ROLL NO.
25
34
62
ENROLLMENT NO.
1901160021
1901160090
1901160439
NAME
RUTUJA RAUT
MANISHA PHULPAGARE
KSHITIJA KHUMBHAR
1.0 RATIONALE:
Cyber security is important because it protects all categories of data
from theft and damage. This includes sensitive data, personally identifiable
information (PII), protected health information (PHI), personal
information, intellectual property, data, and governmental and industry
information systems.
2.0 AIMS / BENEFITS OF PROJECT:
Following are some common benefits of cyber security:
1.
2.
3.
4.
5.
Data protection from unautorized access, loss or deletion.
Preventing financial fraud and embezzlement.
Protection of intellectual property.
Prevention of cyber espionage.
Prevention of fraud through financial transactions like wire transfers, etc
3.0 COURSE OUTCOMES:
1. Analyze and resolve security issues in networks and computer
systems to secure an ITinfrastructure.
2. Design, develop, test and evaluate secure software. Develop
policies and procedures to manage enterprise security risks.
4.0 LITERATURE REVIEW:
Cyber security comprises of technologies, processes and practices designed
to protect computers, programs, networks and data from hacking, damage or
unauthorized access. Cyber security is also sometimes conflated inappropriately in
public discussion with other concepts such as privacy, information sharing,
intelligence gathering, and surveillance. Cyber security comes into picture as well
as we encounter cyber crimes. To avoid giving cybercriminals the initiative, it is
important for those involved in the fight against cybercrime to try to anticipate
qualitative and quantitative changes in its underlying elements so that they can
formulate their methods appropriately. The importance of being acquainted with the
effects of cyber crime keeping in mind the recent activities that have taken place
and offering solutions to protect an individual and/or an organization from them is
laid down in this paper. Types of cyber security and cyber attacks are listed in this
paper. It also throws light on the state of cyber crimes and cyber security in India.
Agist of Indian cyber laws is presented in this paper as well.
5.0 ACTUAL METHODOLOGY FOLLOWED:
SR.
NO.
DETAILS OF ACTIVITY
1
Planning of project
2
Collection of project
3
Logical experimental in
the project
4
Testing of project
PLANNED
START DATE
PLANNED
NAME OF
FINISH DATE RESPONSIBLE TEAM
MEMBERS
Rutuja Raut
Manisha Phulpagare
Kshitija Khumbhar
6.0 ACTUAL PROCEDURE FOLLOWED:
Sr.No.
Name of resource
material
Specification
Qty
1
MS-Word
Making a
document
1
Remarks
Brief Information of The Project:
Cyber security is the practice of defending computers, servers, mobile
devices, electronic systems, networks, and data from malicious attacks. It's also
known as information technology security or electronic information security.
Cyber Security can be categorized into five distinct types:
1. Critical infrastructure security.
2. Application security.
3. Network security.
4. Cloud security.
5. Internet of things (IOT) security.
Network security is the practice of securing a computer network from
intruders, whether targetedattackers or opportunistic malware.
Application security focuses on keeping software and devices free of
threats. A compromised application could provide access to the data its
designed to protect. Successful security begins in the design stage, well
before a program or device is deployed.
Information security protects the integrity and privacy of data, both in storage and
in transit.
Operational security includes the processes and decisions for handling and
protecting data assets. The permissions users have when accessing a network and
the procedures that determine how and where data may be stored or shared all fall
under this umbrella.
Disaster recovery and business continuity define how an organization responds
to a cyber-security incident or any other event that causes the loss of operations or
data. Disaster recovery policies dictate how the
organization restores its
operations and information to return to the same operating capacity as before the
event. Business continuity is the plan the organization falls back on while trying to
operatewithout certain resources.
End-user education addresses the most unpredictable cyber-security factor:
people. Anyone can accidentally introduce a virus to an otherwise secure system by
failing to follow good security practices. Teaching users to delete suspicious email
attachments, not plug in unidentified USB drives, and various other important
lessons is vital for the security of any organization.
The scale of the cyber threat :
The he global cyber threat continues to evolve at a rapid pace, with a rising
number of data breaches each year. A report by RiskBased Security revealed that a
shocking 7.9 billion records have been exposed by data breaches in the first nine
months of 2019 alone. This figure is more than double (112%) the number of
records exposed in the same period in 2018.
Medical services, retailers and public entities experienced the most breaches,
with malicious criminals responsible for most incidents. Some of these sectors
are more appealing to cybercriminals because they collect financial and
medical data, but all businesses that use networks can be targeted for customer
data, corporate espionage, or customer attacks.
With the scale of the cyber threat set to continue to rise, the International Data
Corporation predicts that worldwide spending on cyber-security solutions will
reach a massive $133.7 billion by 2022. Governments across the globe have
responded to the rising cyber threat with guidance to help organizations implement
effective cyber-security practices.
In the U.S., the National Institute of Standards and Technology (NIST) has
created a cyber-security framework. To combat the proliferation of
malicious code and aid in early detection, the framework recommends
continuous, real-time monitoring of all electronic resources.
The importance of system monitoring is echoed in the “10 steps to cyber security”,
guidance provided by the U.K. government’s National Cyber Security Centre. In
Australia, The Australian Cyber Security Centre (ACSC) regularly publishes
guidance on how organizations can counter the latest cyber-securitythreats.
Types of Cyber Threads
The threats countered by cyber-security are three-fold:
1. Cybercrime includes single actors or groups targeting systems for financial gain
or to cause disruption.
2. Cyber-attack often involves politically motivated information gathering.
3. Cyberterrorism is intended to undermine electronic systems to cause panic or
fear.
So, how do malicious actors gain control of computer systems? Here are some
common methods used tothreaten cyber-security:
Malware :
Malware means malicious software. One of the most common cyber threats,
malware is software that a cybercriminal or hacker has created to disrupt or
damage a legitimate user’s computer. Often spread via an unsolicited email
attachment or legitimate-looking download, malware may be used by
cybercriminals to make money or in politically motivated cyber-attacks.
There are a number of different types of malware, including:
Virus: A self-replicating program that attaches itself to clean file and spreads
throughout a computersystem, infecting files with malicious code.
Trojans: A type of malware that is disguised as legitimate software.
Cybercriminals trick users into uploading Trojans onto their computer where
they cause damage or collect data.
Spyware: A program that secretly records what a user does, so that
cybercriminals can make use of this information. For example, spyware could
capture credit card details.
Ransomware: Malware which locks down a user’s files and data, with the
threat of erasing it unless a ransom is paid.
Adware: Advertising software which can be used to spread malware.
Botnets: Networks of malware infected computers which cybercriminals use to
perform tasks online without the user’s permission.
SQL Injection
An SQL (structured language query) injection is a type of cyber-attack used to
take control of and steal data from a database. Cybercriminals exploit
vulnerabilities in data-driven applications to insert malicious code into a
databased via a malicious SQL statement. This gives them access to the sensitive
information contained in the database.
Phishing
Phishing is when cybercriminals target victims with emails that appear to be from
a legitimate company asking for sensitive information. Phishing attacks are often
used to dupe people into handing over credit card data and other personal
information.
Man-in-the-middle attack
A man-in-the-middle attack is a type of cyber threat where a cybercriminal
intercepts communication between two individuals in order to steal data. For
example, on an unsecure WiFi network, an attacker could intercept data being
passed from the victim’s device and the network.
Denial-of-service attack
A denial-of-service attack is where cybercriminals prevent a computer system
from fulfilling legitimaterequests by overwhelming the networks and servers
with traffic. This renders the system unusable, preventing an organization
from carrying out vital functions.
Latest cyber threats In India :
Cosmos Bank Attack : Yet, India has a long way to go to catch up with leading
global players in cybersecurity. The malware attack on Cosmos Bank in 2014, in
which customers lost 094 crore, was a glaring example of how Indian markets
could be easy targets for financial crime syndicates. Brijesh Singh, who handled
the case, said he found fraudulent transactions made in 29 countries in two and a
half hours. The manner in which the crime was committed showed
sophistication and large-scale coordination by international hackers. “What was
equally shocking was how online actors used unsuspecting people as money
mules to launder money for various criminal operations,” he said.
The Cosmos Bank case has shown that Indian agencies need to step up further
in monitoring and preventing money crimes. Sameer Ratolikar, chief information
security officer of HDFC Bank, said Indian banks were facing more social
engineering attacks like phishing, especially during the pandemic because ofthe
growing number of online transactions.
Air India Cyber Attack: In February 2021, when SITA, the Geneva-based air
transport data giant which serves more than 90 per cent of the world’s airlines,
informed Air India that hackers stole the personaldata of 4.5 million passengers, it
presented yet another challenge for India’s cybersecurity establishment.
The attack happened outside Indian jurisdiction, yet millions of Indians were
affected. “The breach involved personal data spanning almost a decade from
August 26, 2011 to February 3, 2021,” Air India said in a statement. While the
Indian cyber-warriors tried their best to limit the damage caused by the breach,
they soon realised that investigation into attacks which happened outside the
Indian cyberspace was not easy because of jurisdictional issues.
What’s upping India’s cybersecurity threat?
India is one of the fastest-growing markets for digital technologies fuelling
government’s push towards actualising its Digital India mission. Whether
creating broadband highways or rolling out services such as DigiLocker and egovernance schemes like the Jan Dhan Yojana, the government has pushed for as
much digital adoption as possible over the past five years.
India now has over 1.15 billion phones and more than 700 million internet users
and makes it a large pool of digitally vulnerable targets. The pandemic has only
exacerbated this problem as it resulted in an even heavier dependence on digital
technologies. From payments to e-shopping to WFH, the pandemic led to greater
adoption of interconnected devices and hybrid work networks. Consequently, this
vast and rapid expansion of digital assets have increased the surface area for cyberattacks by malicious actors and adversaries. The recent spate of attacks on
electricity grids and financial institutions should alert us to the true possibility of
potentially dangerous scenarios in the future.
Cyber threats are of varied nature and some of the key notable ones would be i)
Malware, Viruses, Trojans, spywares, ii) Backdoors, which allow remote access,
iii) DDoS (Distributed Denial of Service), which floodsservers and networks and
makes them unusable, iv) DNS (Domain Named System) poisoning attacks, which
compromises the DNS and redirect websites to malicious sites.
End-user protection
End-user protection or endpoint security is a crucial aspect of cyber security.
After all, it is often an individual (the end-user) who accidentally uploads malware
or another form of cyber threat to their desktop, laptop or mobile device.
So, how do cyber-security measures protect end users and systems? First, cybersecurity relies on cryptographic protocols to encrypt emails, files, and other
critical data. This not only protects information intransit, but also guards against
loss or theft.
In addition, end-user security software scans computers for pieces of malicious
code, quarantines this code, and then removes it from the machine. Security
programs can even detect and remove malicious code hiddenin primary boot record
and are designed to encrypt or wipe data from computer’s hard drive.
Electronic security protocols also focus on real-time malware detection. Many
use heuristic and behavioralanalysis to monitor the behavior of a program and its
code to defend against viruses or Trojans that change their shape with each
execution (polymorphic and metamorphic malware). Security programs can
confine potentially malicious programs to a virtual bubble separate from a user's
network to analyze their behavior and learn how to better detect new infections.
Security programs continue to evolve new defenses as cyber-security
professionals identify new threats and new ways to combat them. To make the most
of end-user security software, employees need to be educated about how to use it.
Crucially, keeping it running and updating it frequently ensures that it can protect
users against the latest cyber threats.
Cyber safety tips - protect yourself against cyberattacks
How can businesses and individuals guard against cyber threats? Here are our top
cyber safety tips:
Update your software and operating system: This means you benefit from the
latest security patches.
Use anti-virus software: Security solutions like Kaspersky Total Security will
detect and removes threats Keep your software updated for the best level of
protection.
Use strong passwords: Ensure your passwords are not easily guessable.
Do not open email attachments from unknown senders: These could be infected
with malware.
Do not click on links in emails from unknown senders or unfamiliar websites:
This is a common waythat malware is spread.
Avoid using unsecure WiFi networks in public places: Unsecure networks
leave you vulnerable to man-in-the-middle attacks.
Conclusion :
Cyber security is one of the most important aspects of the fast-paced growing
digital world. The threats of it are hard to deny, so it is crucial to learn how to
defend from them and teach others how to do it too.
Reference :
1.The Perfect Weapon: War, Sabotage, and Fear in the Cyber
Age by David Sanger.
2.The Darkening Web: The War for Cyberspace by Alexander
Klimburg.
3. Wikipedia
4. Google.