1 How to Improve Law Enforcement - Service Providers Cooperation in India A presentation by: Lalit Mathur ISPAI

2 Cyber Crime – Our Common concerns Cyberspace has become a fertile field for illegal activities. Cyber crime have replaced traditional methods of stalking and harassment and affecting Personal Security Industry & Law Enforcement Agencies need to be aware of such cases & devise strategies to resolve it proactively. Child pornography and Internet fraud is a major concern. National Security …and grey market in Internet Telephony

3 Concerns of the Industry  Whether Internet is a free medium or not?  If yes, does it still require disciplining and policing?

4 Concerns of the Industry Most likely, all of us here would agree that Internet is a free medium but it’s misuse has to be stopped. Self regulation is the best regulation, as accepted across the World.

5 A collective responsibility To stop misuse, the responsibility lies with:  The User  Content Provider  Domain name registry  Licensor / Regulator  Law enforcement agencies  Internet Service Provider

6 The Industry can… help in introducing/updating cyber security awareness in curriculum for schools, colleges, institutions. work closely with CERT-IN, TERM, Law Enforcement Agencies to share information/experience pertaining to Cyber crime. Regularly update on best practices/latest innovations in the sector. Ensure proper documentation is done when adding a subscriber.

7 The Industry can… Make users aware of cybercrime’s risks as and share best practices on safeguards. Post advisory on website, bills or through mailers to customers, time to time about Do’s & Don’t while surfing Internet. Establish clear and understandable procedures to register complaints on security breach or protecting Customer Premises Equipment Help in training agencies on the technical aspects related to cyber crime.

8 Understanding an ISP  An ISP can be likened to a Highway. The Highway Authority would provide reasonable safety features like speed breakers, safety railings and speed advisories. If any of these are flouted, there are law enforcement agencies that prosecute but not the Highway Authority.  The Internet Service Providers are like the Highway Authority.

9 We suggest.. An empowered International Committee consisting of Service Providers, Law Enforcement Agency and Policy maker for Internet domain registration needs to become scam proof. Develop more accessible and effective filtering and blocking options to empower users to protect themselves. Providing tools to a user to block mails from a rogue sender.

10 We suggest… 128 bit encryption or higher be allowed instead of 40 bit. A single, nodal enforcement agency coordinate with the Service Providers. If blocking of any site is needed, specific instructions come from the nodal agency. Security agencies invest in placing filtering / monitoring / interception / blocking equipment / data capturing & preservation at the International Gateways, NIXI and if needed, at the ISP level.

11 Common Modalities for Cooperation Close cooperation amongst DoT, CERT-In, law enforcement agencies and industry. Work closely with victims to identify cyber crime patterns. Service Providers should have details of designated officers at law enforcement agencies.

12 Our assurance… Fight against cyber crime To-gather we can and we will

13 To sum up, the Govt. agencies need a better understanding of the role of an ISP so as to devise laws & procedures that are practical but at the same time help further proliferation of Internet and not curb it. A service provider is a mere carrier of the Internet and not an author of any content. We will fail miserably if onus of policing is given to us as we are just a service industry.

14 You can only beat the beasts of tech savvy terrorists by taking the bull by the horns and beating them at their own game. As a service provider, we can only be your Aide d’ Camp.

15 Thank You! Website: