Q.
1- To study different open source tools for network security and
analysis.
To study and understand various open source tools used for network security and traffic
analysis.
Objectives
To learn about network monitoring tools.
To understand vulnerability scanning and intrusion detection.
To analyze network traffic using open source software.
Tools Studied
1. Wireshark
Purpose: Network packet capturing and analysis
Description:
Wireshark is a popular open-source network protocol analyzer. It captures live network
packets and displays them in a human-readable format.
Key Features:
Real-time packet capture
Deep inspection of hundreds of protocols
Filtering options for detailed analysis
Practical Use:
Used to monitor network traffic and detect suspicious activities.
2. Nmap
Purpose: Network scanning and security auditing
Description:
Nmap (Network Mapper) is used to discover hosts and services on a computer network.
Key Features:
Port scanning
OS detection
Service version detection
Practical Use:
Identifies active devices and open ports in a network.
3. Snort
Purpose: Intrusion Detection System (IDS)
Description:
Snort is an open-source IDS that monitors network traffic and detects malicious activities.
Key Features:
Real-time traffic analysis
Rule-based detection engine
Alerts for suspicious activities
Practical Use:
Detects network attacks and unauthorized access attempts.
4. OpenVAS
Purpose: Vulnerability assessment
Description:
OpenVAS is used for scanning systems to detect security vulnerabilities.
Key Features:
Comprehensive vulnerability scanning
Detailed security reports
Regular vulnerability database updates
5. Metasploit
Purpose: Penetration testing
Description:
Metasploit is a framework used to test system security by simulating cyber attacks.
Key Features:
Large exploit database
Payload generation
Post-exploitation tools
Q.2- To perform encryption, decryption using the substitution
techniques.
To perform encryption and decryption using substitution cipher techniques.
Objective
To understand the concept of substitution ciphers.
To implement encryption and decryption using different substitution methods.
Theory
Substitution cipher is a method of encryption in which each letter of the plaintext is
replaced by another letter or symbol. It is one of the oldest encryption techniques.
Types of Substitution Techniques
1. Caesar Cipher
Description:
In Caesar Cipher, each letter in the plaintext is shifted by a fixed number of positions in the
alphabet.
Formula:
Encryption:
C=(P+ k )mod 26
Decryption:
P=(C−k )mod 26
Where:
P = Plaintext letter position
C = Ciphertext letter position
k = Shift key
Plaintext: HELLO
Key (k) = 3
Encrypted: KHOOR
Decrypted: HELLO
2. Monoalphabetic Cipher
Description:
Each letter of plaintext is replaced by a fixed corresponding letter from a substitution
alphabet.
Example Mapping:
A→Q
B→W
C→E
Plaintext: CAT
Ciphertext: EQZ
Advantage: More secure than Caesar cipher.
Disadvantage: Vulnerable to frequency analysis attack.
3. Vigenere Cipher
Description:
Uses multiple Caesar ciphers based on letters of a keyword.
Example:
Plaintext: ATTACK
Key: KEY
Encrypted Text: KXRKGI
It is stronger than simple substitution because it uses multiple shifts.
Procedure
1. Choose a substitution technique (Caesar / Monoalphabetic / Vigenere).
2. Select a key (shift value or keyword).
3. Replace each letter of plaintext according to the rule.
Q.3- To perform encryption and decryption using transposition
techniques.
To perform encryption and decryption using transposition cipher techniques.
Objective
To understand the concept of transposition ciphers.
To implement encryption and decryption using different transposition methods.
Theory
A transposition cipher is a method of encryption in which the positions of characters in the
plaintext are rearranged according to a specific system.
Types of Transposition Techniques
1. Rail Fence Cipher
Description:
In Rail Fence Cipher, the plaintext is written in a zigzag pattern across multiple rows (rails),
and then read row by row to produce ciphertext.
Example:
Plaintext: HELLO WORLD
Rails: 3
Write in zigzag:
HOL
ELWR
LOD
Ciphertext: HOLELWRLOD
Decryption:
Arrange the ciphertext in zigzag form and read column-wise to get the original message.
2. Columnar Transposition Cipher
Description:
In Columnar Transposition, the plaintext is written in rows under a keyword. Columns are
then rearranged according to alphabetical order of the keyword.
Example:
Plaintext: ATTACKATDAWN
Keyword: ZEBRA
Write in rows:
ZEBRA
ATTAC
KATDA
WNXXX
Rearrange columns alphabetically (A B E R Z) and read column-wise.
Ciphertext: CNAKTTAWATDAX
Decryption:
Reconstruct the column order using the keyword and read row-wise.
Procedure
1. Select a transposition technique (Rail Fence or Columnar).
2. Choose a key (number of rails or keyword).
3. Arrange plaintext according to the chosen method.
4. Read characters in specified order to generate ciphertext.
Advantages
Simple to implement
Better security than simple substitution (when combined with other methods)
Disadvantages
Vulnerable to frequency and pattern analysis
Less secure when used alone
Q.7- To apply the AES algorithm for practical application.
To implement and apply the AES algorithm for secure encryption and decryption of data.
Objective
To understand the working of AES (Advanced Encryption Standard).
To perform encryption and decryption using AES.
To study its practical applications in modern security systems.
Theory
Advanced Encryption Standard (AES) is a symmetric key encryption algorithm adopted by
the National Institute of Standards and Technology (NIST) in 2001.
AES replaced Data Encryption Standard (DES) because DES had security weaknesses due to
its small key size.
AES is:
A block cipher
Works on 128-bit block size
Supports key sizes of 128, 192, and 256 bits
Based on Substitution–Permutation Network (SPN) structure
Working of AES
AES encryption consists of multiple rounds depending on key size:
Key Size Number of Rounds
128-bit 10 rounds
192-bit 12 rounds
256-bit 14 rounds
Each round includes the following steps:
1. SubBytes – Byte substitution using S-Box
2. ShiftRows – Row-wise shifting
3. MixColumns – Column mixing transformation
4. AddRoundKey – XOR with round key
Final round does not include MixColumns.
Steps to Apply AES
Step 1: Key Selection
Choose a secret key (128/192/256-bit).
Step 2: Encryption
Convert plaintext into 128-bit block.
Apply initial AddRoundKey.
Perform required number of rounds.
Generate ciphertext.
Step 3: Decryption
Use the same key.
Apply inverse transformations:
o InvShiftRows
o InvSubBytes
o InvMixColumns
o AddRoundKey
Recover original plaintext.
Example (Conceptual)
Plaintext: HELLO AES WORLD
Key: 128-bit secret key
After encryption → Ciphertext generated.
After decryption using same key → Original message recovered.
Practical Applications
Secure online banking
HTTPS communication
Wi-Fi security (WPA2/WPA3)
File encryption software
Cloud data protection
Advantages
Strong security
Large key sizes
Efficient in both hardware and software
Widely adopted worldwide
Limitations
Requires secure key management
Slightly complex compared to older algorithms
Q.8- Write a program to perform Encryption/Decryption using Diffie-
Hellman Key exchange.
OUTPUT