7. Cyber Security: Questions and Answers

b) interconnected networks of computers and electronic systems where online communication and data exchange take place

It includes networks, hardware, software, data and users.

b) computers, networks, devices and data from digital attacks, unauthorised access, damage or theft

c) Authentication

The CIA Triad is Confidentiality, Integrity and Availability. Authentication is an extended security goal.

a) Confidentiality

b) Integrity

c) Availability

b) Authentication

b) Authorisation

It answers 'What are you allowed to do?'

c) Non-repudiation

For example, digital signatures and online transaction records.

b) target

a) cookies

a) bugs

c) Endpoint security

a) Network security

a) Information security

It is also called data security and uses encryption, access control and data-loss prevention.

b) encryption

a) phishing

c) ransomware

a) Man-in-the-Middle attack

b) Zero-day exploit

b) data diddling

a) salami attack

b) virus

A worm spreads on its own without a host.

c) pharming

b) detective control

c) corrective control

b) more than one method to verify identity

For example, password and OTP.

b) 2000

It was amended by the IT Amendment Bill, 2008.

Cookies.

Bugs.

Footprint.

Factory.

Basic Input Output System.

Confidentiality, Integrity and Availability.

Authentication.

Non-repudiation.

Plain text; cipher text.

Fingerprint.

Denial-of-Service (DoS).

Virus.

Spyware.

Spoofing.

Spamming.

Web jacking.

Preventive, detective and corrective.

Multilevel.

Financial.

2008.

Insider.

Infringement.

Cyberspace refers to interconnected networks of computers and electronic systems. It is the environment where online communication, data exchange and digital interactions take place. Its components are networks, hardware, software, data and users.

Cyber security is the practice of protecting computers, networks, devices and data from digital attacks, unauthorised access, damage or theft. It uses technologies, rules and safe practices to keep information secure while using the internet and digital devices. It is about people, data and safe behaviour in cyberspace, not only about computers.

Students use digital devices, the internet, online classes, social media, digital payments and e-governance services every day. Along with the convenience, cyber criminals misuse digital systems to steal money, data and personal information. Students need to understand cyber security concepts, cyber crimes, preventive measures, ethics and laws so that they can stay safe and behave responsibly online.

Vulnerability in cyberspace refers to weaknesses or gaps in computers, networks, software or user practices that can be exploited by cyber attackers. They make digital systems and data more exposed to threats. Examples: bugs in software, outdated software, weak passwords, a home router with its factory password, and insecure BIOS settings.

Bugs are errors or flaws in the code of programs and apps. For example, a game or phone app that crashes unexpectedly may have a bug that lets attackers sneak into the system. Attackers exploit such flaws to gain unauthorised access.

Software that is not updated keeps its known security problems, because updates and patches fix them. Hackers can easily attack old software by using these known weaknesses, so regular updates are important.

A digital footprint is the data trail created when a person uses digital devices and the internet; it shows where you have been online. Examples: search and browsing history, social media activity (posts, likes, comments, profile information), cookies, IP address and location data. The more information we leave online, the more attackers can collect about us and use it for fraud, identity theft and targeted attacks.

Cookies are small files used by websites to track your browsing habits. They are part of your digital footprint.

When users are given more access rights than necessary, a compromised account can cause serious damage, such as deleting data or changing system settings. Users should get only the access they need.

Easy passwords can be guessed quickly, and using the same password everywhere is unsafe because one leak exposes all accounts. Example: using '123456', your name or your date of birth as the password for several accounts.

An insider threat comes from users who already have access to the system, such as disgruntled employees or contractors, who may misuse their access to steal data or disrupt systems, or who make mistakes.

When users do not know basic cyber safety rules they make mistakes that let attackers in. Examples: clicking on fake links, opening unknown files, using weak or repeated passwords, giving more access than necessary, or sharing OTPs. Such mistakes allow hackers to enter the system.

Public Wi-Fi or unknown devices and networks can be controlled or monitored by attackers. Data sent over them, such as passwords and card details, can be intercepted (for example in a Man-in-the-Middle attack) and misused. Therefore sensitive work such as banking should be done only on secure networks.

A firewall controls incoming and outgoing network traffic. If its rules are weak, outdated or wrongly set, attackers can bypass it and gain unauthorised access. Routers with default or open settings can also be exploited; for example, if a home router still has its factory password, attackers can easily take over the home network.

Cloud storage becomes vulnerable when access rights are wrongly set, for example when public access is enabled by mistake. This may lead to data leaks, unauthorised access or data theft.

The BIOS (Basic Input Output System) controls basic hardware operations before the operating system loads. If BIOS passwords are not set or security features are disabled, attackers can change system settings, install malware or access data before the operating system starts.

Old computers, phones and gadgets that no longer get security patches have known weaknesses and often lack modern security features, so hackers target them. For example, an old smartphone that can no longer install security updates.

The BIOS (Basic Input Output System).

A student uses a weak password and logs in to an online banking or exam portal on public Wi-Fi. An attacker captures the password and transfers money or changes data. Another example: a hacked online PSC application system could expose the personal details of thousands of candidates.

Attackers search for weaknesses and use them to gain access. Example: an app has a coding bug (vulnerability). The attacker uses it to enter the system, steal data or install malware. If the flaw is exploited before a patch exists, it is a zero-day exploit.

• Confidentiality: information should be accessible only to authorised persons.
• Integrity: information should not be altered without permission.
• Availability: information and services should be available when needed.

The CIA Triad is the set of three core goals of information security: Confidentiality, Integrity and Availability. Together they ensure that information is protected from unauthorised access, remains accurate and trustworthy, and is available to authorised users when needed. Any security measure is planned to support one or more of these goals.

• Confidentiality: only the student can access their own account (login, password, OTP).
• Integrity: the digital textbooks and content are not tampered with.
• Availability: the website remains accessible during exam seasons.

• Authentication: verifying the identity of a user or system ('Who are you?').
• Authorisation: what an authenticated user is allowed to do ('What are you allowed to do?').
• Access control: mechanisms that enforce authentication and authorisation rules.
• Non-repudiation: a user cannot deny performing an action.

Authentication verifies the identity of a user (username and password, OTP, fingerprint or face recognition). Authorisation decides what that authenticated user may do (a student can view marks but cannot edit them).

Access control systems are mechanisms that enforce authentication and authorisation rules to protect resources. They verify identity (authentication) and then grant permission (authorisation) based on predefined rules, so only authorised users can read, modify or use digital resources. Example: a customer logs in with username, password and OTP, and can view the balance and transfer money but is blocked from admin functions.

Non-repudiation ensures that a user cannot deny performing an action after it has occurred. It provides proof of origin and action, which is important in legal and financial systems, for example digital signatures on emails and online transaction records.

Cyber security is not only about computers; it is also about people and safe behaviour in cyberspace. Many attacks succeed because of human mistakes such as weak passwords, clicking fake links and oversharing, so safe habits and awareness are as important as technology.

1. Protects sensitive data (Aadhaar, PAN, bank account details).
2. Prevents online fraud and scams.
3. Protects government databases.
4. Builds trust and reputation in digital services.

• Network security
• Application security
• Information security (data security)
• Endpoint security
• Operational security
• Cloud security

• Network security: secures computer networks from intruders like hackers and malware using intrusion detection systems, firewalls and Virtual Private Networks (VPNs). A firewall blocks unauthorised access while allowing outward communication.
• Application security: protects software and devices from cyber threats by writing secure programs, checking applications for weaknesses and using firewalls. Regular updating and patching of software is an important practice.

• Information security (data security): protects the confidentiality, integrity and availability of data using encryption, access control and data-loss prevention, both stored and in transit.
• Endpoint security: protects user endpoints such as PCs, smartphones and tablets from viruses, malware and unauthorised access, using tools from basic antivirus to advanced EDR (Endpoint Detection and Response).

• Operational security: handles the processes and decisions for managing and protecting data assets, including permissions and access, for example multi-factor authentication to access corporate databases.
• Cloud security: protects data, applications and infrastructure in cloud computing, often with shared responsibility between the cloud provider and the client.

Information security (data security).

Data encryption is the process of converting data into a coded form to protect it from unauthorised access. Only a person with the correct key or password can convert it back to its original form. Encrypting sensitive files prevents data leakage in case of a breach.

Malware is malicious software: any program designed to damage or exploit any programmable device, service or network. Types: virus, worm, Trojan, ransomware and spyware.

Attackers pretend to be a trusted source and send deceptive emails that look like they come from reputable organisations such as banks. The email prompts the user to enter personal information such as passwords or card numbers at a fake website that looks like the original. The stolen information is then used to steal money.

Ransomware takes control of the victim's files or system and encrypts the data. The user cannot access it without a decryption key, which the attackers promise to provide only after payment. Payment does not guarantee that the data will be returned.

In a Man-in-the-Middle (MitM) attack, the attacker secretly intercepts, and may modify, the communication between two parties who think they are directly connected. It can happen on unsecured Wi-Fi networks where data is intercepted as it moves from a device to the network.

A DoS attack blocks users from accessing a machine or network by temporarily or permanently stopping the internet-based services of the host, usually by flooding the server with bogus requests. Attackers target web servers of banks, media and government sites. Effects: legitimate users cannot use the service, the server may crash, and the organisation suffers loss of service and reputation.

It is a zero-day exploit. It is dangerous because developers are unaware of the flaw or have no patch ready, so there is little or no time to fix it and serious damage can be done to systems and data.

• Phishing attacks
• Malware
• Ransomware
• Man-in-the-Middle attacks
• Denial-of-Service attacks
• Zero-day exploits
• Insider threats

Cyber crime refers to illegal activities carried out using computers, mobile devices or the internet, where digital technology is the target, the tool or both.

1. Against individuals
2. Against property
3. Against organisations
4. Against governments / society

• Identity theft: stealing and misusing personal information to commit fraud.
• Email spoofing: forging the email header so the mail appears to come from another source.
• Phishing: obtaining usernames, passwords and card details by pretending to be the original website, mostly of banks.
• Pharming: redirecting users to fake websites by manipulating DNS servers or exploiting website vulnerabilities.
• Spamming: sending multiple copies of unsolicited or mass emails such as chain letters.
• Cyber defamation: publishing defamatory matter about a person on a website or by email.
• Cyber stalking: repeatedly harassing, threatening or following a person's online activity.
• Cyber bullying: using digital platforms to insult or embarrass someone, especially repeatedly.

• Credit card fraud: fraud using a credit card, when someone learns the card number or details or the card is stolen.
• Intellectual property crimes: software piracy, copyright infringement, trademark violations and theft of source code.
• Internet time theft: internet hours paid by one person being used by an unauthorised individual.

They are crimes involving the theft or misuse of creative or intellectual work. Examples: software piracy (illegal copying and distribution of software), copyright infringement (using copyrighted material without permission), trademark violations, and theft of computer source code.

• Unauthorised accessing of a computer (changing or deleting data, or computer voyeur)
• Denial of service
• Malware attacks (virus, worm, Trojan, ransomware, spyware)
• Email bombing
• Salami attack
• Logic bomb
• Data diddling

Unauthorised accessing means accessing a computer or network without the owner's permission, either to change or delete data, or as a computer voyeur who reads or copies confidential or proprietary information without deleting or changing it.

• Email bombing: sending a large number of mails to an individual, company or mail server to crash the system.
• Salami attack: stealing a large amount of money or data by taking very small amounts repeatedly so that each theft goes unnoticed, like slicing thin pieces of salami; used for financial crimes.
• Logic bomb: an event-dependent program; when the designated event occurs it crashes the computer, releases a virus or does other harm.
• Data diddling: altering raw data just before it is processed by a computer and changing it back after processing.

• Forgery: forging currency notes, revenue stamps and mark sheets using computers, scanners and printers.
• Cyber terrorism: using computer resources to intimidate or coerce people and carry out terrorist activities.
• Web jacking: hackers gain control of another's website and change its content to meet political objectives.

Cyber security controls are tools or steps that help keep computers and data safe. The three types are preventive, detective and corrective controls.

Multilevel authentication, also called Two-Factor Authentication (2FA), requires more than one method to verify identity, adding extra security along with the password. Examples: password and OTP, or password and biometric verification (fingerprint or face).

• Unique and complex: a mix of letters, numbers and symbols; not common words or personal information.
• Not reused on multiple accounts, and changed regularly.

A firewall monitors and controls incoming and outgoing network traffic. It acts like a protective wall between a computer or network and the internet. It allows safe data to pass and blocks unauthorised or harmful access, which helps prevent hacking and cyber attacks.

Antivirus software protects computers and mobile devices from viruses and other harmful software. It detects, prevents and removes malware such as viruses, worms, Trojans and spyware by scanning files, emails and websites and blocking threats before they damage the system or steal data. It must be kept installed and updated regularly so that it can recognise new cyber threats.

Detective control.

• Cryptography: converts readable data (plain text) into an unreadable form (cipher text) using a key, so only authorised users with the correct key can decrypt and read it. Used for data security and privacy.
• Hashing: a mathematical function converts data into a fixed-length value called a hash, a unique digital fingerprint that verifies the data has not been changed.
• Digital signatures: use cryptography and hashing to prove the identity of the sender and ensure the message or document cannot be denied later.

In online banking and messaging apps, the data is encrypted into cipher text before it travels over the network. Even if an attacker intercepts it, they cannot read it without the correct key. Only the bank or the intended receiver can decrypt it, so passwords, account details and messages stay private and secure.

Public Wi-Fi is often unsecured, so attackers can intercept the data sent over it (Man-in-the-Middle attack) and steal passwords, OTPs and card details. Online transactions should be done only on secure networks.

• Legal behaviour: following the laws and rules on the use of computers and the internet: no hacking, no spreading viruses, no stealing personal or financial information, and no sharing illegal or copyrighted content. The Information Technology Act, 2000 gives legal recognition to electronic records and digital signatures; it was amended by the IT Amendment Bill, 2008 to strengthen cyber security laws.
• Ethical behaviour: doing what is morally right even when there is no direct law: respecting others' privacy, not bullying or harassing, not spreading fake news, using resources honestly and giving credit to original creators.

It was passed by the Indian Parliament to give legal recognition to electronic records and digital signatures. It was amended by the Information Technology Amendment Bill, 2008 to strengthen cyber security laws and address emerging cyber threats.

This is phishing: the attacker pretends to be a trusted source and uses a fake website to steal information. She should not click the link or enter any details, should verify the sender with the bank, and should report the message to a trusted adult or authority.

Ransomware. It encrypts the files and demands a ransom for the decryption key. Payment does not guarantee that the data will be returned. Regular backups and not opening unknown files help prevent it.

Pharming: users are redirected to fake websites, often by manipulating DNS servers or exploiting website vulnerabilities. (It differs from phishing, where the user is tricked into clicking a fake link.)

A Denial-of-Service (DoS) attack. The server is flooded with bogus requests so that legitimate users cannot access it.

A Man-in-the-Middle attack: the attacker secretly intercepts the data between the device and the network on an unsecured Wi-Fi. The student should avoid public Wi-Fi for banking.

A salami attack: a large amount is stolen by taking very small amounts repeatedly so that each theft goes unnoticed.

A logic bomb: an event-dependent program that, when the designated event occurs, crashes the computer, releases a virus or does other harm.

Cyber stalking (repeated harassing, threatening or following of an individual's online activity). If it is repeatedly insulting or embarrassing, it is cyber bullying.

Web jacking, a cyber crime against governments or society.

A zero-day exploit. There is no patch yet and little or no time to fix the flaw, so it can cause serious damage.

The next user can read her emails and misuse her account. Safe practice: log out after using email or social media on shared computers, do not save passwords on public computers, and avoid banking there.

Legal: software piracy and copyright infringement, which are intellectual property crimes. Security: files from untrusted sources may contain malware such as Trojans or spyware. Download only from trusted sources.

Vulnerability in cyberspace refers to weaknesses or gaps in computers, networks, software or user practices that attackers can exploit. They come from software flaws, human mistakes, network setup errors and weak hardware.

The CIA Triad: Confidentiality, Integrity and Availability. Example: on the KITE portal only the student can open their account (confidentiality), the content is not tampered with (integrity), and the site stays accessible during exams (availability).

Cyber crime is illegal activity carried out using computers, mobile devices or the internet, where the computer is a target, a tool, a storage device or a communication medium.

Controls are tools or steps that help keep computers and data safe. Cyber security focuses on prevention rather than cure.

Cryptography protects information by converting plain text into unreadable cipher text; only users with the correct key can decrypt it. Hashing converts data into a fixed-length hash that works as a digital fingerprint to check that data has not changed. Digital signatures use cryptography and hashing to prove the sender's identity and prevent the sender from denying the message later. Together they give secure communication, data integrity, authentication and trust, and are used in secure websites, online transactions, e-governance services and electronic documents.

Do: use strong passwords, verify links, download from trusted sources, lock devices, use antivirus, log out on shared computers, use secure networks, report suspicious messages, back up data and use privacy settings. Don't: share passwords or OTPs, click unknown links, use public Wi-Fi for banking, leave devices unlocked, ignore antivirus warnings or accept unknown friend requests.

Legal behaviour means obeying cyber laws such as the IT Act, 2000 (amended 2008): no hacking, spreading viruses, stealing information or sharing illegal or copyrighted content. Ethical behaviour means respecting privacy, not bullying, not spreading fake news and giving credit to original creators. Together they make cyberspace safe, respectful and reliable.