Home
School Syllabus
CBSE
Class XII
Computer Science
अध्याय 12: सुरक्षा पहलू (Security Aspects)

माध्यम चुनें / Select Medium:

CBSE • कक्षा XII • Computer Science • अध्याय 12

अनुमानित समय: 45 Mins

प्रगति: अध्ययनरत

सुरक्षा पहलू (Security Aspects)

In CBSE Class 12 Computer Science, "Security Aspects" provides an authoritative master guide on cybersecurity, cryptography, and digital asset protection. This comprehensive chapter covers the taxonomy of malware (Viruses, Worms, Trojan Horses, Spyware, Ransomware, Adware, Keyloggers), network attack vectors (Phishing, Denial of Service [DoS/DDoS], Spoofing, Man-in-the-Middle), defense countermeasures (Firewalls, Antivirus engines, Cookies and tracking hygiene, HTTPS/SSL certificates), cryptographic principles (Symmetric vs Asymmetric encryption, Public/Private key pairs, Digital Signatures), and legal frameworks under the Indian Information Technology Act 2000 aligned with the 2026–27 CBSE curriculum.

अध्याय CBT ऑनलाइन टेस्ट दें सभी अध्याय देखें

प्रस्तावना अध्याय अवधारणाएँ सिंटेक्स एवं प्रमुख कमांड अध्याय सारांश स्व-मूल्यांकन अभ्यास टेस्ट दें

How Can an Invisible String of Code Hold a Global Hospital or Pipeline for Millions in Ransom?

In May 2017, the WannaCry ransomware worm swept across 150 countries in less than 12 hours, encrypting 200,000 computers, locking doctors out of patient health records in the UK National Health Service, and halting automotive assembly lines in France and Japan. The weapon was not a physical bomb, but an exploit that weaponized a leaked vulnerability in Windows networking. In an increasingly hyper-connected world where banks, electrical power grids, water treatment plants, and personal identities reside online, cybersecurity is no longer a technical specialty—it is national defense and personal survival. How do computer viruses replicate, how does asymmetric public-key cryptography safeguard online banking, and how can individuals protect themselves from sophisticated cyber attacks? This chapter masters cybersecurity.

यह अध्याय क्यों महत्वपूर्ण है

Security is an indispensable pillar of computer science. Writing functional code is useless if that code contains SQL injection vulnerabilities, buffer overflows, or unprotected password stores. Understanding malware propagation mechanisms, implementing HTTPS encryption, deploying packet-filtering firewalls, and enforcing strict cryptographic standards ensures that software applications protect sensitive user data against theft and disruption.

अध्ययन से पूर्व (आवश्यक ज्ञान)

Computer networks, IP addressing, and client-server communication (Chapter 10, 11).
Basic operating system file systems and memory execution.
Conceptual understanding of digital crime and online privacy.

इस अध्याय के लक्ष्य

Differentiate malware variants: Viruses (requires host), Worms (self-replicating), Trojan Horses (disguised), Spyware, Ransomware, and Keyloggers.
Analyze network attacks: Phishing, Denial of Service (DoS/DDoS), Spoofing, and Man-in-the-Middle (MitM).
Evaluate network defenses: Hardware and software Firewalls, Antivirus engines, and HTTPS/SSL certificates.
Differentiate Symmetric Key Cryptography (single shared key) from Asymmetric Public-Key Cryptography (key pairs).
Explain the mechanics of Digital Signatures in verifying sender identity, data integrity, and non-repudiation.
Evaluate the Indian Information Technology Act 2000 (Section 43, 66) and enact proper cyber hygiene protocols.

अध्याय रूपरेखा एवं प्रगति

1 1. Malware Taxonomy: Viruses, Worms...

2 2. Cyber Attack Vectors: DoS, DDoS,...

3 3. Cryptographic Defenses: Symmetri...

4 4. Network Security Controls & The...

सम्पूर्ण सैद्धांतिक एवं वैचारिक अध्ययन

1. Malware Taxonomy: Viruses, Worms, Trojans & Ransomware

Understand

Malware (Malicious Software) refers to any hostile software intentionally designed to cause damage to a computer, server, client, or computer network:

Malware Type	Host Required?	Propagation Mechanism	Primary Payload Damage
Computer Virus	YES (Must attach to `.exe`, `.doc`)	Requires human action (running the infected host file) to replicate.	Corrupts system files, erases disks, consumes CPU memory.
Worm	NO (Standalone program)	Self-replicating! Spreads autonomously across network vulnerabilities without human intervention.	Exhausts network bandwidth, crashes routers, creates botnets.
Trojan Horse	Standalone	Disguised as legitimate, useful software (e.g., a free game or utility) to trick users into installation.	Opens backdoor vulnerabilities; installs keyloggers or ransomware.
Ransomware	Standalone / Trojan	Encrypts user files with military-grade cryptography; demands ransom in cryptocurrency for key.	Permanent data loss unless offline cold backups exist.
Spyware / Keylogger	Background hidden	Silently records keystrokes, screen captures, and browsing habits; transmits data to attackers.	Theft of banking credentials, passwords, and personal identity.
Adware	Background app	Renders aggressive, unauthorized pop-up advertisements.	Slows system, tracks web browsing, compromises user privacy.

2. Cyber Attack Vectors: DoS, DDoS, Phishing & Spoofing

3. Cryptographic Defenses: Symmetric vs. Asymmetric Encryption

Understand & Mathematics

Cryptography is the science of transforming readable plaintext into unintelligible ciphertext using mathematical algorithms and keys:

Criterion	Symmetric Key Encryption	Asymmetric (Public-Key) Encryption
Keys Used	A single secret key shared by both sender and receiver for both encryption and decryption.	A mathematically linked Key Pair: a Public Key (freely distributed) and a Private Key (kept strictly secret).
Speed	Blazingly fast; minimal computational overhead.	Significantly slower; computationally intensive.
Key Distribution Problem	Severe: How do you safely share the secret key without attackers intercepting it?	Solved: Public key is public; only receiver holds private key.
Primary Usage	Bulk data encryption (AES-256).	Key exchange, HTTPS handshakes, Digital Signatures (RSA, ECC).

Digital Signatures & Non-Repudiation

A Digital Signature is a mathematical mechanism used to prove the authenticity, integrity, and origin of a digital message:

Sender hashes the message and encrypts the hash with their Private Key.
Receiver decrypts the signature using the sender's Public Key and verifies it against the message hash.
Guarantees Non-Repudiation: The sender cannot later deny having signed or sent the message.

4. Network Security Controls & The Indian IT Act 2000

प्रोग्रामिंग सिंटेक्स, स्टेटमेंट्स एवं भाषा अनुवादक नियम

Asymmetric Encryption Identity

$$D_{K_{\text{private}}}(E_{K_{\text{public}}}(M)) = M$$

Data encrypted with a public key can only be decrypted by the matching private key.

Digital Signature Identity

$$D_{K_{\text{public}}}(E_{K_{\text{private}}}(\text{Hash}(M))) = \text{Hash}(M)$$

Signature verification proving authenticity and non-repudiation.

Cybersecurity Threats & Cryptographic Defense Topology

अध्याय का सार संक्षेप एवं 10 मुख्य निष्कर्ष

मुख्य बिंदु 1

Malware encompasses all malicious software: viruses, worms, Trojans, ransomware, spyware, and keyloggers.

मुख्य बिंदु 2

A Computer Virus requires a host program to replicate; a Computer Worm is standalone and self-replicates across networks autonomously.

मुख्य बिंदु 3

A Trojan Horse disguises itself as legitimate software to trick users into installing backdoors or malware.

मुख्य बिंदु 4

Ransomware encrypts user data and extorts financial payment; mitigated only by secure offline backups.

मुख्य बिंदु 5

DoS and DDoS attacks flood servers with traffic to deny service to legitimate users; DDoS attacks use distributed botnets.

मुख्य बिंदु 6

Phishing uses fraudulent emails and websites to harvest passwords and sensitive financial credentials.

मुख्य बिंदु 7

A Firewall filters incoming and outgoing network traffic based on predefined security rules.

मुख्य बिंदु 8

Symmetric encryption uses a single shared key; Asymmetric (Public-Key) cryptography uses a public-private key pair.

मुख्य बिंदु 9

Digital Signatures encrypt message hashes using the sender's private key, guaranteeing authenticity and non-repudiation.

मुख्य बिंदु 10

The Indian IT Act 2000 legalizes digital commerce and penalizes cybercrimes (hacking, identity theft) under Section 66.

स्व-मूल्यांकन अभ्यास (Check Your Understanding)

मूल वैचारिक स्पष्टता की जांच के लिए नैदानिक प्रश्न। पहले स्वयं हल करें, फिर उत्तर देखें।

Differentiate between a Computer Virus, a Computer Worm, and a Trojan Horse.

उत्तर एवं व्याख्या देखें

उत्तर: • Computer Virus: A malicious program that attaches itself to an existing host file (`.exe`, `.doc`). It cannot spread without human intervention (running the infected file).
• Computer Worm: A standalone malicious program that replicates itself autonomously across computer networks using vulnerabilities without needing a host file or human intervention.
• Trojan Horse: Malicious software that masquerades as useful, harmless software (like a utility or game) to trick the user into installing it, subsequently opening backdoor vulnerabilities or stealing data.
Virus needs host file; Worm is standalone and self-replicating; Trojan is disguised as legitimate.

Explain the difference between Symmetric Key Encryption and Asymmetric Key Encryption.

उत्तर एवं व्याख्या देखें

उत्तर: • Symmetric Key Encryption: Uses a single, identical secret key for both encrypting plaintext and decrypting ciphertext. It is fast and efficient for bulk data (e.g., AES), but suffers from the secure key distribution problem.
• Asymmetric Key Encryption: Uses a mathematically linked Key Pair: a Public Key (distributed openly to everyone) and a Private Key (kept strictly secret by the owner). Data encrypted with the public key can only be decrypted by the matching private key (e.g., RSA, ECC).
Symmetric uses one shared key; Asymmetric uses public and private key pairs.

What is a Digital Signature? Explain how it provides Non-Repudiation.

उत्तर एवं व्याख्या देखें

उत्तर:

A Digital Signature is a cryptographic mechanism where the sender creates a mathematical hash of the message and encrypts that hash using their own Private Key. The recipient decrypts the signature using the sender's Public Key and verifies that it matches the message hash.
Because only the sender possesses the secret private key, no one else could have created that mathematical signature. Therefore, the sender cannot later deny having authored and sent the message, providing legal Non-Repudiation.

Encrypted hash using sender's private key; proves authenticity and prevents sender denial.

What is a Denial of Service (DoS) attack, and how does a Distributed Denial of Service (DDoS) attack amplify the threat?

उत्तर एवं व्याख्या देखें

उत्तर:

A DoS attack occurs when an attacker floods a target server with bogus network requests to exhaust its bandwidth, CPU, or memory, preventing legitimate users from accessing services. A Distributed Denial of Service (DDoS) attack amplifies this threat by launching the flood simultaneously from thousands of compromised computers worldwide (a Botnet of infected machines). Because requests originate from thousands of diverse geographic IP addresses, standard single-IP blocking firewalls cannot stop the attack.

DoS is from one machine; DDoS uses thousands of botnet computers simultaneously.

What is a Firewall? Differentiate between a Hardware Firewall and a Software Firewall.

उत्तर एवं व्याख्या देखें

उत्तर: A Firewall is a security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules, acting as a protective barrier between a trusted internal network and untrusted external networks (the Internet).
• Hardware Firewall: A dedicated physical appliance placed between the network router and the internal network, protecting all devices connected to the LAN.
• Software Firewall: A software program installed directly on individual client computers (like Windows Defender Firewall), protecting that specific operating system.
Filters network traffic based on rules; hardware protects network, software protects individual PC.

What are browser Cookies? Distinguish between First-Party and Third-Party Cookies regarding user privacy.

उत्तर एवं व्याख्या देखें

उत्तर: Cookies are small plain-text files stored on a user's computer by websites to preserve state, remember login sessions, and save user preferences.
• First-Party Cookies: Created directly by the website the user is currently visiting (e.g., keeping items in an online shopping cart).
• Third-Party Cookies: Placed by external domains (such as advertising and analytics networks) embedded inside the page to track user browsing history and build behavioural profiling across multiple different websites, creating significant privacy concerns.
First-party saves shopping carts/logins; third-party tracks browsing history across websites.

Mention two major cyber offenses penalized under Section 66 of the Indian Information Technology Act 2000.

उत्तर एवं व्याख्या देखें

उत्तर:

Section 66 (Hacking): Unauthorized access, data theft, or introducing damaging viruses into a computer system (punishable with imprisonment up to 3 years and fines up to ₹5 lakhs).
2. Section 66C & 66D (Identity Theft & Cheating by Personation): Fraudulently using another person's password, biometric thumbprint, or digital identity to cheat or steal funds.

Section 66 covers hacking and viruses; Section 66C/D covers identity theft and impersonation.

Explain how Ransomware operates and what is the single most effective defense against it.

उत्तर एवं व्याख्या देखें

उत्तर:

Ransomware infects a system (often via phishing attachments or unpatched software exploits), quietly scans hard drives, and encrypts documents, databases, and photos using military-grade asymmetric/symmetric encryption. It then deletes local shadow copies and displays a ransom note demanding payment (typically in Bitcoin) to receive the decryption key.
The single most effective defense against ransomware is maintaining regular, automated, verified offline backups (cold storage) that are physically disconnected from the network, allowing the system to be restored without paying any ransom.

Encrypts user files demanding payment; offline cold-storage backups are the only guaranteed defense.

अध्याय का अध्ययन पूर्ण हुआ?

अभ्यास के लिए तैयार?

ऑनलाइन CBT टेस्ट देकर तैयारी का मूल्यांकन करें

झारखण्ड बोर्ड परीक्षा पैटर्न पर आधारित बहुविकल्पीय प्रश्नों का ऑनलाइन टेस्ट दें। तुरंत परिणाम, समय विश्लेषण और प्रत्येक प्रश्न का विस्तृत हल प्राप्त करें।

फाउंडेशन टेस्ट

15 MCQs • मूल अवधारणाएँ

एडवांस्ड टेस्ट

15 MCQs • HOTS और ट्रैप्स