18.2 Networking Protocols, Cybersecurity & Microsoft Office

18.2 Networking Protocols, Cybersecurity & Microsoft Office

Large Indian banks run enterprise networks that link thousands of branches, administrative offices, ATMs and digital channels to centralized data centers. For a Junior Associate, daily operations require interacting with local and wide area networks, adhering to strict cybersecurity hygiene, and executing financial data analysis in Microsoft Office.

---

1. Network Classifications & Topologies

Computer networks are categorized by their geographical span, operational purpose, and transmission infrastructure:

• Personal Area Network (PAN): Spans the immediate space around an individual, typically within a 10-meter radius. Utilizes short-range wireless technologies such as Bluetooth (IEEE 802.15.1), Zigbee, Ultra-Wideband (UWB), or Near Field Communication (NFC) for pairing micro-ATM point-of-sale peripherals.
• Local Area Network (LAN): Interconnects computers and peripherals within a restricted geographic area, such as a single bank branch, office floor, or campus building. Typically built using high-speed twisted-pair Ethernet cables (IEEE 802.3) or Wireless LAN (Wi-Fi, IEEE 802.11) delivering speeds from 100 Mbps to 10 Gbps.
• Metropolitan Area Network (MAN): Covers an entire town or municipality, spanning distances of 5 to 50 kilometers. Connects multiple bank branches across a metropolitan district or links regional clearing houses via optical fiber backbones.
• Wide Area Network (WAN): Spans vast geographic territories across states, nations, or continents. A bank's enterprise WAN links its branches to central database servers using leased telecommunication lines, Multiprotocol Label Switching (MPLS) circuits, and satellite VSAT (Very Small Aperture Terminal) links for remote rural outposts.
• Storage Area Network (SAN): A dedicated, high-performance sub-network connecting shared pools of block-level enterprise storage devices (RAID disk arrays, tape libraries) to database servers via Fibre Channel (FC) or iSCSI protocols in core data centers.

Network Topologies

Topology defines the geometric arrangement of network nodes and communication channels:

   STAR TOPOLOGY            BUS TOPOLOGY               RING TOPOLOGY
      [Node 1]           [Node 1]   [Node 2]             [Node 1]
         |                  |          |                  /     \
 [Node 4]-[Hub]-[Node 2]  ===+==========+=== Backbone [Node 4] [Node 2]
         |                  |          |                  \     /
      [Node 3]           [Node 3]   [Node 4]             [Node 3]

• Star Topology: Every branch workstation connects directly to a central networking device (switch or hub) via point-to-point links. Failure of a single workstation cable isolates only that workstation; however, failure of the central switch disables the entire branch network. This is the universal topology used in bank branch LANs.

• Bus Topology: All devices connect sequentially to a single shared central coaxial or twisted-pair transmission cable (the backbone), terminated at both ends with electrical resistors to absorb signal reflections. If the primary backbone cable is severed, the entire network fails completely. Prone to data collisions under heavy traffic.

• Ring Topology: Devices are connected in a closed circular loop. Data packets travel sequentially from node to node in a single direction (or dual counter-rotating directions for redundancy, as in FDDI) via token-passing arbitration. A single node or cable break can disrupt the entire loop unless self-healing bypass relays are installed.

• Mesh Topology: Nodes possess point-to-point connections to other nodes:

  • Full Mesh: Every node is directly wired to every other node. For a network comprising $n$ nodes, the total number of physical duplex transmission lines required is:

  $\mathbf{\text{Physical Links} = \frac{n(n - 1)}{2}}$

  (Example: An inter-data center cluster with 8 core servers requires $\frac{8 \times 7}{2} = 28$ physical dedicated links). Full mesh offers unmatched redundancy and zero routing bottlenecks but is exceptionally costly.

  • Partial Mesh: Provides redundant pathways between mission-critical servers while peripheral nodes connect to only one or two neighbors, balancing cost and fault tolerance.

• Tree (Hierarchical) Topology: Integrates multiple star topologies linked along an overarching bus backbone. Commonly adopted in multi-story administrative zonal offices.

• Hybrid Topology: Blends two or more distinct topologies (e.g., star-bus or star-ring) across enterprise networks.

---

2. The OSI 7-Layer Reference Model vs. TCP/IP Architecture

The International Organization for Standardization (ISO) established the Open Systems Interconnection (OSI) 7-Layer Model as an architectural framework standardizing network communication into distinct functional layers.

[!NOTE] OSI vs. TCP/IP Mapping: While the academic OSI model has 7 layers, the practical Internet standard TCP/IP Model combines the top three OSI layers (Application, Presentation, Session) into a single Application Layer, retains the Transport (Host-to-Host) and Internet (Network) layers, and groups Data Link and Physical into the Network Access (Link) layer.

---

3. Essential Network Protocols, Standard Ports & IP Addressing

Network communication relies on standardized communication rules (protocols) mapped to agreed-upon logical communication endpoints called Port Numbers (ranging from 0 to 65,535; ports 0-1023 are Well-Known Ports reserved by IANA):

IP Addressing: IPv4 vs. IPv6

• IPv4 (Internet Protocol version 4): Utilizes a 32-bit binary address, written as four decimal integers (octets) separated by periods (e.g., 192.168.10.1), providing a maximum theoretical address space of $2^{32} \approx 4.29 \times 10^9$ addresses.
  • Classes: Class A (1.0.0.0 - 126.255.255.255), Class B (128.0.0.0 - 191.255.255.255), Class C (192.0.0.0 - 223.255.255.255), Class D (224.0.0.0 - 239.255.255.255 reserved for Multicasting), Class E (240.0.0.0 - 255.255.255.255 reserved for experimental use).
  • Loopback Address: 127.0.0.1 is reserved for internal software diagnostics and localhost testing.
  • RFC 1918 Private Address Blocks: Non-routable on the public internet: 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16.
• IPv6 (Internet Protocol version 6): Developed to permanently resolve IPv4 address exhaustion. Utilizes a 128-bit binary address, expressed as eight groups of four hexadecimal digits separated by colons (e.g., 2001:0db8:85a3:0000:0000:8a2e:0370:7334), yielding $2^{128} \approx 3.4 \times 10^{38}$ unique addresses. Supports zero compression (substituting a single contiguous sequence of zero-value blocks with :: exactly once per address).

---

4. Financial Cybersecurity & Threat Taxonomy

Protecting banking records and customer balances requires defensive countermeasures against diverse cyber threats:

                               +----------------------------+
                               |    CYBERSECURITY ATTACKS   |
                               +--------------+-------------+
                                              |
       +--------------------+-----------------+--------------------+--------------------+
       |                    |                                      |                    |
       v                    v                                      v                    v
+--------------+    +---------------+                              +---------------+    +---------------+
|   MALWARE    |    |  ENGINEERING  |                              |    NETWORK    |    |   DATABASE    |
| Virus / Worm |    | Phishing/Vish |                              | MitM / DoS    |    | SQL Injection |
| Ransomware   |    | Smishing Fraud|                              | IP Spoofing   |    | Zero-Day Vuln |
+--------------+    +---------------+                              +---------------+    +---------------+

Malware Typology

• Computer Virus: Malicious code that attaches itself to a legitimate host executable file or document. It requires human action (such as executing an infected .exe or opening an infected macro document) to activate and propagate.
• Computer Worm: Standalone, self-replicating malicious software that does not require a host file or human intervention. It spreads automatically across networks by exploiting unpatched OS vulnerabilities, consuming bandwidth and degrading network performance (e.g., WannaCry, Conficker).
• Trojan Horse: Deceptive malware masquerading as legitimate, beneficial software (e.g., an unauthorized branch utility or calculator) that secretly creates a covert backdoor allowing remote attackers unauthorized access.
• Ransomware: Sophisticated malware that uses strong encryption (e.g., AES-256) to lock a victim's files or system drives, displaying a ransom note demanding cryptocurrency payment in exchange for the decryption key.
• Spyware & Keyloggers: Covert programs installed without consent that monitor user activity. Keyloggers record every physical keystroke on a keyboard, capturing login credentials, card numbers, and passwords.

Social Engineering & Network Attacks

• Phishing, Vishing & Smishing: Fraudulent deception targeting banking customers. Phishing uses deceptive emails imitating the bank to lure users to spoofed websites. Vishing utilizes voice phone calls impersonating bank officials to extract CVV numbers and One-Time Passwords (OTPs). Smishing deploys fraudulent SMS texts containing malicious links.
• Denial of Service (DoS) & Distributed DoS (DDoS): Cyberattacks designed to overwhelm a bank's web servers or payment gateways with a flood of illegitimate traffic generated by a distributed network of compromised computers (botnet), rendering online services unavailable to legitimate customers.
• Man-in-the-Middle (MitM) Attack: An attacker intercepts and relays communications between two parties who believe they are communicating directly (e.g., between an internet banking client and the bank's web server). Prevented using end-to-end SSL/TLS encryption with verified digital certificates.
• Spoofing: Masquerading as a trusted entity by forging network data headers (e.g., IP Address Spoofing, MAC Address Spoofing, or Email Address Header Spoofing).

Defensive Countermeasures & Cryptography

• Firewalls: Hardware or software security barriers that inspect incoming and outgoing network traffic based on predefined security rules. Types include Packet Filtering Firewalls (inspects source/destination IP and ports), Stateful Inspection Firewalls (tracks active connection states), and Application-Layer / Proxy Firewalls.
• Symmetric Encryption: Uses a single identical secret key for both encryption and decryption (e.g., AES - Advanced Encryption Standard, 3DES). Fast and computationally efficient, ideal for encrypting bulk transactional databases and ATM PIN blocks.
• Asymmetric (Public Key) Encryption: Uses a mathematically linked key pair: a publicly distributed Public Key for encryption and a guarded Private Key for decryption (e.g., RSA, ECC). Forms the foundation of Digital Signatures, ensuring authenticity, data integrity, and non-repudiation in RTGS and NEFT high-value settlement messages.

---

5. Microsoft Office Essentials for Banking

Clerical staff in banks rely on Microsoft Office applications to prepare notices, analyze branch performance metrics, and track loan portfolios.

Microsoft Word in Branch Operations

• Mail Merge: An essential feature that merges a standard form document (such as a loan overdue recovery notice or welcome letter) with a structured data source (an Excel spreadsheet or Access database of account holders). It automatically generates hundreds of personalized customer letters containing individualized names, addresses, account numbers, and overdue balances.
• Track Changes & Templates: Enables administrative review and auditing of internal branch inspection reports.

Microsoft Excel: Cell Referencing & Key Formulas

Excel workbooks are organized into worksheets composed of rows (numbered 1, 2, 3...) and columns (lettered A, B, C...), intersecting at individual cells.

CELL ADDRESSING MODES IN EXCEL:
1. Relative Reference:   =A1           (Row and column shift when copied)
2. Absolute Reference:   =$A$1         (Both column and row locked with $)
3. Mixed Reference:      =$A1 or =A$1  (Only column locked OR only row locked)

• Relative Referencing (A1): Cell references adjust automatically relative to the destination cell when a formula is copied across rows or columns.
• Absolute Referencing ($A$1): The dollar sign ($) locks the reference. Copying the formula to any other cell leaves the reference pointing to cell A1. Toggled conveniently using the F4 key.
• Mixed Referencing ($A1 or A$1): Locks either the column alone ($A1) or the row alone (A$1).

High-Frequency Banking Excel Formulas

• =SUM(number1, [number2], ...): Computes the arithmetic total of a numeric cell range (e.g., =SUM(C2:C50) for total daily counter cash deposits).
• =AVERAGE(range): Returns the arithmetic mean of a selected numerical range.
• =COUNT(range) vs. =COUNTA(range): =COUNT counts only cells containing numeric data; =COUNTA counts all non-empty cells (including text, numbers, and logical values).
• =IF(logical_test, value_if_true, value_if_false): Evaluates a conditional test and returns one value if TRUE and another if FALSE (e.g., =IF(D2>=60, "Pass", "Review Required")).
• =VLOOKUP(lookup_value, table_array, col_index_num, [range_lookup]): Searches for a key value in the leftmost column of a table array and returns a value from the specified column in the same row. Exact matching requires FALSE (or 0) as the fourth parameter.
• =XLOOKUP(lookup_value, lookup_array, return_array, [if_not_found]): The modern successor to VLOOKUP; searches in any direction (left, right, vertical, horizontal) and defaults to an exact match without requiring numeric column index references.
• =PMT(rate, nper, pv, [fv], [type]): Financial function calculating the fixed periodic Equated Monthly Installment (EMI) for a loan based on constant interest rate and payment periods.

---

6. High-Frequency Keyboard Shortcuts

Mastering standard keyboard shortcuts is heavily tested in the Computer Aptitude segment: