BCA 220T Information Security Notes for GGSIPU BCA Sem 4

BCA 220T Information Security at a glance: GGSIPU BCA Sem 4 credits, units and exam pattern

BCA 220T is one of four Semester 4 electives, and this table shows where the BCA 220T Information Security IPU notes fit.

The scheme prints no pass percentage for this paper; grading and re-appear rules sit in the university's Ordinance 11 (ipu.ac.in).

BCA 220T sits with the other GGSIPU BCA Semester 4 papers

BCA 220T Information Security Notes unit-wise: 154 solved two-mark questions and 53 diagrams across 4 units

Other BCA papers sit under GGSIPU BCA notes.

BCA 220T Unit 1: Security Fundamentals, Cryptography and Secure Communication

CIA triad, X.800 attacks, Bell-LaPadula and Biba models, NIST CSF 2.0 and SLE/ALE risk maths, then Caesar to Hill ciphers, rail fence, steganography, DES, AES, RSA and Diffie-Hellman.

Pages 4-33 · 11 sections · 8 solved examples, 32 two-mark answers, 11 ten-mark guides, 13 diagrams.

Quick look: an RSA numerical end to end (from page 26)

p = 3, q = 11  ->  n = 33, phi(n) = 20  
e = 3, gcd(3, 20) = 1  ->  d = 7 (3 x 7 = 21 = 1 mod 20)  
Public key {3, 33}; private key {7, 33}  
Encrypt M = 4: C = 4^3 mod 33 = 31  
Decrypt: M = 31^7 mod 33 = 4

p = 3, q = 11  ->  n = 33, phi(n) = 20  
e = 3, gcd(3, 20) = 1  ->  d = 7 (3 x 7 = 21 = 1 mod 20)  
Public key {3, 33}; private key {7, 33}  
Encrypt M = 4: C = 4^3 mod 33 = 31  
Decrypt: M = 31^7 mod 33 = 4

Output: 4 comes back, so d is correct.

BCA 220T Unit 2: Network Security and Web Security

Sniffing, spoofing and SYN floods, risk leverage, physical security, SPF, DKIM and DMARC, PKI with X.509 and OCSP, then SSL's Record, Alert and Handshake protocols, TLS 1.3, HTTPS, SSH and SET.

Pages 34-60 · 12 sections · 1 solved example, 34 two-mark answers, 11 ten-mark guides, 13 diagrams.

Quick look: how SET builds the dual signature (from page 54)

1. Hash payment and order info: PIMD = H(PI), OIMD = H(OI).
2. Join and hash again: POMD = H(PIMD || OIMD).
3. Sign with the customer's private key: DS = E(PRc, POMD).
4. Merchant gets OI, PIMD, DS; bank gets PI, OIMD, DS.

BCA 220T Unit 3: Network Security Controls, Firewalls and Database Security

The longest unit: DMZ design, Kerberos, WEP to WPA3, honeypots, intruders and viruses, bastion hosts and screened subnets, IDS, IPS, IPsec VPN, PGP, S/MIME and multilevel database security.

Pages 61-94 · 11 sections · 1 solved example, 44 two-mark answers, 14 ten-mark guides, 13 diagrams.

BCA 220T Unit 4: Laws and Regulations, IT and Cyber Act

Threat intelligence (Cyber Kill Chain, MITRE ATT&CK, Diamond model), incident response, chain of custody, tabletop drills, then the IT Act 2000 and amendments, BNS 2023 cyber offences, forensics and copyright.

Pages 95-124 · 12 sections · 1 solved tabletop scenario, 44 two-mark answers, 11 ten-mark guides, 14 diagrams.

Quick look: NIST incident response life cycle (from page 100)

1. Preparation: IR plan, CSIRT, tools, training.
2. Detection and analysis: confirm, rate impact, notify CERT-In.
3. Containment, eradication, recovery: isolate, clean, restore.
4. Post-incident activity: lessons learned, updated plan.

Packet-filtering, stateful and proxy firewalls in network security: excerpt from page 72 of the BCA 220T notes

How to write BCA 220T answers: cipher numericals, comparison tables and IT Act section answers

Cipher numericals need every step: number letters A = 0 to Z = 25, write the formula, show the working, then the ciphertext. The Unit 1 revision sheet asks you to practise one Playfair, one Vigenère, one columnar and one RSA by hand.

Comparison answers use the notes' tables: passive vs active, symmetric vs asymmetric, SSL vs TLS, PGP vs S/MIME. Each of the 47 ten-mark guides lists what to write and in what order, usually definition, diagram, points, table, conclusion. IT Act answers give section, offence and punishment together, e.g. Section 66C: identity theft, up to 3 years and a fine up to ₹1 lakh.

Worked example: SLE and ALE (page 16)

Server worth ₹5,00,000 loses 30% in a ransomware attack, once every 2 years.  
AV = 5,00,000; EF = 0.3; ARO = 0.5  
SLE = AV x EF = ₹1,50,000  
ALE = SLE x ARO = ₹75,000 per year  
Conclusion: a control under ₹75,000 a year is worth buying

Server worth ₹5,00,000 loses 30% in a ransomware attack, once every 2 years.  
AV = 5,00,000; EF = 0.3; ARO = 0.5  
SLE = AV x EF = ₹1,50,000  
ALE = SLE x ARO = ₹75,000 per year  
Conclusion: a control under ₹75,000 a year is worth buying

Mistakes the notes flag: Diffie-Hellman without its man-in-the-middle weakness, an HTTPS padlock called end-to-end email encryption, Section 66A as a current offence. Practise the format on GGSIPU BCA important questions.

BCA 220T exam corner: 154 two-mark questions and 47 ten-mark answer guides by unit

The BCA 220T notes solve 154 two-mark questions and give answer guides for 47 ten-mark questions across 4 units, plus 11 solved examples. Four exam-style questions:

1. Unit 1, 2 Marks: How many keys do 10 users need in symmetric cryptography? n(n-1)/2 = 45 (asymmetric: 2n = 20).
2. Unit 3, 2 Marks: What is password salting? A random salt added before hashing, so rainbow tables fail.
3. Unit 4, 2 Marks: Within how many hours must incidents reach CERT-In? 6 hours, under the CERT-In Directions of April 2022.
4. Unit 2, 10 Marks: Explain PKI, its components, the X.509 certificate and revocation. Draw the PKI diagram (CA, RA, repository), list X.509 v3 fields, compare CRL and OCSP.

More practice sits in the BCA 220T important questions.

BCA 220T and the BCA 220P Information Security lab (15 listed practicals), plus other GGSIPU BCA Sem 4 papers

Our unit-to-practical mapping (the official list has no units):

• Unit 1 ciphers (pp. 18 to 22) → practicals 2, 3; DES, AES, RSA, Diffie-Hellman, hashing (pp. 25 to 27) → 5 to 10.
• Unit 2 threats and web security → 4 (N-Stalker) and 13 (Nmap).
• Unit 3 honeypots, VPN, IDS, architecture → 11 (KF Sensor), 12 (VPN), 14 (Packet Tracer LAN), 15 (Snort).
• Unit 4: none; only practical 15 maps to CO4.

Other Semester 4 papers: BCA 202T Operating Systems, BCA 204T Software Testing (labs 202P, 204P), BCA 232 Introduction to Logic & Critical Thinking, BCA 234 Health & Wellness, Yoga Education and Sports & Fitness.

Other elective pairs: BCA 212T/P Introduction to Data Science, BCA 216T/P Introduction to Security, Acts and Cyber Laws and Cyber Security, BCA 218T/P Web Development Using Python. Generic electives: BCA 222T Digital Marketing, BCA 224T Principles of Accounting, BCA 226T.

Who writes and checks the BCA 220T InfoSec notes?

• Prateek Talwar, author and editor of the BCA 220T notes. Founder, Unnati Educations; Associate Company Secretary (ACS), ICSI, since 2019; B.Com, University of Delhi (School of Open Learning), 2012. Author profile
• Ritik Rawat, subject reviewer of the BCA 220T notes. Senior Full Stack Developer, Unnati Educations; B.Tech. Reviewer profile

The same team prepares GGSIPU important questions for every course it covers.

Do the BCA 220T notes cover the full GGSIPU syllabus?

Yes. Every official topic in Units I to IV has a section in the notes, plus Secure Shell (SSH, pp. 52 to 53).

Official source: BCA Scheme and Syllabus w.e.f. 2024-25 (ipu.ac.in)

Unlike BCA 216T, which has no cryptography unit, BCA 220T carries ciphers, firewalls and PGP. Every course in GGSIPU notes is mapped to its official PDF the same way.

BCA 220T InfoSec notes FAQs

Get the full BCA 220T Information Security Notes on WhatsApp

The full GGSIPU BCA Sem 4 Information Security notes are sold only as a 124-page printed book, not as a PDF. Order on WhatsApp; the desk confirms price, payment and delivery.