Module 1 Introduction to cryptography...

Introduction to cryptography

1. Cryptography & Network Security
(SSCS2061)
Module 1 Introduction to Cyber Security

2. Books

3. Module 1 Introduction to Cyber Security

4. Outline
•Overview of Cyber Security
•Internet Governance –Challenges and Constraints
•Cyber Threats
•Cyber Warfare
•Cyber Crime
•Cyber Terrorism
•Cyber Espionage
•Need for a Comprehensive Cyber Security Policy
•Need for a Nodal Authority
•Need for an International convention on Cyberspace

5. Cyber Space
•Cyberspaceisavirtualspacewithnomass,gravityor
boundaries.Itistheinterconnectedspacebetweennetworksof
computersystems.BitsandBytes-Zeroesandonesareusedto
defineCyberspace.
•Itisadynamicenvironmentwherethesevalueschange
continuously.

6. •Theelectronicworldcreatedbyinter-connected
networksofinformationtechnologyandthe
informationonthosenetworks.
•Itisaglobalcommonswherepeoplearelinked
togethertoexchangeideasandservices.
4

7. •Cyberisofrelatingto,orinvolvingcomputersor
networks (Such asinternet)
•Itisrelatingtoorcharacteristicofthecultureof
computers, informationtechnology,andvirtualreality.
•Cyberasacombinationof,
Technology,
Human Beings
Organization

8. •Networks
•ApplicationServers
•Laptops
•Smart Phones
•Sensors
•Database,etc.

9. •PolicyMakers
•Technologists
•Criminals
•SocialActivists
•IntelligenceOperatives
•Hobbyists,etc.

10. •Corporations
•Organizations(PrivateandPublicSectors)
•Rail Companies
•Nuclear Power plants,etc.

11. •Securityisfreedomfromfear,dangerorthreat.
•SecurityisabouttosecureIndividual,corporationand
NationStatesbyusingdifferenttools,technologyand
architecture.

12. •Cybercrimeiscriminalactivitycarriedoutbymeansof
computers ortheinternet.
Examples:
•Hacking
•Unauthorizednetworkaccess
•Internetfraud
•Theftofpasswords
•Websitedefacing, etc.

13. •CyberSecurityistheorganizationandcollectionof
resources,processesandstructuresusedtoprotect
cyberspaceandcyberspace-enabledsystems.
•ItreferstoProtectionofeverything
thatisdigitalbyunderstandingof
networksandartofhidingand
encryptinginformation.
11

14. •Internethasmadeourlifeveryeasierwithitsinvention.
•Cybersecurityisconstantlyevolutionaryindustrywith
requirementofdailylife.
•Cybercrimeiscommonandratesofcybercrimeare
increasing.
•Itisimportantmeasureforanyorganizationtobuildtrust.

15. Importance of CyberSecurity
•The Internet allows an attacker to work from anywhere on the
planet.
•Risks caused by poor security knowledge and practice:
•Identity Theft
•Monetary Theft
•Legal Ramifications (for yourself and your organization)
•Sanctions or termination if policies are not followed
•According to the SANS Institute, the top vectors for vulnerabilities
available to a cyber criminal are:
•Web Browser
•IM Clients
•Web Applications
•Excessive UserRights

16. CyberSecurity
•Cybersecurityreferstothebodyoftechnologies,processes,and
practicesdesignedtoprotectnetworks,devices,programs,anddata
fromattack,damage,orunauthorizedaccess.

17. CyberSecurity

18. CyberSecurityisSafety
•Security:Wemustprotectourcomputersanddata
inthesamewaythatwesecurethedoorstoour
homes.
•Safety:Wemustbehaveinwaysthatprotectus
againstrisksandthreatsthatcomewith
technology.

19. Cyber Crime
•Cybercrimecanbedefinedas“Theillegalusageofanycommunicationdevice
tocommitorfacilitateincommittinganyillegalact”.
•Acybercrimeisexplainedasatypeofcrimethattargetsorusesacomputeror
agroupofcomputersunderonenetworkforthepurposeofharm.
•Cybercrimesarecommittedusingcomputersandcomputernetworks.They
canbetargetingindividuals,businessgroups,orevengovernments.
•Investigatorstendtousevariouswaystoinvestigatedevicessuspectedtobe
usedortobeatargetofacybercrime.

20. •Thetermcybercrimeisusedtodescribeaunlawfulactivityinwhich
computerorcomputingdevicessuchassmartphones,tablets,Personal
DigitalAssistants(PDAs),etc.whicharestandaloneorapartofa
networkareusedasatoolor/andtargetofcriminalactivity.
•Itisoftencommittedbythepeopleofdestructiveandcriminalmindset
eitherforrevenge,greedoradventure.
Cyber Crime

21. Classification of Cyber Crimes
•The cyber criminal could be internal or external to the organization
facing the cyber attack.
1.Insider Attack
2.Outsider Attack

22. Insider Attack
•Anattacktothenetworkorthecomputersystembysomepersonwith
authorizedsystemaccessisknownasinsiderattack.
•Itisgenerallyperformedbydissatisfiedorunhappyinsideemployeesor
contractors.Themotiveoftheinsiderattackcouldberevengeorgreed.
•Itiscomparativelyeasyforaninsidertoperformacyberattackasheiswell
awareofthepolicies,processes,ITarchitectureandweaknessofthesecurity
system.

23. Outsider (External) Attack
•Whentheattackeriseitherhiredbyaninsideroranexternalentitytothe
organization,itisknownasexternalattack.
•Theorganizationwhichisavictimofcyberattacknotonlyfacesfinancialloss
butalsothelossofreputation.
•Sincetheattackerisexternaltotheorganization,sotheseattackersusuallyscan
andgatheringinformation.

24. Reasons for Commission of Cyber Crimes
1.Money:Peoplearemotivatedtowardscommittingcybercrimeistomakequick
andeasymoney.
2.Revenge:Somepeopletrytotakerevengewithother
person/organization/society/casteorreligionbydefamingitsreputationor
bringingeconomicalorphysicalloss.Thiscomesunderthecategoryofcyber
terrorism.
3.Fun:Theamateurdocybercrimeforfun.Theyjustwanttotestthelatesttool
theyhaveencountered.
4.Recognition:Itisconsideredtobeprideifsomeonehackthehighlysecured
networkslikedefensesitesornetworks.

25. 5.Anonymity-Manytimetheanonymitythatacyberspaceprovidemotivatesthe
persontocommitcybercrimeasitismucheasytocommitacybercrimeover
thecyberspaceandremainanonymousascomparedtorealworld.Itismuch
easiertogetawaywithcriminalactivityinacyberworldthanintherealworld.
Thereisastrongsenseofanonymitythancandrawotherwiserespectable
citizenstoabandontheirethicsinpursuitpersonalgain.
6.CyberEspionage:Attimesthegovernmentitselfisinvolvedincyber
trespassingtokeepeyeonotherperson/network/country.Thereasoncould
bepolitically,economicallysociallymotivated.
Reasons for Commission of Cyber Crimes

26. Types of Cyber Crimes
1.crimesagainstpeople(cyberharassment,distributionofchild
pornography,creditcardfraud)
2.crimesagainstproperty(hacking,virustransmission,copyright)
3.crimesagainstthegovernment(accessingconfidentialinformation,
cyberwarfare,piratedsoftware).

27. Example of Cyber Crime
Agangofcriminalsisactiveoverthecyberspace,whichsteelsthecreditcarddataofthe
cardholdersfromthePOSatshoppingmalls,petrolpumps,resturents,hotels,etc.anduse
thesecardstobookairticketsonline.Accordingtothereports,over15000creditcards
werefraudulentlyusedbythesecriminalstobookonlineticketswhichaccountfor
approximatlyRs.17crorerevenueloss.Thesecriminalsusepublicinfrastructurelike
cybercafe,etc.tobooktheseticketssothatitisdifficulttotracethem.Thefraudcameto
thenoticewhenthecustomerswhowerechargedforbookinganairticketandthese
customersreportedatthecardissuingbanksclamingthattheseticketswerenever
bookedbythem.

29. •TheInternetisavastnetworkof
independently-managednetworks.
•WhodecidesontheStrategicguidelinesand
developmentsoftheinternet?
•Nosingleindividual,company,organization
orstatedecidesalone.
•Theinternetreliesonmulti-stakeholder
cooperationknown as “Internet
Governance”.
•Agroupofactorsthatworktogetherat
nationallevelandinternationallevelintheir
respectiverole.
16

30. 17

31. 18

32. •TheInternetGovernanceForum(IGF)networkisamultistakeholder
policyplatform,initiatedbytheUnitedNationswiththeaimof
exchanginginformationandsharinggoodpoliciesandpractices
relatingtotheInternetandtechnologies.
•Itbringstogetherrepresentativesofvariousstakeholdersandsocial
groupsononlinegovernance,inparticulargovernments,theprivate
sectorandcivilsociety,includingthetechnicalandacademic
community,andpromotesdialogueandpolicy-making
internationally.
38

33. 69

34. •Itistheartortechniqueoffindingandexploiting
security loopholesinasystem.
Hacking
EthicalHacking UnethicalHacking
40

35. •EthicalHacking:
Whenahackerhelpsorganizationsorindividualswith
findingsecurityloopholesandfixingthemwiththeir
permission,itisreferredtoasethicalhacking.
•UnethicalHacking:
Whenahackeruseshisknowledgetostealfromor
causedamagetootherpeople,itisknownas
unethicalhacking
41

36. Hackers
BlackHatHackers WhiteHatHackers
GreyHatHackers
•Ahackerisapersonwhobreaksintoacomputer
system

37. •Acriminalwhousesandmanipulatestechnology
withviciousandoftenillegalintentandfortheir
personalprofit.
•Theyaresometimescalledcrackers.
Whydotheydoit?
•Makemoneybyillegalmeans.
•Sellsensitivedata
•Noterietyandfameamoungstotherhackers
43

38. •Theyarealsocalledpenetrationtester.
•Theypurposelyattempttohackclient
systemstofindweaknesseswhichthey
thenreporttotheircompany.
•Theyarehiredbybusinessestohandle
cybersecurity.
44

39. •Ahackerthatisnotnecessarily
maliciousbutblursthelinebetween
blackandhathacker.
•Theyusetheirtalentsinthesameas
whitehathackersbutwithoutthe
permissionoftheircompany.
•Once they discover weaknesses they
willoffertosellthembacktothe
hacked party..
45

40. Hacker Cracker
Peoplewhogainunauthorized
accesstocomputersystemfor
knowledgeortodiscover
Someone who breaks into
computers , often does harmful
thingssuchasstealcredentials.
Doesnotworkagainstlawand
does not damage data
intentionally
Workagainstthelawand
damagesdataintentionally
ReferredasWhiteHats ReferredasBlackHats
Havegoodethics,improveand
makesystemadvance.
Havepoorethics,shutdownor
Harmsystems 46

41. What cause vulnerabilities
•Vulnerabilitiescanarisefromawidevarietyofsources.
•Misconfigurations,bugs,orunauthorizedusearemorelikelyincomplexsystems.
•Consistency−Attackersmaybeabletopredictandexploitflawsinwidelyused
code,operatingsystems,hardware,andsoftware.
•Connectivitymakesgadgetsmoresusceptibletosecurityflaws.
•Weakorrepeatedpasswordsincreasetheriskofmultipledatabreaches.
•OperatingSystemFlaws−Operatingsystemsarenotimmunetohavingproblems.
Operatingsystemsthataren'tproperlyprotectedbydesignare
vulnerabletovirusesandmalwaresincetheyprovideusers
unrestrictedaccess.

42. •Spywareandadware-thatmaybeautomaticallyplacedoncomputerscanbefound
allovertheinternet.
•BugsinSoftwareDevelopment-Itisnotuncommonforprogrammersto
inadvertentlyintroduceasecurityflaw.
•Uncheckeduserinput−Ifapieceofsoftwareorawebsitetreatsalluserinputas
trustworthy,itmayexecuteanaccidentalSQLinjection.
•Mostcompaniesfacetheirgreatestsecurityriskfromtheiremployees,making
socialengineeringatopconcern.Thissuggeststhatpeoplecanbeamajor
sourceofdanger.
What cause vulnerabilities

43. Vulnerability
•Vulnerabilitiesareweaknessesinasystemthatgivesthreatstheopportunityto
compromiseassets.Allsystemshavevulnerabilities.Eventhoughthetechnologiesare
improvingbutthenumberofvulnerabilitiesareincreasingsuchastensofmillionsoflines
ofcode,manydevelopers,humanweaknesses,etc.
•TypesofVulnerabilities
1.HardwareVulnerability
2.Software Vulnerability
3.Network Vulnerability
4.Procedural Vulnerability

44. Hardware Vulnerability
•A hardware vulnerability is a weakness which can used to attack the system
hardware through physically or remotely.
•Forexamples:
1.Oldversionofsystemsordevices
2.Unprotectedstorage
3.Unencrypteddevices,etc.

45. Software Vulnerability
•A software error happen in development or configuration such as the execution
of it can violate the security policy.
•For examples:
1.Lack of input validation
2.Unverified uploads
3.Cross-site scripting
4.Unencrypted data, etc.

46. Network Vulnerability
•A weakness happen in network which can be hardware or software.
•For examples:
1.Unprotected communication
2.Malware or malicious software (e.g.: Viruses, Keyloggers, Worms,
etc)
3.Social engineering attacks
4.Misconfigured firewalls

47. Procedural Vulnerability
•A weakness happen in an organization operational methods.
•For examples:
1.Password procedure –Password should follow the standard password
policy.
2.Trainingprocedure–Employeesmustknowwhichactionsshouldbetaken
andwhattodotohandlethesecurity.Employeesmustneverbeaskedfor
usercredentialsonline.Maketheemployeesknowsocialengineeringand
phishingthreats.

48. •Acyberorcybersecuritythreatisa
maliciousactthatseekstodamagedata,
stealdata,ordisruptdigitallifeingeneral.
•Thepossibilityofamaliciousattemptto
damageordisruptacomputernetworkor
system.
63

49. 64

50. •Malwarestandsfor“MaliciousSoftware”andit
isdesignedtogainaccessorinstalledintothe
computerwithouttheconsent(permission)of
theuser.
•Malwareisdefinedascodewithmaliciousintent
thattypicallysteals,encryptordestroy
sensitivedata,attackingorhijackingcore
computingfunctionsandmonitoringusers’
computeractivity.
•Theyperformunwantedtasksinthehost
computerforthebenefitofathirdparty.
65

51. •Thereisafullrangeofmalwareswhichcanseriouslydegrade
theperformanceofthehostmachinebydeletingor
corruptingfiles.
•Firstmalware(MorissWarm)willbecomeonpictureonNov
2,1988.Nowthatisinstalledonfloppydiskandkeptina
museum.
66

52. •Virus
•Worms
•Trojanhorse
•Spyware
•Adware
•Scareware
•BrowserHijackingsoftware
67

53. •Virusdesignedtomakeself-replicate.
•Avirusisamaliciouscodewrittento
damage/harmthehostcomputerbydeletingor
appendingafile,occupymemoryspaceofthe
computerbyreplicatingitsowncopyofthecode,
slowdowntheperformanceofthecomputer,
formatthehostmachine,etc.
•Byreplication,RAMorDiskspacewillbefull
andsystemperformancedecreased.
25

54. •Warmscanreplicatethemselveslike
Virus.
•Theydoesnotrequirehumaninterventionto
traveloverthenetworkandspreadfromthe
infectedmachinetothewholenetwork.
•Wormscanspreadeitherthroughnetwork,
usingtheloopholesoftheOperatingSystem
orviaemail.Thereplicationandspreadingof
thewormoverthenetworkconsumesthe
networkresourceslikespaceandbandwidth
andforcethenetworktochoke.
69

55. •Trojanhorseisamaliciouscodethatisinstalledin
thehostmachinebypretendingtobeuseful
software.
•Theuserclicksonthelinkordownloadthefile
whichpretendstobeausefulfileorsoftwarefrom
legitimatesource.
•Itnotonlydamagesthehostcomputerby
manipulatingthedatabutalsoitcreatesa
backdoorinthehostcomputersothatitcouldbe
controlledbyaremotecomputer.
•Trojensneitherinfecttheothercomputersin
thenetworknordotheyreplicate.
70

56. •Itisaspecialtypeofwhichisinstalledinthetarget
computerwithorwithouttheuserpermission
andisdesignedtostealsensitiveinformationfrom
thetargetmachine.
•Mostlyitgathersthebrowsinghabitsoftheuserand
thesendittotheremoteserverwithoutthe
knowledgeoftheownerofthecomputer.
71

57. •Itisaspecialtypeofmalwarewhichisusedfor
forcedadvertising.Theyeitherredirectthepage
tosomeadvertisingpageorpop-upanadditional
pagewhichpromotessomeproductorevent.
•Theseadwarearefinanciallysupportedbythe
organizationswhoseproductsareadvertised.
72

58. •Itismalicioussoftwarewhichinstallonsystem
withoutuserpermissionandencryptorlockthe
data.
•Ithasevenchangedthewayhowthecriminal
targetthepeopleforransom.
•Themaliciouscodecanneitherbeuninstallednor
canthecomputerbeusedtilltheransomispaid.
73

59. •Itismalicioussoftwarewhichusuallycomeswith
thebrowseraddonoverextension.
•Ithijacksthesettingofallbrowserslike
Homepage,Newtabanddefaultsearch
engine.
74

60. •Bymailattachments(SpamMail).
•Bydownloadingcrackedversion.
•Byvisitinguntrustedwebsites.
•Byclickingadds.
75

61. •AvoidclickingonuntrustedLinks.
•Avoiddownloadingattachmentsfromunknownsenders.
•Installupdatesregularlytomakeyoursystemuptodate
andtosolvesecuritypatches.
•Useantivirussoftware.
•Useupdatedfirewall.
76

62. •Phishingisanonlinescam where
criminalssendfraudulentemailstothe
organization,user,andmoretocollect
sensitiveinformation.
•Mostly,thishappensthroughalinksent
byanunknown emaildomain.
Clickingthelinkscontainedinsuch
emailscanputallyourdataisatrisk.
•Theseemailscanalsoleadtomonetary
losses.Theintentionscanvaryfromone
phishingmailtoanother,butonething
isguaranteedi.eloss.
77

63. •Neverentersensitiveinformation(likebankdetails,
emailIdorPassword)toawebpagethatyoudon’ttrust.
•AlwaysbecarefullookattheURL.
78

64. •Itisanattempttoobtainordecrypta
user’spasswordforillegaluse.
•Hackerscanusecrackingprograms,
dictionaryattacksandpasswordsniffersin
passwordattacks.
•Example:AccessBankdetails
79

65. •BruteForceAttacks:Inthisattack,hackerloggedinwith
possiblepasswordcombinations.
•DictionaryAttack:Inthisattack,hackerloggedinby
cyclingthroughthecombinationofcommonwords.Theywill
trythosepossibilitieswhicharemostlikelytosucceed.
•KeyloggerAttacks:Ahacker,capturesthekeystrokestyped
onkeyboardandsavesthesekeystrokesinafile,includingthe
detailsliketheusernamesandpasswordsyouentered,credit
carddetails,websitesyouhavevisited,theapplicationsyou
opened,andsoon.
80

66. •Updatepassword
•Updatepasswordsinregularintervals.
•Passwordshouldnotbethesameforeverything.
•Enforcestrongpasswordpolicies
•Whensettingpassword,bestpracticesshouldbefollowedwithagenerous
useofalphanumeric.
•Enable MultifactorAuthentication
•Itinvolvesuseofpasswordwithextrasecuritychecks.E.g.,One-Time
Password(OTP),biometricauthentication,softwaretokens,andbehavioral
analysis.
•UseNoDictionary
•It’salwaysagreatideatouseapasswordthatmakesnosenseforpasswords.
81

67. •John theripper
•Hydratool:
•Hashcat
•Mesusa
•CeWLtool:
•Cain&Abel
•Ophcrack
•ncrack etc
39

68. •Botnetsareworkhorsesofthe
internet.
83
•Abotnetisanumberofinternet-
connecteddevices,eachofwhich
runsoneormorebots.
•Abotnetisnothingmorethana
connectedcomputerscoordinated
togethertoperformatask.

69. •DDosstandsfordistributeddenialofserviceattack.
•Itisacyberattackonaspecificserveror network.
84

70. •AnintendedpurposeofDDoSistodisruptingnormal
operation.
•Itfloodingthetargetwithaconstantfloodoftrafficto
degradetheperformance.
•Itdownsthewebanddeniesorslowdowntheserviceof
ournetwork.
85

71. •DOS:Itisadenialofserviceattack,in
thisattackacomputersendsamassive
amountoftraffictoavictim’scomputer
andshutsitdown.
•Dosattackisanonlineattackthatis
usedtomakethewebsiteunavailable
foritsuserswhendoneonawebsite.
•DDoS:DDoSmeansdistributeddenial
ofserviceinthisattackdosattacksare
donefrommanydifferentlocations
(distributed)usingmanysystems.

72. •Ahackercreateabotnetofdevicesbyinstallingmalwareson
compromisedmachinesandcreatebotnetfarmtodoDDoS
attackuponhackersinstruction.
•Atparticulartime,thesebotsorzombiefloodthetarget
machinewithcontinue(overwhelmed)requeststhatput
serversystemtocrash.
•Zombiepc:Itisacomputerthatcarriesoutactionsunder
remotecontrol(byhacker),withouttheactualuserintending
thistohappen. 87

73. •Competitiveadvantageagainstrivalbusiness.
•Ransomdemandsforreleasingdata.
•ForstressTestonnetwork.
88

74. •Volumeattack
•Involumeattack,attackersoverflowthewebsitewithmalicious
traffic.
•ThisattackisinitiatedbyforwardingahugenumberofUDP,ICMP
and HTTP(GETandPOST)floodpackets.
•Inthisattackcontinuouslyrequestscanbeensendcalledpings.
•Volumeattacksconsumetousethebandwidthoftargetand
internetnetworks.
89

75. •Protocolattack
•Protocolornetwork-layerDDoSattackssendlargenumbersof
packetstotargetednetworkinfrastructuresandinfrastructure
managementtools.
•Protocolattacksmainlyutilizelayers3and4oftheprotocol
stacktomakethetargetnotbeenaccessed.Theseattacks
consumethestatecapacityofwebservers,firewallsandload
balanceretc.
•Protocolassaults,alsoknownasstate-exhaustionattacks,disrupt
servicebyconsumingtoomanyserversandnetwork
equipmentresources.
90

76. •Applicationlayerattack:
•Thisattackislowandslow.
•ApplicationattacksSomeofthemoresophisticatedDDoSattacks,
theseexploitweaknessesintheapplicationlayerbyopening
connectionsandinitiatingprocessandtransactionrequeststhat
consumefiniteresources.
•DDoSattacksontheapplicationlayerdonottargetnetwork
bandwidth.Rather,theseattacksfocusontheapplicationlayer7of
theOSImodelhostingtheservicethatend-usersarebrowsing.
•Theslow-ratecyberattacksareaimedatthelayerthatproduces
webpagesonthedomaincontrolleranddeliverstheminresponseto
HTTP.
48

77. •TrafficAnalysistodetectanyunusualtrafficonnetwork.
•Trafficcontrolbyemployloadbalancers(reroutetraffictoother
serversandpreventanyoneservertofailure)and firewalls(blocks
unwantedtraffic).
•Detectanattackearly(byfilteringthetraffic)andmitigatethe
damagebeyondthat.
•SwitchtocloudserviceproviderslikeAWSandAzure.
•Allocatemorebandwidthtopreventcloggingofdata.
49

78. •GoldenEye
•Slowloris
•LOIC(LowOrbitIonCannon)
•HOIC(HighOrbitIonCannon)
•THC-SSL-DoS
•HULK(httpUnbearableLoadKing)
•Pyloris
•TOR'sHammer
•XOIC
•RUDY(RUDeadYet?)
•DAVOSET
•OWASPHTTPPOST
50

79. •Aman-in-the-middleattack(MITMattack)isacyberattackwhere
anattackerrelaysandpossiblyalterscommunication
betweentwopartieswhobelievetheyarecommunicating
directly.Thisallowstheattackertorelaycommunication,listenin,
andevenmodifywhateachpartyissaying.
•Man-in-the-middleattacksenableeavesdroppingbetween
people,clientsandservers.
•ThiscanincludeHTTPSconnectionstowebsites,
otherSSL/TLSconnections,Wi-Finetworksconnectionsandmore
OWASPHTTPPOST
94

80. 95

81. •Publicnetworks
Publicwificonnectionwithnoaccessrestrictionismostrisky.
•Onyourcomputer
Malwareonyoursystemcanmonitorsandmodifiestheinternet
connection.
•Router
Routerssuppliedbyinternetserviceprovidermayhavedefault
security(logincredential)settingsorhaveoutdatedfirmware.
•WebServer
Attackergainsaccesstothegenuinewebserveryouintendedto
communicatewith.
96

82. •UseaVirtualPrivateNetwork
VPN connection can mask IP address by bouncing it through a private
server.Andencryptwebdata.
•Forceencryption
Accessonly HTTPSwebsites
•Usestrongroutercredentials
Tochangedefaultsecurity credentialofrouters.
97

83. •Makesure yourcompanyhasasoftwareupdatepolicy
Togettheupdatedsecuritypatch.
•Adoptazero-trustsecuritymodel
Itisrequiringyourcolleaguestoauthenticatethemselveseachtime
theyconnecttoyournetwork.
•Preventcookiestealing
Donotsavecreditcarddetails toanyshoppingsitetoprotectyourself.
98

84. •Malvertising,or
99
maliciousadvertising,isthetermfor
advertisementswithincriminallycontrolled
connectedprograms,usuallywebbrowsers,
Internet
which
intentionallyharmpeopleandbusinesseswithallmannerof
malware,potentiallyunwantedprograms(PUPs),andassorted
scams.
•Itisagrowingproblem,asisevidencedbyarecentUS
Senate report,andtheestablishmentofbodieslikeTrustin
Ads.

85. 100

86. 101

87. •ByusingAd-blocker
•Byusingregularsoftwareupdates
•Commonsensetoavoidanyscam
102

88. •Adrive-bydownloadattackreferstotheunintentional
downloadofmaliciouscodetoyourcomputerormobiledevice
thatleavesyouopentoacyberattack.
•Youdon'thavetoclickonanything,pressdownload,oropena
maliciousemailattachmenttobecomeinfected.
103

89. 61

90. •Hijackdevice.
Tobuildabotnet,infectotherdevices,orbreachyoursfurther.
•Spyonactivity.
Tostealyouronlinecredentials,financialinfo,oridentity.
•DamageyourData
Tosimplycausetrouble
•Disabledevice
Topersonallyharmyou. 62

91. •Donotclickonuntrustedlinks orvisituntrustedwebsite.
•Keepyoursystem updatedwithrecentpatches.
•Configureaproperfirewallonyoursystem.
•Useanti-malwareprogramsfromtrustedsourcesandupdate
themregularly.
•Carefullyreadandexaminesecuritypopupsontheweb
before clicking.
•Bewaryofkeepingtoomanyunnecessaryprogramsandapps.
•Useanad-blocker.
106

92. •Rogue(dishonest)softwareisintroducedinadevicewithan
intention tocauseharm.
•Roguesecuritysoftwareisaformofmaliciousorunwanted
softwareandinternetfraudthatmisleadsusersintobelievingthere
isavirusontheircomputerandaimstoconvincethemtopayfora
fakemalwareremovaltoolthatactuallyinstallsmalwareontheir
computer.
•Itisaformofscarewarethatmanipulatesusersthroughfear,anda
formofransomware.
•Itmisleads usersintobelievingthatthereisavirusontheir
computer andmanipulatesthemintopayingmoneyforafake
removal tool.
107

93. •Roguesoftwarehasbeenaserioussecuritythreatindesktop
computingsince2008.
FeaturesofRogueSoftware:
•MimicsAnti-malware(Itmimicsscan,alertofthreatslikeantivirus)
•ConstantFalseAlerts(Floodingtheirdesktopwithendlessmessages)
•RequiresExtraPayments(Asksforpaymentbygivingreportsofinfections)
•ModifiesActualSecuritySoftware(Putchokeholdonotheranti-virus
applications)
•FreezesEntireComputer(Createpop-upstogetoverwhelmedsystem)
108

94. 109

95. •Bydownloadingtheprogramthroughavarietyoftechniques,
•Adsofferingfreeortrailversionsofsecurityprograms.
•PutsinfectedwebsiteasthetophitsbymanipulatingSEO
ranking.
110

96. •UpdatedFirewall
•Useefficientandwell-knownAntivirus
•GeneralDistrust
•Smart Clicking
111

97. •Cyberwarfareistheuseoftechnologytoattackanation,
causingcomparableharmtoactualwarfare,disruptionofvital
computersystemsandlossoflife.
112

98. Military
•Itisinthemilitary’sbestintereststogaincontrolofkey
elementsofanenemy nation’scyberspace.An
effectivecyberattackcouldbringanenemycountry’smilitaryto
itskneesandsecurewhatwouldhavebeenanotherwisecostly
victory.
Civil
•Attackingthecivilinfrastructureofanationdirectlyimpactsthe
peoplelivingandworkinginthecountry.Thiscouldbeused
toinspirefearorcausethemtorevoltagainstthegovernmentin
protest,weakeningtheopponentfromapoliticalstandpoint.113

99. Hacktavism
•Hacktivisminvolveshackersusingcyberattackstopromoteanideology.
Hacktivistscanengageincyberwarfarebyspreadingpropagandaor
goingaftersecretsandthenexposingthemtotherestoftheworld.Inthese
ways,hacktivistscanweakenanopponent’sstandingontheworld
stage,precludingsupportfromothercountries.
IncomeGeneration
•Cyberwarfare“soldiers”canengageinthesekindsofattacksfortheir
ownfinancialbenefit.Iftheyareemployedbythegovernment,theycan
earnafeefortheirservices.Further,theycouldbreakthedefensesofa
financialinstitutionandstealmoneyforthemselves.
79

100. NonprofitResearch
•Nonprofitresearchoftenrevealsveryvaluableinformation
thatacountrycanusetosolveacriticalproblem.
•Forexample,ifacountryistryingtodevelopavaccineand
anotheronealreadyhasit,cyberwarfarecouldbeusedto
stealinformationpertainingtotheirsolution.
115

101. •Itiscrimesofterrorismwhichoccurelectrically.
•CyberTerrorismisbasicallytheprocessofcausingharmtothecommunity
bymakinguseofInternetnetworkstoconductviolentincidentslikelossof
lifeordata,toachievesomepoliticaladvantagebygivingthreats.
•Acyberterrorismattackismuchmoreharmfulthananormalcybercrime
becausetointentionalharmtothevictimsanditmaynotcausefinancial
damagetocausefearinsociety.
•Inmostcases,thecriminalstargetthebankingindustry,militarypower,
nuclearpowerplants,airtrafficcontrol,andwatercontrolsectorsfor
makingacyberterrorismattackforcreatingfear,criticalinfrastructure
failure,orforpoliticaladvantage.
116

102. Cyber Espionage
•Cyber espionage (cyberespionage) is a type of cyber attack that malicious hackers carry
out against a business or government entity.
•The goal of cyber espionage, also referred to as cyber spying, is to provide attackers
with information that gives them advantages over rival companies or governments.
•Cyberspiestry to gain access to the following resources:
1.Data and activities related to research and development
2.IP related to academic research, such as product specifications or designs
3.Salaries, compensation structures, and other sensitive financial and operational data of
the organization
4.Lists of clients or customers and payment methods
5.Corporate objectives, strategic plans, and marketing strategies
6.Strategies, allegiances, and communications in politics
7.Military information

103. Difference between Cyberwarand
Cyberespionage
•The terms cyber espionage and cyberwarfareare similar, but they are not the same.
•The biggest difference is that the primary goal of a cyberwarfareattack is to disrupt the
activities of a nation-state, while the primary goal of a cyber espionage attack is for the
attacker to remain hidden for as long as possible in order to gather maximum
intelligence.
•Even though cyber espionage and cyberwarfareare two distinct concepts, they are often
used together.
•For example, cyber espionage can be used to build intelligence that will help a nation-
state prepare for a physical or cyberwar.

104. Need for a Comprehensive Cyber Security Policy:
RationaleforaComprehensiveCyberSecurityPolicy:
Theincreasingfrequencyandsophisticationofcyberattackshighlightthecriticalneedfor
organizationstoestablishcomprehensivecybersecuritypolicies.
Acomprehensivepolicyensuresthatallaspectsofanorganization'sdigitalenvironmentare
adequatelyprotected,fromnetworksandsystemstodataandpersonnel.
Ithelpsmitigaterisks,maintainoperationalcontinuity,safeguardcustomertrust,andcomply
withregulatoryrequirements.

105. Elements of an Effective Cyber Security Policy:
ThreatAssessmentandRiskManagement:
Organizationsmustconductthoroughassessmentstoidentifypotentialcyberthreatsandvulnerabilities.
Riskmanagementinvolvesevaluatingtheimpactandlikelihoodofthreatsanddecidinghowtomitigate,
transfer,oracceptthoserisks.
Thiselementhelpsorganizationsallocateresourceseffectivelyandprioritizesecuritymeasures.
IncidentResponseandRecoveryPlans:
Incidentresponseplansoutlinethestepsanorganizationshouldtakeintheeventofacyberincident,such
asadatabreachorcyberattack.
Theseplansdetailrolesandresponsibilities,communicationstrategies,containmentprocedures,and
recoveryprocesses.
Havingawell-definedplanminimizesdamage,reducesdowntime,andhelpsanorganizationresume
normaloperationsswiftly.

106. Elements of an Effective Cyber Security Policy:
EmployeeTrainingandAwareness:
Employeesareoftenthefirstlineofdefenseagainstcyberthreats,buttheycanalsobevulnerabilitiesif
unawareofbestpractices.
Comprehensivepoliciesemphasizeongoingemployeetrainingandawarenessprogramstoeducatestaff
aboutsecurityrisks,phishing,safebrowsing,andsocialengineering.
Educatedemployeescontributetoastrongsecuritycultureandpreventunintentionalsecuritybreaches.
CollaborationwithLawEnforcement:.
Incasesofcybercrimesorseriousincidents,collaborationwithlawenforcementagenciesiscrucial.
Comprehensivepoliciesestablishprotocolsforworkingwithlawenforcementtogatherevidence,
prosecutecybercriminals,andrecoverstolenassets.
Suchcollaborationenhancesthelikelihoodofsuccessfulcybercrimeinvestigationsandconvictions.

107. Case Studies:
TheImpactofComprehensivePolicies:
Real-worldexamplesoforganizationsthathavesuccessfullyimplementedcomprehensivecyber
securitypoliciescanhighlightthebenefits.
Youcoulddiscussinstanceswherepoliciesledtoeffectivethreatdetection,timelyincident
response,andminimizeddamage.
Casestudiescanalsodemonstratethefinancialandreputationalrepercussionsoflackinga
comprehensivepolicy.

108. Need for an International Convention on Cyberspace:
TheGlobalNatureofCyberspace:
Cyberspacetranscendsgeographicalboundariesandconnectspeople,organizations,and
governmentsworldwide.
Digitalinteractionsoccuracrossjurisdictions,makingitchallengingtoaddresscyberthreats
solelythroughnationalregulations.
Theinterconnectednatureoftheinternetunderscorestheneedforinternationalcooperation
toensuresecurityandstability.
ChallengesinRegulatingCyberspaceInternationally:
Nationallawsandregulationsoftenstruggletoaddresscyberthreatsthatoriginateortraverse
multiplecountries.
Attributionofcyberattackscanbecomplexduetotheuseofanonymizingtechnologiesandtacticsthat
maskthetrueoriginsofattacks.
Disparitiesinlegalsystems,culturalnorms,andpoliticalinterestsamongnationshinderuniform
enforcementofcyberregulations.

109. Need for an International Convention on Cyberspace:
BenefitsofanInternationalConvention:
Aninternationalconventiononcyberspacewouldprovideastandardizedframeworkforaddressingcyber
threatsonaglobalscale.
Itwouldfacilitatecollaborationamongnations,leadingtoconsistentregulations,cooperativecybercrime
investigations,andsharedthreatintelligence.
Aconventioncouldenhancethepredictabilityofinternationalresponsestocyberincidentsandpromote
stabilityincyberspace.
EffortsandInitiativestowardsInternationalCybersecurityCooperation:
Variousinternationalorganizations,suchastheUnitedNations,haveinitiateddiscussionsoncyberspace
regulationsandnorms.
TheBudapestConventiononCybercrime,adoptedbytheCouncilofEurope,aimstoharmonizelawsand
facilitateinternationalcooperationincombatingcybercrime.
InitiativesliketheGlobalForumonCyberExpertise(GFCE)andtheParisCallforTrustandSecurityin
Cyberspacedemonstrateeffortstobuildconsensusamonggovernments,industry,andcivilsociety.