This Article is From May 09, 2015

Government Bans Private Servers from Hosting Armed Forces Websites

Government Bans Private Servers from Hosting Armed Forces Websites

File Photo: Defence Minister Manohar Parrikar.

New Delhi: The government has barred the use of private servers for hosting Army websites following a recent cyber attack on an Army website, government said in Lok Sabha on Friday.

Defence Minister Manohar Parrikar told the House that action has been taken in the matter, with the website being secured and hosted on the NIC network.

"It was a case of a private server which was used on outsourcing... We have issued instructions not to take private servers for hosting Army websites," he said during the Question Hour.

The Minister was responding to a query by AIADMK member K Parasuraman, who wanted to know the status of the inquiry into the incident.

Mr Parrikar noted that no operational matter of the Army, Air Force or Navy is on the Internet.

"It is within the force-specific network for Army, Air Force and Navy," he said.

In reply to another question, Mr Parrikar said the government has taken a number of steps to protect confidential information pertaining to the defence sector from cyber attack.

"There are no reports of defence sector networks being attacked by cyber hackers and foreign intelligence agencies.

"However, cyber attacks are faced by Internet connected personal computers and these relate to unauthorised data access, denial of service, compromise of logic credentials," he said.

Mr Parrikar was replying to a query on whether reports of defence networks being continuously attacked by cyber hackers and foreign intelligence agencies have come to the notice of the government.

"To protect important and confidential data from cyber attack, the operational networks of the Armed Forces are air gapped from the Internet.

"Further, Defence Services have established Cyber Emergency Response Teams (CERTs) to prevent and react to cyber attacks," the Defence Minister said.

He said safeguards have been instituted in the form of audits and physical checks.

"Policies, guidelines and procedures are laid down and cyber security advisories are issued from time to time," he noted.
 
.