Critical Information Infrastructure Protection Research Articles

Cloud service models, business continuity and disaster recovery plans, and responsibilities

Purpose The purpose of this article is to identify the role of cloud computing services in business continuity and disaster recovery plans and delineate responsibilities for their execution. In recent times, there has been a huge upsurge in the usage of cloud service models such as infrastructure-as-a-service, platform-as-a-service, software-as-a-service and disaster recovery-as-a-service. However, in case of an emergency event or during contract negotiations, a question might arise as to who should be accountable and responsible for the content and execution of recovery plans. The main stakeholders in this scenario are cloud service providers and cloud consumers. Design/methodology/approach After a review of academic articles, standards, guidelines and vendor documentation, a proposal for assigning accountability and responsibility for business continuity and disaster recovery plans is presented, based on the RACI (responsible, accountable, consulted and informed) matrix. In this regard, a critical information infrastructure protection plan, a disaster recovery plan, an information systems contingency plan and a business continuity plan have been elaborated on in the article. Findings RACI matrices are presented for three general cloud service models and for three DRaaS models (managed, assisted and self-service). Accountability and responsibilities depend on the deployed cloud service model and the roles of cloud service providers and cloud consumers. Originality/value The proposed model for accountability and responsibility assignment provides a guideline for the allocation of responsibilities to roles not only during recovery but also during contract negotiations between cloud service providers and cloud consumers. By delving into business continuity and disaster recovery processes and activities, similar yet nuanced RACI matrices should be developed, as presented in this paper. They need to be customised for the specific context.

CHARACTERISATION OF METHODS OF PROTECTING THE STATE’S CRITICAL INFRASTRUCTURE FROM TERRORIST ACTIVITIES

The study describes methods for protecting the critical infrastructure of a state. The article aims to determine the combination of protecting methods of the state’s critical infrastructure from terrorist activities, namely security, physical protection, protection of critical infrastructure, protection of critical information infrastructure, and prevention of emergencies of a terrorist nature at objects of critical infrastructure. It is necessary to fulfil the following objectives to achieve the aim: to consider the difference and interrelation of the concepts of critical infrastructure and information critical infrastructure; to characterise the general properties of various terms, in particular: security, physical protection, protection of critical infrastructure, protection of information critical infrastructure, prevention of terrorist emergencies at objects of critical infrastructure; to analyse from the scientific point of view the classical definitions of forms and methods of critical infrastructure protection; to propose a generalised structure of information and technical methods of critical infrastructure protection; to determine the possibility of using information and technical methods in various fields of knowledge to protect the state’s critical infrastructure from terrorist influence. In summary, the structure of information and technical methods for critical infrastructure protection consists of three components: a mathematical model that describes the process occurring at critical infrastructure, a control algorithm that implements the mathematical model, and procedures that indicate the order of actions for applying the method. The problem of protecting critical infrastructure from terrorist activities requires technical, legal, military, psychological, medical, chemical, biological, and other sciences to address it. Each type of science will use its specific methods to solve practical problems of preventing terrorist emergencies at critical infrastructure. For technical sciences, there will be information-technical, engineering-technical, operational-technical, organisational-technical, biotechnical, and other methods to prevent emergencies of a terroristic nature that need development shortly. Keywords: critical information infrastructure, protection, terror, security, terrorist emergency.

National Critical Information Infrastructure Protection through Cybersecurity: A National Government Perspective

The South African national government is forging ahead with digitalisation plans to enhance socioeconomic growth in the country. However, digitalisation is accompanied by detrimental cybersecurity risks that may potentially exacerbate the vulnerability of the National Critical Information Infrastructure (NCII) of South Africa to cyber-attacks. Therefore, the envisaged digitalisation benefits in South Africa may be offset by the increased cybersecurity risk on the NCII of the country. Through a theoretical literature review, this study aims to investigate digitalisation and identify the cybersecurity risks it poses to the National Critical Information Infrastructure of South Africa, from a national government policy perspective. A gap has been identified in Information and Communications Technology for Development (ICT4D) research studies that researchers tend to focus on the implementation of ICTs while neglecting the policy aspect that is meant to direct and control the implementation of ICTs. Therefore, this study bridges this gap by approaching digitalisation and cybersecurity from a national government policy perspective. The output of this study is a National Critical Information Infrastructure Protection (through Cybersecurity) Conceptual Framework (NCIIP-CF) that is applicable to all spheres of government (local, provincial or national) as policy makers. The NCIIP-CF demonstrates an approach that embeds cybersecurity in the digitalisation process for the national government of South Africa, thus enabling an NCII that is resilient to cybersecurity risks.

‘Leapfrogging’ or ‘lagging’?: highlighting critical information infrastructure protection challenges and opportunities in Egypt and Nigeria

ABSTRACT Emerging economies are experiencing dramatic rises in internet penetration, along with an expansion of cyber-dependent critical infrastructure. Nevertheless, in many countries and regions, critical information infrastructure protection (CIIP) efforts remain at a relatively nascent stage. Early and widespread approaches to critical information infrastructure protection are informed by higher income, early digitising nations, which may not reflect the priorities, needs, or challenges faced by late-digitising emerging economies. This paper analyses CIIP efforts and processes in Nigeria and Egypt, considering the degree to which the standards and approaches to CIIP adopted by early digitising countries apply to each county’s experience. Evidence from both countries suggests that emerging economies will not follow the same trajectory or benefit from the same lessons learned in CIIP as early digitising regions of the world. Both countries face a different mix of CII and CII-vulnerabilities, a greater emphasis on internal cyberthreats, and significant resource and capacity constraints in comparison to early digitising nations. This suggests that ‘leap-frogging’ may not always be possible, and innovative, context-specific CIIP policies and strategies are needed.

Analysis of terminology for identifying the risks of ensuring security and sustainability of critical information infrastructure in Ukraine

The article is devoted to the definition of the concept of risk in the context of ensuring safety and sustainability of critical information infrastructure in Ukraine. It has been specified that, in general, the risks, which may arise and affect critical information infrastructure objects of Ukraine, are a highly specialized subject matter of research searches. Therefore, there is no clear identification of the term «risk» in the context of the proposed public relations at the scientific level. It has been emphasized that the legislative doctrine also does not define its content and essence.
 The general theoretical and legal definition of the term «risk» has been analyzed. An attempt to differentiate its characteristics as a distinct legal phenomenon from related legal categories has been made.
 It has been summarized that the category of risk in the context of ensuring safety and sustainability of critical information infrastructure in Ukraine is a is a form of manifestation of danger caused by the presence of phenomena, factors, circumstances, events, etc., which can potentially have negative consequences on the course of public relations, functionality of objects or specific legally protected interests in this sphere. In addition, we have clarified that the category of threat should also be understood as a form of manifestation of danger, which is due to the presence of phenomena, factors, circumstances, events, etc., but only those that will damage safety and sustainability of critical information infrastructure in Ukraine in the future (in particular, if it is not neutralized, it will become a risk).
 It has been summarized that to ensure that potential risks in the field of critical information infrastructure protection do not become an actual problem, the State, in formulating its policy in this area, should clearly define, i.e. establish at the legislative level what is a risk to critical infrastructure in general and for information one – in particular. This is necessary to develop clear methodologies for monitoring and forecasting certain risks in the future to avoid their negative effects.

Cyberterrorism: content, forms and promising countermeasures

The purpose of the study is to clarify the concept of cyber terrorism, its typical features and main forms, and to develop proposals for improving the system of countermeasures. The article highlights modern approaches to defining the content of cyber terrorism and its social and legal nature. This type of terrorism should be regarded as a socially dangerous politically motivated activity aimed at disrupting the critical information infrastructure of the State and thus creating a danger to human life and health or causing other serious consequences, provided that such actions were committed for terrorist purposes, or using cyberspace for other purposes of terrorist activities not directly related to terrorist acts.
 Typical features of cyber terrorism are described and a definition of its concept is proposed. The main forms of cyber terrorism are revealed: the commission of terrorist acts by organisations, groups and individuals using computers and computer networks or by influencing the information processed (circulated) in them, as well as the use of cyberspace for other purposes of terrorist activities not directly related to the commission of terrorist acts.
 The counteraction system may be based on the following: proper regulation of the concept of cyber terrorism in national legislation, criminalisation of acts of cyber terrorism and its components; enhancing the security and protection of critical information infrastructure; improving existing and applying new counteraction methods; improving cooperation in the field of combating cyber terrorism.

Framework for critical information infrastructure protection in smart government: a case study in Indonesia

PurposeThis paper aims to develop a framework for critical information infrastructure (CII) protection in smart government, an alternative measure for common cybersecurity frameworks such as NIST Cybersecurity Framework and ISO 27001. Smart government is defined as the government administration sector of CII due to its similarity as a core of smart technology.Design/methodology/approachTo ensure the validity of the data, the research methodology used in this paper follows the predicting malfunctions in socio-technical systems (PreMiSTS) approach, a variation of the socio-technical system (STS) approach specifically designed to predict potential issues in the STS. In this study, PreMiSTS was enriched with observation and systematic literature review as its main data collection method, thematic analysis and validation by experts using fuzzy Delphi method (FDM).FindingsThe proposed CII protection framework comprises several dimensions: objectives, interdependency, functions, risk management, resources and governance. For all those dimensions, there are 20 elements and 41 variables.Practical implicationsThis framework can be an alternative guideline for CII protection in smart government, particularly in government administration services.Originality/valueThe author uses PreMiSTS, a socio-technical approach combined with thematic analysis and FDM, to design a security framework for CII protection. This combination was designed as a mixed-method approach to improve the likelihood of success in an IT project.

Problems of the Criminal Law Protection of Critical Information Infrastructure of the Russian Federation

The article discusses the problems of improving criminal law norms regulating liability for unlawful impact on critical information infrastructure of the Russian Federation. The urgency of the research topic is connected with a growing number of such crimes and the recent adoption of Art. 274.1 of the Criminal Code of the Russian Federation. According to statistics, the number of attacks against critical information infrastructure is extremely high, however, a considerably smaller number of incidents are registered as crimes. One of the reasons behind this situation is the inadequacy of Art. 274.1 of the CC of the RF. The author draws attention to the fact that Part 1 of Art. 274.1 of the CC of the RF does not meet the criteria for criminalization, and its legal construction hinders the effective work of investigation and court bodies’ employees. As a result, this widespread publicly dangerous act is not duly reflected in judicial and investigation practice. At the same time, the current Art. 273 of the CC of the RF has considerable potential for including unlawful creation, dissemination and (or) use of any computer software in relation to critical information infrastructure or information contained in it. The author notes that the concept used in the current edition of Art. 274.1 of the CC of the RF «harm to the critical information infrastructure of the Russian Federation» is non-specific, and leads to delays, mistakes and confusion in legal practice. The article proves that Parts 2 and 3 of Art. 274.1 of the CC of the RF could ensure better liaison with other legal acts if their dispositions included the categories «computer attack» and «computer incident». The introduction of the above-mentioned attributes could also contribute to the consistency of court practice and the elimination of ambiguous interpretations. The analysis of the subjective side of crimes under Art. 274.1 of the CC of the RF allowed the author to conclude that mercenary motivation and the goal of concealing or aiding another crime should be viewed as qualifying features. To prove this position, the author points out that these features are wide-spread and used for the construction of corpus delicti of other crimes, and also cites the opinions of legal scholars.

Исследование критической уязвимости сервиса аутентификации и последствий для медицинских учреждений, относящихся к субъектам критической информационной инфраструктуры

Relevance. The functionality of malware has grown exponentially in recent years. There are more and more ways in which attackers can gain access to secret or personal data, as well as information stored in critical information infrastructure, including those related to the healthcare sector, but the consequences of attacks on such objects lead to serious consequences. A striking example is the leak of data to the public from the database of the unified dispatch service of the Lipetsk Region, which contained a lot of information about the patient, including their full name and address. Purpose. Investigation of the vulnerability BDU:2022-05212, which allows an attacker to gain full rights to the infrastructure. On the basis of the research done, to study the principles of operation of this vulnerability, as well as classify it and identify the consequences for CII objects. Make a list of measures necessary to ensure security against attacks of this kind. Material and methods. This article describes how to gain unauthorized access through the CAS administrative interface by calling the URL on the page that is used to install the default on the server and create the first administrator user. As well as an experimental study of this vulnerability, methods for its detection and consequences for CII subjects was carried out. Results. In accordance with the Federal Law of July 26, 2017 Nо. 187-FZ, definitions are considered that allow classifying information systems in the field of health care as CII and consider an actual example of data leakage in this area due to the vulnerability of the CAS server at the network level. The article also discusses the basics of the CAS server, compiled a vulnerability classification table BDU:2022-05212, and indicated the basic vulnerability vector metric according to the FSTEC standards. The conclusion in this article is based on how to protect against this vulnerability, as well as recommendations for resolving the problem if the attack has already been committed before. The results of the study will improve the level of authentication security in web applications and sites using CAS server technologies, organizations operating in the banking sector, as well as in the healthcare sector related to CII. Conclusion. The article puts the key – the security of the infrastructure of subjects of critical information infrastructure in the field of healthcare. This article will be useful for employees of the information security department working with CII objects, especially those operating in healthcare, banking, and other areas of the financial market. Keywords:critical information infrastructure protection, information security, healthcare industry, vulnerabilities, infotelecommunications

Actual issues of protection of critical information infrastructure

Actual issues of protection of critical information infrastructure

Review of Security Principles and Security Functions in Critical Information Infrastructure Protection

There is quite a lot of research on Critical Information Infrastructure Protection (CIIP), but what threats and vulnerabilities are considered in the security principle offered is unknow. Likewise, the security functions provided have not been measured. This study is a review of CIIP using the Kitchenham framework. From 31 scientific publications and 5 CIIP standards, it was found that there were 13 threats and 16 vulnerabilities were categorized into three security principles. As a result of measuring security functions on CIIP, we found that only 25% provide all security functions.

Protecting Critical Infrastructure and Critical Information Infrastructure

Abstract Regardless of how you define critical infrastructure, and critical information infrastructure as part of it, these are elements necessary for the functioning, integrity and security of a digitised society. Mapping what is critical (information) infrastructure and assessing the risks and hazards to it is a first step towards protection, along with a risk decision to either mitigate, remediate or accept the risk. For the protection of critical (information) infrastructure it is necessary to coordinate efforts and collaboration between sectors, which are often interdependent. Public-Private-Partnerships (PPP) and cooperation within organizations such as NATO and the EU are essential.

2022.3.01ЗАХИСТ НАЦІОНАЛЬНОЇ КРИТИЧНОЇ ІНФОРМАЦІЙНОЇ ІНФРАСТРУКТУРИ: АКТУАЛЬНІ ПРОБЛЕМИ ТА ШЛЯХИ ЇХ ВИРІШЕННЯ

Advantages of the modern digital world and development of information technologies stipulated appearance of new threats to national security in an information sphere. All more frequent by the objects of cyberattacs, amount and power of which grows constantly, the information resources of financial institutions, enterprises of transport and power engineering, public organs, which guarantee security, defense, safety in case of disasters. Therefore a research purpose is a search of solutions of issues of the day for protection of national critical information infrastructure. Methods. For implementation of research different materials were used and applied aggregate of scientific and specially-legal scientific methods: dialectical method, system’s method and the analysis of content, method of induction and deduction, formal law method and others. These methods were select taking into account a select purpose and tasks of research. Results. The actual state of the legal adjusting of protection of critical information infrastructure of Ukraine is reflected In the article. The reference list of objects of domestic critical informative infrastructure, which require defence, is offered, for the use in scientific researches and practice. Actual threats are marked to safety of critical informative infrastructure, certain in the documents of strategic level and additionally specified on results the analysis of the materials of practice of counteraction to such threats. Such threats acquire fundamentally a new value in the conditions of conduct of Russian Federation of hybrid war against Ukraine and have tendencies to strengthening of them negative influence on the state of national security in it’s different spheres. Safety and security of objects of critical informative infrastructure from such threats are certain in Ukraine at conceptual level one of base elements of the national system of firmness. Modern problem aspects and necessities of defence of objects of critical informative infrastructure are outlined, offered paths of their decision taking into account Ukrainian and world experience, in thereby legislative, organizational, technical, regime, reconnaissance, counterespionage and investigation. Conclusions. For Ukraine characteristic are lacks of the legal adjusting of functioning and defence of national critical informative infrastructure, imperfection of public policy in the sphere of her defence in the conditions of high risk of feasance of diversions and terrorist and cyberattacs on her objects. Therefore for organization of effective defence of ОCІІ of Ukraine it is necessary to complete the forming of legislative ground of this activity, form the national system of defence of such objects, enter only methodology of providing of them stable functioning. It is also expedient to provide introduction of international standards of activity, adjusting of state-private partnership and development of international cooperation.

ОЦІНКА РИЗИКІВ КІБЕРБЕЗПЕКИ ТА КОНТРОЛЮ КОНФІДЕНЦІЙНОСТІ В ІНФОРМАЦІЙНИХ СИСТЕМАХДЕРЖАВНОГО УПРАВЛІННЯ

The relevance of this work is due to the approval by the Administration of the State Service for Special Communications and Information Protection of Ukraine “Methodological recommendations for increasing the level of cyber protection of critical information infrastructure” in October 2021. The recommendations were developed based on the world's best approaches - the NIST CyberSecurity Framework. At the moment, the developed Recommendations of the State Special Communications Service have partially lost their relevance and require adjustment with the release of NIST Special Publication 800-53A Revision 5 “Assessing Security and Privacy Controls in Information Systems and Organizations” Governance Oversight”, publication date: January 2022. These documents complete the cycle of integrating cybersecurity risk management (CSRM) and enterprise risk management (ERM). These projects describe methods for combining risk information of all system assets, an organization (enterprise) network, including conditional examples for aggregating and normalizing results from cybersecurity risk registers (CSRR) taking into account risk parameters, criteria and impact on the continuous functioning of communication systems. As a result, the integration and normalization of risk information enables decision-making and monitoring of risks at all levels of the system, which allows you to create a comprehensive picture of the overall cyber risk. These documents describe the creation of an Organizational Risk Profile (ERP) that supports the comparison and management of cyber risks along with other risk types in general.Quite interesting are the views of the authors of the developed documents regarding the control of confidentiality associated with systems and their distribution environment, their functioning. It is substantiated that a qualitative system assessment helps to determine the existing controls contained in the organization in accordance with the security and confidentiality plan, which are subsequently used in organizational systems and the operating environment. In this environment, the assessment control is an indication of the implementation of specific steps in the risk management structure, which contributes around the clock to an effective approach to sustainable risk management processes by identifying weaknesses or deficiencies in systems, which allows the organization to determine how to respond to certain cyber threats. Therefore, in order to solve the problems of settling and implementing the norms and rules of international organizations in the field of cybersecurity and cyberdefence, it is proposed to analyze the above documents and put forward appropriate proposals for correcting and supplementing the previously approved State Communications “Methodological recommendations ...”. In turn, this will allow not only to ensure the protection of the state's critical information infrastructure from cyber attacks, but also to conduct preventive offensive operations in cyberspace, which includes disabling critical enemy infrastructure facilities by destroying communication systems that control such facilities.

Cyber Security and Management

1. To make a secure cyber ecosystem in India, generate an ample amount of trust in IT systems and transactions in cyberspace and thereby enhance the adoption of IT in all sectors of the economy. 2. To create a convincing framework for developing security policies and enabling actions to abidance to global security standards. 3) To build up the Regulatory framework to ensure a Secure Cyberspace ecosystem. 4) To enhance and create National and Sectoral level mechanisms to obtain strategic policy regarding threats to ICT infrastructure. 5) To enhance the protection of the Nation's critical information infrastructure by operating a National Critical Information Infrastructure Protection Centre and mandating security practices related to the design, accession, evolution, use and operation of information resources. 6) For the growth of suitable indigenous security technologies, solution-oriented research, proof of concept, pilot development, transition, diffusion. 7) To develop the range of the integrity of ICT products and services by establishing infrastructure for testing & validating the security of such products. 8) Create a workspace for 500,000 professionals skilled in cyber security in India within 5years 9) To provide monetary benefits to businesses to adopt standard security practices. 10) To enable security of information while during the process, storage & transit to safeguard the privacy of citizen's data and for reducing financial losses due to cybercrime. 11) To create adequate safety, investigation and prosecution of cybercrime and development of law enforcement capabilities through appropriate legislative intervention.

Exploring the U.S. institutional discourse about critical information infrastructure protection (CIIP): a corpus-based analysis

AbstractThis study uses a combinative method of quantitative and qualitative discourse analysis applying the discourse-historical approach (DHA), based on a self-built special corpus composed of the U.S. laws, policies and strategy documents that are directly related to critical information infrastructure protection (CIIP); through a Word List ranked by frequency, it is found that there seems to be a coherent securitizing system which has been formed in the U.S. CIIP legislative practices, with some specific considerations in the CIIP policy-making process including the strategy for risk management. By further investigating the internal institutional relationships and institutional mechanisms with corpus tools, four discursive features and strategies of the U.S. CIIP institutional discourse can be discovered: the leading role of private and specific institutions in public-private cooperation; the coexisting characteristics of generality and precision in the process of object definition; the center-divergent institutional settings in executing CIIP execution; and the coordinating discourse patterns for CIIP within the U.S. legislation. Those discursive practices concerning different institutional actors can be further explained in the broader context of the U.S. social reality. This study is not only helpful in better understanding the legal practices in U.S. cybersecurity, but also provides some meaningful insights on CIIP legislation to policy makers in other countries as well as at the international level.

Brief Analysis of Security Protection Practice of Key Information Infrastructure in Communication Industry

To solve the problem how to effectively identify critical information infrastructure challenges that the communications industry, improve pertinence and effectiveness of the security and protection work, this paper reports the legislative background of critical information infrastructure protection at home and abroad and the status quo, on the communications industry key information infrastructure security framework are discussed in this paper, by adopting the method of analytic hierarchy process (AHP), by calculating the key, Through the calculation of the critical degree, the paper proposes how to accurately identify the critical information infrastructure in the communication industry. This research is the latest practical exploration of the security protection work method of the critical information infrastructure in the communication industry, and is the urgent need of the current communication network security situation in China. It is hoped to take the implementation of the Regulations on the Security protection of Critical Information Infrastructure as an opportunity to publicize and promote the research method, continuously strengthen the security protection of critical information infrastructure, realize the high-quality development of the communication industry, and better empower the economic and social development.

Network Traffic Analysis for Enhanced Protection in Critical Information Infrastructure

Owing to the surfacing of new technologies which can abet easier and faster processing of data, there has been a increasing need for most organization to develop an online system. Most of these systems are developed using php programming language. This paper shows that most of these web-based systems are vulnerable to different types of attacks resulting from the disregard to security appraise during the development of the system. Security of information asset which are painstaking to any organization is one of the most important tasks which need to be safeguard regularly. Critical information infrastructure protection (CIIP) had become a lingering area of interest in the modern days of information dissemination, from the inauguration of internet to the modern elevated-profile dispersed denial-of-service assail against critical systems. Critical systems rely deeply on information communication; the interruptions of the information communication can obstruct the operation of critical systems. The western nations have advanced CIIP elucidation in place, but these elucidations are not always suitable for growing countries, where exceptional contest and necessities have to be addressed. Meanwhile, the western worlds are familiarizes with unmatched improvement of their information infrastructures. However, the lack of national CIIP efforts creates a situation for developing nations to become launch pads for cyber-attacks. In this paper, I have proposed a Network Traffic Analyzer that will analyze source codes of web based critical infrastructures and detect vulnerability in the codes for better security from attacks.

Cyberterrorism and the protection of critical information infrastructures : A snapshot of the current state of certain regulatory issues

Western states fight against terrorism for decades now, however, certain fundamental regulatory questions stay unanswered to this day. Consequently, with the newest form of terrorism, cyberterrorism, arise just as many legal uncertainties as with conventional terrorism. The complicated and incomplete system of international treaties on (cyber-)terrorism only cover certain aspects of the issue, moreover they generally make the individual states responsible for regulating (cyber-)terrorism without defining a common system of basic rules. In this paper the author discusses cyberterrorism from an international and national legal perspective highlighting the specific area of critical information infrastructure protection. Furthermore the paper also takes into consideration cyberterrorism in the light of international humanitarian law.

Real-Time Authentication with A.I

Wrongdoing conception in surveillance videos is more challenging than detection. This work introduces the design of a accurate, lightweight and fast variance understanding neural network. AI capabilities can improve the way current security solutions are working today. It is projected that there will be need for security in area of AI to overcome issues like securing AI training data, training pipelines and ML models, also how AI modelled applications can be operated through negotiating with them. How can AI be leveraged to enhance security of critical infrastructure in the landscape of critical information which may contain large amount of critical business data. Now a day’s state sponsored attacks are growing on an alarming rate, due to which government and private organization are more vigilant in protecting critical infrastructure. This can be achieved by creating business application which will solve the headache of securing critical information for NCIIPC. (National Critical Information Infrastructure protection centre) This can be simulating in high end laptop with Intel Core i5 – 9th generation processor, 6 GB NVIDIA GPU GTX 1660 Ti, which has high FPS which we think will work more smoothly with MTCNN model to detect and recognize the face. Also, at various stages authentication function and alert function will work on top of recognition function. This application will prevent the user to enter into critical infrastructure and prevent wrong doing post validating itself through fake ID Card.