Programme/Class: Bachelor In Science Year: Third Semester: Six Subject: Computer Science Course Code: B070602T Course Title: Cyber Security & Cyber Laws

 Introduction to Information System

An information system is a system that collects, stores, processes, and distributes information. It can be used to support decision-making, communication, and collaboration.

Types of Information System

There are many different types of information systems, including:

• Transaction processing systems (TPS): TPS process routine transactions, such as sales orders and customer payments.
• Management information systems (MIS): MIS provide managers with information to support decision-making.
• Decision support systems (DSS): DSS help managers to make complex decisions.
• Executive information systems (EIS): EIS provide top executives with real-time information about the performance of their organizations.

Development of Information System

The development of an information system typically involves the following steps:

1. Requirements analysis: The first step is to identify the needs of the users of the system.
2. System design: The next step is to design the system architecture and components.
3. Implementation: The system is then implemented and tested.
4. Maintenance: The system is maintained and updated to meet the changing needs of the users.

CIA Model of Information Characteristics

The CIA model of information characteristics is a framework for understanding the security requirements of information systems. The model consists of three primary components:

• Confidentiality: Confidentiality means that information is only accessible to authorized individuals.
• Integrity: Integrity means that information is accurate and complete.
• Availability: Availability means that information is accessible to authorized individuals when needed.

Introduction to Information Security

Information security is the practice of protecting information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

Need of Information Security

Information security is important for a number of reasons, including:

• To protect sensitive information, such as customer data and financial information.
• To comply with government regulations.
• To maintain a competitive advantage.
• To protect the reputation of the organization.

Cyber Security

Cyber security is a branch of information security that focuses on protecting information systems from cyber attacks.

Business Need

Businesses need to protect their information systems from cyber attacks in order to protect their sensitive data, comply with regulations, and maintain a competitive advantage.

Ethical and Professional Issues of Security

Information security professionals need to be aware of the ethical and professional issues associated with their work. Some of these issues include:

• Privacy: Information security professionals need to respect the privacy of the individuals whose data they are protecting.
• Security vs. convenience: Information security professionals need to balance the need to protect information with the need to make it accessible to authorized users.
• Disclosure: Information security professionals need to be careful about what information they disclose about the security of their systems.

Information Security Model

An information security model is a framework for understanding and managing the security risks of an information system.

Component of an Information Security

The components of an information security system typically include:

• Security policies: Security policies define the rules and procedures that must be followed to protect information systems.
• Security technologies: Security technologies include tools and systems that are used to protect information systems, such as firewalls, intrusion detection systems, and encryption.
• Security awareness and training: Security awareness and training programs are designed to educate employees about security risks and how to protect information systems.

Aspect of Information Security

The aspects of information security typically include:

• Physical security: Physical security measures protect information systems from physical threats, such as theft and fire.
• Technical security: Technical security measures protect information systems from cyber attacks.
• Administrative security: Administrative security measures include policies and procedures that are designed to protect information systems.

Security Attacks (Active and Passive Attacks)

Active attacks modify the data or system. Some examples of active attacks include:

• Malware: Malware is malicious software that can damage or disable computers and information systems.
• Denial-of-service attacks: Denial-of-service attacks make information systems unavailable to authorized users.
• Man-in-the-middle attacks: Man-in-the-middle attacks occur when an attacker intercepts communication between two parties.

Passive attacks monitor or eavesdrop on data transmissions. Some examples of passive attacks include:

• Traffic analysis: Traffic analysis attacks involve monitoring network traffic to identify patterns and vulnerabilities.
• Eavesdropping: Eavesdropping attacks involve intercepting data transmissions.
• Sniffing: Sniffing attacks involve capturing packets of data from a network.

Cyber Laws I: Information Security Standards, IT Act 2000 Provisions

Information security standards are crucial for establishing a framework to safeguard digital assets. The IT Act of 2000 in India provides legal provisions for regulating and securing electronic communication and transactions. It encompasses various aspects of digital laws.

Cyber Laws II: Cyber Laws, Intellectual Property Rights, Copyright Laws, Patent Laws, Software License

Cyber laws govern digital activities and interactions. Intellectual property rights (IPR) protect creations of the mind, including patents, copyrights, trademarks, and trade secrets. Copyright laws safeguard original creative works, while patent laws protect inventions and innovations. Software licenses define terms and conditions for software use.

A thorough understanding of cyber laws, intellectual property rights, copyright laws, patent laws, and software licenses is vital in the digital age to ensure legal compliance and protect both individuals and organizations from cyber threats and legal disputes.Cyber Laws I: Information Security Standards, IT act 2000 Provisions, Introduction to digital laws Information Security Standards Information security standards are guidelines and best practices that are designed to protect information systems from cyber attacks. Some common information security standards include: ISO/IEC 27001:2013: ISO/IEC 27001:2013 is an international standard that provides a framework for managing information security. COBIT 5: COBIT 5 is a framework for managing information and technology. It includes a number of controls that can be implemented to protect information systems. NIST Cybersecurity Framework: The NIST Cybersecurity Framework is a voluntary framework that provides a way to improve the cybersecurity of critical infrastructure. IT Act 2000 Provisions The Information Technology Act, 2000 (IT Act 2000) is a law enacted by the Indian Parliament to provide legal recognition to electronic transactions and digital signatures. It also includes provisions for the regulation of cyber crimes. Some of the key provisions of the IT Act 2000 include: Legal recognition of electronic records and digital signatures Regulation of cyber crimes, such as hacking, data theft, and cyber defamation Establishment of the Controller of Certifying Authorities (CCA) to regulate certifying authorities in India Introduction to Digital Laws Digital laws are laws that govern the use of digital technology and the Internet. They cover a wide range of topics, including: Electronic commerce Data protection Intellectual property rights Cyber crimes Digital laws are important because they help to protect individuals and organizations from the risks associated with the use of digital technology. Cyber Laws II: Cyber Laws, Intellectual Property Rights, Copyright Laws, Patent Laws, Software License Cyber Laws Cyber laws are laws that are specifically designed to address the challenges and risks of the digital world. They cover a wide range of topics, including: Cyber crimes, such as hacking, data theft, and cyber defamation Intellectual property rights online Electronic commerce Data protection Intellectual Property Rights Intellectual property rights are legal rights that protect the creators of original works, such as books, music, and inventions. There are four main types of intellectual property rights: Copyright: Copyright protects original works of authorship, such as books, music, and movies. Trademark: A trademark is a word, phrase, symbol, or design that identifies the source of goods or services. Patent: A patent is a grant that gives the inventor of a new product or process the exclusive right to make, use, and sell the invention for a period of 20 years. Trade secret: A trade secret is any information that gives a business a competitive advantage over its competitors. Copyright Laws Copyright laws protect original works of authorship, such as books, music, and movies. Copyright laws give the copyright holder the exclusive right to reproduce, distribute, perform, display, and create derivative works based on the copyrighted work. Patent Laws Patent laws protect inventions. Patent laws give the patent holder the exclusive right to make, use, and sell the invention for a period of 20 years. Software License A software license is a legal agreement that grants the user the right to use a software program. Software licenses typically specify the terms and conditions of use, such as how many users can use the software and what the user can and cannot do with the software. Conclusion Cyber laws are important because they help to protect individuals and organizations from the risks associated with the use of digital technology. Cyber laws also help to promote innovation and economic growth.