Cyber Security (CS-503 (C)) - Important Questions

Define cyber crime and explain its types, classification, or modes of committing it.

Explain the various classifications / categories of cyber crime with examples

Define cyber-crime and discuss the challenges of cyber-crime in the modern digital world.

What is a Salami attack and what are its techniques / how is information gathered through it?

Define 'Spoofing' and 'Spamming' in detail. Describe types of spamming in cyber space and give some prevention mechanism regarding email spoofing.

What is meant by Salami attack and what are its adverse effects on the economic structure of society, with example?

Where did the term Salami attack come from and can a single Salami attack take a large sum from a single account, and if so what is the process?

What is internet time theft in cybercrime? What is the $1^{st}$ cybercrime in India?

Discuss the issues and challenges of cybercrime and explain the power and characteristics of cyber terrorism.

Explain session hijacking in detail, including methods for initiating it and problems caused by it.

Explain the term 'Frauds' with reference to cyber crime and define the various types of online frauds.

Explain web jacking, online fraud and software piracy with examples.

Discuss computer network intrusions, password sniffing and identity theft.

Explain cyber terrorism and virtual crimes and discuss perception of cyber criminals such as hackers and extremist groups.

Define password sniffing and cyber terrorism.

Write short notes on web server hacking and session hijacking.

What do you mean by identity theft? Describe its types? What techniques are used for ID theft?

Compare and explain the conceptual differences between spoofing and session hijacking.

What do you understand by "Attack on web server"? Explain the steps taken to avoid web server hacking.

Explain password sniffing and session hijacking.

Explain the common cyber-attacks used by hackers to damage a network.

Strategies to tackle cyber crime and emerging trends in cyber security.

Explain cyber-crime / offences, their types, objectives, provisions and control mechanism under the IT Act, 2000

Discuss offences such as hacking, cyber fraud, cheating, defamation and e-mail abuse under the IT Act.

Explain monetary penalties, jurisdiction and nature of criminality in cyber-crimes.

What are the different types of offence in Information Technology Act, 2000? Discuss cyber offence control mechanism under this Act.

Explain defamation in the context of cyber crime. List down some important provision about cyber defamation mentioned in Indian penal code 1860.

Explain the Information Technology Act, 2000 and the Indian Evidence Act, 1872

What are the different activities under the jurisdiction of cybercrime laws?

What are the monetary penalties under IT Act 2000?

Whether cybercrime in coming years will affect hacker attacks aimed at Internet of Things technology devices.

Discuss the proof/evidentiary techniques and management of electronic/digital records and messages

Explain how to check the validity of digital/electronic evidence including relevancy, admissibility and probative value.

Explain the role and proof of digital signatures (and electronic agreements) as digital evidence in courts.

Compare the Indian Evidence Act, 1872 and the Information Technology Act, 2000 with respect to electronic records.

Explain records as evidence, status of electronic term according to IT Act 2000.

Write a brief short note on the Indian Evidence Act, 1872.

Note on significance of digital signatures including pros and cons.

Explain the Information Technology Act 2000 provisions on who issues digital signatures.

What are the different types of evidences required for proving the electronic agreements and how it is protected?

Discuss the importance of digital signatures and certificates in the formation of SSL/TLS-based sessions.

Explain Electronic Signature Certificate and the duties of a subscriber in relation to it.

Compare viruses and worms and determine which is more threatening to cyber security.

Define DoS and DDoS attacks and explain the techniques used to perform them.

Explain the different types of phishing techniques.

Write short notes on :

Explain tools used in cybercrimes such as proxy servers, anonymizers, key loggers, spyware and backdoors.

Discuss DoS and DDoS attacks along with buffer overflow and phishing techniques.

Explain phishing and describe its major methods/activities

Define VIRUS and WORMS and describe their types in detail.

Discuss in detail Email Abuse, Trojan Horses, and Ransomware attack as cyber attacks/crimes.

Write short notes on any two of the following.

Explain the role of proxy servers and anonymizers in phishing.

Compare and explain the differences between Trojan horses and Backdoors.

What are the different layers of cyber security?

Illustrate, how password-based authentication system contributes to strengthening Secure System Design.

Consider the following script: <html><body> <form name="attack_form" action="http://VULNERABLE_APP/attack.php" method="POST"> <input type="hidden" name="attack_param" value="POST_ATTACK"> </form> <script type = "text/javascript" > document.attack_form.submit(); </script> </body></html> What type of vulnerabilities can be possible with the above script? Justify your answer with proper explanation.

user=request.POSt['user_name'] passwd=request.POST['password'] query1= "SELECT id FROM users WHERE username="" + user+ "" AND password="" + passwd + """ database.execute(query1) Analyse the above statements for any threat? If it exists, write the alternative statements to make them safe.

Discuss the roles of Document Object Model (DOM) in web security. What is cross-window attack?

Discuss the importance of TLS handshaking in a secure session establishment.