Content by Suparna Goswami

IoT: Moving to Security by Design

Suparna Goswami  •  January 30, 2018

With the explosive growth of the internet of things, and the increasing threat posed by botnets that leverage IoT, more must be done to ensure IoT devices include security by design, says David Holmes, principal threat researcher at F5 Networks, who offers a strategy.

Deception Technology: Clearing Up Myths

Suparna Goswami  •  January 25, 2018

Deception technology can play an important role in intrusion detection because it can help track lateral movements of intruders, says Felix Mohan, CEO at CISO Cybersecurity, who clears up some myths about the technology.

Hardware Flaws Delay Smart Nation Projects in Singapore

Suparna Goswami  •  January 22, 2018

Some projects related to Singapore's Smart Nation initiative have been postponed as a result of concerns about the Spectre and Meltdown chip flaws that are affecting so many devices.

Building a CSOC: Keys to Success

Suparna Goswami  •  January 19, 2018

When building a next-generation cybersecurity operations center, or CSOC, organizations must first understand their attack profile and determine the scope of threat monitoring needed, says Jagdeep Singh, CISO at Rakuten India, an e-commerce company.

Improving Security in the Manufacturing Sector

Suparna Goswami  •  December 22, 2017

To better address security issues, companies in the manufacturing industry need to ensure proper communications between their operational technology and information technology specialists, says RaviKiran Avvaru, head of IT at Toyota Kirloskar.

Singapore Considers Limiting Use of NRIC Numbers

Suparna Goswami  •  November 14, 2017

With the aim of protecting data privacy, the government of Singapore is considering taking steps to greatly reduce the use of the National Registration Identity Card numbers for verifying consumers' identities.

India to Create Cyber Defense Agency

Suparna Goswami  •  November 13, 2017

India is expected to announce in the coming months the formation of a cyber defense agency that would focus on protecting critical infrastructure, especially government and defense networks, from cyberattacks.

Managing Third-Party Risks to Prevent Breaches

Suparna Goswami  •  November 2, 2017

To help prevent breaches caused by third parties, organizations need to improve their vendor risk evaluation methods, carefully assessing their business partners' processes and risk mitigation methods, says Anuj Tewari, CISO of HCL Technologies.

How Significant Was Breach of 6,000 Indian Enterprises?

Suparna Goswami  •  October 9, 2017

Researchers claim to have discovered information from 6,000 Indian enterprises, including governmental units, for sale on the dark net. But while the National Internet Exchange of India, the apparent source of the information, is attempting to downplay the incident, others are demanding a clear explanation.

Arrests for Aadhaar-Related Fraud Raise Concerns

Suparna Goswami  •  September 14, 2017

The arrest of 10 men in Uttar Pradesh for allegedly cloning fingerprints of authorized Aadhaar enrollment officers is once again stirring debate over whether it's wise for India to rely so heavily on Aadhaar for authentication.

Why Does Aadhaar Data Continue to Get Compromised?

Suparna Goswami  •  August 31, 2017

A series of security lapses involving Aadhaar has resulted in major data leakage. The main reason, experts say, is the weak security practices and gaps at the service partners' domain.

Authorities: 4 Insiders Leaked 'Game of Thrones' Episode

Suparna Goswami  •  August 17, 2017

The recent online leak of an episode of HBO's Game of Thrones, which has been linked to four insiders at a company that handles data for Star India, has put the spotlight on strategies for mitigating insider threats.

210 Indian Government Websites Expose Personal Data

Suparna Goswami  •  July 21, 2017

About 210 websites of central and state government departments in India were displaying personal details and Aadhaar numbers of beneficiaries. Security experts are questioning why auditors did not detect problems that led to the data leakage and say it's time to take strong action against faulty auditors.

Singapore Considers New Cybersecurity Requirements

Suparna Goswami  •  July 14, 2017

New cybersecurity legislation under consideration in Singapore would make it mandatory for owners of critical information infrastructure to report security breaches within hours and require cybersecurity vendors providing highly sensitive services to be licensed.

MeitY Requires Government Departments to Have a CISO

Suparna Goswami  •  May 25, 2017

MeitY is requiring every government department in India to appoint a senior staff member as CISO. But some security experts question whether there are enough qualified security experts in all government departments to fill the new CISO positions and suggest departments consider hiring outside experts.