National Security Database is an official program jointly developed in support with the Government of India by 'Information Sharing an Analysis Center' (ISAC), to identify and maintain a verified list of credible and trustworthy Information security experts who work to protect the National Critical Infrastructure

Critical infrastructure

Critical infrastructure is a term used by governments to describe assets that are essential for the functioning of a society and economy. Most commonly associated with the term are facilities for:*electricity generation, transmission and distribution;...

 and cyber space of India.

The program, with an intent to identify valued security experts has multiple specialty domains under Information security, in which professionals can apply for empanelment in the database by clearing a technical lab examination and psychometric test. The program does not award any certification and provides credible recognition in form of empanelment in the database under specfic security domain.

History

The project was conceieved after the horrific 2008 Mumbai attacks

2008 Mumbai attacks

The 2008 Mumbai attacks were more than 10 coordinated shooting and bombing attacks across Mumbai, India's largest city, by Islamist attackers who came from Pakistan...

 to protect the National Critical Infrastructure and Cyber space of India. The program was founded under a non-profit section 25 company 'Information Sharing and Analysis Center', in support with highly specialized technical intelligence agency NTRO

National Technical Research Organisation

The National Technical Research Organisation is a premier apex scientific organization under the National Security Advisor in the Prime Minister's Office, India. It was set up in 2004. It also includes National Institute of Cryptology Research and Development , which is first of its kind in Asia...

, Government of India.

Earlier, the program was announced as a pilot at the International Malware Conference, MalCon in 2010 in Mumbai where Indian Government officials reportedly asked Indian hackers to learn chinese .

Program Launch

The program is set for release on 26th November , the same date of the 2008 Mumbai Attacks, at the International Malware Conference, MalCon

Malcon

MALCON is an annual information security conference focusing exclusively on malware. It aims in bringing together Malware and Information Security Researchers from across the globe to share key research insights into building and containment of the next generation malwares. Unlike most hacker...

 at JW Marriott, Mumbai. The program is reportedly planned to be inaugurated by Sachin pilot

Sachin Pilot

Sachin Pilot is an Indian member of Parliament. He represents the Ajmer constituency of Rajasthan and is a member of the Indian National Congress. He is presently the Minister of State in the Ministry of Communications and Information Technology.- Early life :Sachin Pilot was born in Saharanpur,...

, Minister of State in Ministry of Communications and Information Technology.

Access Restrictions

The emplanelment in database can only be applied by Indian citizens and a limited access is available to the Industry to benefit from list of credible experts. However, a major part of the database access is restricted to supporting Indian Government organizations.

Debate

The program is largely believed to identify professional ethical hackers and security experts by the Government of India to protect it's critical infrastructure and cyber space. IT minister Kapil Sibal has reportedly expressed the need of community of Ethical Hackers .

Alok Vijayant, director of the information dominance group at the National Technical Research Organisation, the nation’s chief technical intelligence monitoring authority, quoted in an interview with India's top most weekly magazine Outlook, that NSD should not be “trivialised” by describing it as just as a group of hackers. “Supported by the government and the industry, NSD is a good initiative, since it will provide a readymade database of the most credible security professionals. This is more so because information security is a domain where individuals have the skills and not companies and they tend to regularly move from one firm to another.”

Official support to the project

NSD is officially endorsed by multiple Indian Government organizations including the NTRO with a formal MoU , for the stated National objectives with recognition of the foundation and a declared support for the work being done. The collaboration is open and all supporting organizations who need to access the database can do so with a formal MoU with the body.

Industry and Community contribution

various organizations are actively participating and supporting the National Security Database. Notable organizations having voluntary representations governing the NSD advisory panel at a national level include the HoneyNet India Chapter, Microsoft India and the country's oldest security conference clubhack.

Current Specialty Domains of NSD

The National Security Database program has the following specialty domains under which professionals can apply for empanelment:

1. Information Security Compliance and pentration Testing
2. Reverse Engineering
3. Web Application Security
4. Malware Research and Analysis
5. Exploit Development
6. Mobile Application Security
7. Digital Forensic Analysis
8. Fraud Investigation

In a quote with Outlook magazine, the Director of ISAC, Rajshekhar Murthy stated that It is necessary to have people who are not only competent but also have a high degree of trustworthiness and integrity. "The selection process will involve examination of references, technical skills, criminal history, and even psychological assessment to generate a credit report for security clearance.”