Cyber Warfare Preparedness
Science & Technology › Defence Technology and Missile Systems · Topic 16.16
Cyber warfare is the use of attacks on computer systems and networks by a state or its agents to damage, disrupt, spy on or control an adversary's military, economic or civil infrastructure. Methods include malware, distributed denial of service attacks, advanced persistent threats, hacking of control systems, theft of data and disinformation. Well known cases are the attacks on Estonia in 2007, the Stuxnet worm that damaged Iranian centrifuges and was found in 2010, the attack on Ukraine's power grid in December 2015 and NotPetya in 2017. India's military preparedness rests on the Defence Cyber Agency, a tri-service body set up in 2019, along with CERT-In, the National Critical Information Infrastructure Protection Centre and the National Technical Research Organisation.
5 min read · UPSC Prelims · Science & Technology · Defence Technology and Missile Systems
At a Glance
- Indian military body Defence Cyber Agency, 2019
- Famous worm Stuxnet
- Early case Estonia, 2007
- Infrastructure body NCIIPC, 2014
- Law of war guide Tallinn Manual
- Exam link UPSC Prelims, Science & Technology: Defence Technology and Missile Systems
Where Does It Fit?
This topic follows the account of robotics and AI in defence. It deals with the digital side of conflict and builds on the earlier macro topics on cyber agencies and ransomware. Previous topic: Robotics, AI and Internet of Military Things (IoMT) in Defence. Next topic: 3D-Printed Munitions and Lethal Autonomous Weapons.
What Are the Methods and Famous Cases of Cyber Warfare?
| Method or case | Details |
|---|---|
| Malware | Viruses, worms and trojans that steal or destroy data or control systems |
| Denial of service | Overloading servers with traffic until they fail. A distributed attack uses many hacked machines |
| Advanced persistent threat | A long term hidden intrusion, usually by a state group, to spy or prepare attacks |
| Estonia, 2007 | Large attacks on government, bank and media sites after a dispute with Russia, a first big case against a country |
| Stuxnet, 2010 | A worm that targeted Siemens controllers in Iran’s Natanz uranium enrichment plant and damaged centrifuges |
| Ukraine grid, 2015 | Hackers cut power to about 225,000 consumers |
| NotPetya, 2017 | A destructive attack that began in Ukraine and caused damage worth billions of dollars worldwide |
How Is India Preparing?
- Defence Cyber Agency: tri-service agency created in 2019 with headquarters in Delhi under a two star officer, to handle cyber threats to the forces
- Defence Space Agency and Special Operations Division: created at the same time, covering space and special operations
- CERT-In: national agency under the Ministry of Electronics and Information Technology, which responds to cyber incidents
- NCIIPC: National Critical Information Infrastructure Protection Centre, under the National Technical Research Organisation since 2014
- NCCC: National Cyber Coordination Centre, for threat monitoring, as in National Cyber Coordination Centre
- Service cyber groups: Army, Navy and Air Force have their own cyber units and the Army has a Cyber Group
- Reports of attacks: Chinese linked groups were reported to have targeted Indian power grid systems in 2020, although the Government said no data was lost; other attacks on Indian networks have come from various actors
- Doctrine: a joint doctrine on cyberspace operations was issued by the armed forces in 2024 to 2025, and a National Cyber Security Strategy has been long awaited. Check the latest
What Else Should You Remember?
- Offensive and defensive: defence means protecting systems, and offence means attacking enemy networks
- Attribution problem: it is hard to prove who attacked
- Zero-day: a software flaw unknown to its maker that attackers can use
- Supply chain attacks: compromising software updates, as in the SolarWinds attack of 2020
- Air gap: isolating critical networks from the internet, which Stuxnet still crossed through infected drives
- Tallinn Manual: an expert study of how international law applies to cyber operations, first issued in 2013
- UN norms: a UN group set voluntary norms for responsible state conduct in cyberspace
- Budapest Convention: India is not a party
- Hybrid war: cyber attacks combined with propaganda and conventional force
- Information warfare: use of social media to spread false stories
- Electronic warfare: jamming and spoofing of radio and radar signals, a related area
- Cyber range: a test facility for training in attack and defence
- Indigenous hardware and software: reduces risk of hidden back doors in imported products
- Trusted source rules: the Government has restricted telecom equipment from untrusted vendors since 2020
- Skills gap: lack of trained experts is a serious problem
- Link to ransomware: the criminal side is in Ransomware Threats: Locky, Petya, WannaCry
- Link to encryption: protection tools are in Encryption and Cybersecurity: Cyber Swachhta Kendra
- Defence Information Assurance and Research Agency: an earlier body for defence information security that was merged into the new structure
- Cyber drills: CERT-In and the armed forces run exercises with banks, power firms and ministries to test response
- Critical sectors: power, telecom, banking, railways and aviation are priority sectors for protection
- Deterrence in cyberspace: without clear red lines and attribution, deterrence is harder than in nuclear or conventional war
Why Does It Matter for the Exam?
- Agencies: DCyA, CERT-In, NCIIPC
- Cases: Estonia 2007, Stuxnet 2010
- Law: Tallinn Manual
- Current affairs link: cyber doctrine and strategy
- Common errors: saying Stuxnet targeted India or that DCyA is under MeitY
As an analytical point, cyber war is cheap, deniable and aimed at civil systems like power and banks as much as the military. India needs a national strategy, trained people, indigenous products and clear rules of response.
Why Is This Topic Important?
- Methods Malware, DDoS
- Cases Stuxnet
- India DCyA
What Came Next?
The next topic covers 3D-printed munitions and lethal autonomous weapons. Next topic: 3D-Printed Munitions and Lethal Autonomous Weapons.
Key People and Terms
- APT Advanced persistent threat
- DDoS Distributed denial of service
- DCyA Defence Cyber Agency
- Zero-day Unknown software flaw
- Air gap Isolated network
- Attribution Identifying the attacker
Exam Corner
Points to Remember
- DCyA created 2019.
- Stuxnet found 2010; Estonia 2007.
- NCIIPC under NTRO.
- Ukraine grid attack: December 2015.
- India is not a party to the Budapest Convention.
Do Not Confuse With
- DCyA and CERT-In Military agency versus civil incident response
- NCIIPC and NCCC Critical infrastructure protection versus threat coordination
- Cyber warfare and cybercrime State conflict versus criminal activity
Memory Hook
Estonia tested, Stuxnet struck, Ukraine went dark; India answers with DCyA, CERT-In, NCIIPC.
Mains Angle
Questions ask for agencies and cases. These points help.
- Threat Cases
- Agencies Roles
- Gaps Strategy
A Question You May Face
An original practice question, not a past paper question.
“Discuss the nature of cyber warfare and assess India’s preparedness to counter it.”
How to Answer
- Nature Methods.
- Cases Estonia, Stuxnet.
- India Agencies.
- Gaps Strategy.
GS Relevance
Frequently Asked Questions
What is cyber warfare?
Cyber warfare is the use of hostile cyber operations by or on behalf of a state to damage, disrupt, spy on or take control of the computer systems and networks of another state, including those of the military, power grids, banks and communications. It includes malware, denial of service attacks and information operations.
What is Stuxnet?
Stuxnet is a sophisticated computer worm discovered in 2010 that targeted industrial control systems made by Siemens, in particular those running uranium enrichment centrifuges at Natanz in Iran. It is considered the first known cyber weapon to cause physical damage to equipment, and is widely believed to be state sponsored.
What is the Defence Cyber Agency?
The Defence Cyber Agency is a tri-service body of the Indian armed forces, created in 2019 and headquartered in New Delhi, to handle cyber security and cyber operations for the military. It works under the Integrated Defence Staff, along with civilian agencies such as CERT-In and the National Technical Research Organisation.
What is NCIIPC?
The National Critical Information Infrastructure Protection Centre is the nodal agency under the National Technical Research Organisation for protecting critical information infrastructure, such as power, banking, telecom and transport networks, under Section 70A of the Information Technology Act. It was set up in 2014.
What is the Tallinn Manual?
The Tallinn Manual is a non-binding academic study, first published in 2013 and updated in 2017, by international law experts on how existing international law, including the law of armed conflict, applies to cyber operations. It was prepared at the request of the NATO Cooperative Cyber Defence Centre of Excellence in Tallinn.
PYQ Practice — Statement Analysis
1 Stuxnet targeted Iranian nuclear enrichment equipment.
At Natanz.
2 The Defence Cyber Agency was created in 2019.
A tri-service body.
3 India is a party to the Budapest Convention.
It has not joined.
4 NCIIPC functions under the National Technical Research Organisation.
Since 2014.
Past Mains Questions on This Topic
This topic comes under Defence Technology and Missile Systems. UPSC Mains questions asked on the matching syllabus topic, year-wise with marks:
Related Topics
Browse the full Science & Technology index