacturing plants. He has been keenly watching the developments in the loss prevention techniques emerging in this domain. Old adage loss prevention techniques have stood the test of times but have been breached, losses inflicted and profitability hit. However, emerging innovative technologies have revolutionized the entire perspective of loss prevention. He contributes extensively in framework of security protocols of loss prevention with his ops team before deployment of security personnel at high end shopping malls. Here he shares his thoughts on new landscape which has gradually been shaping in favor of the retailers. Let us see what future holds for loss prevention. Here he propagates the enhanced usage of AI in loss prevention. Introduction Retail shrinkage is a multi-billion-dollar, multi-layered monster that affects organizations throughout the retail industry. The problem spans beyond the physical store and has roots throughout the entire supply chain. Government-imposed public health protocols, social restrictions and lockdowns that have arisen because of the COVID-19 global pandemic have changed the way people do things the world over. The impacts on the retail sector have been significant, translating it into levels of adversity unlike anything business has ever before faced. For retail loss prevention teams charged with ensuring the safety and security of the business’ employees, customers and product, the shifts and accelerations in consumer behavior mean that they have to rethink & revisit their strategies. They have had to leverage their creativity and innovation in order to pivot and respond to a whole new set of challenges. Globally many retail loss prevention forums have organized events to help address the evolving concerns of today’s loss prevention professionals and discuss the ways by which leaders within the industry are proactively producing effective solutions to protect their businesses. This has provided virtual attendees with thought leadership, critical insights into best practices with respect to day-to-day retail operations and an incredible opportunity to network with industry colleagues concerning the most pressing issues their industry is facing today. How to disrupt the organized crime? The scourge of organized retail crime (ORC) continues to cast a pall over retail operations, with the number of incidents escalating since the start of the pandemic. Given the increasingly sophisticated means by which these groups, who often travel from region to region, are striking neighborhoods and cities indiscriminately, the role of loss prevention teams in curbing this very serious threat is critical. It is time to unpack this complicated issue for retailers and discuss some of the ways in which loss prevention teams can enhance the protection of their organizations. As impacts of the pandemic continue to influence the way today’s consumer shops and accelerates online activity, retailers are faced with more adversity than ever before in providing a safe, secure and seamless environment in which to serve their customers. To better understand how these changes in consumer behavior are impacting retailers’ efforts to ensure a best-in-class experience during these difficult times, and to share insights concerning some of the incredible pivots being made by loss prevention teams in order to support their organization’s operations and service. Potential Ramifications The sessions organized by loss prevention forums focused on the potential ramifications of ORC to retail operations, the trends that are related to the activities of these crime groups, as well as some of the proactive steps that can be taken by loss prevention teams in order to deal with the risk like: (a) Retailers should join any network that is available to them. (b) If there aren’t any, they should create one for themselves (c) Be proactive in hosting opportunities to get together with law enforcement partners, fellow loss prevention officers, community associations, city politicians and crown attorneys to hold ongoing dialogue. Creating these communities makes it easier for everyone impacted by these crimes to identify associated trends and more difficult for ORC groups to operate as efficiently as they’d like to. Developing a Threat Awareness Another threat wreaking havoc on retail operations is found within the digital world. Though perpetrated by living, breathing human beings, the veiled activities of cybercriminals allow them to conduct their misdeeds behind a screen and provide them both with relative anonymity and the digital tools they need to undo a business. It is important to understand the ways in which a cyber threat and incident can occur as well as the potential ramifications to the retail bottom line and the steps that are required of organizations to properly deal with the issue. What is needed is – Developing the threat awareness, understanding of relevant prevention information and adhering to best digital practices will be key. Too often, the cyber-attacks go unreported. As a result, the attackers are emboldened knowing that law enforcement is unaware of the scope of the problem and that the incidents likely won’t be investigated. It’s imperative that any and all cyber attacks be reported to the police. In tandem with the incident reporting to law enforcement, retailers must follow the procedures that have been outlined within their company’s cyber incident response plan. If a plan has not been developed, then it should become a quick priority. That’s where retailers and law enforcement will be able to make a difference, making it harder for cybercriminals to operate, thereby reducing the level of victimization….

Read More