Computer Concepts and Applications – Internet Security and Related Study Material

Computer Concepts and Applications – Internet Security and Related Study Material

• Internet Security

Introduction :

Internet security relies on specific resources and standards for protecting data that gets sent through the internet. This includes various kinds of encryption such as Pretty Good Privacy(PGP). Other aspects of a secure web setup includes firewalls, which block unwanted traffic, anti-malware, anti-spyware & anti-virus programs that work from specific networks or devices to monitor internet traffic for dangerous attachments. Internet security is generally becoming a top priority for both businesses & governments. Good internet security protects financial details & much more of what is handle by a business or agency’s servers & network hardware. Insufficient internet security can threaten to collapse an e-commerce business or any other operation where data gets routed over the web.

7.1 Internet Security :

Web security may be termed as technological & managerial procedures applied to computer systems to ensure the availability, integrity & confidentiality of computer assets & services from associated threats & vulnerabilities.

7.1.1Concept of Internet Security :

Three basics security concepts important to inforation on the internet are confidentiality, integrity, &availability. Concepts relating to the people who use that information are authentication, authorization & non-repudiation. Integrity and confidentiality can also be enforced on web services through the use of transport layer security(TLS).both SSL and TSL are the same.

• Integrity:

The concept of integrity is divided in 2 forms:

a)Data integrity: this property, that data has not been altered in an unauthorized manner while in storage, during processing or while in transit. another aspect of data integrity is the assurances that data can only be accessed and altered by those authorized to do so. often such integrity is insured by use of a number referred to as message integrity code or message authentication code. This are abbreviated as MIC and MAC respectively.

b)System integrity:

This quality states that a system has when performing the intended function in an unimpaired manner, is free from unauthorized manipulation. Integrity is commonly an organizations most important security objective, after availability. Integrity is particularly important for critical safety and financial data used for activities such as electronic funds transfers ,air traffic control ,and financial accounting.

2)Confidentiality:

Confidentiality is the requirement that private or confidential information should not be disclosed to unauthorized individuals. Confidentiality protection is applies to data in storage ,during processing ,and while in transit. For many organizations ,confidentiality is frequently behind availability and integrity in terms of importance. For some types of information ,confidentiality is a very important attribute. Examples includes research data ,medical and insurance records ,new product specifications ,and corporate investments strategies. In some locations ,there may be a legal obligation to protect the privacy of individuals. This is particularly true for banks and loans companies; debt collectors; businesses is that extend credit to their customers or issue credit cards ; hospitals ,doctor offices ,and medical testing laboratories; individuals or agencies that offer services such as psychological counseling or drug treatment; and agencies that collect taxes.

• Availability:

Availability is a requirement intended to assure that system works promptly and services is not denied to authorized users. This objective protects against , intentional or accidental attempts to either perform unauthorized deletion of data otherwise cause a denial of service or data. Availability is frequently an organizations foremost security objective. To make information available to those who need it and who can be trusted with it, organizations used authentication and authorization.

7.1.2Types internet Security:

The Security of the web s divided into two (a) Computer Security, and (b) Network Security. In generic terms, computer security is the process of securing a single, standalone computer,while network security is the process of securing an entire network of computers.

a)computer Security: technology and managerial procedures applied to computer systems to ensure the availability integrity , and confidentiality of data managed by the computer.

b)Network security:

Protection of network and their services from unauthorized modification destruction, or disclosure and provision of assurance that the network performs its critical functions correctly and there are no harmful side effects. The major points of weakness in computer system are hardware, software, and data however ,other components f the computer system may be targeted.

7.2 Internet Privacy:

Internet privacy is the privacy and security level of personal data published via the internet. It is a broad term that refers to a Variety of factors, techniques and technology use to protect sensitive and private data, communication ,and preference. Internet privacy and anonymity are paramount to users, especially as a E-commerce continues to gain traction, privacy violation and threat risks are standard considerations for any website under development.internet privacy is also known as online privacy 7.3 Ethical Issues In Internet Security Ethics in everyday life serves as moral guide posts, comprising a code that defines behavior as right or wrong . The web offers a vast store of information coupled with extensive communications capabilities , and unethical users can harness this capabilities for personal and financial gains at others expense. Web ethics provide a guide to appropriate online behavior , adapting familiar ethical standards to provide a moral framework for navigating the internet’s virtual environment.

Intellectual Property:

Using material properly without properly citing its source constitutes plagiarism when applied to written works , and the same standard applies to documents and websites on the internet. The creator of the original work is still due acknowledgement of her efforts . File-sharing sites and applications may also provide a means for Web surfer to infringe on other intellectual properties by offering copy righted works for downloading. While illegally downloading copyrighted material is no different form theft , the anonymity which the internet provide coupled with ease of access to artist creation can embolden users who would never think f stilling a physical copy from a store Netiquette:

Netiquette concerns basic rules and ethics of online social interaction when a person is interacting with other in chat rooms or other social environment , He/she should conduct there selves as if they where face to face with the other sharing venue . even when a person is engaged in a heated disagreement , it is mandate to remain respectful and refrain from the use of inflammatory invective, or flaming . it is also considered a faux pas to compose messages consisting entirely of capital letters as it carries the collation that you are shouting . if somebody is new to a chat room or a forum , then it is there responsibility to make sure to learn the site standards of conduct and read its frequently asked questions page to ensure that they do not commit any breaches or netiquette.

respecting Privacy:

A persons computer should be inviolate,a safe place to store data and information, but un ethical individual employ a variety of mean to breach network security and access personal data. Hacking not only represent a gross breach of privacy, it can also personally and financially damaging to the people whose information is accessed. Online businesses routinely collect personal and financial information from there customer and many respect there customers need for confidentiality and security. However, un ethical merchants may share information on there customers contact information, income and spending with third parties without there customers knowledge, abusing there trust in the merchant.

cultivating web ethics :

Parents and teachers should become knowledgeable enough about the internet capabilities and venues for social networking to be able t teach children ethical standard for web use. Children should understand that in addition to being unethical action such as piracy and harassment can carry substantial civil and criminal penalties . organizations such as businesses and schools should develop a clearly articulated acceptable use policy governing permissible internet use among within the institution . the AUP must be written a document an ideally , every member in the organization should sign a document attesting that he’s read the AUP and agrees to abide by it.

7.4Cyber Law

• 7.4.1 Importance Of Cyberlaw:

1)EMAIL become valid and legal form of communication:

Provide Legal Infrastructure:

Companies shall now be able to carry out electronic commerce using the legal infrastructure provided by the Act.

Cover all Aspects of Cyberspace:

Cyber law is important because it touches almost all aspects of transactions and activities on and concerning the Internet, the World Wide Web and Cyberspace. Initially it may seem that Cyber law is a very technical field and that it does not have any bearing to most activities in Cyberspace. But the actual truth is that nothing could be further than the truth .Whether the internet user realize it or not , every action and every reaction in Cyberspace has some legal and Cyber legal perspectives.

Provide Legal Framework For Transactional Activities:

We need such laws so that people can perform purchase transaction over the Net through credit cards without fear of misuse .The act offers the much-needed legal framework so that information is not denied legal effect ,validity or enforceability ,solely on the ground that it is in the form of electronic records.

Promote E-Governance:

In view of the growth in transactions and communications carried out through electronic records, the Act seeks to empower government departments to accept filling ,creating and retention of official documents in the digital format. The Act has also proposed legal framework for the authentication and origin of electronic records / communications through digital signature.

Enhance use of Electronic Form:

This law enables the companies to file any form, application or any other document with any office, authority, body or agency owned or controlled by the appropriate Government in electronic form by means of such electronic form as may be prescribed by the appropriate Government.

Addresses Important Issues of Security:

This law also addresses the important issues of security ,which are so critical to the success of electronic transaction .The Act has given a legal definition to the concept of secure digital signatures that could be required to have been passed through a system of a security procedure ,as stipulated by the Government at a later date under the IT Act 2000 ,it shall now be possible for corporate to have statuary remedy in case if anyone breaks into their computer system or network and cause loss .

Origin of Electronic Records:

The Act has also proposed a legal framework for the authentication and origin of electronic records communications through digital signature. From the perspective of e-commerce.

7.4.2Cyber Laws in India (IT Act- 2000):

In may 2000, both the houses of the India Parliament passed the Information Technology Bill. The Bill received the assent of the President in August 2000 and came to be known as the Information Technology Act, 2000. Cyber laws are contained in the IT Act, 2000. This Act aims to provide the legal infrastructure for e-commerce in India and the cyber laws has major impact for e-business and the new economy in India. So ,it is important to understand the various perspectives of the IT Act 2000 and what it occurs. The Information Technology Act, 2000 also aims to provide for the legal framework so that the legal sanctity is accorded to all electronic records and other activities carried out by electronic means . The Act states that unless otherwise agreed, an acceptance of contract may be expressed by electronic means of communication and the same shall have legal validity and enforceability. Some highlights of the Act are listed below:

Chapter II:

Chapter-II of the Act specifically stipulates that any subscriber may authenticate an electronic record by affixing his digital signature. It further states that any person can verify an electronic record by use of a public key of the subscriber.

Chapter III:

Chapter-III of the Act details about Electronic Governance and provides inter-alia amongst others that where any laws provides that information or any other matter shall be in writing or in the typewritten or printed form, then, notwithstanding anything contained in such law, such requirement shall be deemed to have been satisfied if such information or matter is rendered or made available in an electronic form; and accessible so as to be usable for a subsequent reference. The said chapter also details the legal recognition of Digital Signatures.

Chapter IV:

Chapter-IV of the said Act gives a scheme for Regulation of Certifying Authorities. The Act envisages a Controller of Certifying Authorities who shall perform the function of exercising supervision over the activities of the Certifying Authorities as also laying down specifying the various forms and content for recognizing foreign Certifying Authorities and it further details the various provisions for the issue of licenses issue Digital Signature Certificates.

Chapter VII:

Chapter –VII of the Act details about the scheme of things relating to Digital Signature Certificates. The duties of subscriber are also enshrined in the said Act.

Chapter-IX:

Chapter-IX of the said Act talks about penalties and adjudication for various offences. The penalties for damage to computer, computer systems etc. has been fixed as damages by way of compensation not exceeding Rs. 1,00,00,000 to affected persons. The Act talks of appointment of any officers not below the rank of a Director to the Government of India or an equivalent officer of state government as an adjudicating officer who shall adjudicate whether any person has made a contravention of any of the provisions of the said Act or rules framed there under. The said Adjudicating officer has been given the powers of Civil Court.

Chapter-X:

Chapter-X of the Act talks of the establishment of the Cyber Regulations Appellate Tribunal, Which shall be an appellate body where appeals against the orders passed by the Adjudicating Officers, shall be preferred.

Chapter-XI:

Chapter-XI of the Act talks about various offences and the said offences shall be investigated only by a Police Officer not below the rank of the Deputy Superintendent of Police. These offences include tampering with computer source documents, publishing of information, which is obscene in electronic form, and hacking.

Term – I

Unit No

• Topic

1.

Introduction to Computer Fundamentals

Introduction to Computer

Computer System Hardware

Computer Memory

• Input and Output Devices

Interaction between User and Computer

Introduction to Free and Open Source Software

• Definition of Computer Virus, Types of Viruses, Use of Antivirus software
• 2.
• Basics of Operating System
• Definition of Operating System
• Objectives, types, and functions of Operating Systems
• Working with Windows Operating System: Introduction, The
• Desktop, Structure of Windows, Windows Explorer, File and Folder
• Operations, The Search, The Recycle Bin, Configuring the Screen,
• Adding or Removing New Programs using
• Control Panel, Applications in windows (Paint, Notepad, WordPad, Calculator)

3.

Introduction to Business Communication Tools [

• MS-Word: Introduction, Starting MS-Word, MS-Word Screen and its
• Components, Elementary Working with MS-Word
• MS-Excel: Introduction, Starting MS-Excel, Basics of Spreadsheet, MS-Excel
• Screen and Its Components, Elementary Working with MS-Excel
• MS-Powerpoint: Introduction, Starting MS-PowerPoint, Basics of
• PowerPoint, MS-PowerPoint Screen and Its Components, Elementary Working with MSPowerPoint

4.

Introduction to HTML.

Introduction to HTML. Working of HTML

• Creating and loading HTML page, tags
• Structure of on HTML, Document, Stand Alone Tags
• Formatting text, Adding Images
• Creating hyper Links, Tables
• Sending E-mails through Web Page
• Sample web pages
• 5.
• Use of Computer in Commerce

Data Processing, Files and Records, File Organization (Sequential,

Direct/Random, Index )

• Computer Applications in Business – Need and Scope
• Computer Applications in various fields of Commerce: Personnel Administration,
• Accounting, Cost and Budgetary Management, Purchasing, Banking,
• Insurance

and Stock-broking, e-governance

Introduction to E-Commerce, Evolution of E-Commerce, Role of ECommerce,

E-Commerce Framework, E-Commerce Categories

• Term – II

Unit No

• Topic
• 1.
• Internet and Internet application Introduction, Internet evolution
• Working of Internet, Use of Internet

Overview of World Wide Web (Web Server and Client)

Introduction to Search engine and Searching the Web

• Downloading files

Introduction to Web Browsers

• Working with E-mail (creation and use of the same)
• 2.
• Electronic Data Interchange Introduction to EDI
• EDI Architecture
• Financial EDI
• Overview of the technology involved in EDI

3.

Electronic Payment System

Introduction to EPS

Introduction to EFT (Electronic Fund Transfer)

Introduction to SET (Secure Electronic Transaction)

• Business requirement addressed by SET

Introduction to Digital Signature and Digital Certificates , Stages of SET

Types of Payment System: Digital Cash, Electronic Cheque, Smart Card,

Credit/Debit Card

• 4.

Introduction to HTML.

Introduction to HTML. Working of HTML

• Creating and loading HTML page, tags
• Structure of on HTML, Document, Stand Alone Tags
• Formatting text, Adding Images
• Creating hyper Links, Tables
• Sending E-mails through Web Page
• Sample web pages

5.

Introduction To Web page Design

Introduction to Web design, Types of Web Pages

• Web design Pyramid Building web sites
• Web development process model
• 6.
• Designing The web pages
• Page size, Page type, Page margin, Entrance page

Exit page, Graphics in Webpage design

Animation Effect, Sound Effect

Color Effect

• Uploading the web site (Web space, Domain Name, Hosting the web site)
• 7.

Internet Security

Security, Privacy

Ethical Issues & Cyber Law

• Output

Information

The process of producing useful information or results for the user, such as a printed report or visual display.

• Control the workflow

Directs the manner and sequence in which all of the above operations are performed.

Sr.No.

• Type
• Specifications
• PC (Personal Computer)
• It is a single user computer system having moderately powerful microprocessor
• WorkStation
• It is also a single user computer system which is similar to
• Sr.No
• Keys

Description

Typing Keys

These keys include the letter keys (A-Z) and digit keys (0-9) which generally give same layout as that of typewriters.

Numeric Keypad

It is used to enter numeric data or cursor movement. Generally, it consists of a set of 17 keys that are laid out in the same configuration used by most adding machines and calculators.

Function Keys

The twelve function keys are present on the keyboard which are arranged in a row at the top of the keyboard. Each function key has unique meaning and is used for some specific purpose.

Control keys

These keys provide cursor and screen control. It includes four directional arrow keys. Control keys also include Home, End, Insert, Delete, Page Up, Page Down, Control(Ctrl), Alternate(Alt), Escape(Esc).

Special Purpose Keys

Keyboard also contains some special purpose keys such as Enter, Shift, Caps Lock, Num Lock, Space bar, Tab, and Print Screen.

• Window part
• What it's useful for

Navigation pane

Use the navigation pane to access libraries, folders, saved searches, and even entire hard disks. Use the Favorites section to open your most commonly used folders and searches. You can also expand Computer to browse folders and subfolders.

Back and Forward button

Use the Back button and the Forward button to navigate to other folders or libraries you've already opened without closing the current window. These buttons work together with the address bar; after you use the address bar to change folders, you can use the Back button to return to the previous folder.

Toolbar

Use the toolbar to perform common tasks, such as changing the appearance of your files and folders, burning files to a CD, or starting a digital picture slide show. The toolbar's buttons change to show only the tasks that are relevant.

Address bar

Use the address bar to navigate to a different folder or library or to go back to a previous one.

Library pane

The library pane appears only when you are in a library (such as the Documents library). Use the library pane to customize the library or to arrange the files by different properties.

• Column headings
• Use the column headings to change how the files in the file list are organized.

File list

This is where the contents of the current folder or library are displayed. If you type in the search box to find a file, only the files that match your current view (including files in subfolders) will appear.

Search box

Type a word or phrase in the search box to look for an item in the current folder or library. The search begins as soon as you begin typing—so if you type "B," for example, all the files with names starting with the letter B will appear in the file list.

Details pane

Use the details pane to see the most common properties associated with the selected file. File properties are information about a file, such as the author, the date you last changed the file, and any descriptive tags you might have added to the file.

Preview pane

Use the preview pane to see the contents of most files. If you select an e-mail message, text file, or picture, for example, you can see its contents without opening it in a program. If you don't see the preview pane, click thePreview pane button in the toolbar to turn it on.

• Type
• Coverage
• Performance
• Standards
• Applications
• Wireless
• PAN
• Within reach of a person

Moderate

Wireless PAN Within reach of a person Moderate Bluetooth, IEEE 802.15, and IrDa Cable replacement for peripherals

• Cable replacement for peripherals
• Wireless
• LAN
• Within a building or campus
• High
• IEEE 802.11, Wi-Fi, and
• HiperLAN
• Mobile extension of wired networks
• Wireless
• MAN
• Within a city
• High
• Proprietary, IEEE 802.16, and WIMAX
• Fixed wireless between homes and businesses and the Internet
• Wireless
• WAN
• Worldwide
• Low
• CDPD and Cellular 2G,
• 2.5G, and 3G

Mobile access to the Internet from outdoor areas

ST*850*1001

• ST, to indicate start of a transaction set – in this case the 850 purchase order

BEG*00*SA*4768*65*20120930

• BEG, to indicate the beginning of the PO, specifically
• N1*SO*XYZ Company

N1, a name segment

N3*123 Main Street

• N3, to provide street address
• N4*Fairview*CA*94168
• N4, to provide city/state/zip

PO1*1*100*EA*27.65**VN*33189642

PO1, to provide line item detail

CTT*1*100

• CTT, to provide summary data for the PO

SE*8*1001

• SE, to indicate the end of the PO

Align:

This attribute specifies the alignment of an image according to surrounding elements. Values of align can be : top, bottom, middle, left, right.

Alt:

It is a optional text as an alternative to the image on the browser. Alternate text appears when the image doesn’t load on the web page.

e.g. : <IMG SRC="somepicture.gif" ALT="This is some picture"> It is a optional text as an alternative to the image on the browser. Alternate text appears when the image doesn’t load on the web page.

• e.g. : <IMG SRC="somepicture.gif" ALT="This is some picture">
• Ismap

The ismap attribute identifies an image as an image map. This is used for server-side maps. Image maps are graphics in which certain regions are mapped to URLs. By clicking on different regions, different resources can be accessed from the same image.

• e.g. : <A HREF="http://machine/htbin/imagemap/sample">

< IMG SRC="sample.gif" ISMAP></A>

server-side maps. Image maps are graphics in which certain regions are mapped to URLs. By clicking on different regions, different resources can be accessed from the same image.

• e.g. : <A HREF="http://machine/htbin/imagemap/sample">
• < IMG SRC="sample.gif" ISMAP></A>

Src

The value of the src attribute is the URL of the image to be displayed on web page. SRC is mandatory. Ex. <img src="somepicture.gif"> Width

• This tag specifies the width of an image. Width should be specified in pixels
• Height
• This tag specifies the height of an image. It should be specified in pixels.
• Border
• It specifies the thickness of the border around an image.
• Vspace,
• Hspace
• Vspace,

Hspace

The VSPACE attribute controls the vertical space above and below the image, while HSPACE controls the horizontal space to the left and right of the image. They allow setting of a 'margin' around the image which is kept as white space – useful to prevent text wrapping right up to floating images.

HREF

If the HREF attribute is present, the text between the opening and closing anchor elements becomes hypertext.

• Ex.<a href=”hello.html”>click me</a>

Clicking on “click me” it will open “hello.html” document specified by Href.

With the HREF attribute, the form HREF="#identifier" can refer to another anchor in the same document. Ex. .<a href=”new.html#info”>click me</a> Clicking on it will navigate to the tag named “info” in page “new.html”.

NAME

If present, the NAME attribute allows the anchor to be the target of a link. It is similar to a bookmark. The value of the NAME attribute is an identifier for the anchor. Which must be unique within the HTML document.

TITLE

Title attribute should provide the title of the document whose address is given by the HREF attribute.

TARGET

Specifies where to open the linked document. It can have values _blank, _parent, _self _top, framename which specifies whether the document to be displayed in same page or new browser window etc.

Row 1, Column 1

Row 1, Column 2

Row 2, Column 1

Row 2, Column 2

• Name
• Salary

Ramesh Raman

• 5000

Shabbir Hussein

• 7000
• Name

Salary

Ramesh Raman

• 5000

Shabbir Hussein

• 7000
• This is
• the caption
• row 1, column 1
• row 1, columnn 2
• row 2, column 1
• row 2, columnn 2
• Attribute
• Description
• align
• Aligns the content in a cell. It can have values : left, right, center, justify
• bgcolor
• Specifies the background color for a cell
• It can be specified as bgcolor= rgb(x,x,x) or
• #xxxxxx or colorname
• Specifies the background color for a cell
• It can be specified as bgcolor= rgb(x,x,x) or
• #xxxxxx or colorname
• colspan
• Specifies the number of columns a cell should merge
• Height
• Sets the height of a cell
• Rowspan
• Sets the number of rows a cell should merge
• Width

Specifies the width of a cell

Column 1

Column 2

Column 3

Row 1 Cell 1

Row 1 Cell 2

Row 1 Cell 3

Row 1 Cell 1

Row 2 Cell 2

Row 2 Cell 3

Row 3 Cell 1

• </tr>
• </thead>
• <tfoot>
• <tr>
• <td colspan="4">This is the head of the table</td>
• <td colspan="4">This is the foot of the table</td>
• This is the head of the table

This is the foot of the table

Cell 1

Cell 2

Cell 3

Cell 4

• Name

Salary

Ramesh Raman

• 5000

Shabbir Hussein

7000