Network Security – Long Questions Notes
1) RSA Algorithm
Introduction
RSA is one of the most widely used asymmetric cryptographic algorithms. It is used for secure
communication over the internet. RSA uses two different keys:
Public Key → used for encryption
Private Key → used for decryption
RSA was developed by:
Ron Rivest
Adi Shamir
Leonard Adleman
Working of RSA Algorithm
Step 1: Select Prime Numbers
Choose two prime numbers:
p=3
q = 11
Step 2: Calculate n
[
n = p \times q
]
n = p \times q
[
n = 3 \times 11 = 33
]
Step 3: Calculate Euler’s Totient Function
[
\phi(n) = (p-1)(q-1)
]
\phi(n) = (p-1)(q-1)
[
\phi(n) = (3-1)(11-1)=20
]
Step 4: Choose Public Key (e)
Select e such that:
1 < e < φ(n)
e and φ(n) are co-prime
Choose:
[
e=7
]
Step 5: Calculate Private Key (d)
[
d \times e \mod \phi(n)=1
]
d \times e \bmod \phi(n)=1
[
d=3
]
Step 6: Encryption
[
C = M^e \mod n
]
C = M^e \bmod n
Step 7: Decryption
[
M = C^d \mod n
]
M = C^d \bmod n
Advantages of RSA
Very secure
Supports digital signatures
Secure key exchange
Used in HTTPS and online banking
Disadvantages
Slow algorithm
Requires large computational power
Large key sizes needed
Applications
Secure web browsing
Digital signatures
Email encryption
VPN security
Conclusion
RSA is an important public-key cryptography algorithm that provides secure communication and
authentication over insecure networks.
2) IDS / IPS
Introduction
IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) are security
technologies used to monitor and protect networks from cyber attacks.
Intrusion Detection System (IDS)
Definition
IDS monitors network traffic and identifies suspicious activities or attacks.
Types of IDS
1. Network-based IDS (NIDS)
Monitors traffic of an entire network.
2. Host-based IDS (HIDS)
Installed on individual devices to monitor activities.
Functions of IDS
Detect malicious activities
Generate alerts
Monitor traffic
Analyze logs
Intrusion Prevention System (IPS)
Definition
IPS not only detects attacks but also blocks them automatically.
Functions of IPS
Blocks suspicious traffic
Prevents attacks in real time
Protects systems automatically
Difference Between IDS and IPS
IDS IPS
Detects attacks Detects and prevents attacks
Passive system Active system
Generates alerts Blocks malicious traffic
Requires manual action Automatic protection
Advantages of IDS/IPS
Detects cyber threats
Improves network monitoring
Prevents unauthorized access
Reduces security risks
Disadvantages
Expensive implementation
False alarms may occur
Requires regular updates
Applications
Enterprise security
Banking systems
Government networks
Cloud security
Conclusion
IDS and IPS are important security solutions used to detect and prevent cyber attacks in modern
computer networks.
3) Playfair Cipher
Introduction
Playfair Cipher is a classical encryption technique invented by:
Charles Wheatstone
It encrypts pairs of letters (digraphs) instead of single letters, making it more secure than simple
substitution ciphers.
Working of Playfair Cipher
Step 1: Select Keyword
Example:
[
MONARCHY
]
Step 2: Create 5×5 Matrix
MON A R
C HY B D
E F G I/J K
L P Q S T
U VWX Z
Step 3: Divide Plaintext into Pairs
Example:
[
HELLO
]
Pairs:
HE
LX
LO
(X added because of repeated letters)
Encryption Rules
Rule 1: Same Row
Replace each letter with the next letter in the row.
Rule 2: Same Column
Replace each letter with the letter below it.
Rule 3: Rectangle Rule
Replace letters with opposite corner letters.
Advantages
More secure than Caesar cipher
Encrypts letter pairs
Difficult frequency analysis
Disadvantages
Not secure for modern systems
Time-consuming manually
Vulnerable to cryptanalysis
Applications
Historical military communication
Educational cryptography
Conclusion
Playfair Cipher improved classical encryption techniques by encrypting digraphs instead of
individual characters.
4) Malware (Virus and Worms)
Introduction
Malware stands for malicious software designed to damage computer systems, steal information,
or disrupt operations.
Virus
Definition
A virus is a malicious program that attaches itself to files or programs and spreads when
executed.
Characteristics
Requires user action
Corrupts files
Slows down systems
Replicates itself
Types of Viruses
Boot sector virus
File infector virus
Macro virus
Polymorphic virus
Worm
Definition
A worm is a self-replicating malware that spreads automatically across networks.
Characteristics
No user action required
Uses network vulnerabilities
Spreads rapidly
Consumes bandwidth
Difference Between Virus and Worm
Virus Worm
Needs host file Standalone malware
User action required Automatic spreading
Slower spreading Faster spreading
Infects files Infects networks
Effects of Malware
Data theft
File corruption
System crashes
Network congestion
Prevention Methods
Install antivirus software
Use firewalls
Update operating systems
Avoid suspicious downloads
Use strong passwords
Conclusion
Viruses and worms are dangerous malware threats that can severely damage systems and
networks.
5) Firewall
Introduction
A firewall is a network security device or software that monitors and controls incoming and
outgoing traffic based on predefined security rules.
Types of Firewalls
1. Packet Filtering Firewall
Filters packets based on IP address and ports.
2. Stateful Inspection Firewall
Tracks active connections and analyzes packet states.
3. Proxy Firewall
Acts as intermediary between user and internet.
4. Next Generation Firewall (NGFW)
Provides advanced filtering, malware protection, and application awareness.
Functions of Firewall
Blocks unauthorized access
Filters malicious traffic
Protects private networks
Monitors network activities
Advantages
Improves security
Prevents cyber attacks
Controls traffic
Protects sensitive data
Disadvantages
Cannot stop all attacks
Misconfiguration risks
Can reduce network speed
Applications
Corporate networks
Banking systems
Home security
Cloud infrastructure
Conclusion
Firewalls are essential security systems used to protect networks from unauthorized access and
cyber threats.
6) Risk Management
Introduction
Risk management is the process of identifying, analyzing, and controlling risks that may affect
organizational assets and operations.
Steps of Risk Management
1. Risk Identification
Identify possible threats and vulnerabilities.
2. Risk Assessment
Analyze probability and impact of risks.
3. Risk Mitigation
Take measures to reduce risks.
4. Monitoring and Review
Continuously monitor and update security controls.
Types of Risks
Financial risk
Operational risk
Cybersecurity risk
Strategic risk
Importance of Risk Management
Reduces financial losses
Protects organizational assets
Improves decision making
Ensures business continuity
Risk Control Methods
Avoidance
Reduction
Transfer
Acceptance
Conclusion
Risk management helps organizations minimize losses and improve overall security and
operational efficiency.
7) Vulnerabilities
Introduction
A vulnerability is a weakness in a computer system, software, or network that attackers can
exploit.
Types of Vulnerabilities
1. Software Vulnerabilities
Bugs or flaws in software programs.
2. Network Vulnerabilities
Weaknesses in network infrastructure.
3. Human Vulnerabilities
Weak passwords or lack of awareness.
4. Physical Vulnerabilities
Unauthorized physical access to systems.
Causes of Vulnerabilities
Unpatched software
Weak passwords
Misconfigurations
Poor security practices
Effects
Data breaches
Unauthorized access
Financial loss
Service disruption
Prevention Methods
Regular software updates
Vulnerability scanning
Employee training
Strong authentication
Conclusion
Identifying and fixing vulnerabilities is essential for maintaining strong cybersecurity.
8) Block Cipher Modes (ECB, CBC, CFB,
OFB)
Introduction
Block cipher modes are techniques used to repeatedly apply a block cipher algorithm to securely
encrypt large amounts of data.
1. ECB (Electronic Codebook)
Working
Each plaintext block is encrypted independently.
Features
Simple and fast
Same plaintext gives same ciphertext
Advantages
Easy implementation
Fast processing
Disadvantages
Low security
Patterns visible
2. CBC (Cipher Block Chaining)
Working
Each plaintext block is XORed with previous ciphertext block before encryption.
[
C_i = E_k(P_i \oplus C_{i-1})
]
C_i = E_k(P_i \oplus C_{i-1})
Features
Uses Initialization Vector (IV)
More secure than ECB
Advantages
Hides patterns
Better confidentiality
Disadvantages
Error propagation
Slower than ECB
3. CFB (Cipher Feedback)
Working
Converts block cipher into stream cipher.
Features
Suitable for streaming
Self-synchronizing
Advantages
No padding needed
Good error recovery
Disadvantages
Slower processing
4. OFB (Output Feedback)
Working
Generates keystream independent of plaintext.
Features
No error propagation
Suitable for noisy channels
Advantages
Errors do not spread
Stream cipher behavior
Disadvantages
Requires synchronization
Comparison Table
Mode Security Speed Error Propagation
ECB Low Fast No
CBC High Medium Yes
CFB Medium Medium Limited
OFB Medium Medium No
Conclusion
Different block cipher modes provide different levels of security and performance depending on
application requirements.
9) Security Policy
Introduction
A security policy is a formal set of rules and guidelines designed to protect organizational
information and resources.
Objectives of Security Policy
1. Confidentiality
Protect sensitive information from unauthorized access.
2. Integrity
Ensure accuracy and consistency of data.
3. Availability
Ensure systems and services remain accessible.
Types of Security Policies
1. Network Security Policy
Defines network protection rules.
2. Password Policy
Specifies password requirements.
3. Access Control Policy
Controls user permissions and access rights.
4. Incident Response Policy
Defines response procedures for security incidents.
Components of Security Policy
Rules and regulations
User responsibilities
Access permissions
Monitoring procedures
Incident handling
Importance of Security Policy
Improves security awareness
Reduces cyber risks
Protects organizational assets
Ensures compliance with standards
Challenges
Difficult implementation
User resistance
Continuous updating required
Conclusion
A strong security policy helps organizations maintain confidentiality, integrity, and availability
of information systems.