Keynote by Dr. Shamsher Singh IPS | DGP Law & Order Gujarat | Director, Anti-Corruption Bureau

I'm really thankful to besides andad for giving me opportunity to interact this intelligent Innovative crowd of cyber expert and cyber Security Experts and let me tell you that you guys are doing wonderful work and you are helping Society in a big way to handle the cyber crime and to make them aware what the dangers are so give a Applause and give a big hand to all the uh cyber Security Experts and to yourself [Applause] also uh I'm not going to give you a lecture on cyber security because you all are experts I'm going to this flag three problems and which we are handling as a uh as a security expert one is the human angle of the

cyber security and second is the society anger and the third is the law enforcement so only thir three issues I will develop on and uh I will like to invite your suggestions and share your ideas on these issu also so let me share some story before like maybe 10 years ago nobody could have imagined you can commit a by a simple pH simple

but you read the story of os family the person a businessman had a simple phone call and 7 were LED from 7 and I like I have personal experience of a management Professor very simple call and they took woman a video call and under digital arrest for 3 days and 6 from his account the they forced him to transfer digitally six gr and he's simple human he's not a common man he's a management Professor he knows psychology knows uhal pychology he knows crime he knows experts he knows authorities everybody so this is the gravity of the cyber crime and this is the gravity of the how the technology can be misused and can like used for committing a bigger

crime so I want to flag one issue is that in human evolution almost take 1 lakh years 100,000 years and our Behavior has evolved over 1 L years but our body is Chang in every day do you know how many cells are in our body in human [Music] body anybody 33 trillion cells are there in our body and out of 33 trillion cells 30 3 billion cells are changing every dying and forming new cells so that is the scale of the change happening in society and that change is happening as for the ecosystem person working in US person working in Africa person in Afghanistan and person working on the computers they have a different change but human behavior is very

difficult to change human behavior is like now if you want somebody said give me your p and you may hesitate in giving me a pan key if you have a IDE key I will not car it back or sometime like you are handing over a back to somebody it may not be costly but you be very cautious while handing over the back even even at the airport there some go to items and but digitally when apprehending danger and loss your behavior is totally different and that is a challenge now the one person may hand over the OTP without checking whether the person is from the bank or not and OTP is worth 6 CR andp is worth his entire bank

balance to en like if he hand over the OTP bank balance is good and second Behavior change like when you go digital you go to a website go to a app you reply your phone you handle your whatpp somebody claims something and without verification you give your

information not give

address but you on app and app is like enticing you or uh giving you some interesting information oring you and you Lo on app entire digital information is stolen and nobody tells you what this app people will do with your digital information you're not aware about it so this is a behavior thing like we as a law enforcement agency we also deal with it and you as a cyber expert you have a problem at your heart how to devise a mechanism taking into consideration the behavior of the Common Man how will he behave digitally and virtu so that is that is one Challenge and second challenge is how the technology changing the speed is very

high and scale is very good one mistake in template of crowd strike which is a cyber security form Crow strike is a cyber security form but the window crash entire window system is Crash and the whole world is stand still our flights were cred everybody's stand still and entire world stop so the scale of damage and scale of damage and human behavior tendency to anticipate and apprehend and comprehens is a challenge we may not even apprehend this giving this information online and and giving this OT online how much danger is there like over a number of years over LS of years we have comprehended danger as a physical thing L as a physical thing [Music]

and cusing somebody is trying to hit you your instant reaction is that you will AO that so this is the problem statement you people are Searchers you are creating new softwares so this human behavior and human change and digital change has to match some has to mat because uh solution is not important the problem is important like as a researcher you know when you have a problem statement with you you can find out the solution but unless you find out a problem you will not find a solution and in the in the new emerging technology what we are doing most of that we are doing is we know these are the RIS and we find a solution for

that but you know most of the your software have where life I know 6 month maybe even 3 months after 3 months you will find a new virus and new St lapse and your software is also so this is this is a uh like challenge for the all the all the like researcher he what we say is unknown unkknown unknown unknown how many knows that uh black friend have anybody read the black book Black no actually uh This Crowd strike event was a black stri event because that was out of your mind out of your comprehension you never imag that kind of event can happen so these are kind of black unknown unknown is a

black you guys might that unknown unknown is a black so for security agencies for the researchers our major challenge unknown unknown and in technology trillions of softwares are working at one time and in addition AI enabled software are also working at that time so it's a challenge to anticipate where will the laps will be there will will be security labs and how to tackle that Labs so it's it's a weak challenging environment for the new generation and security agencies and because of this change and because of this Behavior Uh like human behaviors uh taking time to change our cyber crime is increasing 50 to 60% every year so there is a challenge to have a safe

cyber environment there is challenge to have a human awareness of the digital safet still like many educated people are not aware this can be a cyer fraud this can be a fishing website this this can be a phone call which will uh take entire your bank account make it zero to they are not aware they are not like they are not very serious about it so this is another challenge Second Challenge is can we come out with a software or a program which can tell could this number or this website or this app is a fraud app we don't have that anybody aware of that any any software which telling this number is a fraud this mobile app is a

fraud and this website is a facing website and this app is a fraud app anybody develop that kind of software

that that's the challenge as a common man I'm on the net and there is some advertisement how to tell this is a Bas website this is a fraud website or this is a fraud app or this is a fraud link as a common man I need to know that so this is like you can tune your resource toward that as a as a person who is on the digital who is on the online who is in the virtual world and something comes across how to tell about it it is a fraud so this is this is one one important challenge for the society and second is like new are coming up in that human computer

interface human computer interface is going to be a big area because now we slowly slowly we are handling computers we will be handling robots also so how to interact with the robot and how to be a normal uh person handling the robot and how to be safe handling the robot that's going to be another area and which is going to be very very challenging now I just scrolling the website News website and there's a news Israel has hacked the software of nuclear power plant of [Music] Iran how risky is that it's very you you see it's unknown unknown danger you don't know what you don't know and this mobile phone can be a bomb walkie talk was a

bomb P was a bomb so these These are the unknown unknown which we never anticipated ke this P can be a bomb or this can be a bomb so the these are the areas like which you need to anticipate by an ing the human behavior you can't anticipate kind this kind of attacks by analyzing the previous incident previous breaches previous security lapses it has to be futuristic and basically see in entire incident any security lapse all the three characters are human beings attacker victim and the security agencies all three who are handling the incident are the human beings so you first have to analyze that thing and then you go for the software development and for the your security B

software our government you will know that key we are doing uh lot of uh campaigns detection government of India has come up with a uh Indian cyber crime coordination center i4c that is coordinating the entire crime of the all India level and then we have a cyber crime Reporting Center also then we have a cyber uh reporting helpline 1930 and uh then we have a uh cyber surit bat Initiative for the awareness campaign then we have a cybera for the uh removing infections and uh virus then we have a capacity building program s then we have our cyber response system team then we have our legislative framework so these are the responses of the government toward the cyber crime

and cyber safety uh these are only like on the basis of crime reported to the law enforcement agencies because our polic is made on the like whatever is is reported whatever is detected and then on the basis of we make the policies but another challenge for us is that key crime is not reported every crime is not reported security [Music] Bridge 5,000 is being stolen but he's not reporting but that report and that crime detection and that crime breach that security breach is very important us for us because type of crime is happening only when you can seek only when you can detect then only you know that this kind of crime is happening so

reporting of crime so what we are looking for cyber security researchers cyber security agencies to help us in like awareness campaign and we will be glad to work with you if you can help us how to make the entire society and Common Man cyber literate and aware of the cyber crime one area second area we are looking for that is how the crime get reported more EAS easily and citizen is not harassed so you can plan a interface you can plan a better method of reporting the crime so that will be a good help to the security

agencies with this challenge we are also planning a team of cyber Commandos cyber Commando we are training cyber Commando will be the person who will be knowing all kind of cyber crimes all kind of security lapses all kind of uh dangers on the virtu so we are creating a team of cyber Commandos in the entire state of Gujarat who will be strategically placed and who will be taking preventive action as well as the detection so this is our plans and Gujarat police assure you that whoever want to work with us in crime prevention and crime detection we will offer you all kind of support and uh we will facilitate your research also uh we are working with the National forening

Science University they have a wonderful and excellent uh cyber security department and we are open to student working under the internship program so you can come and work with us you can volunteer with us we have a cyber security uh Department which have a volunteer program so you can work with us also so from our side we will be more than happy Gujarat police will be more than happy to work with you in a private public partnership in handling the cyber crime and again I congratulate besides for organizing such a wonderful and innovative conference and collecting the best of the brain in the uh cyber security and cyber uh experts at Ahmedabad thank you thank you

very much

[Music] J would you like I I'll invite your suggestion and questions if you want to uh give any suggestion any contribution any question you

have yeah

[Music]

come hello uh hello everyone myu pel thank you so much for your insightful session uh I am also Alim of national Forensic Science University uh most of the time well said you have shown the initiatives of i4c uh but what we observed practically in terms of uh aess we talk about reactive approach like it can be any kind of mod operand uh like the banking payment uh loan app right now digital arrest is in a trending majority of the young people uh which is since sits here they want if they wanted to contribute to predict the Cyber threats or con modity attacker use if we want to run a campaign on that so are you willing

to go for that so let one of the example is recently one of the insurance seor a big of the insurance companies being hacked yeah now the data is already there in a dark web right there are n number of possibilities and N number of model operty which can be uh followed by the Cyber criminals in upcoming days before it happens can we prevent can we create awareness uh among various channels so that we can aware the people and make them aware so that they we can prevent the frauds yeah exactly we are looking for that like awareness campaign is a big challenge for us nowadays like people I don't like look at the physical advertisement they

are online they don't read newspaper most of the smartphone generation don't rage paper so and one social media technique is that ke even if you search one topic so social media will like profile you and we will feed you the same kind of topics so that is the big challenge for us also so you can plan a awareness campaign and come with us so we are ready to take up that that's that's a big challenge for us okay thank you yeah yeah yeah [Music]

[Music] hello sir my name is prates I'm from indor uh adding to his question so there's a very interesting uh research I have done way back in my college so uh you know FS are happens everywhere and it's now also been turned to digital so uh there's a thing we can create uh sort of a heat maps for such uh such locations all over the India based on those heat Maps uh we can uh we can make a predictive AI models where in that you uh you can we can actually predict the crime before it happens the how we can do it it's uh based on that model we can get the data points from each area even

the area before area which is which can be a bit Troublesome area for lot of people and all over the cities it's all it's always everywhere so we can have that detection mechanism like a heat map everyone knows is a Young Generation they know about Snapchat seat map right you know about all the things so same replicating that easily but for a crime detection system and uh prevention as well and even predicting that so based on that uh we can somehow B so the source of the data points can be Firs the source of data point can be uh can be the the verbal and cyber crime. go.in has all the systems in place already

people post the crimes and everything so those data points can be used as a uh as a source and plus also uh reporting from the from the police has obviously has a secret channels of people as well so communicating with them and creating putting that in a in an in a AI model and making a predictive analysis of that and uh and and that that can be a good solution sir great great we will welcome that and uh but there is one issue in predictive polishing predictive event there is one issue only issue is that predictive is using the past events yeah right sir and it is uh projecting in the future using past event projecting in

the future but human ecosystem is always changing you will not be same person maybe after 10 days your thinking your uh like your ecosystem will change and even if you are the same that guy who was laughing behind you he will come out with something else yeah and the even he count some third guy will come out with something cre destruction you understand creative destruction yes so like the person who from management he understand the creative destruction so he will come out with something will destroy everything whichever is being in the productive projections so this is like you have to take you have to try everything but you have to take with a pinch of sh there is

always unknown unknown because technology changing so fast so preductive models has on their own limitations everywhere like even AI has its own limitation you know AI is using the information which is available in the virtual world but do you think everything is available in the virtual world 99% sir 99% how many of you thinking 99% of information is available in the virtual world uh 10% it's not it's not I was searching today on the like chat GPT I was searching some of the quotes and they were they were quotes from the famous philosophers but CH gave me a wrong answer total wrong answer they attributed you to the defense secretary of us defense secretary donal's fault

and it was not his statement so you have to take with a pinch of salt like technology digital world and the information it has its own this thing wisdom is different thing information is different see there are two different areas one is the wisdom and one is the knowledge so if you are entirely dependent on knowledge and and there's no wisdom so then uh there can be they can be uh disaster also and there can be a wrong decision making also so that we have to take care but uh you're welcome to come and work with us for the predictive models thank you thank you sir thank you thank you yeah yes

[Music] thank you sir for giving me the opportunity I am ASA Tucker and I wanted to ask that how we as a student Community can contribute to uh Gujarat police like how we can join Gujarat police because as uh one of our fine friend mentioned that there are numerous AI models not only AI models but there are numerous projects which we can uh contribute to Gujarat police and as you mentioned that wisdom and knowledge both is necessary right so you have wisdom and we have knowledge so we can combine it and we I never claimed I have wisdom no no I said there is a difference between knowledge and wisdom I yeah yeah so my point was we can just

combine wisdom and knowledge to create more cyber safe world so how we can do that see we have cyber police stations in every city every city Amad rajot bodra everywhere and we are hiring the volunteers and even inters to work with that so whichever City you are working you can contact the Cyber police station or the ACP cyber and they will be more than happy to associate the person working with us we are actually looking for the volunteers so you can work with us and you will be like you will have the exposure of working on the live cases not the histories live cases this was really very nice sir thank you so much thank you thank

you hello sir my name is Krishna jwal uh I came all the way here from Bihar so as you talk that cyber crime and reaction to that uh is a very great idea and we always improvise that and uh how we can find cyber attackers who are like looting money from the people but the my concern as being a learner still I'm learning and thing and uh viewing all those uh things that happen around me and uh from the government also what uh steps being taken so uh there are lot of things that has been implemented if a incident is happened and how a user can reach out for uh there um the act that

has happened to him or her but there is very less uh I have seen you can you can explain in Hindi there's no issue [Music]

[Music]

I was happened to recharging my electricity bill in of my household and uh while recharging I accidentally entered some special characters in that application and it gave me the error of the database and uh being an uh security researcher and authorized by ncipc directly I can test that whether it is a vulnerability or not and I verified it was a vulnerability and I was able to like see all the users of uh North biar electricity Zone and their recharges their account number and all and uh when I reported to them they just acknowledged and they didn't even patch that vulnerability till that I cannot reveal the application because still the vulnerability is there and there are a

lot of people here but they didn't take any response they just acknowledged and still the vulnerability is there so uh like your your problem is their response was not proper yeah sir there was a [Music] vulnerability ccco that is government body for that particular thing for reporting vulnerabilities but they didn't still patch that vulnerability

but security en okay okay you what you want to say they are ning not responding to your suggestion no they responded but they didn't patch they didn't patch the fix the vulnerability they didn't patch it they didn't work on it yeah so I think government Authority slow to

react it's it's a fact they they're very slow to react that's why I'm interacting with these you people because you fast to react you you you're very fast so and it is bear I think yes sir I'll convey to them I'll convey to them thank you thank you sir thank you yeah yeah can I what yeah hello hi sirra sing

still 15 to 20% most of 80 to 85%

cases mhm what's your question then sir

Amad Gujarat Amad Gujarat Amad guat Department problem Cy SEC C3 cyber

okay and which district it is Sir Surendra nagra nagar so what you do is anybody like listen to me if your problem is not taken care of by The Local District police you can dial 1 1930 1 1930 is handled 24 by7 and it is handled at the Gujarat state level so that is clear to you report on 1930 okay so one more last uh question or whatever suggestion you have yeah hello hello okay by the way may so yeah okay coming back to the question sir thank you so much has lot of scope for coming back to the question sir respect to that all is with respect to the acceptance Asal user owns

accept reject but at the

end sir if you in your District or in your state if you can do a

thing say it again what to start fromat yeah Point whether it's normal level local of there's no issue we can get the volunteer trained people trained and our program is continuous running programs are there okay sir and we have our cyber Labs our cyber La we have our national forensic science Ministry which is running the continuous programs so training is not a issue training see cyber problem is that key every 6 months the Cyber fraud the methodology the technique and the type of crime is changing so training has to be continu yes for sure problem problem main problem the training is not being held at all places you have any idea to have a different kind of model to I can suggest

my personal point of model sure sir no problem I can I can come out with a model we will implement it sure sir no problem we can do we can move forward with that yeah but uh just uh just a very small request was there if Government bodies can share uh like uh public so the most of the people who are here are on social media okay so if the what you say the law enforcement are actively sharing their concerns over social media and they're getting connected with and sharing it with most of the people and it's going to be a great thing for all of us person PO with City and then creating for

yes you can share you can share and besides take initia you can take their all the concern and all the suggestions and can share with you that's mutually beneficial actually we as a security agency and agency working for the secur CI only and you people are working for the security of citizens that's up to you you are working you are helping to making safer Society safer so your are welcome so all of you please give your thank you