A survey of Indian Cyber crime and law and its pre- vention approach

International Journal of Advanced Computer Technology (IJACT)ISSN:2319-7900* Firewalls are by far the most common prevention systemsfrom a network security perspective as they can (if properlyconfigured) shield access to internal network services, andblock certain kinds of attacks through packet filtering.* Intrusion Detection Systems (IDS's) [9] are designed todetect network attacks in progress and assist in post-attackforensics, while audit trails and logs serve a similar functionfor individual systems.* "Response" is necessarily defined by the assessed securityrequirements of an individual system and may cover therange from simple upgrade of protections to notification oflegal authorities, counter-attacks, and the like. In some specialcases, a complete destruction of the compromised systemis favored.Today, computer security comprises mainly "preventive"measures, like firewalls or an Exit Procedure. A firewall [10]can be defined as a way of filtering network data between ahost or a network and another network, such as the Internet,and is normally implemented as software running on themachine, hooking into the network stack (or, in the case ofmost UNIX-based operating systems such as Linux, builtinto the operating system kernel) to provide real-time filteringand blocking. Another implementation is a so calledphysical firewall which consists of a separate machine filteringnetwork traffic. Firewalls are common amongst machinesthat are permanently connected to the Internet(though not universal, as demonstrated by the large numbersof machines "cracked" by worms like the Code Red wormwhich would have been protected by a properly configuredfirewall). However, relatively few organizations maintaincomputer systems with effective detection systems, and fewerstill have organized response mechanisms in place.Proposed PracticeA good practice is always „find the reasons behind the diseases‟i.e. there are reasons behind theft that some customeror other are dissatisfied with something related with organization‟s(cyberspace)behavior and that drives him to dosome anomalous behavior against the particular cyberspace.Some ideas and technologies are proposed below that maybe used to prevent insider threats.Social EngineeringActually it is being now days applied in many industries forsecurity. Social engineering is the act of manipulating a personto take an action that may or may not be in the “target‟s”best interest. This may include obtaining information, gainingaccess, or getting the target to take certain action. It is ahuge application of Psychology, behavioral study, cognitiveanalysis of human behavior. Based on the study, a group ofpeople always be active to motivate the employed guys to dowhat they should do. They investigate the corner of the user‟smind to find suspicious something.Secret TeamA secret team is the team who act as customer or other outsideuser within organizations (cyberspace) but they haveanother purpose that investigate, monitor or audit the activityof the users. It is like a team of private investigators in disguise.Implementing softwareSuch software should install in each system for every cyberspacethat maintain a database of each user or customer.Mainly user or customer details and one unique identificationproof issue by government .This software will be maintainby system administer and also invisible with respect toany user or customer. For this approach need extra storagesdevices. And as per the condition administer will decidedhow many day‟s keep information.Monitoring the usersThough somebody is newer or recent user, the monitoring ismust be needed. It may be by some software (used by systemadministrator or network administrator) and/or by thesecurity cameras. That means if someone has to steal, thenhe must overcome a lot of risks i.e. he has to throw dust inthe eye of many expertise before flies away.Important contents of IT act of Indiaor Information TechnologyAct 2000PreliminaryWith the rapid pace, internet usage in India is increasing. Sothe rule of government is to provide a legal framework forinternet and e-commerce.Electronic GovernanceThe filling up of a form, issue of a license or payment of feemay be in an electronic form. Secured digital signatures enablethe growth of e-commerce.A survey of Indian Cyber crime and law and its prevention approach 52