Cybercrime involves illegal activities carried out using digital technology, often with criminal intent. Information security focuses on protecting systems and data from cyber threats. The Indian IT Act defines cybercrimes like hacking, data theft, and cyberbullying and prescribes penalties. It has undergone amendments to address new technologies. Other countries also have their own laws regulating electronic transactions, data protection, and cybersecurity.

1. Introduction to Cybercrime
ILO 7016.1: Understand the concept of cybercrime and its
effect on outside world

2. Contents
Cybercrime definition and origins of the world
Cybercrime and information security
Classifications of cybercrime
Cybercrime and the Indian ITA 2000
A global Perspective on cybercrimes.

3. Cyber Crime
The term cybercrime is used to describe a unlawful activity in which computer or
computing devices such as smartphones, tablets, Personal Digital Assistants
(PDAs), etc. which are stand alone or a part of a network are used as a tool or/and
target of criminal activity. It is often committed by the people of destructive and
criminal mindset either for revenge, greed or adventure.

4. Cybercrime and information security
Cybercrime and information security are related concepts, but they have distinct meanings and focus areas.
Cybercrime:
● Nature: Cybercrime refers to criminal activities that are conducted through digital means, such as computers,
networks, and the internet. It involves the use of technology to commit illegal acts or harm individuals,
organizations, or governments.
● Intent: The primary intent of cybercriminals is to gain unauthorized access, steal sensitive information, disrupt
services, defraud individuals or organizations, or otherwise engage in malicious activities for financial gain,
political motives, or personal reasons.
● Examples: Cybercrimes include hacking, phishing, malware distribution, identity theft, credit card fraud,
ransomware attacks, cyberbullying, online scams, and various forms of online harassment.
● Legal Consequences: Cybercrime is a violation of the law and can lead to criminal charges, prosecution, and
penalties if the perpetrators are caught and successfully prosecuted.

5. Cybercrime and information security
Information Security:
● Nature: Information security, also known as cybersecurity, involves protecting digital information from
unauthorized access, disclosure, alteration, or destruction. It focuses on safeguarding the
confidentiality, integrity, and availability of data and information systems.
● Intent: The primary intent of information security is to prevent unauthorized access, data breaches, and
cyberattacks by implementing a range of security measures and best practices.
● Examples: Information security practices include encryption, access controls, firewalls, intrusion
detection systems, antivirus software, regular security assessments, employee training, incident
response planning, and disaster recovery.
● Legal Consequences: Information security is a proactive approach aimed at preventing and mitigating
cybercrimes. Organizations and individuals take steps to protect themselves against cyber threats and
vulnerabilities to avoid the negative legal, financial, and reputational consequences of cyberattacks.

6. Cybercrime and information security
● Cybercrime involves illegal activities carried out using digital
technology, often with the intent to cause harm, whereas information
security focuses on protecting data, systems, and networks from cyber
threats and vulnerabilities.
● While cybercrime is concerned with the actions of malicious actors,
information security focuses on measures to prevent and mitigate those
actions to ensure the safe and secure use of digital technology.

7. History of Internet
The history of the Internet is a complex and multifaceted story that spans several decades. Here is a brief overview
of key milestones and developments in the history of the Internet:
● 1960s - The Birth of ARPANET: The precursor to the Internet, ARPANET, was created by the U.S.
Department of Defense's Advanced Research Projects Agency (ARPA, now known as DARPA) in the late
1960s. The goal was to establish a reliable communication network that could withstand a nuclear attack.
● 1970s - TCP/IP and Email: The development of the Transmission Control Protocol (TCP) and the Internet
Protocol (IP) laid the foundation for the modern Internet architecture. Ray Tomlinson sent the first networked
email in 1971, using the "@" symbol to denote sending messages between different hosts.
● 1980s - Domain Name System (DNS) and Usenet: The Domain Name System was introduced in the 1980s,
providing a hierarchical naming system for websites and servers. Usenet, a precursor to online forums and
discussion boards, was also established during this time.

8. History of Internet
● Early 1990s - World Wide Web (WWW): Tim Berners-Lee's creation of the World Wide Web in 1989
marked a significant breakthrough. The WWW allowed documents to be linked via hyperlinks and
viewed through web browsers, making the Internet accessible to a wider audience.
● Mid-1990s - Commercialization and Browser Wars: The mid-1990s saw a surge in Internet usage and
the commercialization of the web. The "browser wars" between Netscape Navigator and Microsoft's
Internet Explorer fueled rapid development and innovation.
● Late 1990s - Dot-Com Bubble: The late 1990s brought a period of exuberant investment in Internet-
related businesses, resulting in the dot-com bubble. Many companies experienced rapid growth and
subsequent crashes.
● Early 2000s - Broadband and Social Media: The early 2000s saw increased adoption of broadband
internet connections, enabling faster data transfer. Social media platforms like Friendster, MySpace,
and later Facebook began to reshape online interactions.

9. History of Internet
● Mid-2000s - Web 2.0 and Mobile Internet: The concept of Web 2.0 emerged, emphasizing user-
generated content and collaborative platforms. The proliferation of mobile devices further expanded
internet access and usage.
● Late 2000s - Cloud Computing and Streaming: Cloud computing gained prominence, allowing users to
store and access data online. Streaming services like YouTube and Netflix transformed how users
consume media.
● 2010s - IoT, AI, and Mobile Apps: The Internet of Things (IoT) connected everyday objects to the
internet, while artificial intelligence (AI) and machine learning became integral parts of online
experiences. The rise of smartphones led to the dominance of mobile apps.
● Present and Future - 5G and Beyond: The present era is characterized by the continued expansion of
internet access, the growth of e-commerce, the development of 5G networks for faster connectivity,
and ongoing innovations in areas like virtual reality, augmented reality, and blockchain technology.

10. Classification of Cyber Crimes
The cyber criminal could be internal or external to the organization facing the
cyber attack. Based on this fact, the cyber crime could be categorized into two
types:
1. Insider Attack
2. External Attack

11. Insider Attack
An attack to the network or the computer system by some person with authorized system access is
known as insider attack.
It is generally performed by dissatisfied or unhappy inside employees or contractors. The motive of
the insider attack could be revenge or greed.
It is comparatively easy for an insider to perform a cyber attack as he is well aware of the policies,
processes, IT architecture and weakness of the security system.
Moreover, the attacker have an access to the network. Therefore it is comparatively easy for a
insider attacker to steal sensitive information, crash the network, etc.
In most of the cases the reason for insider attack is when a employee is fired or assigned new
roles in an organization, and the role is not reflected in the IT policies.
This opens a vulnerability window for the attacker. The insider attack could be prevented by
planning and installing an Internal intrusion detection systems (IDS) in the organization.

12. External Attack:
When the attacker is either hired by an insider or an external entity to the
organization, it is known as external attack.
The organization which is a victim of cyber attack not only faces financial loss but
also the loss of reputation.
Since the attacker is external to the organization, so these attackers usually scan
and gathering information.
An experienced network/security administrator keeps regular eye on the log
generated by the firewalls as external attacks can be traced out by carefully
analyzing these firewall logs.
Also, Intrusion Detection Systems are installed to keep an eye on external attacks.

13. Classification of Cyber Crimes
The cyber attacks can also be classified as structure attacks and unstructured
attacks based on the level of maturity of the attacker. Some of the authors have
classified these attacks as a form of external attacks but there is precedence of
the cases when a structured attack was performed by an internal employee. This
happens in the case when the competitor company wants the future strategy of an
organization on certain points. The attacker may strategically gain access to the
company as an employee and access the required information.

14. Classification of Cyber Crimes
Unstructured attacks: These attacks are generally performed by amatures who
don‟t have any predefined motives to perform the cyber attack. Usually these
amatures try to test a tool readily available over the internet on the network of a
random company.

15. Classification of Cyber Crimes
Structure Attack: These types of attacks are performed by highly skilled and
experienced people and the motives of these attacks are clear in their mind. They
have access to sophisticated tools and technologies to gain access to other
networks without being noticed by their Intrusion Detection Systems(IDSs).
Moreover, these attacker have the necessary expertise to develop or modify the
existing tools to satisfy their purpose. These types of attacks are usually
performed by professional criminals, by a country on other rival countries,
politicians to damage the image of the rival person or the country, terrorists, rival
companies, etc.

16. Reasons for Commission of Cyber Crimes
There are many reasons which act as a catalyst in the growth of cyber crime.
Some of the prominent reasons are:
a. Money: People are motivated towards committing cyber crime is to make quick
and easy money.
b. Revenge: Some people try to take revenge with other
person/organization/society/ caste or religion by defaming its reputation or
bringing economical or physical loss. This comes under the category of cyber
terrorism.
c. Fun: The amateur do cyber crime for fun. They just want to test the latest tool
they have encountered.

17. d. Recognition: It is considered to be pride if someone hack the highly secured
networks like defense sites or networks.
e. Anonymity- Many time the anonymity that a cyberspace provide motivates the
person to commit cyber crime as it is much easy to commit a cybercrime over the
cyber space and remain anonymous as compared to real world. It is much easier
to get away with criminal activity in a cyber world than in the real world. There is a
strong sense of anonymity than can draw otherwise respectable citizens to
abandon their ethics in pursuit personal gain.

18. INDIAN IT ACT
The Indian IT Act refers to the Information Technology Act,
2000, which is an important legislation in India that deals with
electronic transactions, digital signatures, cybercrimes, and
electronic governance. The act was enacted to provide a legal
framework for facilitating electronic commerce, promoting the
use of electronic records, and addressing issues related to
cybersecurity and data protection.

19. Here are some key features and provisions of the Indian IT Act:
● Digital Signatures: The IT Act recognizes digital signatures as legally valid and
equivalent to physical signatures. It provides the legal framework for the use of digital
signatures in electronic transactions.
● Electronic Governance: The act emphasizes the use of electronic means for
government-related activities and services to ensure efficiency and transparency.
● Cybercrimes: The IT Act defines various cyber offenses and their corresponding
penalties. It covers offenses such as unauthorized access to computer systems, data
theft, hacking, and distribution of malicious software.
● Data Protection and Privacy: The act includes provisions for the protection of sensitive
personal data and information. It establishes guidelines for handling and processing
personal data and imposes penalties for violations.

20. ● Intermediary Liability: The act addresses the liability of intermediaries (such as internet
service providers and social media platforms) for content posted by users on their
platforms. It provides certain safe harbor provisions to protect intermediaries from
liability for user-generated content, subject to compliance with certain conditions.
● Computer-related Offenses: The act deals with offenses related to computer systems,
including unauthorized access, hacking, and introducing viruses or malware.
● Cyber Appellate Tribunal: The act established the Cyber Appellate Tribunal to hear
appeals against orders passed by adjudicating officers under the act.
● Adjudicating Officers and Authorities: The act designates certain officers and
authorities to hear and decide on matters related to cyber offenses and data
protection.

21. Amendments to IT Act
It's important to note that the Indian IT Act has been amended over the
years to keep pace with technological advancements and changing cyber
threats. Furthermore, India has introduced additional regulations related
to data protection, including the Personal Data Protection Bill, 2019, which
is currently under consideration by the Indian Parliament. This bill aims to
provide a comprehensive framework for the protection of personal data
and privacy in India.

22. Amendments to IT Act
the Indian Information Technology Act, 2000 (IT Act) has undergone several amendments over
the years to address the changing landscape of technology and digital transactions. Some key
amendments to the IT Act include:
Information Technology (Amendment) Act, 2008: This amendment expanded the scope of
the original IT Act to cover new technology developments. It introduced provisions related
to data protection, security practices, penalties for cybercrimes, and the establishment of
the Indian Computer Emergency Response Team (CERT-In).

23. Amendments to IT Act
● Information Technology (Amendment) Act, 2009: This amendment further strengthened provisions related
to cybersecurity, data protection, and the powers of law enforcement agencies to investigate and prevent
cybercrimes.
● Information Technology (Amendment) Act, 2011: This amendment introduced changes to address issues
related to electronic signatures, digital signatures, and the facilitation of electronic governance.
● Information Technology (Amendment) Act, 2018: This significant amendment introduced changes to the IT
Act to align it with emerging technologies and digital initiatives. It included provisions related to electronic
authentication, electronic evidence, and penalties for offenses such as cyberbullying and child pornography.
● Data Protection Bill (Proposed): While not an amendment to the IT Act itself, the proposed Data Protection
Bill aims to establish comprehensive data protection and privacy regulations in India. Once enacted, this bill
will work in conjunction with the IT Act to regulate the collection, processing, and use of personal data.

24. https://www.meity.gov.in/content/information-technology-act-2000
https://www.meity.gov.in/content/cyber-laws

25. cyber crimes mentioned in indian it act
The Indian IT Act, 2000, defines several cybercrimes and prescribes penalties for them. Some of the
cybercrimes mentioned in the act are as follows:
● Tampering with Computer Source Code (Section 65): This offense involves intentionally altering,
damaging, deleting, or causing any harm to a computer source code. It carries a penalty of
imprisonment up to three years or a fine up to two lakh rupees or both.
● Hacking (Section 66): Hacking refers to unauthorized access to a computer system or network. It
includes introducing a virus, worm, or other malicious code to the system. The act prescribes
imprisonment up to three years or a fine up to five lakh rupees or both for this offense.
● Data Theft (Section 66B): Data theft involves dishonestly receiving or retaining any stolen data,
knowing or having reason to believe that it is stolen. It is punishable with imprisonment up to three
years or a fine up to one lakh rupees or both.
● Identity Theft (Section 66C): Identity theft includes using someone else's identity for illegal
purposes. It can lead to imprisonment up to three years or a fine up to one lakh rupees or both.

26. ● Publishing or Transmitting Obscene Material (Section 67): This offense involves publishing or transmitting
obscene material electronically. It carries a penalty of imprisonment up to three years or a fine up to five
lakh rupees or both.
● Child Pornography (Section 67B): Producing, publishing, transmitting, or causing to be transmitted child
pornography is an offense punishable with imprisonment up to seven years and a fine.
● Cyber Terrorism (Section 66F): Cyber terrorism involves acts that threaten the unity, integrity, security, or
sovereignty of India or create a situation that leads to mass disruption of essential services using a
computer resource. It carries a punishment of life imprisonment.
● Unauthorized Access to Computer Material (Section 43): Unauthorized access to computer material is a
civil offense, and the act provides for compensation to the affected party.
These are just a few examples of cyber crimes mentioned in the Indian IT Act. The act also includes provisions for
other offenses related to breach of confidentiality, privacy, and other computer-related crimes. The penalties for
these offenses vary depending on the severity of the crime and its impact on individuals, organizations, or the
country as a whole.

27. IT LAWS IN OTHER COUNTRIES
various countries have enacted their own information technology laws to regulate electronic
transactions, data protection, cybersecurity, and other technology-related matters. The names and
details of these acts may have changed or evolved over time, so it's essential to verify the latest
information from official government sources. Here is a list of some notable IT acts from different
countries:
● United States: The United States has several laws related to information technology,
including the Computer Fraud and Abuse Act (CFAA) and the Digital Millennium Copyright Act
(DMCA).
● European Union: The General Data Protection Regulation (GDPR) is a significant data
protection law that applies to all EU member states.
● India: The Information Technology Act, 2000, governs electronic transactions, cybersecurity,
and data protection in India.

28. ● United Kingdom: The Data Protection Act 2018 and the Computer Misuse Act 1990 are some of the
key IT-related laws in the UK.
● Canada: Canada has the Personal Information Protection and Electronic Documents Act (PIPEDA)
and the Canadian Anti-Spam Legislation (CASL).
● Australia: Australia has the Privacy Act 1988, which includes the Notifiable Data Breaches (NDB)
scheme, and the Cybercrime Act 2001.
● Singapore: Singapore's Personal Data Protection Act (PDPA) and the Computer Misuse and
Cybersecurity Act (CMCA) are the relevant IT laws.
● China: China has the Cybersecurity Law, which covers various aspects of cybersecurity, data
protection, and internet governance.
● Japan: Japan's Act on the Protection of Personal Information (APPI) is the primary law for data
protection.
● Brazil: Brazil has the Lei Geral de Proteção de Dados Pessoais (LGPD), which is a comprehensive
data protection law.
● South Africa: The Protection of Personal Information Act (POPIA) is South Africa's data protection
law.
These are just a few examples, and many other countries have their own IT and data protection laws to regulate technology-related
activities within their jurisdictions. It is essential to consult official government sources for the latest and most accurate information

29. cyber crime has been largely reported in india
several cyber crimes have been largely reported in India. Some of the prominent cybercrimes
that have affected individuals, businesses, and organizations in India include:
● Phishing: Phishing attacks involve fraudulent attempts to trick individuals into revealing
sensitive information, such as login credentials, credit card details, or personal
information. Cybercriminals often use emails, websites, or messages that appear
legitimate to deceive victims.
● Online Fraud: Online fraud encompasses various forms of scams, including lottery
scams, job scams, investment scams, and fake shopping websites. These scams aim
to steal money from unsuspecting victims by luring them into fraudulent transactions
or investments.

30. cyber crime has been largely reported in india
● Cyber Extortion: Cyber extortion involves threatening individuals or organizations with harm or
damage unless a ransom is paid. Ransomware attacks, where attackers encrypt victims' data and
demand a ransom for its release, are a common form of cyber extortion.
● Social Media Hacking: Cybercriminals may hack into social media accounts to gain unauthorized
access, steal personal information, or spread false information.
● Data Breaches: Data breaches involve unauthorized access to sensitive information, such as
personal data, financial records, or intellectual property. Breaches can occur due to security
vulnerabilities in systems or through insider threats.
● Online Harassment and Cyberbullying: Harassment and cyberbullying occur when individuals use
digital platforms to intimidate, threaten, or humiliate others.
● Identity Theft: Cybercriminals may steal personal information to impersonate individuals and
commit financial fraud or other crimes.
● Cyber Attacks on Government and Private Organizations: Government websites and private
organizations have been targeted by cyber attacks for various reasons, including hacking for
political reasons, financial gain, or to cause disruption.

31. Cybercrime trends can change over time as new technologies emerge and
cybercriminals adapt their tactics. The Indian government and law
enforcement agencies continuously work to combat cybercrimes and
enhance cybersecurity measures to protect individuals and organizations
from digital threats.

32. References
Nina Godbole, Sunit Belapure, Cyber Security, Wiley India, New Delhi