No.

of Hours: 12 Chapter/Book Reference: TB1 [Chapter - 1], TB2 [Chapters - 1, 3]

Components of Internet, Weak points of Internet, HTTP vs HTTPS, Overview of web authentication
technologies, Web application architecture, Recent attack trends, Types of Web Security, Web
infrastructure security/Web application firewalls, managing configurations for web apps, Techniques
of Web Hacking, Methods of Attacking users, Importance of Web Application Security, Web
Application Security vs Network Security. Social Media security - What is Online Social Networks,
data collection from social networks, challenges, opportunities, and pitfalls in online social networks,
APIs Collecting data from Online social media. Trust, credibility, and reputations in social systems.

UNIT–II

No. of Hours: 11 Chapter/Book Reference: TB1 [Chapters - 4, 6], TB2 [Chapters - 8, 11]

Internet and Web Application Security: Email security (PGP and SMIME), Web Security: Web
authentication, Injection Flaws, Programming Bugs and Malicious code, XSS and SQL Injection,
Memory corruption exploits, Web Browser Security, E-Commerce Security

UNIT–III

No. of Hours: 11 Chapter/Book Reference: TB1 [Chapter - 5], TB2 [Chapters - 1, 10, 11]

Wireless Network Security: Components, Security issues, Securing a Wireless Network, Mobile
Security Management: Disaster Recovery, Ethical Hacking, Penetration Testing, Computer Forensics,
Cyber laws and crime, Security Audit and Investigation, Cyber Security Solutions

UNIT–IV

No. of Hours: 10 Chapter/Book Reference: TB1 [Chapter - 6], TB2[Chapters - 5, 10, 11]

Web services overview, Honeytoken, XML security, AJAX attack trends and common attacks, REST
security, Content Security Policy Serialization security, Clickjacking, DNS rebinding, HTML5 security,
Logging collection and analysis for web apps, Security testing, IPv6 impact on web security

Components of Internet, Weak points of Internet, HTTP vs HTTPS, Overview of web authentication
technologies, Web application architecture, Recent attack trends, Types of Web Security, Web
infrastructure security/Web application firewalls, managing configurations for web apps, Techniques
of Web Hacking, Methods of Attacking users, Importance of Web Application Security, Web
Application Security vs Network Security.
Social Media security - What is Online Social Networks, data collection from social networks,
challenges, opportunities, and pitfalls in online social networks, APIs Collecting data from Online
social media. Trust, credibility, and reputations in social systems.

Components of Internet

The Internet can be seen as having two major components: network protocols and hardware. The
protocols, such as the TCP/IP suite, present sets of rules that devices must follow in order to
complete tasks. Without this common collection of rules, machines would not be able to
communicate.

The main components of the internet

• Devices: Devices refer to the physical hardware that connects to the internet, such as
computers, laptops, smartphones, tablets, servers, routers, modems, and other connected
devices. These devices communicate with each other using standardized protocols.

• IP Addresses: Every device connected to the internet is assigned a unique identifier called
an IP address (Internet Protocol address). IP addresses are either IPv4 (32-bit) or IPv6 (128-
bit) numbers and are used to identify and locate devices on the internet.

• Protocols: Protocols are a set of rules and standards that govern how data is transmitted
and received over the internet. The Internet Protocol Suite (TCP/IP) is the primary protocol
used on the internet. It consists of multiple protocols that handle different aspects of
communication, such as IP (Internet Protocol), TCP (Transmission Control Protocol), UDP
(User Datagram Protocol), HTTP (Hypertext Transfer Protocol), FTP (File Transfer Protocol),
and SMTP (Simple Mail Transfer Protocol), among others.

• Routers: Routers are devices that facilitate the transfer of data packets between networks.
They receive data packets and determine the best path for them to reach their destination.
Routers help connect various networks together to form the internet.

Weak points of Internet

• Hacking is the most common disadvantage of the internet.

• Personal information in social media is very much vulnerable to hackers.

• Virus threats on the internet can damage your data and information.

• Too much addiction to internet leads to time wastage, affecting our productivity and
health.

• Children should use the internet only under parental guidance.

• Addiction to online games affects health leading to obesity and serious health issues.
 • Phishing is the activity to obtain personal and sensitive information disguising as some
trustworthy source.

• Internet acts as a distraction for the students who spend too much time surfing and playing
games.

• There are many audio and video contents which are not suitable for certain age groups.

• The pictures and videos posted on social media are always vulnerable.

• Spending too much of time on the internet affects your eyes.

• People using too much internet get disconnected from the real world.

• Internet is a medium for spreading fake news and rumours.

• There have been many cyber attacks on banks and corporate sectors through the internet.

• The loss of server or connectivity brings a huge loss of money and productivity.

• Every sensitive data on the internet are available for easily hacking and decrypting.

• People can easily fall prey to phishing activities revealing their credit card number to the
fraudster.

• Ransom ware is the new threat of the internet in which the victim’s data is inaccessible.

• Increasing virus threats not only steal your sensitive data but also damages your
computer.

• Children are prone to the internet later dealing with stalking, trolling, violence, sensitive
audio and video contents.

S HTTP HTTPs
.
N
o
.

1 HTTP protocol stands for Hypertext The HTTPS stands for Hypertext Transfer Protocol Secure.
. Transfer Protocol

2 The HTTP protocol is not secure The HTTPS protocol contains the SSL certificate that converts the d
. protocol as it does not contain SSL,
an encrypted form, so no data can be stolen in this case as outside
which means that the data can be
stolen when the data is transmitted understand the encrypted text.
from the client to the server.
 3 When RFC 1340 was announced, then The new RFC was released in the year 1994, the HTTPS is assigned
the IETF (Internet Engineering Task
port number 443.
Force) provided port number 80 to the
HTTP.

4 The HTTP protocol works on the the HTTPS protocol works on the transport layer. As we know that
application layer.
responsibility of the transport layer is to move the data from the c

the server, and data security is a major concern. HTTPS operates in

transport layer, so it is wrapped with a security layer.

5 It is written in the address bar as It is written in the address bar as [Link]

6 It is unsecured as the plain text is sent, It is secure as it sends the encrypted data which hackers cannot un
which can be accessible by the hackers.

7 The page loading speed is fast. The page loading speed is slow as compared to HTTP because of th

feature that it supports, i.e., security.

8 In HTTP, Encryption is absent. Encryption is present in HTTPS.

9 HTTP does not improve search ranking HTTPS helps to improve search ranking

1
HTTP does not require any certificates. HTTPS needs SSL Certificates.
0

User authentication is a method that keeps unauthorized users from accessing sensitive
information. For example, User A only has access to relevant information and cannot see the
sensitive information of User B.