UNIT-1

Day-1
Cryptography: - Cryptography refers to the science and art of transforming messages to
make them secure and immune to attacks. It is a method of storing and transmitting data in a
particular form so that only those for whom it is intended can read and process it.
The earliest form of cryptography was the simple writing of a message, as most people
could not read (New World, 2007). In fact, the very word cryptography comes from the Greek
words kryptos and graphein, which mean hidden and writing, respectively.

The first known evidence of the use of cryptography (in some form) was found in an inscription
carved around 1900 BC, in the main chamber of the tomb of the nobleman Khnumhotep II, in
Egypt. The scribe used some unusual hieroglyphic symbols here and there in place of more
ordinary ones.
The first known evidence of cryptography can be traced to the use of 'hieroglyph'. Some 4000
years ago, the Egyptians used to communicate by messages written in hieroglyph.
In computer science, cryptography refers to secure information and communication techniques
derived from mathematical concepts and a set of rule-based calculations called algorithms, to
transform messages in ways that are hard to decipher.
The first recorded use of cryptography for correspondence was by the Spartans, who as early as
400 bc employed a cipher device called the scytale for secret communication between military
commanders.
What are the two types of cryptography?
Cryptography is broadly classified into two categories: Symmetric key Cryptography and
Asymmetric key Cryptography (popularly known as public key cryptography).

Today, cryptography is used to protect digital data. It is a division of computer science that
focuses on transforming data into formats that cannot be recognized by unauthorized users. An
example of basic cryptography is a encrypted message in which letters are replaced with
other characters.

Why is cryptography important?

Cryptography is one of the most important tools for building secure systems. Through the proper
use of cryptography, one can ensure the confidentiality of data, protect data from
unauthorized modification, and authenticate the source of data. Cryptography can also
enable many other security goals as well.

Who is the father of cryptology?

One Leon Battista Alberti
How cryptography is used in real life?

Encryption is used in electronic money schemes to protect conventional transaction

data like account numbers and transaction amounts, digital signatures can replace
handwritten signatures or a credit-card authorizations, and public-key encryption can
provide confidentiality.

Day2

Security Threats
Information Security threats can be many like Software attacks, theft of intellectual property,
identity theft, theft of equipment or information, sabotage, and information extortion.
1. Software attacks: The software attack surface is the complete profile of all functions in any
code running in a given system that are available to an unauthenticated user.
The most common types of DoS and DDoS attacks are the
TCP SYN flood attack: - occurs when the attacker floods the system with SYN requests in
order to overwhelm the target and make it unable to respond to new real connection
requests.
Teardrop attack: - is a type of denial-of-service (DoS) attack.
smurf attack:- is a form of a distributed denial of service (DDoS) attack that renders computer
networks inoperable.
Ping-of-death attack:- is a form of denial-of-service (DoS) attack that occurs when an
attacker crashes, destabilizes, or freezes computers or services by targeting them with
oversized data packets.
Botnets: - a network of computers infected by malware that are under the control of a
single attacking party, known as the “bot-herder.

"Big 3" types of cyber-attacks, malware, ransom ware, and phishing attacks.
Malware: - Malware is intrusive software that is designed to damage and destroy computers
and computer systems.
Ransom ware: - Ransom ware is a malware designed to deny a user or organization access
to files on their computer. By encrypting these files and demanding a ransom payment for the
decryption key, cyber attackers place organizations in a position where paying the ransom is the
easiest and cheapest way to regain access to their files.
Phishing attacks:- Phishing is a type of cyber security attack during which malicious actors
send messages pretending to be a trusted person or entity.
Types of Phishing Attacks
 Spear Phishing.
 Whaling.
 Smishing.
 Vishing.

Day3

Vulnerability
A flaw or weakness in a computer system, its security procedures, internal controls, or design
and implementation, which could be exploited to violate the system security policy.

Vulnerability is the inability to resist a hazard or to respond when a disaster has occurred.

Four different types of vulnerability have been identified, Human-social, Physical, Economic
and Environmental and their associated direct and indirect losses.
Types of Vulnerabilities
 System Misconfigurations.
 Out-of-date or Unpatched Software.
 Missing or Weak Authorization Credentials.
 Malicious Insider Threats.
 Missing or Poor Data Encryption
 Zero-day Vulnerabilities.
 Vulnerability Detection.
 Cyber Security Vulnerability Assessment.

a vulnerability is a weakness that can be exploited by cybercriminals to gain unauthorized access

to a computer system.

Day4
Active and Passive attacks

Active Attacks: Active attacks are the type of attacks in which, The attacker efforts to change
or modify the content of messages. Active Attack is danger for Integrity as well as availability.
Due to active attack system is always damaged and System resources can be changed. The
most important thing is that, In active attack, Victim gets informed about the attack.

Examples of active attacks include man-in-the middle,

What are 4 types of active attack?
 Denial of service (DoS)
 Distributed Denial of Service (DDoS)
 Session replay.
 Masquerade.

What is active attack in cybercrime?

In an active attack, hackers attempt to modify the integrity and availability of the
information they have intercepted—with the goal of gaining access or greater privileges.
Simply put, hackers may use data they have gathered during passive attacks to compromise a
target in an active attack.

Passive attack
Passive Attacks: Passive Attacks are the type of attacks in which, The attacker observes the
content of messages or copy the content of messages. Passive Attack is a danger for
Confidentiality. Due to passive attack, there is no any harm to the system. The most important
thing is that In passive attack, Victim does not get informed about the attack.

An example is when an intruder records network traffic using a packet analyzer tool, such
as Wireshark, for later analysis.
Difference between Active Attack and Passive Attack:

Active Attack Passive Attack

In an active attack, Modification in While in passive attack, Modification in the

information takes place. information does not take place.

Active Attack is a danger to Integrity as Passive Attack is a danger to Confidentiality.

Active Attack Passive Attack

well as availability.

In an active attack, attention is on While in passive attack attention is on

detection. prevention.

Due to active attacks, the While due to passive attack, there is no harm to
executionsystem is always damaged. the system.

In an active attack, Victim gets informed While in a passive attack, Victim does not get
about the attack. informed about the attack.

In an active attack, System resources can While in passive attack, System resources are
be changed. not changing.

Active attack influences the services of While in passive attack, information and
the system. messages in the system or network are acquired.

In an active attack, information collected While passive attacks are performed by

through passive attacks are used during collecting information such as passwords, and
executing. messages by themselves.

Active attack is tough to restrict from Passive Attack is easy to prohibited in

entering systems or networks. comparison to active attack.

Can be easily detected. Very difficult to detect.

Day5

Security services and mechanism

A mechanism that is designed to detect, prevent, or recover from a security attack. Security
Service: A service that enhances the security of data processing systems and information
transfers. A security service makes use of one or more security mechanisms.

What are the types of security services in network security?

 Message Confidentiality. Message confidentiality or privacy means that the sender
and the receiver expect confidentiality. ...
 Message Integrity. ...
 Message Authentication. ...
 Message Nonrepudiation. ...
 Entity Authentication.

Network Security is field in computer technology that deals with ensuring security of computer
network infrastructure. As the network is very necessary for sharing of information whether it
is at hardware level such as printer, scanner, or at software level. Therefore security
mechanism can also be termed as is set of processes that deal with recovery from security
attack. Various mechanisms are designed to recover from these specific attacks at various
protocol layers.

Types of Security Mechanism are :

1. Encipherment :
This security mechanism deals with hiding and covering of data which helps data to
become confidential. It is achieved by applying mathematical calculations or algorithms
which reconstruct information into not readable form. It is achieved by two famous
techniques named Cryptography and Encipherment. Level of data encryption is dependent
on the algorithm used for encipherment.
2. Access Control :
This mechanism is used to stop unattended access to data which you are sending. It can be
achieved by various techniques such as applying passwords, using firewall, or just by
adding PIN to data.
3. Notarization :
This security mechanism involves use of trusted third party in communication. It acts as
 mediator between sender and receiver so that if any chance of conflict is reduced. This
mediator keeps record of requests made by sender to receiver for later denied.
4. Data Integrity :
This security mechanism is used by appending value to data to which is created by data
itself. It is similar to sending packet of information known to both sending and receiving
parties and checked before and after data is received. When this packet or data which is
appended is checked and is the same while sending and receiving data integrity is
maintained.
5. Authentication exchange :
This security mechanism deals with identity to be known in communication. This is
achieved at the TCP/IP layer where two-way handshaking mechanism is used to ensure
data is sent or not
6. Bit stuffing :
This security mechanism is used to add some extra bits into data which is being
transmitted. It helps data to be checked at the receiving end and is achieved by Even parity
or Odd Parity.
7. Digital Signature :
This security mechanism is achieved by adding digital data that is not visible to eyes. It is
form of electronic signature which is added by sender which is checked by receiver
electronically. This mechanism is used to preserve data which is not more confidential but
sender’s identity is to be notified.

Day6
Conventional Encryption Model
Conventional encryption is a cryptographic system that uses the same key used by the sender
to encrypt the message and by the receiver to decrypt the message. It was the only type of
encryption in use prior to the development of public-key encryption.
It is still much preferred of the two types of encryption systems due to its simplicity. It is a
relatively fast process since it uses a single key for both encryption and decryption In this
encryption model, the sender encrypts plaintext using the receiver’s secret key, which can be
later used by the receiver to decrypt the ciphertext. Below is a figure that illustrates this
concept.
Suppose A wants to send a message to B, that message is called plaintext. Now, to avoid
hackers reading plaintext, the plaintext is encrypted using an algorithm and a secret key (at 1).
This encrypted plaintext is called ciphertext. Using the same secret key and encryption
algorithm run in reverse(at 2), B can get plaintext of A, and thus the message is read and
security is maintained.

The idea that uses in this technique is very old and that’s why this model is called conventional
encryption.
Conventional encryption has mainly 5 ingredients :

1. Plain text –

It is the original data that is given to the algorithm as an input.

2. Encryption algorithm –
This encryption algorithm performs various transformations on plain text to convert it into
ciphertext.

3. Secret key –
The secret key is also an input to the algorithm. The encryption algorithm will produce
different outputs based on the keys used at that time.

4. Ciphertext –
It contains encrypted information because it contains a form of original plaintext that is
unreadable by a human or computer without proper cipher to decrypt it. It is output from
the algorithm.

5. Decryption algorithm –
This is used to run encryption algorithms in reverse. Cipher text and Secret key is input
here and it produces plain text as output.

Requirements for secure use of conventional encryption:

1. We need a strong encryption algorithm.
2. The sender and Receiver must have obtained copies of the secret key in a secure
fashion and must keep the key secure.

Advantages of Conventional Encryption:

1. Simple –
This type of encryption is easy to carry out.

2. Uses fewer computer resources –

Conventional encryption does not require a lot of computer resources when compared to
public-key encryption.
3. Fast –
Conventional encryption is much faster than asymmetric key encryption.

Disadvantages of Conventional Encryption Model:

1. Origin and authenticity of the message cannot be guaranteed, since both sender and
receiver use the same key, messages cannot be verified to have come from a particular user.
2. It isn’t much secured when compared to public-key encryption.
3. If the receiver lost the key, he/she cant decrypt the message and thus making the whole
process useless.
4. This scheme does not scale well to a large number of users because both the sender and
the receiver have to agree on a secret key before transmission.

Day7
CIA model
Central Intelligence Agency (CIA), principal foreign intelligence and counterintelligence agency of
the U.S. government. Formally created in 1947, the Central Intelligence Agency (CIA) grew out of
the World War II Office of Strategic Services (OSS).

The three letters in "CIA triad" stand for Confidentiality, Integrity, and Availability. The CIA
triad is a common model that forms the basis for the development of security systems. They are
used for finding vulnerabilities and methods for creating solutions.

Confidentiality, integrity and availability, also known as the CIA triad, is a model designed to
guide policies for information security within an organization. The model is also sometimes
referred to as the AIC triad (availability, integrity and confidentiality) to avoid confusion with the
Central Intelligence Agency.