Fundamentals of Cyber Security

UNIT-I
• Introduction to Cyber Security: Basic Cyber Security Concepts, Motive of
Attackers, Active Attacks, Passive Attacks, Cyber Crime and Information
Security, Computer Criminals,
• Classification of Cyber Crimes: E-mail Spoofing, Spamming, Cyber
Defamation, Internet Time Threat, Salami Attack, Data Diddling, Forgery,
Web Jacking, Newsgroup Spam, Industrial Espionage, Hacking, Online
Frauds, Software Piracy, Computer Sabotage, Email Bombing, Usenet
Newsgroup as The Source Of Cybercrimes, Computer Network Intrusions,
Password Sniffing, Identity Theft,
• Cyber Threats-cyber Warfare, Cia Traid

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Basic Cyber Security Concepts
 Cybercrime: Definition and Origins of the Word
 The definitions of computer crime:
 1. Any illegal act where a special knowledge of computer technology is essential for its
perpetration, investigation or prosecution.
 2. Any traditional crime that has acquired a new dimension or order of magnitude through
the aid of a computer, and abuses that have come into being because of computers.
 3. Any financial dishonesty that takes place in a computer environment.
 4. Any threats to the computer itself, such as theft of hardware or software, sabotage and
demands for ransom.
 The term “cybercrime” relates to a number of other terms such as:
• Computer-related crime
• Computer crime
• Internet crime
• E-crime
• High-tech crime
RNS Reddy, Asst professor, GNITC
 UNIT-I Introduction to Cyber Security
 Motive of Attackers
 Two types of attack are prevalent in cybercrimes:
 1. Techno-crime: A premeditated act against a system or systems, with the intent to copy,
steal, prevent access, corrupt or otherwise deface or damage parts of or the complete
computer system.
 2. Techno-vandalism: These acts of “brainless” defacement of websites and/or other
activities, such as copying files and publicizing their contents publicly, are usually
opportunistic in nature.

 Cybercrimes differ from most terrestrial crimes in four ways:

(a) How to commit them is easier to learn
(b) They require few resources relative to the potential damage caused
(c) They can be committed in a jurisdiction without being physically present in it
(d)They are often not clearly illegal.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Motive of Attackers
 How cybercrimes are planned and how they actually take place
• Cyberterrorists usually use computer as a tool, target or both for their
unlawful act to gain information.
• Internet is one of the means by which the offenders can gain priced sensitive
information of companies, firms, individuals, banks and can lead to
intellectual property (IP), selling illegal articles, pornography/child
pornography, etc.
• This is done using:
 Phishing, Spoofing, Pharming, Internet Phishing, wire transfer, etc.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Motive of Attackers
 Cybercriminals:
 Are those who conduct acts such as:
 Credit card fraud
 Cyber stalking
 Defaming others online
 Gaining unauthorized access to computer systems
 Ignoring copyrights
 Software licensing and trademark protection
 Overriding encryption to make illegal copies
 Software piracy
 Stealing other’s identity to perform criminal acts

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Motive of Attackers
 Categorization of Cybercriminals
 Type-1 Cybercriminals- Hungry for recognition

 Type 2 Cybercriminals- Not interested in recognition

 Type -3 Cybercriminals- The insiders

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Motive of Attackers
 Type 1: Cybercriminals- Hungry for recognition
 Hobby hackers
A person who enjoys exploring the limits of what is possible, in a spirit of playful
cleverness. May modify hardware/ software
 IT professional (social engineering):
Ethical hacker
 Politically motivated hackers :
promotes the objectives of individuals, groups or nations supporting a variety of
causes such as : Anti globalization, transnational conflicts and protest
 Terrorist organizations
Cyber terrorism
Use the internet attacks in terrorist activity
Large scale disruption of computer networks, personal computers attached to
internet via viruses
RNS Reddy, Asst professor, GNITC
 UNIT-I Introduction to Cyber Security
 Motive of Attackers
 Type 2: Cybercriminals- Not interested in recognition
 Psychological perverts
Express abnormal behavior
 Financially motivated hackers
Make money from cyber attacks
Bots-for-hire : fraud through phishing, information theft, spam and extortion
 State-sponsored hacking
Hacktivists
Extremely professional groups working for governments
Have ability to worm into the networks of the media, major corporations, defense
departments

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Motive of Attackers
 Type 3: Cybercriminals- The insiders

 Disgruntled or former employees seeking revenge

 Competing companies using employees to gain economic advantage through damage

and/ or theft.


RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Motive of Attackers

Greed
Desire to gain power
Publicity
Desire for revenge
A sense of adventure
Looking for thrill to access forbidden information
Destructive mindset
Desire to sell network security services

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Attacks
 A cyber attack is an assault launched by cybercriminals using one or more
computers against a single or multiple computers or networks. A cyber
attack can maliciously disable computers, steal data, or use a breached
computer as a launch point for other attacks.
Or
 An attack, via cyberspace, targeting an enterprise's use of cyberspace for the
purpose of disrupting, disabling, destroying, or maliciously controlling a
computing environment/infrastructure; or destroying the integrity of the
data or stealing controlled information.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Attacks Attack/threats

• A Passive attack can only observe

communications or data.
Example: Interception (also called eavesdropping
or passive wiretapping) Passive threats
Active threats

• An Active attack can actively modify

communications or data
• Often difficult to perform, but very powerful
Interception
– Mail forgery/modification Interruption Modification
(Availability) (Integrity)
Fabrication

– TCP session hijacking /IP spoofing (authentication)

Examples: Interruption, Modification ( also called Release of message Traffic analysis

active wiretapping), Fabrication contents

Types of Active Attacks: masquerade, replay,

modification and denial of service. Figure : Threats/Attacks

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Active Attacks
 Cybercrime refers to the act of performing a criminal act using cyberspace
as communication vehicle.
 Two types of attacks are common:
Techno- crime : Active attack
Techno Crime is the term used by law enforcement agencies to denote
criminal activity which uses (computer) technology, not as a tool to
commit the crime, but as the subject of the crime itself. Techno Crime is
usually pre-meditated and results in the deletion, corruption, alteration,
theft or copying of data on an organization's systems.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Passive Attacks
Techno – vandalism: Passive attack
Techno Vandalism is a term used to describe a hacker or cracker who breaks into a
computer system with the sole intent of defacing and or destroying its contents.
 Techno Vandals can deploy 'sniffers' on the Internet to locate soft (insecure) targets
and then execute a range of commands using a variety of protocols towards a range of
ports.
 The best weapon against such attacks is a firewall which will hide and disguise the
organization's presence on the Internet.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Software Attacks
 Software attacks means attack by Viruses, Worms, Trojan Horses etc.
 Many users believe that malware, virus, worms, bots are all same things.
 But they are not same, only similarity is that they all are malicious software that behave
differently.
 Virus – They have the ability to replicate themselves by hooking them to the program on the
host computer like songs, videos etc and then they travel all over the Internet.
 Examples include File Virus, Macro Virus, Boot Sector Virus, Stealth Virus etc.
 Worms – Worms are also self replicating in nature but they don’t hook themselves to the
program on host computer.
 Biggest difference between virus and worms is that worms are network aware.
 They can easily travel from one computer to another if network is available and on the target
machine they will not do much harm, they will for example consume hard disk space thus slowing
down the computer.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Software Attacks
 Software attacks means attack by Viruses, Worms, Trojan Horses etc.
 Many users believe that malware, virus, worms, bots are all same things.
 But they are not same, only similarity is that they all are malicious software that behave
differently.
 Trojan – The Concept of Trojan is completely different from the viruses and worms.
 The name Trojan derived from the ‘Trojan Horse’ tale in Greek mythology, which explains how the
Greeks were able to enter the fortified city of Troy by hiding their soldiers in a big wooden horse
given to the Trojans as a gift.
 The Trojans were very fond of horses and trusted the gift blindly.
 In the night, the soldiers emerged and attacked the city from the inside.
 Bots –: can be seen as advanced form of worms.
 They are automated processes that are designed to interact over the internet without the need of
human interaction.
 They can be good or bad.
 Malicious bot can infect one host and after infecting will create connection to the central server
which will provide commands to all infected hosts attached to that ne RNS Reddy, Asst professor, GNITC
 UNIT-I Introduction to Cyber Security
 Hardware Attacks
 Hardware attacks take advantage of vulnerabilities in hardware-manufacturing supply
chains.
 Modern chips are incredibly complex devices consisting of billions of transistor
components that can be compromised during the processes of design, fabrication, and
assembly and testing.
 The complexity of integrated circuits and microelectronics makes hardware
vulnerabilities difficult to detect.
 Physical modifications to a single integrated circuit can be well hidden among the sheer
number of valid components, and can function undetected for a long time.
 A well-designed hardware vulnerability could therefore go undetected until well after the
malicious hardware has been widely incorporated into critical infrastructure.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Hardware Attacks
 Hardware attacks pertain to the following devices:
 Access control systems such as authentication tokens
 Network appliances
 Industrial control systems
 Surveillance systems
 Components of communication infrastructure
 Attackers could also act at lower levels to affect the work of microcircuits, fundamental
components of any electronic device

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Cyber Crime and Information Security
 Indian Information Technology Act (ITA 2008) provides a new focus on “Information Security
in India.”
 “Cybersecurity” means protecting information, equipment, devices, computer, computer
resource, communication device and information stored therein from unauthorized access.
 Where financial losses to the organization due to insider crimes are concerned, difficulty is
faced in estimating the losses because the financial impacts may not be detected by the
victimized organization and no direct costs may be associated with the data theft.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Cyber Crime and Information Security
 For anyone trying to compile data on business impact of cybercrime, there are number of
challenges.
o Organizations do not explicitly incorporate the cost of the vast majority of computer
security incidents into their accounting.
o There is always a difficulty in attaching a quantifiable monetary value to the corporate
data and yet corporate data get stolen/lost.
o Most organizations abstain from revealing facts and figures about “security incidents”
including cybercrime.
o Organizations perception about “insider attacks” seems to be different than that made
out by security solution vendor.
o Awareness about “data privacy” too tends to be low in most organizations.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Cyber Crime and Information Security

 Typical network misuses are for:

 Internet Radio
 Streaming Audio
 Streaming Video
 File Sharing
 Instant Messaging
 Online Gaming
 Online Gambling

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Cyber Crime and Information Security

 Cybercrime can be committed against an individual or a group; it can also be committed

against government and private organizations.
 It may be intended to harm someone’s reputation, physical harm, or even mental harm.
 Cybercrime can cause direct harm or indirect harm to whoever the victim is.
 However, the largest threat of cybercrime is on the financial security of an individual as well
as the government.
 Cybercrime causes loss of billions of USD every year.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Cyber Crime and Information Security
 Types of Cybercrime
 Hacking
It is an illegal practice by which a hacker breaches the computer’s security system of
someone for personal interest.
 Unwarranted mass-surveillance
Mass surveillance means surveillance of a substantial fraction of a group of people by the
authority especially for the security purpose, but if someone does it for personal interest, it
is considered as cybercrime.
 Child pornography
It is one of the most heinous crimes that is brazenly practiced across the world. Children
are sexually abused and videos are being made and uploaded on the Internet.
 Child grooming
It is the practice of establishing an emotional connection with a child especially for the
purpose of child-trafficking and child prostitution.
RNS Reddy, Asst professor, GNITC
 UNIT-I Introduction to Cyber Security
 Cyber Crime and Information Security
 Types of Cybercrime
 HaCopyright infringement
If someone infringes someone’s protected copyright without permission and publishes that
with his own name, is known as copyright infringement.
 Money laundering
Illegal possession of money by an individual or an organization is known as money
laundering. It typically involves transfers of money through foreign banks and/or legitimate
business. In other words, it is the practice of transforming illegitimately earned money into
the legitimate financial system.
 Cyber-extortion
When a hacker hacks someone’s email server, or computer system and demands money to
reinstate the system, it is known as cyber-extortion.
 Cyber-terrorism
Normally, when someone hacks government’s security system or intimidates government or
such a big organization to advance his political or social objectives by invading the security
system through computer networks, it is known as cyber-terrorism. RNS Reddy, Asst professor, GNITC
 UNIT-I Introduction to Cyber Security
 Cyber Crime and Information Security
 Cyber security is a potential activity by which information and other communication
systems are protected from and/or defended against the unauthorized use or modification
or exploitation or even theft.
 Likewise, cyber security is a well-designed technique to protect computers, networks,
different programs, personal data, etc., from unauthorized access.
 Lack of information security gives rise to cybercrime
 Cybersecurity: means protecting information, equipment, devices, computer, computer
resource, communication device and information stored therein from unauthorized access,
use, disclosure, disruption, modification or destruction.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Computer criminals

Are those who conduct acts such as:

Credit card fraud
Cyber stalking
Defaming others online
Gaining unauthorized access to computer systems
Ignoring copyrights
Software licensing and trademark protection
Overriding encryption to make illegal copies
Software piracy
Stealing other’s identity to perform criminal acts
RNS Reddy, Asst professor, GNITC
 UNIT-I Introduction to Cyber Security
 Computer Criminals
 Cybercriminals are those who conduct activities such as
 Child Pornography;
 Credit Card Fraud;
 Cyberstalking;
 Defaming another online;
 Gaining unauthorized access to computer systems;
 Ignoring copyright,
 Software licensing and trademark protection;
 Overriding encryption to make illegal copies;
 Software piracy and stealing another’s identity to perform criminal acts.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Computer Criminals
 1. Type I: Cybercriminals – hungry for recognition
 2. Type II: Cybercriminals – not interested in recognition
 3. Type III: Cybercriminals – the insiders

Classifications of Cybercrimes

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Classification of Cyber Crimes
 Cybercrimes are classified as follows:

1. Cybercrime against individual

2. Cybercrime against property
3. Cybercrime against organization
4. Cybercrime against Society
5. Crimes emanating from Usenet newsgroup:

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Basic Cyber Security Concepts
 Cybercrimes: Classification

 Cybercrime against an individual

 Electronic mail spoofing and other online frauds
 Phishing
 Spamming
 Cyber defamation
 Cyber stalking (harassment)
 Computer sabotage
 Pornographic offenses
 Password sniffing

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Basic Cyber Security Concepts
 Cybercrimes: Classification

 Cybercrime against property

 Credit card frauds

 Intellectual property( IP) crimes

 Internet time theft

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Basic Cyber Security Concepts
 Cybercrimes: Classification
 Cybercrime against organization
 Unauthorized accessing of computer
 Password sniffing
 Denial-of-Service (DoS) attacks
 Virus attack/dissemination of viruses
 E-Mail bombing/mail bombs
 Salami attack/ Salami technique
 Logic bomb
 Trojan Horse
 Data diddling
 Industrial spying
 Computer network intrusions
 Software piracy

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Basic Cyber Security Concepts
 Cybercrimes: Classification

 Cybercrime against Society

 Forgery

 Cyber terrorism

 Web jacking

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Basic Cyber Security Concepts
 Cybercrimes: Classification

 Crimes emanating from Social Media

 Social media may carry very offensive, harmful, inaccurate material

 Postings with wrong labels or are deceptive in another way

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Basic Cyber Security Concepts
 Cybercrime: Usually Includes
 Unauthorized access of the computers
 Data diddling
 Virus/worms attack
 Theft of computer system
 Hacking
 Denial of attacks
 Logic bombs
 Trojan attacks
 Internet time theft
 Web jacking
 Email bombing
 Salami attacks
 Physically damaging computer system.
RNS Reddy, Asst professor, GNITC
 UNIT-I Classification Of Cyber Crimes
 E-mail Spoofing
 A spoofed E-Mail is one that appears to originate from one source but actually has been sent from
another source.
 E-mail spoofing is the forgery of an e-mail header so that the message appears to have originated from
someone or somewhere other than the actual source.
 To send spoofed e-mail, senders insert commands in headers that will alter message information.
 It is possible to send a message that appears to be from anyone, anywhere, saying whatever the
sender wants it to say.
 Thus, someone could send spoofed e-mail that appears to be from you with a message that you didn't
write.
 Although most spoofed e-mail falls into the "nuisance" category and requires little action other than
deletion, the more malicious varieties can cause serious problems and security risks.
 For example, spoofed e-mail may purport to be from someone in a position of authority, asking for
sensitive data, such as passwords, credit card numbers, or other personal information -- any of which
can be used for a variety of criminal purposes.
 One type of e-mail spoofing, self-sending spam, involves messages that appear to be both to and from
the recipient.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Spamming
• People who create electronic Spam are called spammers.
• Spam is the abuse of electronic messaging systems to send unsolicited bulk messages
indiscriminately.
• Spamming is widely detested, and has been the subject of legislation in many jurisdictions –
for example, the CAN-SPAM Act of 2003.
 Search engine spamming
 Spamming is alteration or creation of a document with the intent to deceive an electronic
catalog or a fi ling system.
 Some web authors use “subversive techniques” to ensure that their site appears more
frequently or higher number in returned search results.

RNS Reddy, Asst professor, GNITC

UNIT-I Classification Of Cyber Crimes
 Spamming
 Spamming may be
 E-Mail Spam
 Instant messaging spam
 Usenet group spam
 Web search engine spam
 Spam in blogs, wiki spam
 Online classified ads spam
 Mobile phone messaging spam
 Internet forum spam
 Junk fax spam

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Cyber defamation
• “Cyberdefamation” occurs when defamation takes place with the help of computers and/or the
According to the IPC Section 499:
 1. It may amount to defamation to impute anything to a deceased person, if the imputation would
harm the reputation of that person if living, and is intended to be hurtful to the feelings of his family
or other near relatives.
 2. It may amount to defamation to make an imputation concerning a company or an association or
collection of persons as such.
 3. An imputation in the form of an alternative or expressed ironically, may amount to defamation.
 4. No imputation is said to harm a person’s reputation unless that imputation directly or indirectly, in
the estimation of others, lowers the moral or intellectual character of that person, or lowers the
character of that person in respect of his caste or of his calling, or lowers the credit of that person, or
causes it to be believed that the body of that person is in a loathsome state or in a state generally
considered as disgraceful.
• The law on defamation attempts to create a workable balance between two equally important human
rights
1. The right to an unimpaired reputation
2. The right to freedom of expression
RNS Reddy, Asst professor, GNITC
 UNIT-I Classification Of Cyber Crimes
 Cyber defamation
 The tort of cyber defamation is considered to be the act of defaming, insulting, offending or
otherwise causing harm through false statements pertaining to an individual in cyberspace.
Example: someone publishes defamatory matter about someone else on a website or sends
an E-mail containing defamatory information to all friends of that person.
 Types of defamation
 Libel : written defamation
 Slander: oral defamation
 The plaintiff must have to show that the defamatory statements were unlawful and would
indeed injure the person’s or organization’s reputation.
 When failed to prove, the person who made the allegations may still be held responsible for
defamation.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Internet Time Threat
 Internet time theft occurs when an unauthorized person uses the Internet hours paid for by
another person.
 It comes under hacking because the person gets access to someone else’s ISP user ID and
password, either by hacking or by gaining access to it by illegal means
 Occurs when an unauthorized person uses the Internet hours paid for by another person
 Comes under hacking
 The person get access to someone else’s ISP user ID and password, either by hacking or by
gaining access to it by illegal means and uses the internet without the other person’s
knowledge
 This theft can be identified when Internet time is recharged often, despite infrequent usage.
 This comes under “identity theft”

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Salami Attack/Salami Technique

These attacks are used for committing financial crimes.

No account holder will probably notice this unauthorized debit,
but the bank employee will make a sizable amount every month.
The alterations made are so insignificant that in a single case it
would go completely unnoticed.
Example: a bank employee inserts a program, into the bank’s
server, that deduces a small amount from the account of every
customer every month,

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Data Diddling
 A data diddling attack involves altering raw data just before it is processed by a computer
and then changing it back after the processing is completed.
 In other words, information is changed from the way it should be entered by a person typing
in the data.
 Electricity Boards in India have been victims to data diddling programs inserted when
private parties computerize their systems.
 Usually, a virus that changes data or a programmer of the database or application has pre-
programmed it to be changed.
 Eg: A hidden program that shows whatever that is typed on the screen but internally
changes the account number to his own account. Hence, any amount transfer will
automatically point to his account instead of the intended account number.

 To deal with this type of crime, a company must implement policies and internal controls.

 This may include performing regular audits, using software with built-in features to combat
such problems, and supervising employees.
RNS Reddy, Asst professor, GNITC
 UNIT-I Classification Of Cyber Crimes
 Forgery
 The act of forging something, especially the unlawful act of counterfeiting a
document or object for the purposes of fraud or deception.
 Something that has been forged, especially a document that has been copied
or remade to look like the original.
 Counterfeit currency notes, postage, revenue stamps, marks sheets, etc.,
can be forged using sophisticated computers, printers and scanners.

RNS Reddy, Asst professor, GNITC

UNIT-I Classification Of Cyber Crimes
 Web Jacking

Web jacking occurs when someone forcefully takes control of a

website (by cracking the password and later changing it).
This term is derived from the term hi jacking.
 In these kinds of offences the hacker gains access and control
over the web site of another.
He may even change the information on the site.
The first stage of this crime involves “password sniffing” and
administrative password in particular.
The actual owner of the website does not have any more control
over what appears on that website
This may be done for fulfilling political objectives or for money
RNS Reddy, Asst professor, GNITC
 UNIT-I Classification Of Cyber Crimes
 Newsgroup Spam/Crimes Emanating from Usenet Newsgroup

• The advent of Google Groups, and its large Usenet archive, has
made Usenet more attractive to spammers than ever.
• Spamming of Usenet newsgroups actually predates E-Mail Spam.
Newsgroup spam is a type of spam where the targets are Usenet
newsgroups.
Usenet group may carry very offensive, harmful, inaccurate or
otherwise inappropriate material or postings that have been
misplaced or are deceptive in another way.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Industrial Espionage/ Industrial Spying
• “Spies” can get information about product finances, research and development and
marketing strategies, an activity known as “industrial spying.”
• “Targeted Attacks” - applies very well to organizations that are victim of focused attacks
aiming at stealing corporate data, Intellectual Property or whatever else that may yield a
competitive advantage for a rival company.
• There are two distinct business models for cybercrime applied to industrial spying
 Selling Trojan-ware
 Selling Stolen Intellectual Property.
 Industrial espionage is the covert and sometimes illegal practice of investigating competitors
to gain a business advantage.
 The target of investigation might be a trade secret such as a proprietary product
specification or formula, or information about business plans.
 In many cases, industrial spies are simply seeking any data that their organization can
exploit to its advantage.

RNS Reddy, Asst professor, GNITC

UNIT-I Classification Of Cyber Crimes
 Hacking
 Hackers, crackers and phrackers are some of the oft-heard terms. The
original meaning of the word “hack” meaning an elegant, witty or inspired
way of doing almost anything originated at MIT.
 Hackers write or use ready-made computer programs to attack the target
computer.
 They possess the desire to destruct and they get enjoyment out of such
destruction.
 Some hackers hack for personal monetary gains, such as stealing credit card
information, transferring money from various bank accounts to their own
account followed by withdrawal of money.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Hacking
 Every act committed toward breaking into a computer and/ or network is hacking.
 Purpose
 Greed
 Power
 Publicity
 Revenge
 Adventure
 Desire to access forbidden information
 Destructive mindset

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Hacking
 History of hacking
 hacking is any technical effort to manipulate the normal behavior of network connections
and connected systems.
 A hacker is any person engaged in hacking.
 The term "hacking" historically referred to constructive, clever technical work that was not
necessarily related to computer systems.
 M.I.T. engineers in the 1950s and 1960s first popularized the term and concept of hacking.
 the so-called "hacks" perpetrated by these hackers were intended to be harmless technical
experiments and fun learning activities.
 As computer networking and the Internet exploded in popularity, data networks became by
far the most common target of hackers and hacking.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Hacking
 Hacking vs. Cracking
 Malicious attacks on computer networks are officially known as cracking ,
 while hacking truly applies only to activities having good intentions.
 Most non-technical people fail to make this distinction, however.
 Outside of academia, its extremely common to see the term "hack" misused and be applied
to cracks as well.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Hacking
 3 types of modern hackers
 Black Hats: Criminal Hackers.
 Possess desire to destruction
 Hack for personal monetary gains : Stealing credit card information, transferring money
from various bank accounts to their own account, extort money from corporate giant by
threatening.
 White Hats: Ethical Hackers.
 Network Security Specialist.
 Grey Hats: Deals in both of the above (jack of all trades, master of none).

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Online Frauds
 Types of crimes under the category of hacking
 Spoofing website and E-Mail security alerts
 Hoax mails about virus threats
 lottery frauds
 Spoofing.
 Spoofing websites and E-Mail security threats
o Fraudsters create authentic looking websites that are actually nothing but a spoof.
o The purpose of these websites is to make the user enter personal information which is then
used to access business and bank accounts
o This kind of online fraud is common in banking and financial sector.
o It is strongly recommended not to input any sensitive information that might help criminals
to gain access to sensitive information, such as bank account details, even if the page
appears legitimate.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Online Frauds
 Fraud that is committed using the internet is “online fraud.” Online fraud can involve
financial fraud and identity theft.
 Online fraud comes in many forms.
 viruses that attack computers with the goal of retrieving personal information, to email
schemes that lure victims into wiring money to fraudulent sources,
 “phishing” emails that purport to be from official entities (such as banks or the Internal
Revenue Service) that solicit personal information from victims to be used to commit
identity theft, to fraud on online auction sites (such as Ebay) where perpetrators sell
fictional goods.
 E-Mail spoofing to make the user to enter the personal information : financial fraud
 Illegal intrusion: log-in to a computer illegally by having previously obtained actual
password. Creates a new identity fooling the computer that the hacker is the genuine
operator. Hacker commits innumerable number of frauds.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Online Frauds
 Virus hoax E-Mails
o The warnings may be genuine, so there is always a dilemma whether to take them lightly or
seriously.
o A wise action is to first confirm by visiting an antivirus site such as McAfee, Sophos or
Symantec before taking any action, such as forwarding them to friends and colleagues.
 Lottery frauds
o Typically letters or E-Mails that inform the recipient that he/she has won a prize in a lottery.
o To get the money, the recipient has to reply, after which another mail is received asking for
bank details so that the money can be directly transferred.
 Spoofing
o A hacker logs-in to a computer illegally, using a different identity than his own.
o He creates a new identity by fooling the computer into thinking that the hacker is the
genuine system operator and then hacker then takes control of the system.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Online Frauds
 Pornographic Offenses
 “Child pornography” includes:
 1. Any photograph that can be considered obscene and/or unsuitable for the age of child
viewer;
 2. film, video, picture;
 3. computer-generated image or picture of sexually explicit conduct where the production of
such visual depiction involves the use of a minor engaging in sexually explicit conduct.
 As the broad-band connections get into the reach of more and more homes, larger child
population will be using the Internet and therefore greater would be the chances of falling
victim to the aggression of pedophiles.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Software Piracy
 Theft of software through the illegal copying of
genuine programs or the counterfeiting and
distribution of products intended to pass for the
original.
 Those who buy pirated software have a lot to lose:
(a) getting untested software that may have been copied
thousands of times over
(b) the software, if pirated, may potentially contain
hard-drive-infecting viruses
(c) there is no technical support in the case of software
failure, that is, lack of technical product support
available to properly licensed users
(d) there is no warranty protection,
(e) there is no legal right to use the product, etc.
 Economic impact of software piracy is grave (see Fig.
4). RNS Reddy, Asst professor, GNITC
 UNIT-I Classification Of Cyber Crimes
 Software Piracy
 Theft of software through the illegal copying of genuine programs or the counterfeiting and
distribution of products intended to pass for the original.
 End-user copying
 Hard disk loading with illicit means
 Counterfeiting
 Illegal downloads from internet

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Computer Sabotage
 It is the use of the Internet to hinder the normal functioning of a computer system through
the introduction of worms, viruses or logic bombs.
 It can be used to gain economic advantage over a competitor, to promote the illegal activities
of terrorists or to steal data or programs for extortion purposes.
 Logic bombs are event-dependent programs created to do something only when a certain
event (known as a trigger event) occurs.
 Some viruses may be termed as logic bombs.
 Computer sabotage involves deliberate attacks intended to disable computers or networks
for the purpose of disrupting commerce, education and recreation for personal gain,
committing espionage, or facilitating criminal conspiracies.
 Through viruses, worms, logic bombs
 Chernobyl virus
 The Chernobyl virus is a computer virus with a potentially devastating payload that
destroys all computer data when an infected file is executed.,

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Email Bombing/Mail Bombs
 It refers to sending a large number of E-Mails to the victim to crash victim’s E-Mail account
or to make victim’s mail servers crash (in the case of a company or an E-Mail service
provider).
 Computer program can be written to instruct a computer to do such tasks on a repeated
basis.
 In Internet usage, an email bomb is a form of net abuse consisting of sending huge volumes
of email to an address in an attempt to overflow the mailbox or overwhelm the server where
the email address is hosted in a denial-of-service attack.
 Construct a computer to repeatedly send E-mail to a specified person’s E-mail address.
 Can overwhelm the recipient’s personal account and potentially shut down the entire
system.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Usenet Newsgroup as The Source Of Cybercrimes

Usenet is a popular means of sharing and distributing

information on the Web with respect to specific topic or subjects.
It is a mechanism that allows sharing information in a many-to-
many manner.
The newsgroups are spread across 30,000 different topics.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Computer Network Intrusions
 Computer Networks pose a problem by way of security threat because people
can get into them from anywhere.
 The cracker can bypass existing password protection by creating a program
to capture logon IDs and passwords.
 The practice of “strong password” is therefore important.
 Password Sniffing
 Password Sniffers are programs that monitor and record the name and
password of network users as they login, jeopardizing security at a site.
 Whoever installs the Sniffer can then impersonate an authorized user and
login to access restricted documents.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Credit Card Frauds

Millions of dollars may be lost annually by consumers who have

credit card and calling card numbers stolen from online
databases.
Bulletin boards and other online services are frequent targets for
hackers who want to access large databases of credit card
information.

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Identity Theft
 Identity theft is a fraud involving another person’s identity for an illicit purpose.
 This occurs when a criminal uses someone else’s identity for his/her own illegal purposes.
 The cyberimpersonator can steal unlimited funds in the victim’s name without the victim
even knowing about it for months, sometimes even for years!
 Phishing and identity theft are related offenses
 Examples:
 Fraudulently obtaining credit
 Stealing money from victim’s bank account
 Using victim’s credit card number
 Establishing accounts with utility companies
 Renting an apartment
 Filing bankruptcy using the victim’s name

RNS Reddy, Asst professor, GNITC

 UNIT-I Classification Of Cyber Crimes
 Cyber Threats-cyber Warfare

Cyberterrorism is defined as “any person, group or

organization who, with terrorist intent, utilizes accesses
or aids in accessing a computer or computer network or
electronic system or electronic device by any available
means, and thereby knowingly engages in or attempts to
engage in a terrorist act commits the offence of
cyberterrorism.”

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Cyber Threats-Cyber Warfare

Cyberwarfare is computer- or network-based conflict involving

politically motivated attacks by a nation-state on another nation-
state. In these types of attacks, nation-state actors attempt to
disrupt the activities of organizations or nation-states, especially
for strategic or military purposes and cyberespionage.
Or
Cyberwarfare is the use of digital attacks to attack a nation,
causing comparable harm to actual warfare and or disrupting the
vital computer systems. There is significant debate among experts
regarding the definition of cyberwarfare, and even if such a thing
exists.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Cyber Terrorism
 Cyber terrorism is the convergence of cyberspace and terrorism.
 It refers to unlawful attacks and threats of attacks against computers,
networks and the information stored therein when done to intimidate or
coerce a government or its people in furtherance of political or social
objectives.
 Further, to qualify as cyber terrorism, an attack should result in violence
against persons or property, or at least cause enough harm to generate fear.
 Attacks that lead to death or bodily injury, explosions, or severe economic
loss would be examples. Serious attacks against critical infrastructures
could be acts of cyber terrorism, depending on their impact.
 Attacks that disrupt nonessential services or that are mainly a costly
nuisance would not.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Cyber Espionage
 Exploitation of vulnerabilities commonly software
products, such as: Java ,Adobe Reader, Microsoft Office,
Internet Explorer, Adobe Flash and more
 Social engineering techniques – including spear-
phishing campaigns
 Drive-by downloads , Droppers
 The act or practice of obtaining secrets sensitive,
proprietary or classified information from individuals,
competitors, rivals, groups,
 governments and enemies also for military, political, or
economic advantage using illegal exploitation methods
on internet, networks, software and or computers
 You don’t control all of your critical business systems.
Understand your vulnerabilities in the distributed,
outsourced world

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 CIA Traid
 CIA Security Model Confidentiality, Integrity & Availability

Confidentiality

Secure

Integrity Availability

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 CIA Traid
 CIA Security Model Confidentiality, Integrity & Availability
 CIA Model
 A simple but widely-applicable security model is the CIA triad standing for:
Confidentiality
Integrity
Availability
 These are the three key principles which should be guaranteed in any kind
of secure system.
 This principle is applicable across the whole subject of Security Analysis,
from access to a user's internet history to security of encrypted data across
the internet.
 If any one of the three can be breached it can have serious consequences for
the parties concerned. RNS Reddy, Asst professor, GNITC
 UNIT-I Introduction to Cyber Security
 CIA Traid
 Confidentiality
 Confidentiality is the ability to hide information from those people unauthorised to view it.
 It is perhaps the most obvious aspect of the CIA triad when it comes to security; but correspondingly, it is also
the one which is attacked most often.
 Cryptography and Encryption methods are an example of an attempt to ensure confidentiality of data
transferred from one computer to another.

 Integrity
 The ability to ensure that data is an accurate and unchanged representation of the original secure
information.
 One type of security attack is to intercept some important data and make changes to it before sending it on to
the intended receiver.

 Availability
 It is important to ensure that the information concerned is readily accessible to the authorised viewer at
all times.
 Some types of security attack attempt to deny access to the appropriate user, either for the sake of
inconveniencing them, or because there is some secondary effect.
 For example, by breaking the web site for a particular search engine, a rival may become more popular.
RNS Reddy, Asst professor, GNITC
 UNIT-I Introduction to Cyber Security
 Comprehensive Cyber Security Policy
At country level:
 Policy directives on data security and privacy protection - Compliance, liabilities and
enforcement (ex. Information Technology Act 2000)
 Standards and guidelines for compliance (ex: ISO 27001, ISO 20001 & CERT-In
guidelines)
 Conformity assessment infrastructure (enabling and endorsement actions concerning
security product – ISO 15408, security process – ISO 27001 and security manpower –
CISA, CISSP, ISMS-LA, DISA etc.)
 Security incident - early warning and response (National cyber alert system and crisis
management)
• Information sharing and cooperation (MoUs with vendors and overseas CERTs and
security forums).
• Pro-active actions to deal with and contain malicious activities on the net by way of net
traffic monitoring, routing and gateway controls
• Lawful interceptions and Law enforcement.
• Nation wide security awareness campaign.
• Security research and development focusing on tools, technology, products and services.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Comprehensive Cyber Security Policy
 Actions at network level
 Compliance to security best practices (ex. ISO27001), service quality (ISO 20001) and
service level agreements (SLAs) and demonstration.
 Pro-active actions to deal with and contain malicious activities, ensuring quality of services
and protecting average end users by way of net traffic monitoring, routing and gateway
controls
 Keeping pace with changes in security technology and processes to remain current
(configuration, patch and vulnerability management)
 Conform to legal obligations and cooperate with law enforcement activities including
prompt actions on alert/advisories issued by CERT-In.
 Use of secure product and services and skilled manpower.
 Crisis management and emergency response.

RNS Reddy, Asst professor, GNITC

 UNIT-I Introduction to Cyber Security
 Comprehensive Cyber Security Policy
 Actions at corporate level:
 Compliance to security best practices (ex. ISO27001), and demonstration.
 Pro-active actions to deal with and contain malicious activities, and protecting average end
users by way of net traffic monitoring, routing and gateway controls
 Keeping pace with changes in security technology and processes to remain current
(configuration, patch and vulnerability management)
 Conform to legal obligations and cooperate with law enforcement activities including
prompt actions on advisories issued by CERT-In.
 Use of secure product and services and skilled manpower.
 Crisis management and emergency response.
 Periodic training and up gradation of skills for personnel engaged in security related
activities
 Promote acceptable users’ behavior in the interest of safe computing both within and
outside.
RNS Reddy, Asst professor, GNITC
 UNIT-I Introduction to Cyber Security
 Comprehensive Cyber Security Policy
 Actions at small user level:
 Maintain a level of awareness necessary for self-protection.
 Use legal software and update at regular intervals.
 Beware of security pitfalls while on the net and adhere to security advisories as necessary.
 Maintain reasonable and trust-worthy access control to prevent abuse of computer
resources

RNS Reddy, Asst professor, GNITC