9.3 Internet, Intranet, TCP/IP, Protocols, Email Mechanics & Cyber Security

Internet, Intranet, TCP/IP, Protocols, Email Mechanics & Cyber Security

Quick Answer: Computer networks interlink autonomous computing devices across geographical spans (PAN, LAN, MAN, WAN) via physical topologies (Star, Mesh, Bus, Ring). Network communication is structured around the 7-layer OSI and 4-layer TCP/IP models using standardized protocols (IPv4/IPv6, TCP/UDP, HTTP/HTTPS, DNS, DHCP, and email protocols SMTP, POP3, IMAP). Cybersecurity defenses mitigate malware and social engineering attacks within the regulatory enforcement of the Indian IT Act 2000 and CERT-In.

1. Network Classifications and Physical Topologies

Geographical Scope Classifications

• PAN (Personal Area Network): Interconnects personal devices (smartphones, laptops, wearables) centered around an individual within a range of up to 10 meters using technologies like Bluetooth (IEEE 802.15.1), Zigbee, or USB.
• LAN (Local Area Network): Spans a localized physical environment such as a single room, office floor, academic laboratory, or building (typically up to 1 kilometer) utilizing high-speed Ethernet (IEEE 802.3) or Wi-Fi (IEEE 802.11).
• WLAN (Wireless Local Area Network): A wireless LAN implementation using high-frequency radio waves or spread-spectrum technology (Wi-Fi) to connect devices without physical cabling.
• MAN (Metropolitan Area Network): Covers an entire municipal territory, city, or large university campus (5 to 50 kilometers), frequently operated by cable television networks or telecommunication consortia via optical fiber backbones.
• WAN (Wide Area Network): Spans broad regional, national, continental, or global geographical boundaries. The Internet represents the largest, most pervasive public WAN in existence.
• Intranet vs. Extranet vs. Internet:
  • Internet: Globally accessible, public network of interconnected computer networks.
  • Intranet: A private, secure corporate network accessible exclusively by authorized internal organization members.
  • Extranet: A controlled private intranet extended securely to authorized external stakeholders (e.g., vendors, suppliers, partners, clients) via authenticated VPN tunnels.

Network Topologies

Topology defines the physical geometric arrangement or logical datapath connecting network nodes:

2. OSI 7-Layer Reference Model vs. TCP/IP Architecture

Network communication architectures standardize data exchange across diverse hardware and operating systems through layered protocols:

The OSI 7-Layer Model (Open Systems Interconnection - ISO Standard 7498)

1. Layer 7 - Application Layer: Provides human-network software interfaces and services (HTTP, HTTPS, FTP, SMTP, DNS, Telnet).
2. Layer 6 - Presentation Layer: Manages data formatting, character code conversion (ASCII/Unicode), compression, and cryptographic encryption/decryption (SSL/TLS, JPEG, MPEG).
3. Layer 5 - Session Layer: Establishes, maintains, synchronizes (checkpoints), and terminates bidirectional dialogue sessions between communicating applications (RPC, NetBIOS).
4. Layer 4 - Transport Layer: Delivers end-to-end process-to-process communication, data segmentation, flow control, and error recovery (Protocol Data Unit [PDU]: Segment). Uses TCP (connection-oriented, reliable) or UDP (connectionless, fast).
5. Layer 3 - Network Layer: Handles logical network addressing (IPv4/IPv6) and end-to-end packet routing across multiple networks (PDU: Packet). Hardware device: Router.
6. Layer 2 - Data Link Layer: Responsible for node-to-node node transfer, physical Media Access Control (MAC Address: 48-bit hex), framing, and local error detection via CRC (PDU: Frame). Hardware devices: Switch, Bridge, NIC.
7. Layer 1 - Physical Layer: Transmits raw, unstructured bitstreams over physical transmission media (copper wire, fiber optics, radio waves) specifying voltages, pinouts, and cable specifications (PDU: Bit). Hardware devices: Hub, Repeater.

[!TIP] OSI Layers Mnemonic (Top to Bottom):
All People Seem To Need Data Processing
(Application, Presentation, Session, Transport, Network, Data Link, Physical)

3. Internet Protocols, IP Addressing & Port Numbers

IP Addressing: IPv4 vs. IPv6

Core Network Protocols and Default Port Assignments

4. Email Anatomy and Header Mechanics

Electronic mail relies on client-server architecture utilizing MUA (Mail User Agent) software (e.g., Thunderbird, Outlook, webmail) and MTA (Mail Transfer Agent) routing engines.

Core Email Header Fields & Privacy Mechanics

• From: Identifies the declared email address and display name of the message sender.
• To: Contains the primary intended recipient(s) of the email. All addresses listed in the To: field are mutually visible to everyone who receives the message.
• Cc (Carbon Copy): Secondary recipients included for situational awareness and information. All email addresses listed in the Cc: field are fully visible to all recipients in To:, Cc:, and Bcc:.
• Bcc (Blind Carbon Copy): Stealth recipients included without disclosing their email addresses to other parties.
  • Privacy Guarantee: Recipients listed in To: and Cc: cannot see who is in Bcc:, nor do they know a Bcc recipient exists.
  • Individual Bcc Privacy: Individual Bcc: recipients cannot see other email addresses placed in the Bcc: field.
  • Reply-All Hazard: If a Bcc recipient accidentally clicks "Reply to All", their reply message will be delivered to the sender and all original To: and Cc: recipients, inadvertently revealing their inclusion.

5. Cyber Security Threats, Attack Vectors & Indian Legal Framework

Malware (Malicious Software) Taxonomy

• Computer Virus: Malicious code that attaches itself to an existing legitimate host program or executable file. Requires active human intervention / file execution to replicate and infect other system files.
• Computer Worm: Standalone malicious software that self-replicates autonomously across computer networks by exploiting operating system security vulnerabilities without requiring a host file or human intervention (consuming massive network bandwidth).
• Trojan Horse: Malicious program disguised as useful, legitimate software (e.g., a free utility, game, or codec). Once installed, it executes stealth payloads such as opening backdoors for unauthorized remote access.
• Ransomware: Cryptographic malware that encrypts the victim's storage drive files, holding the decryption key hostage until an extortion ransom (typically in cryptocurrency like Bitcoin) is paid (e.g., WannaCry, Petya).
• Spyware & Keyloggers: Covert surveillance software that tracks user behavior, browsing habits, credentials, and physical keyboard strokes (Keylogger), transmitting sensitive personal data to remote adversaries.
• Rootkit: Stealth software collection designed to gain privileged, unauthorized root/administrator access to an operating system while actively hiding its presence from antivirus detection engines.
• Botnet & Zombie Computers: A vast network of compromised Internet-connected devices (Zombies) infected by malware and controlled remotely by a central adversary (Botmaster) to launch massive coordinated cyber strikes.

Cyber Attack Vectors

• Phishing: Deceptive, fraudulent email messages mimicking trusted institutions (banks, universities, tax authorities) to lure victims into revealing login credentials, credit card details, or personal data.
• Spear Phishing: Highly customized, targeted phishing attacks directed at a specific individual or organization based on prior reconnaissance.
• Whaling: A spear-phishing attack directed specifically against high-profile C-suite executives, institutional directors, or political leaders.
• Vishing & Smishing: Phishing executed via voice telephone calls (Vishing) or SMS text messages (Smishing).
• Denial of Service (DoS) & DDoS (Distributed DoS): Flooding a target server, website, or network infrastructure with overwhelming volumes of illegitimate traffic (e.g., SYN floods, UDP amplification) originating from multiple distributed botnets, causing legitimate services to crash.
• Man-in-the-Middle (MitM) Attack: An adversary intercepts, eavesdrops, and potentially alters communication packets passing between two parties who believe they are communicating directly.
• SQL Injection (SQLi): Inserting malicious SQL database query commands into user-input fields on web forms to bypass authentication and extract backend database contents.

Indian Information Technology Act 2000 & CERT-In

• Information Technology Act, 2000 (IT Act 2000): Enacted on 9 June 2000 and notified on 17 October 2000 as the foundational legal framework in India for electronic commerce, digital signatures, cybercrime adjudication, and electronic governance.
  • Major Amendment (IT Amendment Act 2008): Substantially broadened cybercrime provisions, introduced data protection rules, and established corporate liability for data breaches.
  • Section 43A: Mandates compensation for failure by corporate bodies to protect sensitive personal data.
  • Section 66: Penalizes hacking and fraudulent electronic acts with imprisonment up to 3 years and fines.
  • Section 66A: Penalized sending offensive messages through communication services (Struck down as unconstitutional by the Supreme Court of India in the landmark Shreya Singhal vs. Union of India ruling on 24 March 2015 for violating Article 19(1)(a) freedom of speech).
  • Section 66C & 66D: Penalizes identity theft and cheating by personation using computer resources.
  • Section 66E: Penalizes privacy violations (capturing/publishing private images without consent).
  • Section 66F: Prescribes punishment for Cyber Terrorism (up to life imprisonment).
• CERT-In (Indian Computer Emergency Response Team): Established under Section 70B of the IT Act 2000, functioning under the Ministry of Electronics and Information Technology (MeitY). Acts as the national nodal agency for monitoring cyber security incidents, issuing vulnerability alerts, handling emergency incident response, and coordinating national cybersecurity defense.