Cyber Crime Introduction and Impact

Cyber Crime Introduction

• Cybercrime encompasses crimes involving computers and networks.
• Computers can be used as weapons or targets in criminal activities.
• Cybercrimes include fraud, identity theft, and privacy violations, especially through the internet.
• Cybercrime impacts personal and national security and financial health.
• Cybercrime comprises two main categories:
  • Crimes targeting computer networks/devices (e.g., viruses, DoS attacks).
  • Crimes using computer networks for other criminal activities (e.g., cyberstalking, fraud).

Why Cybercrime is a Grave Offense

• Cybercrime involves the interception and leakage of sensitive information, including military deployments, government communications, and personal data of high-value individuals. This can affect national security and privacy.
• Cybercrimes can involve both state and non-state actors, crossing international borders.
• Cyberwarfare is a term for cross-border cybercrimes involving at least one nation-state.
• A 2018 study, in partnership with McAfee, estimated that $600 billion (nearly 1% of global GDP) is lost to cybercrime annually.

Challenges of Cybercrime

• Lack of awareness regarding cyber rights among people, particularly in developing nations.
• Cybercriminals often operate anonymously, making it difficult to trace their actions or hold them accountable.
• Low numbers of reported cybercrime cases in many jurisdictions hamper effective response and detection.
• Cybercrimes are frequently committed by educated, technologically adept individuals.
• Harsh punishments are not present in all cybercrime cases which can encourage criminal behaviour.

Prevention of Cybercrime

• Using strong, varied usernames and passwords, and avoiding writing them down.
• Employing sophisticated antivirus software on personal devices and computers.
• Maintaining privacy settings on social media platforms.
• Regularly updating device software to mitigate vulnerabilities.
• Using secure networks (avoiding public Wi-Fi for sensitive activities).
• Avoiding suspicious email attachments.
• Maintaining up-to-date software and operating system versions.

Laws Against Cybercrime in India

• The Information Technology Act (IT Act) 2000 covers various types of cybercrimes in India.
• Cybercrimes covered include: Identity theft, Cyberterrorism, Cyberbullying, Hacking, Defamation, Trade Secrets, Freedom of Speech, Harassment, and Stalking.

Classification of Cybercrime

• Cyberterrorism involves violent acts committed via internet or computer systems that result in the loss of human life.
• Cyber-extortion occurs when a website or computer system faces repeated denial-of-service or other malicious attacks from hackers.

Types of Hackers

• White hat hackers engage in ethical hacking, aiming to enhance security by identifying and fixing vulnerabilities.
• Grey hat hackers employ ambiguous methods, sometimes without authorization, often with the aim of receiving a reward for identifying vulnerabilities.
• Black hat hackers operate with malicious intent, performing unauthorized actions for personal gain or harm.

Phases of Hacking

• Reconnaissance: Gathering information about the target system.
• Scanning: Identifying potential vulnerabilities.
• Gaining Access: Exploiting vulnerabilities to gain unauthorized entry.
• Maintaining Access: Establishing persistent presence within the system.
• Covering Tracks: Concealing traces of hacking activity.

Security Threats and CIA Triad

• Risk: The likelihood of a negative security event and its impact on a target.
• Threat: Something that could harm a target (an entity).
• Vulnerability: A flaw in a target that adversaries can exploit.
• Exploit: An attack exploiting a vulnerability (an action taken by an attacker).
• The CIA Triad (Confidentiality, Integrity, Availability) is a key model in security.
• Confidentiality: Limiting access to authorized users.
• Integrity: Ensuring data accuracy and preventing unauthorized modifications.
• Availability: Ensuring resources are accessible when needed.

Cyber Attacks Categories

• Malware Attacks (viruses, worms, Trojans).
• Phishing.
• Man-in-the-Middle (MitM) attacks.
• Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) attacks.
• Ransomware attacks.
• SQL Injection.
• Cross-Site Scripting (XSS).
• Drive-by Downloads.
• Credential Stuffing.
• Social Engineering attacks.
• IoT-based attacks.
• Zero-Day exploits.
• Advanced Persistent Threats (APTs).

Types of Malware

• Virus.
• Worm.
• Trojan horse.
• Rootkit.
• Adware.
• Spyware.
• Keylogger.
• Botnet.

Virus Scanners

• Software identifying virus signatures or suspicious behaviour.
• Email and attachment checking is a common method.
• Download scanning detects malicious programs.
• File scanning compares files to known virus signatures.
• Heuristic scanning analyses the actions of a file to identify if its behavior is like that of a virus.
• Sandbox technique is used where a file is executed in a protected environment.

Intrusion Detection Systems (IDS)

• Network-Based IDS (NIDS) monitors network traffic in real time.
• Host-Based IDS (HIDS) monitors activities on individual devices.
• Hybrid IDS combines network and host monitoring.
• Signature-based detection identifies known malicious patterns.
• Anomaly-based detection identifies deviations from normal behavior.

Firewalls

• Firewalls act as barriers between networks.
• Packet filtering examines packet headers for matching rules.
• Stateful inspection monitors active connections.
• Proxy filtering acts as an intermediary.
• Deep packet inspection examines packet contents.
• Categories include: Packet Filtering, Stateful Inspection, Proxy, and Next-Generation.
• Essential for access control, network security; prevention of unauthorized communication.

SSL/TLS

• SSL/TLS encrypts data transmitted over the internet.
• Key roles: Encryption, data integrity, authentication.
• Protects confidentiality, data integrity, and authenticity of communication.
• Protects login credentials, online transactions, and web browsing.

Securing Log in Credentials, Online Transactions, Web Browsing

• SSL/TLS secures logins, transactions, and browsing.
• Protects confidentiality and integrity of sensitive data.

Virtual Private Networks

• VPNs create secure connections over public networks.
• Three types: PPTP, L2TP, and IPsec.
• Authentication and authorization are essential for securing VPN usage.
• VPNs use encryption to protect data transmitted between users and endpoints.

Authentication and Authorization

• Authentication verifies user identity.
• Authorization grants access based on verified identity and permissions.
• Authentication factors include knowledge, possession, and biometric factors.

Information Security Standards and IPRs

• Cyber Laws (IT Law) address various aspects of information and technology.
• Legal protection related to software, data security, and e-commerce.
• Includes topics like fraudulent activities, copyright infringement, trade secrets, defamation, etc.
• Laws cover issues from user rights to online transactions.

Concept of Patent Rights

• Patents provide exclusive rights to inventors for novel, useful, and non-obvious inventions, applying to software, hardware, business methods as well as digital processes.
• Criteria include novelty (newness), inventive step (non-obviousness), and industrial applicability.

Patent Act of 1970

• Regulates granting and protection of patents.
• Describes patentable inventions, non-patentable areas, application processes, examination, and protection duration.