Information Security and Cyber Law Notes
Subject Overview
The second Elective-I option, covering information system security fundamentals — authentication, access control and database security, malicious software and denial-of-service attacks, intrusion detection and firewalls, and cryptographic algorithms, internet security protocols and Indian cyber law including the IT Act 2000. A 4-credit elective theory paper.
Subject at a glance
4
Units
41
Topics
4
Credits
4
Infographics
Unit-wise Syllabus
4 units — open any unit for detailed topic-wise notes, diagrams and important exam questions
- Information system classification and components
- CIA triad
- security functional requirements
- authentication methods (password, token, biometric, remote user)
- access control principles (discretionary, role-based, file access control)
- database security and encryption
DAC
The owner of the resource
File permissions set by the user
MAC
System-wide security labels
Military classification levels
RBAC
The user's role
HR role sees salary data
Study guide
This unit covers information system components, the CIA triad, security functional requirements, authentication (password, token, biometric, remote), access control (discretionary, role-based, file), database security and encryption. Learn the difference between authentication and authorisation.
- Types of malicious software — viruses
- worms
- spam
- Trojans
- zombies
- bots
- keyloggers
- phishing
- spyware
- backdoors
- rootkits
- preventive measures
- denial-of-service attack types and defenses
Virus
Needs a host file
Worm
Self-replicates over networks
Trojan
Disguised as useful software
Rootkit
Hides deep in the system
Spyware and keylogger
Steals information
Bot
Part of a remote-controlled botnet
Study guide
You study malware (viruses, worms, spam, Trojans, bots, keyloggers, phishing, spyware, backdoors, rootkits), prevention and denial-of-service attacks and defences. Map each malware type to how it spreads.
- Intruders and intrusion detection
- host-based and network-based intrusion detection
- honeypots
- firewall need/characteristics/types/basing
- intrusion prevention systems
- symmetric encryption principles
- Data Encryption Standard
Packet filter
IP, port, protocol per packet
Fast, simple
Stateful inspection
Connection state
Smarter than packet filters
Application proxy
Full application content
Deep inspection, slower
Next-generation
Apps, users, threats
Integrated IPS and more
Study guide
You study intruders, host- and network-based intrusion detection, honeypots, firewalls, intrusion prevention systems, symmetric encryption principles and DES. Compare IDS and IPS.
- SSL
- TLS
- HTTPS
- IPv4/IPv6 security protocols
- information security policy concepts
- ISO standards
- Indian cyber laws
- IT Act 2000
- electronic records and e-governance
- classification of cyber crimes
- certifying authority regulation
- patents
- copyright
- digital signatures
- introduction to cyberspace
Section 43
Unauthorised access and damage: compensation
Section 66
Computer-related offences
Section 66C
Identity theft
Section 66D
Cheating by impersonation
Section 66E
Violation of privacy
Section 67
Obscene material online
Study guide
You study SSL, TLS, HTTPS, IP security protocols, information security policy, ISO standards, Indian cyber law and the IT Act 2000, electronic records, e-governance, cyber crime classification, certifying authorities, IP and digital signatures. Know the main offences and penalties under the IT Act.
Why Information Security and Cyber Law Matters
Cybersecurity is a global skills shortage area, and this paper supports careers in security operations, compliance and ethical hacking, along with certifications such as Security+ and CEH.
How to Prepare for Information Security and Cyber Law
- Practise explaining attacks and defences in simple language.
- Learn the main provisions of the IT Act.
- Try safe security labs on a virtual machine.
Information Security and Cyber Law: Frequently Asked Questions
What is the CIA triad?
Confidentiality, integrity and availability are the three goals of information security.