INFORMATION SECURITY IV Year B.Tech. IT I - Sem JNTUH R-18

1. Differentiate between active and passive attacks, providing examples of each.

2. Explain the CIA triad (Confidentiality, Integrity, Availability) in detail, and discuss how security services protect against threats to each.

3. Describe the Kerberos authentication protocol and its role in network security.

4. Compare and contrast symmetric and asymmetric encryption, giving real-world applications of each.

5. Explain the concept of differential and linear cryptanalysis, and their impact on the strength of block ciphers like DES.

Unit - II: Public Key Cryptography and Message Authentication

1. Explain the working principle of the RSA algorithm, including key generation and encryption/decryption processes.

2. Discuss the challenges of key management in public key cryptography and different approaches to address them.

3. Compare and contrast Diffie-Hellman key exchange with RSA key exchange, highlighting their advantages and disadvantages.

4. Explain the importance of hash functions in message authentication and digital signatures.

5. Differentiate between SHA-1 and SHA-256 hash functions, and discuss their suitability for different security applications.

Unit - III: Digital Signatures and Email Security

1. Explain the concept of a digital signature and its role in ensuring message integrity and non-repudiation.

2. Compare and contrast the Digital Signature Standard (DSS) with RSA signatures.

3. Describe the working principle of PGP (Pretty Good Privacy) and S/MIME (Secure/Multipurpose Internet Mail Extensions) for email security.

4. Discuss the challenges of spam filtering and phishing attacks in email security.

5. Explain the importance of certificate authorities and their role in verifying digital signatures and identities.

Unit - IV: IP Security and Web Security

1. Describe the architecture of the IP Security (IPSec) protocol suite, including the roles of AH (Authentication Header) and ESP (Encapsulating Security Payload).

2. Explain the concept of Security Associations (SAs) in IPSec and how they are used to manage encryption keys and security parameters.

3. Discuss the importance of secure socket layer (SSL) and transport layer security (TLS) in securing web communications.

4. Explain the Secure Electronic Transaction (SET) protocol and its role in ensuring secure online payments.

5. Describe the different types of web attacks, such as SQL injection and cross-site scripting (XSS), and how to mitigate them.

Unit - V: Network Intrusion and Defense

1. Explain the different types of intruders, including hackers, crackers, and social engineers.

2. Describe the different types of malware, such as viruses, worms, and Trojan horses, and their impact on system security.

3. Explain the working principle of firewalls and their role in network security.

4. Discuss the different types of firewalls (packet filtering, stateful, application-level) and their strengths and weaknesses.

5. Explain the concept of intrusion detection systems (IDS) and their role in identifying and responding to security threats.