Cyber Security and Cyber Crime Notes for SSC Exams

Cyber security and cyber crime is a modern and growing topic in SSC Computer Knowledge. The questions are about types of cyber crime, the IT Act and safety measures. These cyber security and cyber crime notes for SSC give you all the key points with tables and practice questions. Read it with the Computer Virus and Malware Notes and Digital India, E-Governance and Digital Payments Notes notes.

What Is Cyber Crime?

Cyber crime is any illegal activity done using a computer, a mobile or the internet. Cyber security means protecting computers, networks and data from such attacks.

Types of Cyber Crime

Types of Hackers

• White hat hacker: an ethical hacker who finds weaknesses to fix them with permission.
• Black hat hacker: a criminal hacker who breaks into systems to steal or damage.
• Grey hat hacker: works between the two, often without permission but without bad intent.

Information Technology Act, 2000

Cyber Safety Tips

• Use strong passwords with letters, numbers and symbols, and do not share them.
• Turn on two-factor authentication (2FA).
• Never share your OTP, PIN or CVV with anyone.
• Check that the website starts with https before entering sensitive information.
• Do not click on unknown links and attachments.
• Use a VPN on public Wi-Fi, and keep the software updated.
• Report cyber fraud on the national helpline 1930 or at the portal cybercrime.gov.in.

Principles of Cyber Security (CIA Triad)

Other important ideas are authentication (proving who you are, by a password, OTP or fingerprint), authorisation (what you are allowed to do) and non-repudiation (a person cannot deny an action, as with a digital signature).

More Cyber Crimes Explained

Encryption and Digital Signature

• Encryption changes the plain text into a secret form (cipher text) so that only the person with the key can read it. Decryption changes it back.
• In symmetric encryption the same key is used to encrypt and decrypt (AES). In asymmetric encryption two keys are used: a public key and a private key (RSA).
• A digital signature proves the identity of the sender and that the message was not changed. It has legal recognition under the IT Act, 2000.
• A digital certificate is issued by a Certifying Authority and links a public key with a person or organisation.
• Hashing converts data into a fixed short code to check that it has not changed.
• HTTPS uses SSL/TLS to encrypt the web traffic and shows a padlock in the browser.

Indian Laws and Institutions

Safe Online Behaviour

• Use a different password for each account, and a password manager if needed.
• Do not use public Wi-Fi for banking and shopping.
• Log out after using a shared computer.
• Check the permissions that a mobile app asks for.
• Keep the privacy settings of social media accounts strict.
• Do not post personal information such as your address, phone number or documents.
• Check the sender address of an email before you click on any link.
• Report a cyber crime quickly; the first hours are important.

Important Questions Explained

Question 1: What is the fraud of stealing passwords through fake emails called?
Answer: Phishing.

Question 2: Which Indian law deals with cyber crime?
Answer: The Information Technology Act, 2000.

Question 3: What is an ethical hacker called?
Answer: A white hat hacker.

Question 4: Which attack makes a website unavailable by sending huge traffic?
Answer: A DoS or DDoS attack.

Question 5: Which agency handles cyber security incidents in India?
Answer: CERT-In.

Question 6: What is the helpline number for reporting cyber fraud in India?
Answer: 1930.

Quick Tips to Remember

• Link phishing with fake emails, vishing with voice calls and smishing with SMS.
• Remember white hat = ethical, black hat = criminal.
• Learn the IT Act year (2000) and the amendment year (2008).
• Learn CERT-In as the national cyber agency.
• Never share OTP or PIN is a common safety question.

Common Mistakes to Avoid

• Mixing phishing, vishing and smishing.
• Confusing a DoS attack with hacking.
• Writing the IT Act year as 2005.
• Mixing white hat and black hat hackers.
• Thinking that https is a guarantee of a genuine website.

Quick Revision Points

• IT Act 2000 (amended 2008) is India's main cyber law.
• Phishing = fake email; vishing = voice; smishing = SMS.
• DDoS = flooding a website with traffic.
• CERT-In = national cyber security agency; helpline 1930.
• Use strong passwords, 2FA and never share OTPs.

Practice Questions With Answers

1. Fake emails that steal bank details are called?
   Answer: Phishing (Social engineering).
2. Phishing through SMS is called?
   Answer: Smishing (Vishing is through calls).
3. The IT Act was passed in which year?
   Answer: 2000 (Amended in 2008).
4. An ethical hacker is known as?
   Answer: White hat hacker (Works with permission).
5. A DDoS attack makes a website?
   Answer: Unavailable (Traffic overload).
6. Which section of the IT Act deals with identity theft?
   Answer: Section 66C (Cheating by personation is 66D).
7. Which agency is the national cyber security agency of India?
   Answer: CERT-In (Since 2004).
8. Which helpline is used for cyber fraud in India?
   Answer: 1930 (Cybercrime portal).
9. Copying a card's data with a device is called?
   Answer: Skimming (ATM fraud).
10. What does 2FA stand for?
    Answer: Two-factor authentication (Extra layer of security).

More Practice Questions With Answers

1. What are the three parts of the CIA triad?
   Answer: Confidentiality, Integrity and Availability (Security principles).
2. Which attack tries all possible passwords?
   Answer: Brute force attack (Password).
3. Which attack redirects users to a fake website?
   Answer: Pharming (DNS).
4. Which key is kept secret in asymmetric encryption?
   Answer: Private key (RSA).
5. Which section of the IT Act was struck down in 2015?
   Answer: Section 66A (Shreya Singhal case).
6. Which law protects the digital personal data in India (2023)?
   Answer: Digital Personal Data Protection Act (2023).
7. What does SQL injection attack?
   Answer: Website databases (Forms).
8. What proves the identity of a sender digitally?
   Answer: Digital signature (IT Act).
9. Which attack sits between two parties secretly?
   Answer: Man-in-the-middle attack (Eavesdropping).
10. Which centre protects critical information infrastructure in India?
    Answer: NCIIPC (Critical infrastructure).
11. What is the process of converting cipher text back to plain text?
    Answer: Decryption (Encryption).
12. Which body coordinates cyber crime in India under the MHA?
    Answer: I4C (Cyber crime centre).

How to Practise This Chapter

1. Read the tables once and learn the key facts by heart.
2. Revise the quick revision points the next day.
3. Attempt the practice questions above without looking at the answers.
4. Solve a full SSC CGL Tier 1 mini mock to test your general awareness.
5. Check the previous year papers to see how SSC asks computer questions.

Related Notes and Practice Papers

• Computer Virus and Malware Notes
• Digital India, E-Governance and Digital Payments Notes
• Internet and Networking Notes
• Computer Knowledge Notes for SSC
• SSC CGL Tier 1 Mini Mock

Explore More SSC Subjects

SSC exams test many subjects, so connect this topic with the related subjects below:

• General Science Notes
• General Awareness Notes
• Quantitative Aptitude Notes
• Reasoning Notes
• Electrical Engineering (SSC JE) Notes
• All SSC subjects and notes

Frequently Asked Questions

What is cyber crime?

Cyber crime is any illegal activity that is done using a computer, a mobile phone or the internet.

What is phishing?

Phishing is a fraud in which fake emails or websites are used to steal passwords and bank details.

What is the IT Act, 2000?

It is India's main law on electronic records, digital signatures and cyber crime. It was amended in 2008.

What is the difference between vishing and smishing?

Vishing is phishing through voice calls, and smishing is phishing through SMS.

What is a DDoS attack?

A DDoS attack floods a website with traffic from many computers so that it becomes unavailable.

Who is a white hat hacker?

A white hat hacker is an ethical hacker who tests security with permission.

What is CERT-In?

CERT-In is the Indian Computer Emergency Response Team that handles cyber security incidents.

How can I report cyber fraud in India?

You can call the helpline 1930 or report it at the cybercrime.gov.in portal.

How many questions come from cyber security in SSC exams?

One or two questions usually come from cyber crime and security.

What is the CIA triad?

The CIA triad means Confidentiality, Integrity and Availability, the three basic aims of information security.

What is encryption?

Encryption is the process of changing readable data into a secret code so that only authorised people can read it.

What is a digital signature?

A digital signature is an electronic way of signing a document that proves the identity of the sender and that the document was not changed.