Skip to content

Cyber Security: Complete Notes for Students and Competitive Exams

Cyber Security is the practice of protecting computers, networks, applications, devices, and data from unauthorised access, misuse, damage, disruption, or theft.

These notes explain the most important Cyber Security concepts, including security principles, cyber attacks, malware, cryptography, authentication, network security, firewalls, and cyber laws.

1. Introduction to Cyber Security

People use computers, smartphones, cloud services, and the Internet for banking, education, communication, shopping, healthcare, and business. As more information is stored and shared digitally, protecting that information becomes increasingly important.

Cyber Security is not limited to antivirus software. Effective security combines technology, secure processes, responsible user behaviour, monitoring, backups, and incident-response planning.

Why Cyber Security Is Important

  • Protection of sensitive data: Helps prevent unauthorised access to personal, financial, and organisational information.
  • Business continuity: Reduces the impact of incidents that interrupt important services.
  • Privacy protection: Helps ensure personal information is handled appropriately.
  • Financial protection: Reduces risks associated with fraud, ransomware, and account compromise.
  • Trust: Strong security practices help organisations maintain the confidence of customers and partners.

Major Areas of Cyber Security

  • Network Security
  • Application Security
  • Information and Data Security
  • Identity and Access Management
  • Cloud Security
  • Operational Security
  • Security Awareness and Training
  • Backup, Recovery, and Incident Response

2. Fundamental Principles of Cyber Security

The best-known Cyber Security model is the CIA Triad. CIA stands for Confidentiality, Integrity, and Availability.

The CIA Triad

Principle Meaning Example
Confidentiality Information should be available only to authorised people or systems. Using access controls and encryption to protect customer records.
Integrity Information should remain accurate, complete, and protected from unauthorised modification. Preventing unauthorised changes to bank-account balances.
Availability Authorised users should be able to access systems and data when needed. Using backups and redundant systems to reduce service downtime.

Other Important Security Principles

  • Authentication: Verifying the identity of a user, device, or system.
  • Authorization: Deciding what an authenticated user is allowed to access or do.
  • Accountability: Keeping records that help identify which user or system performed an action.
  • Non-repudiation: Providing evidence that makes it difficult for a party to falsely deny an action or communication.
  • Least Privilege: Giving users and applications only the access they need to perform their work.
  • Defense in Depth: Using multiple layers of security controls instead of relying on one protection mechanism.
Remember: Authentication answers “Who are you?” while authorization answers “What are you allowed to do?”

3. Threats, Vulnerabilities, and Risks

A threat is a potential event or activity that can harm a system. A vulnerability is a weakness that a threat may exploit. Risk is the likelihood and possible impact of a threat exploiting a vulnerability.

Term Meaning Example
Threat A possible cause of harm to a system or its data. A phishing campaign targeting employees.
Vulnerability A weakness in software, hardware, configuration, or human behaviour. An unpatched application or a weak password.
Risk The chance and potential impact of a threat exploiting a vulnerability. Loss of data after an attacker accesses an account with a reused password.

Common Sources of Threats

  • External threats: Attackers outside an organisation, such as phishing groups or cybercriminals.
  • Internal threats: People who already have access to systems and misuse it intentionally or accidentally.
  • Human error: Mistakes such as sending sensitive data to the wrong recipient.
  • Organised cybercrime: Planned attacks motivated by financial gain, disruption, or data theft.
  • Natural or technical failures: Power failures, hardware faults, and software defects can also affect availability.

4. Common Cyber Attacks

A cyber attack is an intentional attempt to gain unauthorised access, steal information, disrupt a service, or compromise a computer system.

  • Phishing: Deceptive emails, messages, calls, or websites used to persuade people to reveal information or take an unsafe action.
  • Distributed Denial-of-Service (DDoS): Overwhelming a service with traffic or requests so legitimate users cannot access it easily.
  • Man-in-the-Middle Attack: An attempt to intercept or alter communication between two parties.
  • SQL Injection: Malicious input intended to interfere with database queries. Parameterised queries and input validation are important defences.
  • Cross-Site Scripting (XSS): An attempt to make a web application deliver unsafe script content to other users.
  • Zero-Day Attack: An attack exploiting a previously unknown vulnerability or one for which no effective patch is yet available.
  • Social Engineering: Psychological manipulation used to persuade people to share information or perform unsafe actions.
  • Password Attack: Attempts to obtain, guess, reuse, or steal account credentials.

Basic Ways to Reduce Risk

  • Keep operating systems, browsers, applications, and devices updated.
  • Use long, unique passwords or passphrases for every important account.
  • Use a password manager where appropriate.
  • Enable multi-factor authentication.
  • Verify unexpected links, attachments, messages, and payment requests.
  • Back up important information regularly and test the recovery process.
  • Apply least-privilege access controls.
  • Provide security-awareness training to users.

5. Malware

Malware means malicious software. It is designed to damage systems, steal information, disrupt services, spy on users, or perform other unauthorised activities.

Malware Type Description
Virus Attaches to files or programs and may spread when the infected host is executed.
Worm Can replicate and spread across systems or networks without attaching to a host file.
Trojan Disguises itself as legitimate or useful software to trick users into running it.
Ransomware Encrypts, steals, or blocks access to data and often demands payment.
Spyware Secretly collects information about a user or device.
Adware Displays unwanted advertisements and may create privacy or security concerns.
Rootkit Attempts to hide malicious activity and maintain privileged access to a system.
Virus vs Worm: A virus usually depends on an infected file or program, while a worm is designed to replicate and spread independently.

6. Cryptography

Cryptography uses mathematical techniques to protect information and communications. It supports secure websites, online banking, messaging, digital signatures, and many other services.

Basic Cryptography Terms

  • Plaintext: Original readable information.
  • Ciphertext: Information after encryption.
  • Encryption: Transforming plaintext into ciphertext.
  • Decryption: Recovering plaintext from ciphertext using the appropriate key.
  • Key: Information used by a cryptographic algorithm.
  • Hash Function: Produces a fixed-size digest from data and is commonly used to support integrity checks.
  • Digital Signature: A cryptographic mechanism that can help verify origin, integrity, and non-repudiation.

Symmetric and Asymmetric Cryptography

Symmetric Cryptography Asymmetric Cryptography
Uses the same shared secret key for encryption and decryption. Uses a related public key and private key.
Usually faster for encrypting large amounts of data. Usually has more computational overhead.
Securely sharing the secret key is an important challenge. The public key can be shared openly while the private key remains secret.
Example: AES. Examples: RSA and elliptic-curve cryptography.

Modern secure systems often use both approaches. Public-key cryptography can help establish or protect a shared secret, while symmetric cryptography efficiently protects the actual data transfer.

7. Important Cryptographic Algorithms

  • AES: Advanced Encryption Standard. A modern symmetric encryption standard widely used to protect data.
  • RSA: A public-key algorithm historically used for encryption and digital signatures.
  • ECC: Elliptic Curve Cryptography. Provides strong security with smaller key sizes than many traditional public-key systems.
  • Diffie-Hellman: A key-agreement method used to establish a shared secret over an insecure channel. It is not itself an encryption algorithm.
  • SHA-2 and SHA-3: Families of cryptographic hash functions used for integrity-related purposes.
  • HMAC: A keyed mechanism used to verify message integrity and authenticity.
Important: DES is insecure and should not be used in new systems. Triple DES and older algorithms such as Blowfish are legacy technologies; modern designs generally use well-supported, current standards such as AES and modern TLS configurations.

8. Network Security

Network Security protects network infrastructure, connected devices, and the information travelling between systems. It uses technology, policies, monitoring, and secure configuration.

  • Firewall: Controls network traffic according to configured security rules.
  • Intrusion Detection System (IDS): Monitors activity and alerts administrators about suspicious behaviour.
  • Intrusion Prevention System (IPS): Can detect suspicious traffic and take action to block it.
  • Virtual Private Network (VPN): Creates an encrypted connection over a network for supported use cases.
  • Network Segmentation: Divides a network into smaller zones to limit the impact of an incident.
  • Access Control: Determines which users and systems may access specific resources.

Defense in Depth

Defense in depth means using several layers of security. If one control fails, another control may still reduce the likelihood or impact of an incident.

  • Physical Security
  • Network Security
  • Endpoint Security
  • Application Security
  • Identity and Access Controls
  • Data Protection
  • Monitoring and Incident Response
  • Backup and Recovery

9. Security Protocols

Protocol or Standard Purpose
TLS Protects data exchanged between applications. HTTPS uses TLS to secure communication between browsers and web servers.
IPsec Protects IP communications and is commonly used in VPN technologies.
SSH Provides secure remote access and secure communication for supported services.
OpenPGP Uses cryptographic techniques for supported email, files, and other communications.
WPA3 A modern security standard for Wi-Fi networks.
Important: SSL is obsolete. Modern secure web communication uses current versions of TLS rather than SSL.

10. Firewalls, IDS, and IPS

A firewall controls network traffic according to security rules. Different firewall technologies inspect traffic at different levels.

Types of Firewalls

  • Packet-Filtering Firewall: Makes decisions using packet information such as IP addresses, ports, and protocols.
  • Stateful Firewall: Tracks active network connections while making filtering decisions.
  • Application-Level Gateway: Inspects and controls traffic at the application layer.
  • Next-Generation Firewall: Combines traditional firewall functions with deeper inspection and application awareness.
  • Web Application Firewall: Helps protect web applications from threats such as SQL injection and XSS.
IDS IPS
Detects suspicious or malicious activity. Detects suspicious activity and can block or prevent it.
Primarily provides monitoring and alerts. Provides monitoring together with prevention actions.
Security teams investigate generated alerts. Can automatically respond according to configured rules.

11. Authentication and Access Control

Authentication verifies identity. Authorization determines what an authenticated identity is permitted to access or do.

Authentication Factors

  • Something you know: Password, PIN, or another secret.
  • Something you have: Security key, smart card, authenticator application, or trusted device.
  • Something you are: Biometric information such as a fingerprint.
  • Somewhere you are: Location information used as an additional security signal.
  • Something you do: Behavioural characteristics used for authentication or risk assessment.

Multi-Factor Authentication

Multi-factor authentication (MFA) requires two or more authentication factors from different categories. Using two passwords is not MFA because both are “something you know.”

  • Password + authenticator application
  • Password + hardware security key
  • PIN + smart card
  • Password + biometric verification

12. Cyber Laws and Data Protection in India

Cyber Security also involves legal and regulatory responsibilities. Laws and rules can change, so students and organisations should refer to current official information for legal compliance.

Information Technology Act, 2000

The Information Technology Act, 2000 is an important Indian law covering electronic records, electronic signatures, electronic governance, and various computer-related offences and responsibilities.

Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 provides a framework for the processing of digital personal data in India. Its implementation and related rules should be checked through official government sources when current legal details are required.

Note: This section is for educational purposes, not legal advice. Laws, rules, notifications, and compliance obligations may change.

13. Common Cyber Security Mistakes

  • Reusing passwords: A breach at one service can put other accounts at risk.
  • Ignoring updates: Updates often include security fixes.
  • Clicking unknown links: Messages that appear trustworthy may still be fraudulent.
  • Giving excessive permissions: Users and applications should receive only the access they need.
  • Not keeping backups: A reliable backup is important when data is deleted, damaged, or affected by ransomware.
  • Using unsecured public Wi-Fi carelessly: Sensitive activity should use trusted connections and secure websites.
  • Ignoring security awareness: Technology alone cannot remove risks caused by human behaviour.

14. Cyber Security Quick Revision

  • CIA Triad: Confidentiality, Integrity, and Availability.
  • Authentication: Verifies identity.
  • Authorization: Determines permissions.
  • Malware: Malicious software.
  • Phishing: A deceptive attempt to obtain information or influence a user.
  • Firewall: Controls network traffic according to rules.
  • IDS: Detects and reports suspicious activity.
  • IPS: Detects and can block suspicious activity.
  • Symmetric Cryptography: Uses a shared secret key.
  • Asymmetric Cryptography: Uses public and private keys.
  • MFA: Uses multiple authentication factors.
  • Defense in Depth: Uses multiple layers of security controls.
  • TLS: Protects communications between applications, including HTTPS connections.

15. Practice Questions

  1. What is Cyber Security and why is it important?
  2. Explain the three components of the CIA Triad.
  3. What is the difference between authentication and authorization?
  4. What is the difference between a threat, vulnerability, and risk?
  5. What is phishing? Give an example.
  6. Differentiate between a virus, worm, and Trojan.
  7. What is ransomware?
  8. What is the difference between symmetric and asymmetric cryptography?
  9. Why is AES preferred over DES for modern systems?
  10. What is the purpose of a firewall?
  11. Differentiate between IDS and IPS.
  12. What is multi-factor authentication?
  13. What is defense in depth?
  14. What is the purpose of TLS in web communication?
  15. What is the role of the Information Technology Act, 2000 in India?

16. Sources and Further Reading

Conclusion

Cyber Security combines technology, processes, and human awareness to protect digital systems and information. Concepts such as the CIA Triad, authentication, malware, cryptography, network security, and access control provide the foundation for understanding the subject.

For examination preparation, learn the meaning of each concept, understand how similar terms differ, and practise applying concepts to real-world situations. These lessons can also help you make safer decisions when using computers, smartphones, and online services.