The document outlines various aspects of cybersecurity with a focus on system and application security across multiple modules. It discusses secure operating systems, security controls, information security models, and practical applications like desktop and email security. It emphasizes the importance of using encryption, following security protocols, and implementing various protective measures to safeguard data and systems.

1. Cyber Security -- IV

2. Unit: - Module 4: System and Application Security
Chapter 1: Security Architectures and Models
Chapter 2: System Security
Chapter 3: OS Security
Chapter 4: Wireless Networks and Security

3. Chapter 1: Security Architectures and Models
1. Designing Secure Operating Systems
2. Controls to enforce security services
3. Information Security Models

4. Chapter 1: Security Architectures and Models
Designing Secure Operating Systems
-- Operating system security (OS security) is the process of ensuring OS integrity,
confidentiality and availability.
-- OS security encompasses all preventive-control techniques, which safeguard any computer
assets capable of being stolen, edited or deleted if OS security is compromised
-- Microsoft Windows, Apple macOS, Linux, Android and Apple's iOS.
-- Operating system functions
Controls the backing store and peripherals such as scanners and printers.
Deals with the transfer of programs in and out of memory.
Organises the use of memory between programs.
Organises processing time between programs and users.
Maintains security and access rights of users.
Deals with errors and user instructions.

5. Chapter 1: Security Architectures and Models
● Designing Secure Operating Systems
-- Secure design principles
Establish the context before designing a system.
Make compromise difficult.
Make disruption difficult.
Make compromise detection easier.
Reduce the impact of compromise.
-- Most important points in design of secure system?
-- Cryptography: Cryptography is one of the most important tools for building secure
systems.
-- The proper use of cryptography ensures the confidentiality of data, protect data from
unauthorized modification, and authenticate the source of data

6. Chapter 1: Security Architectures and Models
● Designing Secure Operating Systems
Steps for Designing Secure Operating Systems
○ Keep up with system and software security updates
○ Have your intelligence with you
○ Enable a firewall
○ Adjust your browser settings
○ Install antivirus and anti spyware software
○ Password protect your software and lock your device
○ Encrypt your data
○ Use a VPN
-- While using a VPN, all of your internet traffic is encrypted and tunneled through an
intermediary server in a separate location. This masks your IP, replacing it with a different
one, so that your ISP can no longer monitor your activity.

7. Unit: - Module 4: System and Application Security
2. Controls to enforce security services
-- Common examples are
-- Authentication solutions
-- Firewalls
-- Antivirus software
-- Intrusion detection systems (IDSs)
--Intrusion protection systems (IPSs)
-- Three primary areas or classifications of security controls
-- Management security
-- Operational security
-- Physical security controls

8. Chapter 1: Security Architectures and Models
2. Controls to enforce security services
Tips for Successfully Implementing your Security Control
-- Be sure the solution solves your problems.
-- Be sure the security problem you are solving justifies the
effort necessary to implement and run it.
-- Include the people who will be implementing and managing
the system from the earliest stages.
-- Be sure your deployment timeline is realistic.
-- Be sure your testing is realistic.

9. Chapter 1: Security Architectures and Models
Information Security Models
-- A security model precisely describes important aspects of security and their
relationship to system behavior.
-- The primary purpose of a security model is to provide the necessary level of
understanding for a successful implementation of key security requirements.
-- A computer security model is a scheme for specifying and enforcing security policies.
-- A security model may be founded upon a formal model of access rights, a model of
computation, a model of distributed computing, or no particular theoretical grounding at
all.
.

10. Chapter 1: Security Architectures and Models
Practical application of information security

11. Chapter 2: System Security
1. Desktop Security
2. email security: PGP and SMIME
3. Web Security: web authentication, SSL and SET
4. Database Security

12. Chapter 2: System Security
Desktop Security
-- Encrypt your network connection
-- Encrypt sensitive files stored locally
-- Encrypt private information stored in the cloud
-- Use a free VPN service to protect public Wi-Fi connections
-- Prevent keystroke loggers, other data snoops
-- Perform a manual virus scan with the free Malware bytes Anti-Malware
-- Disable images in e-mail
-- Be wary of e-mail attachments
-- Use a standard (non administrator) account in Windows
-- Destroy old data

13. Chapter 2: System Security
Desktop Security
-- Always install Licensed Software so that you have regular updates of your Operating system and
Applications.
-- In case of open source software, make sure to update frequently.
-- Read the “Terms and Conditions” / “License Agreement” provided by vendor/software before
installation.
-- Properly shutdown and switch off your personal computer after the use along with your external
devices like Monitor, Modem, Speakers etc.

14. Chapter 2: System Security
Desktop Security
-- Physical Security Regularly clean your system and it’s components.
-- Turn your PC Off before cleaning it.
-- Properly organize the power cables, wires, to prevent from water, insects etc.
-- While working at PC, be careful not to spill water or food items on it.
-- Always follow “Safely Remove” option provided by the Operating System while disconnecting the
USB devices.
-- By setting BIOS password, you can prevent unauthorized access to your personal computer.
-- Switch off the computer when it’s not in use.

15. Chapter 2: System Security
Desktop Security
-- Internet Security:
-- Follow Internet Ethics while browsing.
-- Check the copyright issues before using the content of Internet.
-- Always access the site which uses https (Hyper Text Transfer Protocol Secure) while
performing Online transactions, Downloads etc, which is secure.
-- If the site uses SSL, verify the Certificate details like Who is the owner, Expiry date of the
certificate etc to confirm whether it is trusted or not. You can do this by clicking the lock icon.
-- Use only Original Websites for downloading the files rather than Third Party websites.
-- Scan the downloaded files with an updated Anti-Virus Software before using it.
-- Install and properly configure a Software firewall, to protect against malicious traffic.

16. Chapter 2: System Security
Desktop Security
-- Data Security
-- Enable Auto-updates of your Operating System and update it regularly.
-- Download Anti-Virus Software from a Trusted Website and Install. Make sure it automatically
gets updated with latest virus signatures.
-- Download Anti-Spyware Software from a Trusted Website and Install. Make sure it automatically
updates with latest definitions.
-- Use “Encryption” to secure your valuable Information. Note: For encryption password is required,
always remember the password used while encrypting it, else data would not be available thereafter.
-- Strong password should be used for “Admin” Account on computer and for other important
applications like E-mail client, Financial Applications (accounting etc).
-- Backup : Periodically backup your computer data on CD / DVD or USB drive etc.. in case it may get
corrupted due to HardDisk failures or when reinstalling/format ting the system.

17. Chapter 2: System Security
Desktop Security
-- Browser Security:
-- Always update your Web Browser with latest patches.
-- Use privacy or security settings which are inbuilt in the
browser.
-- Also use content filtering software.
-- Always have Safe Search “ON” in Search Engine

18. Chapter 2: System Security
2. email security: PGP and SMIME
Steps to Secure emails
-- Security at sender’s side
-- Security at receiver’s side
-- Secure transmission of emails

19. Chapter 2: System Security
Security at sender’s side
-- Can be implemented by non-technical person
-- Use incognito mode while sending mails
-- Avoid using public computers
Security at receiver’s side
-- Avoid downloading attachments from unknown sender’s
-- Check Email headers to verify identity of sender

20. Chapter 2: System Security
Secure transmission of emails:-
-- PGP (Pretty Good Privacy)
-- SMIME (Secure / Multipurpose Internet Mail Extension)

21. Chapter 2: System Security
Secure transmission of emails:-
-- PGP (Pretty Good Privacy)
-- Provides confidentiality and authentication service
-- Available free worldwide
-- Based on extremely secure algorithm
-- PGP Services
-- Confidentiality -- Authentication -- Compression
-- Resemble -- Segmentation -- E-mail compatibility

22. Chapter 2: System Security
email security: SMIME (Secure / Multipurpose Internet Mail Extension)
-- It is standard for exchanging secure mails with the help of encryption
-- Provides support for varying content
-- Supported by major email like outlook, Netscape
-- Public key cryptography is used for digital sign, encrypt or decrypt the
email.
-- User acquires a public-private key pair with a trusted authority and then
makes appropriate use of those keys with email applications.

23. Chapter 2: System Security

24. Chapter 2: System Security
3. Web Security: web authentication, SSL and SET
4. Database Security

25. Unit: - Module 4: System and Application Security
Chapter 3: OS Security
1. OS Security Vulnerabilities, updates and patches
2. OS integrity checks
3. Anti-virus software
4. Configuring the OS for security
5. OS Security Vulnerabilities, updates and patches

26. Unit: - Module 4: System and Application Security
Chapter 4: Wireless Networks and Security
1. Components of wireless networks
2. Security issues in wireless