Utilization of security space gains momentum

Many of the principles of safety that we follow in everyday life apply to Internet too. An important difference is that it is extremely fast and others could be eavesdropping, says Murali Venkatesan, product specialist, Sify Technologies. Excerpts from an interview:

Online security has assumed major significance in today's tech-driven world. What role does Sify play in this arena?

Sify is an end-to-end security solutions provider. Sify covers the several aspects of information security which includes Security Consulting - VAPT, Audits, Recommendations, Design and Implementation of Network Security solutions, Managed Security Services, SafeScrypt CA services for Digital Signature Certificate Needs and Transaction and Data Security Solutions. Sify follows a 360-degree approach to information security to meet enterprise security needs fully.

Individuals, who use the Internet for online transactions, are most of the time unaware of what lies ahead in terms of security risks. How does a not-so-Net savvy layman Internet user who has to use online facilities for transaction know what precautions are to be taken?

Education on security and awareness about the threats in Internet and the services used is necessary. Many of the principles of safety that we follow in everyday life apply to Internet too. An important difference is that, it is extremely fast and others could be eavesdropping.

On a larger perspective, do you think businesses in India are well geared up to meet challenges in the online security space?

Indian businesses recognize the competitive benefits Internet provides and they are constantly equipping themselves to utilize this space. Online railway tickets, air tickets, hotel booking, Internet banking / stock trading and shopping are growing every day.

What does Sify offer in such a scenario to businesses in the Indian context?

Sify provides end-to-end security solutions. Sify has a team of well-trained security professionals who can understand / envisage enterprise security requirements and provide the required solutions that would meet the user's requirement. Sify provides security solutions and services to many enterprises in the country.

Being among the first companies to promote SSL in India, how far have you succeeded in ensuring safe and secure transactions?

Sify partnered with VeriSign, to bring in SSL to India in 2001-02. Over the years Sify has educated online service providers with the need for server authentication and security for data in transit through the application of SSL certificates. Sify has many hundreds of online servers with SSL certificates which authenticate Web servers and ensures that the end user can authenticate the Web server.

Could you explain briefly on EV SSL? What are the challenges you face and address?

EV stands for Extended Validation. Validation is an important process in the issuance of SSL certificates. SSL Certificates identify the WebServer using its Full Qualified Domain Name (FQDN). Domain names are obtained through a registration process, where an organization obtains domain names.

EV validation extends the validation to the organization, by finding out the authenticity of the organization, its existence and other details. Some of the organizations that are not registered with a regulatory agency may not qualify for an EV certificate. The process of validation takes a few days; however, once the customer realizes the benefits they choose EV SSL. Sify provides VeriSign EV SSL.

Could you elaborate on the recent developments and trends in security?

The recent developments are supportive of pro-active and preventive practices. Server as well as user authentication is an area where many initiatives across verticals are being taken up. Two Factor Authentication (2FA) has become a need, thanks to the increase threats from phishing, pharming, and man-in-the-middle attacks. We will see more 2FA guarding online applications.

Data Leakage Protection is another area where enterprises are spending more time and effort. Enterprises would like to ensure that data leakage through mails, pen drives and other such portable storage devices can be stopped. Solutions to these threats are available and some enterprises have employed DLP and several others are evaluating DLP use. Anti Spamming / Anti-malware are gaining in sophistication and application.

What has been Sify's roadmap for enterprise security?

Sify's road map for enterprise security is, meet end-to-end security requirements. We provide vendor agnostic solutions. We have partnered with leading security technology providers.