Research,  Education,  and  Cybersecurity  Policies  in  India

Cybersecurity  Governance:  A  Data-­‐Driven  Approach  

Harvard  University  Oct  13,  2016

Ponnurangam  Kumaraguru  (“PK”)Associate  ProfessorFounding  Head,  CERC  

fb/ponnurangam.kumaraguru,  @ponguru

Who  am  I?  

� Associate  Professor,  IIIT-­‐Delhi    � Ph.D.  from  School  of  Computer  Science,    

Carnegie  Mellon  University  (CMU)    � Research  interests  -Cybersecuirty,  Social  Computing,  Computational  Social  Science,  Complex  Networks  pertaining  to  Human  Behavior,  specifically  in  the  context  of  Security  &  Privacy

� Co-­‐ordinate  and  manage  Precog,  precog.iiitd.edu.in

� ACM  Distinguished  Speaker  

2

https://www.youtube.com/channel/UCHWDvGDh4QjWbV79bM2neSg

3

4

What  we  dabble  with!  

5

http://meity.gov.in/sites/upload_files/dit/files/National%20Cyber%20Security%20Policy%20(1).pdf

6

http://cerc.iiitd.ac.in/

7

NSC  /  NCSC  

8

NSC  /  NCSC  

OSN  for  Policing:  Boston  

9

OSN  for  Policing:  BLR  

10

OSN  for  Policing:  BLR  

11

12

13

14

Policies:  Micro  Mission    

15

Bridging  the  gap  

�Officers  � Teachers  � Students  

16

Bridging  the  gap

17

18

Accounts  in  the  country!  

19http://precog.iiitd.edu.in/research/osm-­‐policing-­‐india/handles.html

Analyzing  Accounts  

20http://precog.iiitd.edu.in/research/osm-­‐policing-­‐india/analyse/

21

20  Interviews 4  FGDs

10,427  Surveys

#privacyindia12  Methodology

18  months!

0.08

7.73

0.14

7.101.10

6.88

0.28

8.14

1.96

8.58

0.52

0.21

0.74

3.19

9.38

0.350.03

0.04

0.25

2.94

11.290.02

8.57

0.05

9.39

9.530.21

0.17

9.390.48

0.020.03

0.010.08

Sample  

Demographics

Gender  (N=  10,232)Male 67.57Female 32.43

23

Age  (N=10,350)<18 1.5418-­‐24 21.3125-­‐29 32.2030-­‐39 25.9040-­‐49 14.0950-­‐64 4.4665+ 0.50

Age

Internet  &  Social  MediaWhat  do  you  feel  about  privacy  of  your  personal  information  on  your  OSN?  

24

Q42,  N  =  6,855It  is  not  a  concern  at  all  Since  I  have  specified  my  privacy  settings,  my  data  is  secure  from  a  privacy  breach  Even  though,  I  have  specified  my  privacy  settings,  I  am  concerned  about  privacy  of  my  data  It  is  a  concern,  but  I  still  share  personal  information  It  is  a  concern;  hence  I  do  not  share  personal  data  on  OSN  

Internet  &  Social  MediaWhat  do  you  feel  about  privacy  of  your  personal  information  on  your  OSN?  

25

Q42,  N  =  6,855It  is  not  a  concern  at  all  Since  I  have  specified  my  privacy  settings,  my  data  is  secure  from  a  privacy  breach   42.13  Even  though,  I  have  specified  my  privacy  settings,  I  am  concerned  about  privacy  of  my  data  It  is  a  concern,  but  I  still  share  personal  information  It  is  a  concern;  hence  I  do  not  share  personal  data  on  OSN  

Internet  &  Social  MediaWhat  do  you  feel  about  privacy  of  your  personal  information  on  your  OSN?  

26

Q42,  N  =  6,855It  is  not  a  concern  at  all   19.30  Since  I  have  specified  my  privacy  settings,  my  data  is  secure  from  a  privacy  breach   42.13  Even  though,  I  have  specified  my  privacy  settings,  I  am  concerned  about  privacy  of  my  data   23.84  It  is  a  concern,  but  I  still  share  personal  information   8.02  It  is  a  concern;  hence  I  do  not  share  personal  data  on  OSN   6.71  

Internet  &  Social  MediaIf  you  receive  a  friendship  request  on  your  most  frequently  used  OSN,  which  of  the  following  people  will  you  add  as  friends?  

27

Q43,  N  =  6,929Person  of  opposite  genderPeople  from  my  hometownPerson  with  nice  profile  pictureStrangers  (people  you  do  not  know)Somebody,  whom  you  do  not  know  or  recognize  but  have  mutual  /  common  friends  withAnyone

Internet  &  Social  MediaIf  you  receive  a  friendship  request  on  your  most  frequently  used  OSN,  which  of  the  following  people  will  you  add  as  friends?  

28

Q43,  N  =  6,929Person  of  opposite  genderPeople  from  my  hometownPerson  with  nice  profile  picture 10.12Strangers  (people  you  do  not  know)Somebody,  whom  you  do  not  know  or  recognize  but  have  mutual  /  common  friends  withAnyone

Internet  &  Social  MediaIf  you  receive  a  friendship  request  on  your  most  frequently  used  OSN,  which  of  the  following  people  will  you  add  as  friends?  

29

Q43,  N  =  6,929Person  of  opposite  gender 27.39People  from  my  hometownPerson  with  nice  profile  picture 10.12Strangers  (people  you  do  not  know)Somebody,  whom  you  do  not  know  or  recognize  but  have  mutual  /  common  friends  withAnyone 2.99

Internet  &  Social  MediaIf  you  receive  a  friendship  request  on  your  most  frequently  used  OSN,  which  of  the  following  people  will  you  add  as  friends?  

30

Q43,  N  =  6,929Person  of  opposite  gender 27.39People  from  my  hometown 19.51Person  with  nice  profile  picture 10.12Strangers  (people  you  do  not  know) 4.99Somebody,  whom  you  do  not  know  or  recognize  but  have  mutual  /  common  friends  with 8.31Anyone 2.99

Takeaways

� Cybersecurity  is  a  complex  and  a  multi-­‐faceted  area  /  problem  

� Attempts  are  being  made  in  different  directions  

�More  empirical  data  /  analysis  needed  � Long  way  to  go  for  India!  

31

Thank  youpk@iiitd.ac.in

precog.iiitd.edu.infb/ponnurangam.kumaraguru