States » South


Navy, VSSC incidents highlight cyber-physical security concerns in Kerala

Thiruvananthapuram, Sep 20 (UNI) The alleged identity-fraud case involving a temporary worker at the Indian Naval Academy, Ezhimala, and the reported sighting of an unidentified drone near the Vikram Sarabhai Space Centre (VSSC), Thumba, have highlighted the need for an integrated cyber-physical security approach for Kerala’s strategic installations, cybersecurity specialist K S Manoj said.
The two incidents are not known to be connected, and available information does not establish espionage or hostile intent. However, they raise broader concerns about vulnerabilities at the intersection of personnel, physical, digital and operational security, Manoj, a CPS Security Specialist at Intelegrid ECC Pvt Ltd, said in an analysis.
The Ezhimala incident highlights the importance of identity as a critical component of the security perimeter, he said, adding that security at sensitive establishments should extend beyond document verification during recruitment.
Background verification, access authorisation, least-privilege controls, device management, contractor assurance and periodic revalidation should form part of a continuous security process, he said.
"This reflects the Zero Trust principle: access should depend on verified identity, legitimate requirement and minimum necessary privilege rather than assumed trust," Manoj said.
The reported drone sighting near VSSC introduces another dimension to the security challenge, he said, noting that traditional security models largely focused on the distinction between inside and outside.
"Strategic facilities must increasingly consider a third dimension: above," he said.
A UAV need not necessarily enter a restricted facility to potentially observe infrastructure, access routes, security arrangements or operational patterns, he said. However, every unidentified drone should not be presumed hostile, and sensitive facilities require appropriate capabilities for detection, identification, tracking, assessment and response, he added.
Modern critical infrastructure can no longer be viewed as a collection of isolated assets, as personnel, devices, communication networks, operational technology and physical processes increasingly form an interconnected cyber-physical ecosystem, Manoj said.
A contractor could provide physical access, a compromised device could create a digital pathway, while a UAV could provide aerial observation. A compromise of an operational technology environment could potentially translate a cyber intrusion into physical consequences, he said.
Security architecture should therefore integrate personnel security, physical protection, identity and access management, cybersecurity, OT security, supply-chain assurance and UAV awareness as components of a unified mission-protection architecture, he said.
Artificial intelligence could strengthen such an architecture by correlating apparently unrelated signals such as unusual access patterns, unfamiliar devices, abnormal network activity and unidentified UAVs, Manoj said.
However, such correlation should trigger investigation rather than accusation, with human verification and contextual assessment remaining essential, particularly when an anomaly by itself does not establish malicious intent, he said.
He also stressed the need to shift the focus from protection alone to resilience, asking what could happen if a strategic asset were compromised.
Security engineering should assess whether a local compromise could escalate into operational disruption, safety consequences or mission-level failure, with the objective of detecting, containing and recovering from an incident before it develops into a wider operational consequence, he said.
For Kerala's strategic establishments, this would require continuous identity assurance, least-privilege access, segmented OT environments, contractor-risk management, airspace awareness, cross-domain monitoring and consequence-driven resilience, Manoj said.
"The Ezhimala and Thumba incidents do not need to be connected to be instructive. They highlight how vulnerabilities can emerge at the interfaces between traditionally separate security domains," he said.
"The strategic question for Kerala is therefore not simply whether these incidents represent a new threat. It is whether existing security architectures are adequately designed for a world in which identity, contractors, connected devices, OT systems and aerial platforms can intersect," Manoj said.
"The next serious security incident may not begin with malware. It may begin with an identity, a contractor, a device, a network pathway—or a drone," he added.
" In the cyber-physical age, the real security perimeter is no longer merely the facility. It is the mission itself," Manoj said.
UNI DS
More News

AP CM Naidu to launch Rs 3,892-cr development projects in Visakhapatnam

21 Sep 2026 | 10:39 PM

Visakhapatnam, Sept 21 (UNI) Andhra Pradesh Chief Minister N Chandrababu Naidu will virtually inaugurate and lay foundation stones for development projects worth Rs 3,892 crore under the Greater Visakhapatnam Municipal Corporation (GVMC) and Visakhapatnam Metropolitan Region Development Authority (VMRDA) from Kuppam on Tuesday.

see more..

AP CM lays stone for Rs 327 Cr worth development works in Kuppam

21 Sep 2026 | 10:34 PM

Tirupati, Sep 21 (UNI) Andhra Pradesh Chief Minister N Chandrababu Naidu on Monday laid the foundation stone for development works to the tune of Rs 327 crore in his home constituency Kuppam.

see more..

Keralam CM visits disaster-hit Chokkad; Assures relief as search continues for missing woman

21 Sep 2026 | 10:28 PM

Malappuram, Sep 21 (UNI) Keralam Chief Minister V.D. Satheesan visited Chokkad's disaster-hit T.K. Nagar and the nearby Kottapuzha area in Malappuram on Monday to assess the situation.
During his visit, the Chief Minister met with the family of Sajitha, who is still missing, to offer comfort and support.

see more..

Former CM Jagan Reddy demands Edu Minister Lokesh's resignation for alleged irregularities in DSC

21 Sep 2026 | 9:55 PM

Vijayawada, Sep 21 (UNI) Training his guns on the Chandrababu Naidu government, former Chief Minister and YSR Congress party president Y S Jagan Mohan Reddy on Monday demanded the resignation of Andhra Pradesh education Minister and the ruling TDP's heir apparent Nara Lokesh owning responsibility for irregularities in the DSC teachers recruitment.

see more..

SCR GM inaugurates new facilities at Railway Mixed High School

21 Sep 2026 | 9:53 PM

Hyderabad, Sept 21 (UNI) South Central Railway (SCR) General Manager Sanjay Kumar Srivastava on Monday inaugurated newly developed facilities at Railway Mixed High School, South Lallaguda, and urged students to utilise them for their overall development.

see more..