Concerns have also been raised on the firm being owned by the Chinese government, adding a twist to the controversy over a Delhi government project to install 1.5 lakh CCTV cameras across the city.
By Shaurya Karanbir GurungET Bureau|May 23, 2018,
The Chinese firm is however, not new to controversies, with a growing number of US organisations either removing or barring the use of company’s products.
A Chinese firm whose subsidiary has been shortlisted to supply security cameras for the national capital is on a US watch list, with an advisory on threats, including remote hacking and potential backdoor access.
Concerns have also been raised on the firm being owned by the Chinese government, adding a twist to the controversy over a Delhi government project to install 1.5 lakh CCTV cameras across the city.
While Defence public sector unit Bharat Electronics LimitedNSE 1.13 % (BEL) has been selected, it bid to supply cameras manufactured by Prama Hikvision India Private Limited. Chandra Shekhar, a senior official with Prama Hikvision told ETthat Prama Hikvision is a subsidiary of Hikvision.
However, Prabhat K Bhattacharya of its PR firm Consocia Advisory, claimed Hikvision owned 58% of the Indo-China venture Prama Hikvision.
The project came under controversy after Delhi Pradesh Congress Committee president Ajay Maken alleged that the AAP government had compromised national security. The Chinese firm is however, not new to controversies, with a growing number of US organisations either removing or barring the use of company’s products. The firm’s cameras were removed from the US Embassy in Afghanistan and another of its army base.
Similarly, the US Air Force last year cancelled a tender for Hikvision video surveillance. The US government’s GSA — which provides centralised procurement for it — has removed Hikvision manufactured products from sale. Security concerns of Hikvision products have been raised in the UK as well.
A US Department of Homeland Security advisory dated May 4, 2017 states that the products are “remotely exploitable” and require a low skill level to exploit. The vulnerabilities, advisory explains, are “improper authentication” and “password in configuration file”.
“Successful exploitation of these vulnerabilities could lead to a malicious attacker escalating his or her privileges or assuming the identity of an authenticated user and obtaining sensitive data,” the advisory reads. Prama Hikvision, however, claims that “allegations of a backdoor are false”.
“We have not, nor would we, intentionally place a “backdoor” in any of our products for any government or third party. Access and control of the video cameras and content will be restricted only to the end users and Prama Hikvision will not be able to access them at all,” the company said in response to an ET questionnaire.
In India, these security concerns may have not deterred procurement. Delhi government officials claim that the Delhi Metro Rail Corporation (DMRC), defence ministry and Defence Research and Development Organisation (DRDO) have procured cameras from Hikvision, in response to Maken’s allegations.
Individual questionnaires were sent to these organisations but received no response.
On its part, BEL said there is no compromise on security while supplying products for defence forces. “The requirement is for civilian use and not for any military application…BEL will never compromise on the security related aspects while supplying its products for defence forces. Supply of CCTV cameras for public use in various constituencies in Delhi does not violate any security norms,” BEL said in response to queries by ET.
While the contract is yet to be signed, controversy looms large with the Lieutenant Governor of Delhi creating a high-powered committee to create a standard operating procedure for installing CCTV cameras and the AAP-led government opposing the move.
India TV webteam [ Updated 13 Mar 2013, 07:21:39 ]
New Delhi, Mach 13: Chinese hackers have breached the systems of Defence Research and Development Organisation (DRDO) leading to the leak of thousands of top secret files related to Cabinet Committee on Security, which have been detected to have been uploaded on a server in Guangdong, the Mumbai newspaper DNA reported.
The report says this is the biggest security breach in the Indian defence establishment.
The breach was detected in the first week of this month when officials from India’s technical itelligence wing, NTRO (National Technical Research Organisation), working with private Indian cyber security experts cracked open a file called “army cyber policy”.
The file was found attacked to hacked email accounts of senior DRDO officials that quickly spread through the system in a matter of seconds, says the DNA report.
As Indian security experts began to track its origin, they discovered, for the first time, that all the sensitive files stolen from the infected systems were beingu ploaded on a server in Guangdong province of China.
So far, Indian intelligence had never been able to pinpoint a hacking attack with such accuracy.
Indian cyber security experts discovered thousands of top secret CCS files, and other documents related to surface-to-air missile and radar programmes from DRDL, a DRDO lab based in Hyderabad, among many other establishments.
Even the e-tickets of DRDO scientists who had travelled to Delhi in February were found on the server.
Intelligence officials also discovered documents of deals struck between DRDO and Bharat Dyamics Ltd, a defence PSU which makes strategic missiles and components.
Other recovered files related to price negotiations with MBDA, a French missile manufacturing company.
The official website of Defence Research and Development Organisation (DRDO) once again came under the cyber attack unleashed by the Chinese hackers.
According to the Mumbai newspaper DNA, Chinese hackers breached the security of DRDO website and accessed thousands of top secret files.
As par the report, the top secret files related to Cabinet Committee on Security have been uploaded on a server based in Guangdong.
The report claims that this is the biggest security breach in the Indian defence establishment.
The hacking incident came to the fore in the first week of this month when officials from India’s technical intelligence wing, National Technical Research Organisation (NTRO), along with private Indian cyber security experts cracked open a file called “army cyber policy”.
The DNA report claimed that the file was found attacked to hacked email accounts of senior DRDO officials that quickly spread through the system in a matter of seconds.
Later, the NTRO found that all the sensitive files stolen from the infected systems were being uploaded on a server in Guangdong province of China.
For the first time, Indian cyber intelligence team has successfully tracked the hacking location.
Indian cyber security experts discovered thousands of top secret CCS files, and other documents related to surface-to-air missile and radar programmes from DRDL, a DRDO lab based in Hyderabad, among many other establishments.
Even the e-tickets of DRDO scientists who had travelled to Delhi in February were found on the server.
Intelligence officials also discovered documents of deals struck between DRDO and Bharat Dyamics Ltd, a defence PSU which makes strategic missiles and components.
Other recovered files related to price negotiations with MBDA, a French missile manufacturing company.
Rs 30-cr project scrapped after technical panel found flaws in encryption system
The use of Chinese processors in an encryption system for ground mobile satellite communication terminals for use by the National Technical Research Organisation (NTRO) was considered a breach of security for which the project was scrapped on the directions of the National Security Council (NSC).
Following strong objections by the NSC, the “Sampark” network was shot down and is not being used by the NTRO, leading to the loss of Rs 30 crore (including capital and recurring expenditure) that was spent on purchasing the asset.
The wasteful expenditure incurred as a result of non-use of the system has come under the scanner of the Comptroller and Auditor General (CAG) which is learnt to have classified it as among several other “suspect” NTRO acquisitions and procurements between 2007 and 2010. The CAG undertook a massive special audit of the NTRO after the head of the communications intelligence organisation blew with the whistle on several questionable procurements and other irregularities.
The audit findings have been submitted to the Supreme Court in a sealed envelope.
In late 2009, the NSC was apprised by the Scientific Analysis Group (SAG) within the Defence Research and Development Organisation that several ground mobile SATCOM terminals, which the NTRO had procured from the Bharat Electronics Limited (BEL) for positioning in various parts of the country for communication “during operations”, contained Chinese processors.
The sensitive issue came to the notice of the NSC when the Indian Air Force, which procured the same encryption system from BEL the same year, sought to have it cleared by the SAG. On further examination, it was found by SAG scientists that the encryption system contained Chinese processors which, it was suspected, could potentially compromise all special operations within the country.
An encryption system is an essential feature in SATCOM terminals as they help in protecting transmission of and securing sensitive communication which could otherwise be intercepted. The NTRO procured “bulk encryption systems” in early 2009 as part of a project that was called “Sampark”.
According to sources in the country’s security establishment, senior NTRO officials procured the systems, worth Rs 30 crore, without taking due clearance from the SAG which is the government’s sole certifying authority for such hi-tech and sensitive equipment which the security agencies, including the Intelligence Bureau, use for operations.
The encryption system was used by the NTRO for at least six months during which time intelligence information was transmitted without clearance from the authorities concerned.
The Government of India in its pursue to provide leader ship to an organisation like DRDO/ISRO/BARC etc always selects the chief through a selection process whose search committee examine the whereabouts of the individual whom the responsibility is to be given.
Unfortunately due to over confidence or may be the political interference a leader who do not deserves the post is selected to lead the organisation. And the ultimate looser is the poor tax payers. The KARGIL WAR proved the biggest failure of DRDO and its leadership.
As former Army chief V P Malik, who led the army during the 1999 Kargil war, has said casualties in the conflict could have been reduced had DRDO “not come in the way” in the acquisition of weapon-locating radars.
“We had one or two incidents particularly on the weapon locating radar. If the DRDO had not come in the way we would have got them before the Kargil war and that would have definitely reduced our casualties,” he told Karan Thapar during a show.
Asked whether DRDO was “slight boastful” in claims over developing weapons, Malik said “well that has been our (armed forces’) experience over the development of weapons and equipment the DRDO has delivered or not delivered.“
Following is the example Vision/Working/commitment/Long Term Planning/Communication with fellow workers – Dr V K Atre then SA to RM commented about DRDO is following.
Today there is lot of hue & cry about the Chinese presence along with border from NEFA to POK, every Indian hearing through news channels and it is talk of the common people about our preparations vis-a-vis the Chinese capability.
Some of the activity which were suppose to be taken early was ignored by DRDO as then SA to RM due to his poor fore slightness ignored the real requirements of our Defence Services.
(Total pages —9) Page 1 of 1
Record of Discussions
Venue Room : Room No -137 South Block. New Delhi Office of Scientific Adviser to Raksha Mantri
Dr V.K. Aatre
Time :12.30 Hrs
Date : 10 April 2001
Visitor Slip No. : 83097 10th April 2001
The following were present
Dr.V.K.Aatre Scientific Adviser to Raksha Mantri Secretary (R&D), DRDO, Director General (R&D), Ministry of Defence, Government of India
Dr. A K Dutta Chief Controller, DRDO Hqrs
P D Dandriyal Charge man – II/ Technical Assistant/ Sr. Technical Assistant
Background of the Meeting
P.D.Dandriyal brought on to notice or Scientific Adviser to Raksha Mantri, Defence Minister, Prime Minister and Honorable President of India, the immoral character of Dr. Amarjeet Singh Bains, Director DEAL, DRDO, Dehradun. Ministry of Defence, Government of India
The representation highlights the sabotage of national interest, misappropriation of Government funds, misinterpretation of Government rules, regionalism, castism by Dr. A.S Bains. In support of this statement P.D. Dandriyal submitted two cheques of his take home salary to Prime Minister’s National relief fund as Dr Bains stopped giving him any work in retaliation. The cheqees were returned by PMO letter No 365/11/C/2/2000IPOL dated 05.06.2000 and R&D Hqr letter No DOP/P/2/20027/MISC/M/0 I dated 0202/2001 with the assurance of appropriate action.
An official confirmation for meeting with SA to RM on 10/04/2001 at 1230 hrs was given to PD Dandriyal at 1300 Hrs on 09/04/2001. The individual submitted and earn Leave for three days to attend scheduled meeting as he was denied Ty. Duty
Page 1 of 2
P D DANDRIYAL May I come in Sir
SA: Please come in
PD: May I sit
SA: Yes, please.
SA: So, you are the only honest person in lndia( laugh)
PD : No. Sir,I am one of them
(SA feels that. 99% oIl Indians are dishonest, but I strongly feel that the 97% Indian people are honeM)
SA: So, where you want to go?
(till date in any controversy the DRDO Hq transfer the employee without giving scrious thought over tie problem posed)
PD: Sir, I donot understand what is your motive?
SA: So you are writing that in DEAL 80% people have no work so I want to give you some work elsewhere..
PD: Sir, if you want to put me in any mission of national interest then you can send me right from Leh to Cochin. As I already liwe showh in capabilities by staying at Antarctica and also provided critical communications as well as witnessed the Agini-II hitting the target near Andman Sea.
SA: No no. you just tell me where :you want to go,
PD: Sir just listen to rme I have already performed a very useful project work in mountaineous terrain of Himachal for solving, night time communication problem faced by army during Kargil war we have solved the communication problem by using NVIS techniques.
SA: What is NVlS?
PD: Sir, Near Vertical Insidenanc Sky wave mode of radio cornniunicauon
(during mid Kargil war the army faced a serious problem of night time communication where no communication equipment whether HF/VHF/UHF were able to communicate. The matter was taken by army Hq and then the Defence Minister imported HF communication sets from M/s Tadiran, Israel. Unforutently these sets did not worked, however army conducted some trails along with Israeli engineers near Delhi and the
Page 1 0f 3
system was functional. He was not able to through light on the problem erupted at KARGIL. Then he Defence Minister handed over the problem to SA to RM who in turn asked Director, DEAL for quick solution. The solution was obtained immediately after carrying NVIS communication trials in Himachal Pradesh having Kargil like uneven mountain terrain. Unfortunately the report has been buried by Dr Bains/DRDO Hqrs.
SA: OK, I will stop NVIS studies further.
PD: Then Sir, you can give me work in the JEMCAB requirement of hardening of advance air base against nuclear EMP. As the JEMCAB secretariat has asked to assess the feasibility of above from DEAL, but our Director has flatly refused to take up to this activity and written to JEMCAB that give this to LRDE as we are preoccupied.
SA: No EMP project whether projects are from army, navy or air force this my privilege what to take and what not to take.
(This show to what extant SA has attachment with national security and for keeps his ego up to what extant he can compromise with national security)
PD: But Sir, we have infrastructure and expertise on EMP and our people are interested to take this challenging task.
(the team has developed a nuclear hardened shelter for JEMCAB a mini lab for nuclear simulation has also setup at DEAL and waiting for such assignment. SA forgotten the parliament (Loksabha) question D No.11042 dated 18th March 1999 and his comment to honorable Parliament for protecting our communication network against threat of Nuclear EMP and this is clear case of contempt honorable Parliament.)
SA: No, I will stop this activity this is my previlage. Before you one senior scientist of DEAL reported that I have not enough work and he has been transferred do you know?
(SA trying teach me that he can go to any extent and he is ready to stop any activity which are working in real national interest.)
PD: Yes Sir, Shri R C Chakarborty was transferred as Director, DTRL
(Sh R C Chakarborty was project Director “ SARVADRISTA” which was supposed to give real time image of enemy territory by using remote sensing data collected by earth station at DEAL he was on his job but to drive maximum advantage from the success of this project Dr.Bains removed him from the project director right in the middle of KARGIL WAR and takeover the command himself, the result was no further image was useful for army. People suspect that Dr Bains has been planted by some foreign agencies to sabotage the national program.)
Page 1 0f 4
SA: So, you would you like to join Chakorborty
PD: No Sir not at all. Because my background propagation and communication and he is engaged with image processing bun Sir DEAL is a propagation and communication,
SA: You know we already stopped propagation work there. So then Balasore, are you interested?
(NASA and NOAA in US have been carrying out the propagation studies right from VLF to Sub millimeter wave to enhance their defence preparation till date.)
PD: Sir, whenever and wherever DRDO needed my services I did l it honestly. In Balasore initiated the remote control of HF sets in Long Wheeler Island for Agni-ll. Why don’t you put me CNR because of communication background?
SA: No, I can’t
PD: Sir, you can send me in any mission mode project activity anywhere in country but if you will transfer me without justifying the points raised by me I have no option other then handover these Documents to public in front of parliament and to draw attention of the countrymen against the siphoning of pretty FE in the name of US sanction. I will go for self-immolation in front of Parliament
SA: (Stunned for a while) pause No, I am not transferring you but I warn to know where you want to go. Everyone parsing your work, we want to utilize your enthusiasm.
PD: Now it is up to you Sir, but without justification I will not leave Dehradun. Since, I have worked devotedly whenever any critical assignment was given to me. As an example then SA to RM Dr.Kalam gave a problem of Landmine detector to DEAL.As you know the casualties due to landmine can upset the total movement of army personals in battlefield. SA wanted to a most modern microprocessor based landmine detector to be developed by DEAL. To carry out the feasibility Director DEAL made a small committee and Sh Kundu, Sc ‘D’ was asked to explore internet for explore relevant information available elsewhere, for two days Mr. Kundu tried his best but failed to get useful information. Later my boss asked me to explore as he knows my capabilities, used PC at home and spent my own time and brought 125 pages with full of useful information pertaining history, design and development parameters etc. report was prepared and submitted to R&D Hqrs and a presentation on this
minutes of SA's meeting5
minutes of SA's meeting6
minutes of SA's meeting7
minutes of SA's meeting18
minutes of SA's meeting9
Appeal to clean DRDO of corrupt and anti-national officials
