Kanpur: A unique incident involving the Indian Institute of Technology (IIT) Kanpur has drawn widespread attention. Reportedly upset after failing to secure admission to a cybersecurity programme, a student allegedly hacked the official websites of IIT Kanpur and IIT Madras. While such cases typically lead to an FIR and legal proceedings, the institute opted for a different approach. Instead of filing a criminal complaint immediately, IIT Kanpur decided to assess the student’s technical skills and explore the possibility of offering an internship or even admission based on his abilities. The move has sparked a wider debate on cybersecurity, ethical hacking, and how exceptional talent should be recognised and nurtured.
What was the whole matter?
According to the information, the student had applied for the new Bachelor of Cyber Security programme of IIT Kanpur but could not be selected. After this, he allegedly took advantage of the security flaws in the institute’s website and hacked it. Later, it came to light that the website of IIT Madras was also affected similarly. After the incident, the institute started reviewing the security arrangements and conducted a technical investigation of the entire matter.
Why was internship considered instead of FIR?
During the investigation, institute officials believed that the level of technical understanding and cyber skills demonstrated by the student was exceptional. That’s why the administration decided to assess his capability instead of just taking punitive action. If his/her qualifications are found appropriate in the assessment, the possibility of giving him/her an internship or other opportunities in the institute may be considered. However, the final decision will be taken only after technical evaluation.
Is this decision a sign of changed thinking in the field of cybersecurity?
Experts believe that many big tech companies around the world strengthen their security with the help of ethical hackers. Many times, instead of punishing youth who identify safety lapses, they are allowed to act responsibly. However, it is also clarified that accessing a system without permission is a violation of the law and cannot be considered normal or acceptable behaviour. In this case, the institute has also tried to strike a balance between talent and discipline.
Why is IIT Kanpur’s new cybersecurity programme special?
IIT Kanpur has started a Bachelor of Cybersecurity programme this year. In this course, importance is given not only on the basis of examination marks but also on the prior experience and practical ability of the candidates in the field of cybersecurity. The selection process includes stages like technical assessment and hackathon, so that students who have genuine skills get an opportunity.
Is there a lesson for institutions from this incident?
This entire incident has raised two important questions. First, educational institutions will have to continuously strengthen their digital security so that such incidents are not repeated. Secondly, it is equally important to provide the right direction and opportunities to the youth who have exceptional technical talent. At present, IIT Kanpur is preparing to formally evaluate the technical ability of the students. Only after this will it be decided whether he will get a chance in the institute or any further legal action will be taken against him.
