Cybersecurity industry in India growing at 40% CAGR: DSCI & MeitY study report

In the latest study published by DSCI (Data Security Council of India) & Meity, the Cybersecurity services & product industry is reported to have grown with a massive CAGR of around 40% over the last couple of years and has reached a revenue of $9.85 Billion in 2021. 

As per the report titled "India Cybersecurity Industry- Services and Product Growth Story", Indian Cybersecurity services industry grew from $4.3 Billion in 2019 to $8.5 Billion in 2021 whereas Indian cybersecurity products developed from USD 740 Million in 2019 to reach USD 1.37 Billion in 2021. Some of the key trends contributing to the growth of cybersecurity sector are 

• Remote working
• Need for cybersecurity workforce
• Increase in adoption of IoT, Cloud and other advanced technologies  

Mr. Ajay Sawhney, Secretary, Ministry of Electronics & Information Technology, Government of India commented, "Government of India and MeitY have a comprehensive Digital India program and the Pandemic has provided a further push to digitalization and taking Government services online. India's Cyber Security Industry was in the forefront supporting Government and all critical sectors to manage the heightened cyber security risk last two years. The `India Cybersecurity Industry Landscape", showcases the capabilities of the Indian cybersecurity Services and Start-ups and the continuous innovation in products and services to serve customers in India and globally. Ministry of IT & Electronics is committed to partnering with DSCI to scale up our innovation in emerging areas like 5G, Hardware, IoT Security, and through our flagship ISEA and Future Skills Programmes meet the talent demand of the Industry."

Managed Security Services offerings are the leading the services segment with 63%, followed by cloud security at 58%. The report summarises revenue insights, technology landscape, offerings, talent, innovation and key investment priorities. 

Cloud.in is an AWS Advanced Consulting Partner offering Managed Security Services. Some of the key characteristics of our security service offerings include:

• PCI DSS & HIPAA Compliance

• Security integrations with Applications

• Protection against Web Attacks

Reach out to us to learn more about how you can protect your websites, applications and data from numerous types of cyberattacks. Mail your cybersecurity concerns to us at: sales@cloud.in

Source: India Cybersecurity Industry- Services and Product Growth Story

 

Log4j software bug: how the internet is responding and how to secure your applications?

 
Log4j, a software used by millions of web servers, was found with a major security flaw last week. Hackers are trying to take advantage of this bug (attacks are termed as Log4shell attacks) as this library is being used extensively over the globe by millions of apps. 

Detected first within the game "Minecraft", this vulnerability was soon brought to light by the media worldwide. 

It is easier for attackers to deceive the Log4j using the malicious code that contains a recursive lookup, resulting in a StackOverflowError and thereby forcing the software to store the log entry in form of a particular text that will terminate the process. Popularly known as a DDOS attack.

Soon, the cybersecurity agencies worldwide have raised alerts over Log4j. CyberSec experts are calling it "one of the worst in years, if not decades".

Companies have advised their customers to update to version 2.17.0 to cope up with the vulnerability. The update is said to be able to fix most of the issues. 

Companies can use a combination of multiple AWS services to help limit their risk/exposure from the Log4j vulnerability. Services like AWS WAF, Amazon Route 53 Resolver DNS Firewall, AWS Network Firewall, Inspector, Guard Duty, Security hub, etc. could prove to be useful when maximizing the security against cyberattacks carried out as a result of exploiting such vulnerabilities.

As an AWS Advanced Consulting Partner and having expertise in security, we at Cloud.in adopt security practices as per AWS standards for all our customers. Considering the AWS environment and offerings there are a lot of services that enhance and improve the security posture of your applications. 

Reach out to us to secure your applications at sales@cloud.in

Best Practices for cloud migration

 

In an age of choice and flexibility, multi-cloud is the norm today rather than the exception. Most enterprises today want to avoid vendor lock in, and want to choose different cloud platforms for different workloads. A study conducted by IDC of 300 enterprise IT leaders revealed that 93.2% of respondents were using ‘multiple infrastructure clouds’ for their business operations.

While having greater choice is a clear necessity, it also throws up multiple challenges for organizations. Any organization that underestimates the complexity of multi-cloud migration will fail to realize the full potential of a multi-cloud strategy. Being aware of the potential hurdles can help enterprises to tap into the numerous business benefits of a multi-cloud environment. Hence, before planning any cloud migration, it is critical to clearly define the pre-migration and post-migration stage, and document the existing IT ecosystem consisting of apps, databases, networks and interdependencies.

We recommend some of the following best practices for ensuring seamless multi-cloud migration

Define what to migrate

 

Before you decide to migrate applications or data to a cloud platform from on-premise or from another cloud, it is critical to first identify a list of applications that must be migrated. This can be done on the basis of performance gain, economics of maintaining the application or security, after migration to the new cloud environment. Enterprises hence must invest enough time to maintain an inventory of applications so that there is minimum risk of any missing dependency during a migration process.

Decide the type of migration

Once the inventory of applications is prepared, enterprises must decide the type of cloud environment they want to migrate – will be it be an all public cloud environment, will be it a private cloud or will be it a hybrid cloud environment? Depending on the benefits, you could decide to migrate to the cloud environment that your organization need. The migration must be planned in such a way that it is less disruptive with very less downtime.

Prepare and test

The new cloud environment where your applications and data will migrate needs to be ready to receive data in a format that is required by the cloud provider. You could start small, and move migrating applications gradually, as you gain greater confidence in the new cloud environment. It is also equally important to test if your on-premise applications with their data and dependencies will work properly in the new environment. Factors such as latency, performance and additional bandwidth also need to be considered as migration to the cloud can affect end users.

Monitor and measure 

Post migration, organizations must implement tools that can help them get complete visibility into the performance of every application. This can be done by correlating the performance of every application by mapping the user journeys across different platforms such as web or mobile. Post migration, organizations must check if all the application interdependencies and linkages are working perfectly, and also check if performance levels have improved or reduced, due to migration. You could also use cloud-native monitoring tools that provide application-level insights and monitoring on the cloud environment.

Enforce security

Most of the breaches that have occurred on public cloud platforms are due to user mis-configurations. Other issues include unencrypted databases, weak network controls and poor governance. Hence, post migration, enterprises must ensure that all applications must ideally have the same level of security across on-premise apps or apps in the cloud environment.

Lastly, if your organization lacks the capability or has less bandwidth to carry out cloud migration activities, you could consider outsourcing this activity to a specialist and certified cloud service provider. For ensuring that you get the best out of your cloud migration, you must consider service providers that can not only guide your organization in choosing the best possible cloud platform, but also help your organization ensure effortless provisioning, monitoring and management via a single dashboard.