Cyber Threats: Types, Vulnerabilities, and India's Preparedness
TOPIC CLASSIFICATION
Subject: Science & Technology / Internal Security Sub-area: Cybersecurity Prelim PYQ Trend: High (regular questions on malware, CERT-In, cyber laws) Mains Relevance: GS-3 (Internal Security, Science & Technology)
EXAMINER REASONING
Cyber threats are a high-yield UPSC topic straddling Science & Tech and Internal Security. The examiner focuses on: (a) types of threats - malware, phishing, ransomware, APTs; (b) India's institutional mechanism - CERT-In, NCIIPC, sectoral CERTs; (c) vulnerabilities - supply chain, IoT, AI-based attacks; (d) legal framework - IT Act 2000, amendments, data protection. Expect questions that ask you to link cyber threats with critical infrastructure (power grid, financial system, defence) and India's preparedness gap.
Core Concept
Types of Cyber Threats:
| Threat | Description | Recent Example |
|---|---|---|
| Malware | Malicious software (virus, worm, trojan) | Pegasus spyware (NSO Group) |
| Ransomware | Encrypts data, demands ransom | AIIMS attack (2022), CDAC (2024) |
| Phishing/Social Engineering | Deceptive emails/websites to steal credentials | Spear-phishing targeting govt officials |
| DDoS | Overwhelms servers with traffic | HDFC Bank (2021), SWIFT-related |
| APT (Advanced Persistent Threat) | State-sponsored, long-term infiltration |
This note is temporarily free
UPSC Margin is open for 3 months. All notes, full-length mock tests, and daily current affairs are free during this window.
Monthly
₹299
per month
Yearly
₹1,999
per year
No account? Create one free