Module-1: Introduction to Cyber security
Defining Cyberspace and Overview of Computer and Web-technology, Architecture
of cyberspace, Communication and web technology, Internet, World wide web, Advent
of internet, Internet infrastructure for data transfer and governance, Internet society,
Regulation of cyberspace, Concept of cyber security
Topic Definition Example Real-time Case Study
A virtual space where
Cambridge Analytica Scandal: Data
1.1 communication and interaction take Using Facebook or
from millions of Facebook users was
Cyberspace place over digital networks like the sending emails.
used to influence elections.
internet.
Characteristics include global You can communicate Twitter (X) allows users worldwide
Features of
connectivity, anonymity, globally with someone to post instantly without revealing
Cyberspace
decentralized access, and scalability. over WhatsApp. identity.
Provides convenience, faster
Online education surge during
Advantages of communication, access to Online learning platforms
COVID-19 – Many universities
Cyberspace information, and supports like Coursera, BYJU’S.
moved to digital classrooms.
innovation.
Involves risks like cybercrime, data Colonial Pipeline Ransomware
Disadvantages Phishing scams,
breaches, addiction, and Attack (2021) – Halted fuel supply
of Cyberspace cyberbullying, data leaks.
misinformation. across the U.S.
WannaCry Ransomware (2017) –
Cybersecurity Attempts to exploit vulnerabilities in Malware, ransomware,
Affected 200,000 computers across
Threats cyberspace to steal or damage data. phishing.
150 countries.
Apps collecting location
Privacy Loss or unauthorized access to Facebook fined for privacy
and microphone data
Concerns personal data without user consent. violations by FTC ($5 billion).
secretly.
Spreading false or misleading Fake news during COVID-19 vaccine misinformation
Misinformation
information online. elections or health crises. on WhatsApp and Facebook.
Gaming for hours,
Digital Excessive use of digital devices WHO classifies gaming disorder as
excessive social media
Addiction impacting daily life. a mental health condition (2018).
scrolling.
Students in rural India lacking
Inequality in access to internet and Urban areas have faster
Digital Divide internet access during pandemic e-
digital technologies. internet than rural areas.
learning.
Loss of
Reduced real-world communication Zoom calls instead of in- Remote work leading to employee
Physical
due to virtual alternatives. person meetings. burnout and isolation post-COVID.
Interaction
Difficulty in enforcing laws GDPR (EU) vs. Data Protection
Regulatory Cyber laws vary by
uniformly across global digital Laws in the U.S. – Cross-border
Challenges country.
space. enforcement issues.
Data Companies storing user Equifax data breach (2017) – Poor
Difficulties in organizing, securing,
Management info across multiple management led to 147 million
and analyzing vast data.
Issues servers. records being compromised.
Economic Traditional industries face Brick-and-mortar stores Retail chain closures due to rise of
Disruption competition from digital platforms. vs. online retailers. Amazon and Flipkart.
Used in sectors like communication,
Applications E-Governance portals, India’s DigiLocker and UMANG
finance, education, healthcare,
of Cyberspace telemedicine, e-banking. App for storing documents securely.
governance.
Combination of computing devices, IBM’s Watson Supercomputer used
1.2 Computer Laptops, servers,
software, and networks used for in cancer diagnosis and treatment
Technology applications.
processing and storing information. planning.
Physical components of computers Hard drives, CPUs, NVIDIA GPUs used in AI model
Hardware
and networks. routers. training like ChatGPT.
Programs that run on hardware to Operating systems, Tally for accounting, Photoshop for
Software
perform tasks. antivirus software. design.
Connecting devices to share LAN, Wi-Fi, mobile 5G networks enabling real-time IoT
Networking
resources and data. networks. communication.
Indian banks using biometric
Measures to protect systems from
Security Firewalls, encryption. authentication for secure mobile
unauthorized access and threats.
banking.
AI processing in Tesla autonomous
Processing Ability of a computer to perform Multicore processors,
cars using onboard high-speed
Power complex tasks quickly. GPUs.
chips.
Tools and technologies to build, Amazon, YouTube, and Google use
Web HTML, CSS, JavaScript,
deploy, and manage web advanced web tech for
Technology HTTP.
applications and websites. performance.
A system of interlinked hypertext
Google Search and Wikipedia are
WWW documents accessed via the Websites, blogs, portals.
part of the WWW.
internet.
Applications used to view and Users accessing Gmail through
Web Browsers Chrome, Edge, Firefox.
navigate web pages. Google Chrome.
Web Process of building websites or web Front-end & back-end Netflix uses [Link] for front-end
Development applications. development. and [Link] for back-end.
Systems that store and serve web Netflix and Spotify host content on
Web Servers Apache, NGINX.
content to users. AWS and CDN servers.
Practices to protect web apps and Online banking sites use HTTPS
Web Security HTTPS, SSL, firewalls.
users from online threats. and OTP for secure transactions.
Guidelines for building accessible HTML5 and CSS3 used in modern,
Web Standards W3C standards.
and interoperable websites. responsive website design.
1.3 Architecture of Cyberspace
A. Core Components of Cyberspace
[Link]. Component Description
1 Network Infrastructure Backbone of cyberspace including routers, switches, data centers,
and cables.
2 Protocols Rules for data transmission (e.g., TCP/IP, HTTP, FTP, SMTP).
3 Domain Name System (DNS) Translates domain names to IP addresses.
4 Data Centers Hosts servers, applications, and cloud services.
5 Cybersecurity Components Includes firewalls, antivirus, IDS, encryption, etc.
6 Web & Application Servers Handle client requests, data retrieval, and content delivery.
7 User Devices Devices like PCs, smartphones, tablets, and IoT gadgets.
8 Cloud Computing On-demand computing resources over the Internet.
9 Social Media & Online Enable digital interaction, content sharing, and virtual communities.
Platforms
10 Internet of Things (IoT) Physical devices connected to the Internet to collect and exchange
data.
11 Regulations & Governance Policies and entities like ICANN governing cyberspace operations.
B. Three Layers of Cyberspace
Layer Components Explanation
Physical Geographic + Physical Physical hardware (cables, routers) and locations of devices and
Network infrastructure.
Logical Logical Network Virtual links between nodes/devices like IP-based communication
paths.
Social Cyber Persona + Persona Users and their digital identities (e.g., email IDs, IPs, usernames).
C. Layered Model of Cyberspace (Technology Stack)
Layer Function Examples/Protocols
User Interface Front-end interaction interfaces Websites, Mobile Apps, Smart TVs, Browsers
Layer (Chrome, Firefox)
Application Layer Handles application-specific HTTP, SMTP, FTP, DNS
communication
Transport Layer Reliable/unreliable data delivery TCP (Web), UDP (Streaming, Gaming)
Internet Layer Routing and addressing IP (IPv4, IPv6), ICMP, BGP
Network Layer Data transmission over different LAN, WAN, VPN, 5G, Cloud Networks
network types
Physical Physical support for networking Fiber Cables, Satellites, Routers, Wireless
Infrastructure Towers, Data Centers
1.4 Communication & Web Technology
• Definition: Refers to the suite of technologies and protocols that allow for data exchange over the
internet. This includes how users interact with the web through browsers, how websites are built, and
the core technologies involved in web communication.
• Example:
o Web Browsers like Chrome and Firefox provide the platform for users to access content on
the web.
o Web Development Technologies such as HTML, CSS, and JavaScript are used to design and
build websites.
o Protocols like HTTP and HTML5 standardize the communication between web servers and
clients (browsers).
• Real-Time Scenario: Users accessing an e-commerce site like Amazon through a browser like Google
Chrome. The site is built using HTML (structure), CSS (styling), and JavaScript (interactive
functionality).
1.5 Internet
• Definition: The internet is a global network that connects millions of computers and devices using
standardized communication protocols, primarily TCP/IP. This allows for the sharing of information
and resources across vast distances.
• Example:
o TCP/IP is the protocol stack used for communication, ensuring data is transferred reliably and
in the correct order.
o Packet Switching breaks down large data into smaller packets and sends them across the
network independently, reassembling them at the destination.
• Real-Time Scenario: When sending an email from Gmail, the email is broken into small data packets,
transmitted over the internet, and reassembled at the recipient's end.
1.6 World Wide Web (WWW)
• Definition: The WWW is a vast collection of interconnected documents and multimedia resources
accessible via the internet. It operates using the HTTP protocol, allowing users to navigate between
pages through hyperlinks.
• Example:
o HTML is the language used to create web pages.
o CSS styles these web pages, ensuring they look visually appealing.
o JavaScript adds interactivity to the page (e.g., clickable buttons or dynamic content).
• Real-Time Scenario: When visiting a product page on an e-commerce site, HTML structures the page,
CSS controls the design, and JavaScript makes the "Add to Cart" button functional.
1.7 Advent of Internet
• Definition: The development of the internet has progressed through various phases:
o Innovation: The initial research and development phase (1960s–1974) where key
technologies like TCP/IP were born.
o Institutionalization: Government-funded projects like ARPANET and NSFNET in the 1970s
and 1980s paved the way for modern internet infrastructure.
o Commercialization: From the 1990s onwards, the internet became widely accessible and
commercialized, leading to the rise of tech giants and the transformation of daily life.
• Example:
o TCP/IP Standardization (1983) was the milestone that allowed different networks to
communicate with each other.
o Commercialization led to the launch of web-based businesses like Amazon (1994), Google
(1998), and Facebook (2004).
• Real-Time Scenario: The shift from dial-up internet connections in the 1990s to today’s high-speed
broadband and fiber-optic networks, which support services like Netflix, Amazon Prime Video, and
social media platforms.
1.8 Internet Infrastructure & Governance
• Definition: Refers to the physical and regulatory aspects that ensure the internet operates smoothly and
securely. This includes the hardware (like data centers and fiber-optic cables), protocols, cloud
platforms, and governance bodies.
• Example:
o Backbone Networks: These are the high-capacity fiber-optic cables that carry massive
amounts of data across countries and continents.
o Cloud Platforms: AWS, Google Cloud, and Microsoft Azure offer scalable infrastructure for
hosting services and applications.
o Governance Bodies: ICANN manages domain names, while the GDPR ensures privacy
regulations for EU citizens.
• Real-Time Scenario: A company using AWS to host its website ensures that it has access to reliable
infrastructure. ICANN oversees the registration of domain names, while GDPR ensures that users'
personal information is protected when they visit the site.
1.9 Internet Society
The Internet Society (ISOC) is a professional membership organization that plays a vital role in the
development and use of the internet worldwide. With members ranging from individuals to organizations, ISOC
focuses on promoting open standards, protecting the privacy of users, and advocating for the future development
of the internet. The organization is governed by an elected board of trustees and works with several key groups
to ensure the advancement of internet infrastructure.
Key Groups within ISOC:
1. The Internet Engineering Task Force (IETF): Responsible for developing technical standards for the
internet. It is the leading body for internet protocol standards.
2. The Internet Architecture Board (IAB): Oversees the architecture of the internet and settles disputes
regarding standards. It plays an essential role in guiding the direction of the internet’s design.
3. The Internet Engineering Steering Group (IESG): Along with the IAB, the IESG reviews and
approves the technical standards proposed by the IETF, ensuring they align with the internet’s
architectural principles.
1.10 Regulation of Cyberspace
Cyberspace, unlike traditional physical spaces, spans across the globe and lacks a centralized, formal regulatory
framework. This has created an environment of ambiguity regarding control and ownership. While cyberspace
presents unparalleled opportunities for free expression and innovation, it also raises concerns due to the
anonymity it offers. This anonymity has both positive and negative consequences, as it allows for freedom of
expression but also facilitates global crimes such as trafficking, terrorism, and cybercrimes.
Practical Problems in Extending Traditional Laws to Cyberspace
1. Multiple Jurisdictions: Cyberspace does not have geographical boundaries, which makes enforcing
laws and determining jurisdictional authority difficult. This results in legal uncertainty when crimes are
committed across borders.
2. Problem of Policing: Law enforcement faces significant challenges in combating cybercrime due to a
lack of technical knowledge, insufficient cooperation among different agencies, and the complexity of
cybercrime itself.
3. Expensive Process: Training law enforcement officers and acquiring the necessary tools to combat
cybercrime are costly.
4. Obtaining Digital Evidence: Collecting digital evidence in cyberspace is difficult due to encryption,
anonymization, and the global nature of the internet.
1.11 Concept of Cybersecurity
Cybersecurity is the practice of safeguarding systems, networks, and data from digital attacks, theft, damage, or
unauthorized access. Effective cybersecurity protects the confidentiality, integrity, and availability of data,
ensuring that digital information remains secure from malicious entities.
Core Principles of Cybersecurity:
1. Confidentiality: Ensures that sensitive data is only accessible to authorized users. This is achieved
through encryption, strict access controls, and data classification.
2. Integrity: Ensures that data remains accurate and unaltered, preventing unauthorized modifications.
Techniques like checksums and digital signatures are used to maintain integrity.
3. Availability: Ensures that data and systems are accessible when needed. Cybersecurity measures
include backup systems, redundancy, and disaster recovery planning.
4. Authentication: Verifies the identity of users or systems before granting access. This can involve
passwords, biometrics, two-factor authentication (2FA), and multi-factor authentication (MFA).
Cyber Attacks
A cyber-attack is a deliberate exploitation of computer systems, networks, or digital devices to cause harm.
These attacks often involve malicious software or exploits aimed at stealing or destroying data. Cyber-attacks
can be categorized into:
Web-based Attacks:
1. Injection Attacks: These involve injecting malicious data into web applications to manipulate them
and extract sensitive information.
2. Session Hijacking: Stealing a user’s session token to gain unauthorized access to their data.
3. Phishing: Impersonating a legitimate entity to steal sensitive data, like login credentials or credit card
information.
4. Denial of Service (DoS): Flooding a system with traffic to make it unavailable to users.
System-based Attacks:
1. Virus: A self-replicating malware that spreads across files and causes damage to systems.
2. Worm: A type of malware that propagates itself to other computers, often through email attachments.
3. Trojan Horse: A malicious program disguised as legitimate software, which performs harmful actions
once executed.
1.11.2 Cyber Threat
A cyber threat refers to any action that attempts to exploit a computer system or network. Cyber threats are
malicious activities designed to compromise the confidentiality, integrity, or availability of data.
1.11.3 Issues and Challenges of Cybersecurity
Cybersecurity faces numerous challenges as threats evolve with advancements in technology. These challenges
include:
1. Cyber Attacks: Constant threats from hackers, criminals, nation-states, and others, using tactics like
malware, phishing, and denial-of-service attacks.
2. Data Breaches: Unauthorized access to sensitive data can result in financial loss, reputational harm,
and legal consequences.
3. Security Vulnerabilities: Exploiting weaknesses in software and hardware to gain unauthorized
access.
4. Insider Threats: Threats posed by individuals within an organization who may intentionally or
unintentionally compromise security.
5. Lack of Cybersecurity Awareness: Many individuals lack the necessary awareness to defend against
cyber threats, making them vulnerable to social engineering and other attacks.
6. Resource Constraints: Smaller organizations often lack the necessary resources to implement
effective cybersecurity measures.
7. Ransomware: The increasing prevalence of ransomware attacks, where attackers demand payment for
the decryption of stolen data.
Case Studies in Cybersecurity
1. Internet Society Statement on the Indian Information Technology (Intermediary Guidelines and
Digital Media Ethics Code) Rules 2021:
o Concerns Raised: The rules, implemented in 2021, have faced criticism from ISOC,
especially regarding:
▪ Freedom of Expression: The requirement to remove content quickly under
government orders could result in censorship.
▪ Encryption: The requirement to identify the "first originator" of messages could
undermine end-to-end encryption.
▪ Liability: The rules place excessive responsibility on intermediaries, potentially
stifling free speech.
▪ Due Process: The lack of judicial oversight in the removal of content could lead to
misuse.
2. Organizations Dealing with Cyber Crime and Cybersecurity in India:
o CERT-In: India’s cybersecurity agency focused on responding to threats.
o National Cyber Crime Reporting Portal: A platform for reporting cybercrimes.
o CBI Cyber Crime Unit: Investigates major cybercrimes such as fraud and terrorism.
o Cyber Peace Foundation: A non-profit working on awareness and cybersecurity training.
3. Case Studies of Cybercrime in India:
o Cosmos Bank Cyber Attack (2018): A malware attack leading to the theft of ₹94 crores.
o Jamtara Phishing Scams: A widespread phishing attack originating from Jamtara.
o Pegasus Spyware Scandal (2019): A zero-click attack using Pegasus to spy on prominent
figures.
o AIIMS Ransomware Attack (2022): A ransomware attack targeting AIIMS, India’s top
medical institution.