Cyber Law and Cyber Security: IT Act Offences and Defences
What this domain tests
Cyber law covers the Information Technology Act, 2000, which came into force on 17 October 2000 and was amended by the IT (Amendment) Act, 2008. Cyber security covers threat types, controls and safe practice. Expect one-mark identification of offences, malware names and defence tools.
Offences to remember
Section 65 covers tampering with computer source documents. Section 66 covers computer-related offences. Section 66C covers identity theft through fraudulent use of another person's password or digital signature. Section 66D covers cheating by personation using a computer resource. Section 66E covers violation of privacy by publishing private images without consent. Section 67 covers publishing obscene material in electronic form. Section 72 covers breach of confidentiality by a person with official access. The Act also gives legal recognition to electronic records and digital signatures.
Security basics
A virus attaches to a host file and needs execution to spread; a worm self-replicates across a network without a host; a Trojan disguises itself as useful software and opens a backdoor; ransomware encrypts files and demands payment; spyware and keyloggers steal data. Defences: firewalls to filter traffic, updated antivirus, strong unique passwords with two-factor authentication, encryption such as TLS giving https, timely patching, and regular tested backups.
Worked example
A student receives mail that looks like a bank notice, asking them to confirm a password on a lookalike site. This is phishing, a social-engineering attack. If the stolen credentials are then used to impersonate the account holder, the conduct falls under identity theft and cheating by personation, so Sections 66C and 66D apply. Naming the technique first and the section second is the marking pattern.
Traps
- Swapping virus and worm; only the worm spreads without a host file.
- Calling phishing 'breaking into a server'.
- Quoting the wrong section for identity theft.
- Claiming a firewall removes viruses; it filters traffic only.
- Ignoring the 2008 amendment when citing the Act.