Module 1 cyber security

1. Defining Cyberspace
 Cyberspace is a virtual environment formed by interconnected computer networks.
 It includes the internet, computer systems, websites, communication platforms, etc.
 Term introduced by William Gibson in 1984.
 It is not a physical space but allows interaction, data sharing, and communication.
 It is based on protocols like TCP/IP and supports global connectivity.

Advantages:

 Enables global communication and data access.

 Supports online collaboration, education, and commerce.

Disadvantages:

 Vulnerable to cyber attacks and privacy invasion.

 Difficult to regulate and monitor illegal activities.

2. Overview of Computer and Web Technology

Computer Technology:

 Includes hardware (CPU, memory, storage), software (OS, applications), and

networking tools.
 Used for data processing, storage, and communication.
 Evolving rapidly – every 2 years, processing power nearly doubles (Moore's Law).

Web Technology:

 Used to create, maintain, and access websites.

 Includes web browsers, web servers, HTML/CSS/JavaScript.
 Supports communication via protocols like HTTP and HTTPS.

Advantages:

 Easy global communication.

 Quick access to information.
 Supports e-commerce and e-governance.

Disadvantages:
  Risk of cyber threats.
 Data privacy issues.
 Requires regular maintenance and updates.

3. Architecture of Cyberspace

Key Components

 Network Infrastructure
Cables, routers, and switches that connect devices.
They form the backbone of internet communication.
 Protocols (TCP, IP, HTTP, etc.)
Set of rules that devices follow to talk to each other.
Like languages computers use to send data.
 DNS (Domain Name System)
Converts website names like [Link] into IP addresses.
Makes it easy to access websites without remembering numbers.
 Data Centers
Buildings with thousands of computers that store websites, videos, and
apps.
They keep your favorite content online 24/7.
 Cybersecurity (Firewalls, Antivirus)
Tools to protect your data from hackers and viruses.
Keeps systems safe from attacks and threats.
 Web & App Servers
Machines that send you websites or run your apps when you open them.
Host all online content and services.
 User Devices
Smartphones, laptops, and IoT gadgets we use to connect to the internet.
These are your personal entry points into cyberspace.
 Cloud Computing
Storing and using data online instead of on your device.
Helps run apps like Google Drive, YouTube, etc.
 Social Media Platforms
Apps like Instagram, Facebook that let users connect and share.
They form a digital community inside cyberspace.
 IoT Devices
Smart gadgets like smart bulbs, watches, and fridges that connect online.
These make homes and industries smarter.
  Governance Bodies (ICANN, etc.)
Global organizations that help manage domain names and internet rules.
They ensure cyberspace stays organized and fair.

Layered View (3-Layer Architecture)

 Physical Layer
Real-world stuff: cables, satellites, routers.
It’s the hardware that makes the internet physically possible.
 Logical Layer
Virtual connections and IP addressing.
Helps direct your data from one point to another.
 Social Layer
Represents users and their digital identities.
Involves things like usernames, emails, profiles.
OSI-Like Technical Layers

 User Interface Layer

The screens, buttons, and visuals you use in apps/websites.
It's what you see and touch.
 Application Layer
Runs services like email, websites, chat apps.
Uses protocols like HTTP, FTP, SMTP.
 Transport Layer
Breaks data into packets and ensures delivery.
Uses TCP (reliable) or UDP (faster).
 Internet Layer
Handles addressing and routing with IP.
Finds the best way for data to travel.
 Network Layer
Connects different networks (like Wi-Fi to ISP).
Controls how your device connects to the wider internet.
 Physical Infrastructure Layer
Cables, towers, data centers, hardware.
It’s the base that carries all internet data.
4. Communication and Web Technology
A. Communication Technology
 Facilitates exchange of information over the internet using:
o Email
o Messaging apps (e.g., WhatsApp)
o Video conferencing (e.g., Zoom, Google Meet)

B. Web Technology
 Set of tools and standards for building and browsing websites.

C. Key Elements:
 Web Browsers: Chrome, Firefox, Edge, Safari
 Websites: Built using HTML, CSS, JavaScript
 Web Development: Creating and managing websites
 Web Standards & Protocols: HTML5, CSS3, HTTP/HTTPS
 Mobile Web: Websites optimized for smartphones/tablets

5. Internet
A. Definition

 The Internet connects millions of computers using TCP/IP protocols.

B. Historical Facts

 Originated in the 1960s for U.S. government research.

 Official birth: January 1, 1983 (when TCP/IP became standard).

C. TCP/IP Protocol Suite:

 TCP: Ensures reliable data transfer.
 IP: Handles addressing and routing of packets.

6. World Wide Web (WWW)

A. Definition
 Invented by Tim Berners-Lee in 1989.
  A collection of interlinked web pages accessed via browsers.

B. Components:

 Web Pages: Built using HTML

 Hyperlinks: Connect web pages
 HTTP: Communication protocol used

C. Functions:

 Delivers text, audio, video, and images globally

 Accessible via laptops, mobiles, and desktops

7. Advent of Internet
A. Phase 1 – Innovation (1961–1974)
 Developed packet switching, TCP/IP, and client-server computing.

B. Phase 2 – Institutionalization (1975–1995)

 Funded and managed by U.S. DoD and NSF for educational/military use.

C. Phase 3 – Commercialization (1995–Present)

 Expanded to the public, leading to rise of ISPs, websites, and e-commerce.

8. Internet Infrastructure for Data Transfer &

Governance
A. Network Infrastructure

 Backbone Networks: High-speed internet highways.

 Last-Mile: Connection to homes via Wi-Fi/fiber.
 Data Centers: Host websites, apps, cloud storage.

B. Protocols & Standards

 IP, HTTP/HTTPS, TLS, DNSSEC – for data routing and security.

C. Cloud Services
 AWS, Azure, GCP – offer scalable data storage and computing.
D. Data Governance

 Laws like GDPR, HIPAA, CCPA regulate privacy and access.

 Access control and encryption are essential.

E. Cybersecurity

 Firewalls, IDS, and audits protect data during transfer.

F. Internet Governance Bodies

 ICANN: Manages domain names.
 IETF/IAB/ISOC: Develop and manage internet standards.

G. CDNs (Content Delivery Networks)

 Cloudflare, Akamai reduce data latency.

H. QoS (Quality of Service)

 Ensures smooth video streaming and gaming.

I. International Collaboration

 Countries must cooperate to manage cross-border data flow.

J. Data Transfer Agreements

 Privacy Shield, Standard Contractual Clauses enable legal data transfer.

9. Internet Society (ISOC)

A. Definition

 A global NGO supporting an open, safe, and accessible internet.

B. Governing Bodies:
1. IETF: Develops internet technical standards.
2. IAB: Oversees architecture and resolves disputes.
3. IESG: Reviews protocol proposals.

C. Focus Areas:

 Internet privacy, freedom of speech, and encryption standards.

10. Regulation of Cyberspace
A. Key Challenges:
1. Anonymity: Makes it hard to identify offenders.
2. No Global Ownership: No central governing body.
3. Cross-border Crimes: Laws differ between nations.

B. Practical Problems:
1. Multiple Jurisdictions: Who has legal power?
2. Policing Difficulties: Lack of tech knowledge in law enforcement.
3. Training Cost: Expensive cybercrime policing.
4. Digital Evidence Issues: Hard to trace or preserve.

11. Concept of Cyber Security

A. Definition
 Protecting networks, devices, and data from cyberattacks.

B. Core Principles (CIA + A):

1. Confidentiality: Protecting sensitive data using encryption.
2. Integrity: Ensuring data accuracy using checksums, digital signatures.
3. Availability: Data/systems must be accessible using load balancers, backups.
4. Authentication: Verifying identity via passwords, OTP, biometrics.

12. Types of Cyber Attacks

A. Web-based Attacks:
1. Injection: Inserting malicious code (e.g., SQL injection).
2. Session Hijacking: Stealing user session cookies.
3. Phishing: Faking messages to steal data.
4. DoS Attack: Flooding systems to crash them.

B. System-based Attacks:
 1. Virus: Attaches to files, spreads by execution.
2. Worm: Self-spreading malware.
3. Trojan Horse: Fake program with hidden malware.

13. Cyber Threats

A. Definition

 Any attempt to gain unauthorized access or damage digital resources.

B. Examples

 Hackers, phishing scams, ransomware, insider threats.

14. Issues and Challenges of Cyber Security

A. Common Issues:
1. Cyber Attacks: Increasing in volume and complexity.
2. Data Breaches: Compromise of sensitive personal data.
3. Software Vulnerabilities: Bugs in code exploited by hackers.
4. Insider Threats: Employees misusing access.
5. Lack of Awareness: Users fall for scams, use weak passwords.
6. Limited Resources: Small firms can't afford cybersecurity tools.
7. Ransomware: Files locked by attackers for ransom.

15. Case Studies of Indian Cyber Crimes

A. Cosmos Bank Heist (2018) – ₹94 Cr

 Hackers cloned ATM cards and used malware to attack SWIFT system.

B. Jamtara Scam
 Fraudsters faked bank calls and stole OTPs and card details.

C. Pegasus Spyware (2019)

 Zero-click attack using WhatsApp to spy on journalists and politicians.
D. AIIMS Ransomware (2022)

 India's top hospital had its digital services disabled via ransomware.

E. MobiKwik Data Leak (2021)

 Data of 110 million users exposed on the dark web.