1. Security Goals: Confidentiality, Integrity, Availability, Authenticity, Non-repudiation.
2. Security Services: Authentication, Access Control, Data Integrity, Confidentiality, Non-repudiation.
3. Security Mechanisms: Encryption, Hashing, Digital Signatures, Firewalls, Authentication Protocols.
4. Playfair Cipher: Uses 5x5 matrix, encrypts digraphs. Example: 'HI' -> matrix lookup -> encrypted pair.
5. Hill Cipher: Uses matrix multiplication mod 26. Example: Plain 'HI', Matrix [[3,3],[2,5]], Cipher 'MP'.
6. Substitution vs Transposition: Substitution replaces symbols; Transposition rearranges order.
7. Vigenere Cipher: Uses keyword for shifting letters. Example: Text 'HELLO', Key 'KEY', Cipher 'RIJVS'.
8. Steganography: Hides data inside images, audio, etc., not visible to naked eye.
9. Euclidean GCD (427,154): GCD is 7.
10. Extended Euclidean Algorithm: Finds x, y for ax+by=gcd(a,b). Example: gcd(30,20)=10.
11. Block Cipher Modes: ECB, CBC, CFB, OFB, CTR.
12. ECB vs CBC: ECB encrypts blocks independently; CBC uses chaining (more secure).
13. DES Explanation: 16 rounds Feistel cipher, 64-bit block, 56-bit key.
14. AES Explanation: Substitution-permutation network, 128-bit block, 128/192/256-bit key.
15. In-depth AES: Uses 10/12/14 rounds, SubBytes, ShiftRows, MixColumns, AddRoundKey.
16. RSA: Asymmetric encryption. Example: p=3,q=11, n=33, encrypt/decrypt using public/private keys.
17. Diffie-Hellman: Key exchange using shared prime, base, and private keys to compute the same secret.
18. Digital Certificate X.509: Binds public key to identity, signed by Certificate Authority (CA).
19. Kerberos: Uses tickets and symmetric keys for secure authentication in distributed systems.
20. Double DES & Triple DES: Double = 2 DES encryptions, Triple = 3 (Encrypt-Decrypt-Encrypt) to strengthen DES.
21. MD-5: Hash function, produces 128-bit hash, vulnerable to collision attacks.
22. Hash Criteria & MD5 vs SHA-1: Criteria: Pre-image resistance, collision resistance, avalanche effect. SHA-1 is
stronger but now outdated.
23. SHA-1: Outputs 160-bit hash, more secure than MD5, but also broken.
24. MDC vs MAC: MDC checks integrity, MAC ensures both integrity and authenticity.
25. MAC: Uses secret key + message. Advantages: Auth & Integrity; Disadvantage: Key management needed.
26. Message Digest & HMAC: MD: Fixed-size output for integrity. HMAC uses a key + hash (e.g., HMAC-SHA256).
27. CMAC: Block cipher-based MAC for authenticity and integrity, standardized.
28. User Authentication: Confirms user's identity via passwords, biometrics, tokens.
29. Entity Authentication: Verifies both parties in communication are genuine.
30. Password Attacks: Brute force, Dictionary, Rainbow table, Phishing.
31. Password Strength: Longer, complex, and unique. Use numbers, symbols, cases.
32. Digital Signatures & Certificates: Ensure authenticity and integrity; Dual Signature binds payment & order.
33. Challenge-Response: Server sends challenge; client responds with computed answer using secret.
34. Social Engineering Attack: Manipulating people into revealing confidential info (e.g., phishing).
35. Digital Signature Role: Validates the sender. RSA: Sign = Encrypt with Private Key.
36. Digital Signature Note: Ensures message integrity, authenticity, and non-repudiation.
37. Needham-Schroeder Protocol: Uses a trusted server to distribute session keys securely.
38. Need for Network Security: Protects against threats like eavesdropping, spoofing, DOS.
39. Network Security Threats: Eavesdropping, Spoofing, Phishing, Malware, DOS.
40. TCP/IP Vulnerabilities: Layer-wise attacks like IP spoofing, sniffing, SYN floods.
41. ARP Spoofing vs IP Spoofing: ARP alters MAC-IP mapping; IP changes sender's IP address.
42. Types of Firewalls: Packet filtering, Stateful, Proxy, Next-gen. Advantages: Network protection, traffic control.
43. Firewall & Design Principles: Controls traffic. Principles: Default deny, minimal privilege.
44. IPSec Protocol: Secures IP communication with AH & ESP. Used for VPNs.
45. SSL Services: Encryption, Authentication, Integrity. Uses handshake for key exchange.
46. IPSec Modes: Transport secures payload, Tunnel secures entire packet. Security Association: Agreement on
security attributes.
47. Email Security & PGP: Protects privacy. PGP uses public key encryption + signatures.
48. DOS Attack: Flooding server to deny service. Can be at network, transport, or application layers.
49. Intrusion Detection System (IDS): Components: Sensors, Analyzers, Interface. Signature vs Anomaly: Pattern vs
Behavior-based.
50. Viruses & Worms: Virus needs host; Worm self-replicates. Spread via files/networks.
51. Malicious Codes: Virus, Worms, Trojan, Spyware, Adware.
52. Buffer Overflow & Incomplete Mediation: Overflow: Memory overwrite. Incomplete Mediation: Lack of input
validation.
53. Stack-based Buffer Overflow: Overwrites return address on stack. Example: Input exceeding buffer size.
54. Heap-based Buffer Overflow: Overflows heap-allocated memory, exploits dynamic memory.
55. Format String Attack: Malicious format specifiers in user input. Example: printf(user_input).
56. Buffer Overflow in C & gets(): Overflow: writing beyond buffer limit. gets() doesnt check size unsafe.
57. SQL Injection vs Buffer Overflow: SQLi targets databases; Buffer overflow targets memory.
58. Boot Sector Virus: Infects boot sector, runs before OS loads.
59. SQL Injection Types & Mitigation: Error-based, Union-based, Blind. Mitigation: Prepared statements.
60. Computer Worm: Self-replicating malware spreading across networks without human action.
61. Distributed Denial of Service (DDoS): Attack from multiple machines to exhaust resources.