Information Security

• Chapter 1: Fundamentals of Information Security. Notes and past questions on Fundamentals of Information Security for TU BIT Information Security.
• Chapter 2: Cryptographic Foundations. Notes and past questions on Cryptographic Foundations for TU BIT Information Security.
• Chapter 3: Symmetric Encryption. Notes and past questions on Symmetric Encryption for TU BIT Information Security.
• Chapter 4: Asymmetric Encryption. Notes and past questions on Asymmetric Encryption for TU BIT Information Security.
• Chapter 5: Hash Functions and Message Authentication. Notes and past questions on Hash Functions and Message Authentication for TU BIT Information Security.
• Chapter 6: Authentication and Access Control. Notes and past questions on Authentication and Access Control for TU BIT Information Security.
• Chapter 7: Malware and Cyber Threats. Notes and past questions on Malware and Cyber Threats for TU BIT Information Security.
• Chapter 8: Trust Frameworks and Identity Management. Notes and past questions on Trust Frameworks and Identity Management for TU BIT Information Security.
• Chapter 9: Security Risk Management. Notes and past questions on Security Risk Management for TU BIT Information Security.
• Chapter 10: Legal and Ethical Issues. Notes and past questions on Legal and Ethical Issues for TU BIT Information Security.

• Distinction between Substitution and Transposition Cipher, DES Sub-Key Generation, and Finite Fields (2082)
• What are the purposes of message authentication? Explain the working mechanism of MD5.[10] (2082)
• Define malicious software. Explain the different types of malicious softwares.[10] (2082)
• Perform polynomial addition, subtraction and multiplication of $2x^2 + 4x + 2$ and $5x + 6$ over $GF(7)$. [5] (2082)
• Explain about threats, attacks and assets. [5] (2082)
• Why do we need two factor authentication? Discuss about security issues for user authentication. [5] (2082)
• Differentiate between role based and attribute based access controls. [5] (2082)
• Explain the security auditing architecture. [5] (2082)
• Define cybercrime and computer crime. Discuss about intellectual property. [5] (2082)
• What is attack tree? Describe about password based authentication. [5] (2082)
• What do you mean by subjects, objects and access rights? Discuss about ethical issues in cyber security. [2.5+2.5] (2082)
• Define security policy. How do you implement logging function? [5] (2082)
• RSA Cryptosystem with p=11 and q=7 Consider p=11 and q=7 in a RSA cryptosystem. **i. What is a public key pair (e, n)?** **ii. What is a... (2081)
• Discuss how encryption and decryption is done in the DES algorithm.[10] (2081)
• Define subjects, objects and access rights in access control with suitable examples. How role based access control is different from attr... (2081)

Frequently asked questions

Based on the official syllabus.