BCA 307T Network Security Notes for GGSIPU BCA Sem 5

Written by Prateek Talwar, Founder, Unnati Educations · Reviewed by Ritik Rawat, B.Tech, Senior Full Stack Developer · Checked against the BCA Scheme of Examination and Syllabi (approved 19 Aug 2026) · Updated 13 October 2026 · Editorial policy

Scheme: BCA (USICT) | Applies to: batch admitted in 2024-25 onwards | Verified against: BCA Scheme of Examination and Syllabi, 19.08.2026

1. BCA 307T at a glance: credits, units and exam pattern
2. Unit-wise notes
   1. Unit 1: Introduction to Network Security
   2. Unit 2: Firewalls, IDS/IPS and VPN
   3. Unit 3: Authentication, E-mail and IP Security
   4. Unit 4: Intrusion Detection, Honeypots and VPN
3. Exam corner
4. Excerpt: Kerberos version 4 message exchange
5. Syllabus map
6. Who writes and checks the notes
7. BCA 307P lab and other Sem 5 papers
8. How to write BCA 307T answers
9. FAQs
10. Get the full notes

BCA 307T Network Security at a glance: GGSIPU BCA Sem 5 credits, units and exam pattern

BCA 307T is one of three Semester 5 electives (with BCA 305 and BCA 309); you take one theory paper and its lab. It is listed with the other GGSIPU BCA Semester 5 papers in Table 10 of the scheme.

The official PDF prints no unit titles, so the unit names below come from the notes. End-term minimums and re-appear rules sit in Ordinance 11.

BCA 307T Network Security Notes unit-wise: 40 solved two-mark questions and 36 diagrams across 4 units

BCA 307T Unit 1: Introduction to Network Security

Unit 1 builds the vocabulary: security goals including anonymity, X.800 attacks and services, the two Stallings models, passive versus active attacks, then how SSL/TLS, PKI and digital signatures work.

Pages 4 to 21 · 6 sections · 10 diagrams · 10 two-mark answers, 10 ten-mark questions · 1 solved numerical.

Quick look: signing and verifying with RSA (from page 18)

1. Pick p = 7, q = 11, so n = 77 and φ(n) = 60.
2. Choose e = 7; then d = 43, because 7 × 43 = 301 = 5 × 60 + 1.
3. Sign hash h = 9: S = 9⁴³ mod 77 = 58.
4. Verify: 58⁷ mod 77 = 9 = h, so the signature is valid.

BCA 307T Unit 2: Firewalls, IDS/IPS and VPN

Unit 2 keeps intruders out and spots the ones inside: firewall types and user management (AAA), IDS and IPS, intruder classes, virus phases, bastion hosts and the DMZ, a packet filter rule set and VPN tunnelling.

Pages 22 to 39 · 9 sections · 8 diagrams · 10 two-mark answers, 9 ten-mark questions.

BCA 307T Unit 3: Authentication, E-mail and IP Security

Unit 3, the longest, covers Kerberos realms, X.509 revocation, PGP key rings, S/MIME, then IPsec: Security Associations, transport and tunnel modes, SAD, SPD and ESP anti-replay. It ends with SNMP and configuration management.

Pages 40 to 59 · 9 sections · 9 diagrams · 10 two-mark answers, 10 ten-mark questions.

BCA 307T Unit 4: Intrusion Detection, Honeypots and VPN

Unit 4 goes deeper into detection: intrusion stages, the base-rate fallacy, HIDS data sources, the UC Davis distributed HIDS, NIDS sensor placement, gossip-based adaptive detection, IDMEF, honeypots and IPsec versus SSL VPNs.

Pages 60 to 78 · 9 sections · 9 diagrams · 10 two-mark answers, 10 ten-mark questions.

BCA 307T exam corner: 40 two-mark answers and 39 ten-mark questions mapped by unit

Every unit of these GGSIPU BCA Sem 5 Network Security notes ends with ten solved two-mark questions and a list of ten-mark questions, each mapped to its section.

• Unit 1, 2 Marks: Differentiate between SSL session and SSL connection. Pointer: a handshake-made session is shared by many connections; a connection is transient and tied to one session.
• Unit 2, 10 Marks: Explain a packet filtering firewall with an example rule set and its weaknesses. Pointer: fields checked, first-match rules, default discard, then spoofing and tiny fragment attacks.
• Unit 3, 2 Marks: What is Radix-64 conversion? Pointer: 3 binary bytes become 4 ASCII characters, adding 33%.
• Unit 4, 10 Marks: Explain distributed adaptive intrusion detection. Pointer: local detection, gossip to peers, a collective threshold, automatic policy tightening.

The BCA 307T notes solve 40 two-mark questions and map 39 ten-mark questions to their sections across 4 units, plus 1 solved numerical.

More practice sits in the BCA 307T important questions.

Kerberos version 4 message exchange in network security: excerpt from page 42 of the BCA 307T notes

Excerpt from page 42

Kerberos version 4 authenticates a user to a server without the password ever crossing the network. The dialogue is three exchanges made of six messages. Notation: C is the client, AS the authentication server, TGS the ticket-granting server and V the server offering the service. ID is an identifier, TS a timestamp, K a key, and E(K, X) means X encrypted with key K.

The three exchanges

Authentication service exchange, once per logon session: (1) C sends the AS its ID, the TGS ID and TS1; (2) the AS returns, encrypted with Kc, a session key Kc,tgs, the TGS ID, TS2, a lifetime and the ticket for the TGS.

Ticket-granting service exchange, once per type of service: (3) C sends the TGS the server ID, the TGS ticket and an authenticator; (4) the TGS returns, under Kc,tgs, a new session key Kc,v and a ticket for V.

Client/server exchange, once per service session: (5) C sends V the service ticket and a fresh authenticator; (6) V replies with TS5 + 1 encrypted under Kc,v.

Step by step

1. The user types a username. The client sends the user ID and the TGS ID to the AS. No password is sent.
2. The AS looks up the user, derives Kc from the stored password and sends back Kc,tgs and the ticket-granting ticket, both encrypted with Kc. The client asks for the password, derives Kc and decrypts. A wrong password simply fails to decrypt.
3. When a service is needed, the client sends the ticket-granting ticket and a fresh authenticator, encrypted with Kc,tgs, to the TGS.
4. The TGS decrypts the ticket with its own key, checks the authenticator and returns a service ticket with a new session key Kc,v.
5. The client shows the service ticket and a new authenticator to server V.
6. V decrypts the ticket, checks the authenticator and can reply with the timestamp plus one, proving its own identity. This is mutual authentication.

Do the BCA 307T notes cover the full GGSIPU syllabus?

Yes. Every topic in the four official BCA 307T units has its own section in the notes, including the Unit III items that are easy to miss: software platforms and configuration management (pages 56-57).

Official sources: BCA Scheme of Examination and Syllabi, batch 2024-25 onwards (Aug 2026) and the BCA scheme of examination, batch 2024-25 onwards.

VPN appears in Unit II and Unit IV, so the notes cover tunnelling in Unit 2 and IPsec versus SSL VPN in Unit 4. Every course in GGSIPU notes is mapped to its official PDF the same way.

Who writes and checks the BCA 307T security notes?

• Prateek Talwar, author. Founder, Unnati Educations. Associate Company Secretary (ACS), ICSI, since 15 May 2019; B.Com, University of Delhi (School of Open Learning), 2012. Author profile
• Ritik Rawat, subject reviewer for BCA 307T. Senior Full Stack Developer, Unnati Educations; B.Tech. He checked the protocol flows and the RSA numerical. Reviewer profile

The 2026-27 edition is mapped to the syllabus approved on 19.08.2026 for the 2024-25 batch onwards, and follows its textbooks: Stallings and Brown for Units I and IV, Kaufman, Perlman and Speciner for Units II and III. Last updated 13 October 2026. See our editorial policy.

The same team prepares GGSIPU important questions for every course from the same unit maps.

BCA 307T and the BCA 307P Network Security lab, plus other GGSIPU BCA Sem 5 papers

Choosing BCA 307T means taking the BCA 307P Network Security lab notes paper too: 4 practical hours, 2 credits, 100 marks. The official PDF lists no practicals; the teacher notifies the list in the first week.

The course outcomes ask you to evaluate security algorithms through programs: the Unit 1 RSA and DSA steps turn most directly into code, and the Unit 2 rule set and Unit 3 SPD table show how rules are matched.

Same-semester papers: BCA 301T Computer Networks and BCA 303T Artificial Intelligence with their labs, the other electives BCA 305T and BCA 309T, BCA 311 Summer Training, and BCA 313T Introduction to Management and Entrepreneurship Development or BCA 315T MOOC. BCA 301T matters most, since Computer Network is a listed pre-requisite.

How to write BCA 307T answers: labelled-diagram ten-mark answers and comparison two-mark answers

This paper rewards structure more than length. Most ten-mark topics in the notes come with a numbered figure: the four SSL handshake phases, the Kerberos dialogue, the screened subnet, the distributed IDS. Draw that figure first, label every box, then explain it in the order the arrows run. A clean figure with six labelled steps does more work than a full page of unbroken prose, and it is quicker to revise.

For ten marks, the notes' own exam tips give a five-part shape. Host-based IDS: definition, data sources (system calls, audit logs, file checksums, registry), anomaly versus signature HIDS, then advantages and disadvantages. Honeypots: definition and purposes, the low versus high interaction table, production versus research, honeynet and honeytoken, deployment locations, pros and cons.

For SNMP, the tip is to draw the manager, agent and MIB figure, list the PDUs, then contrast SNMPv1 community strings with the SNMPv3 User-based Security Model and View-based Access Control.

For two-mark "differentiate" questions, give matched points, not a paragraph. Passive versus active attacks works as four points: nature (observe or modify), detection (hard or easy), focus (prevention or detection) and one example each. Every unit's quick revision table already gives you the one-line version of each term, so revise from it the night before.

The mistake the notes warn about most clearly sits in Unit 1: a digital signature gives authentication, integrity and non-repudiation, not confidentiality. For confidentiality you must also encrypt with the receiver's public key or a session key.

Worked example (two marks): Why does PGP sign before it compresses?

Answer: (i) the uncompressed message and its signature can be stored together and verified later; (ii) different ZIP versions give different output, so a signature over compressed data would depend on the ZIP version.

Practise this format on GGSIPU BCA important questions.

BCA 307T security notes FAQs

Is BCA 307T compulsory in GGSIPU BCA Semester 5?

No. BCA 307T is a Programme Core Elective. The Semester 5 scheme asks you to choose any one theory paper with its matching practical from BCA 305 (Natural Language Processing), BCA 307 (Network Security) and BCA 309 (Full Stack Development using Java). Choosing Network Security means BCA 307T for 4 credits and the BCA 307P lab for 2 credits.

What is the passing mark for BCA 307T?

BCA 307T is marked out of 100: 40 internal and 60 end-term. The BCA scheme of examination does not print a pass percentage for this paper, so we do not state one. Minimum marks in the end-term exam, the overall pass rule and re-appear rules are set by GGSIPU Ordinance 11 on ipu.ac.in. Check it or ask your college.

Do I need BCA 301T Computer Networks before starting BCA 307T?

The official BCA 307T syllabus lists two pre-requisites: Computer Network, and programming knowledge of C/C++. BCA 301T Computer Networks runs in the same semester, so most students study both side by side. In the notes, Unit 1 shows where SSL/TLS sits between TCP and the application layer and Unit 3 places IPsec at the IP layer, so basic layer knowledge helps.

Which BCA 307T unit takes the most pages in the notes?

Unit 3 is the longest at 20 pages (pages 40 to 59). It packs Kerberos, X.509, PGP, S/MIME, IPsec with SAD, SPD and ESP, and SNMP with configuration management into 9 sections and 9 diagrams. Unit 1 has the most diagrams (10) and the paper's only solved numerical, the RSA digital signature example on page 18.

Get the full BCA 307T Network Security Notes on WhatsApp

The book holds 78 pages of Network Security notes in English: four units, each closing with an exam corner and a revision table.

Get the full BCA 307T notes on WhatsApp (4 units, 78 pages)

Unnati Educations is an independent education provider based in Vikaspuri, Delhi. We are not affiliated with, authorised by, or endorsed by Guru Gobind Singh Indraprastha University (GGSIPU). 'GGSIPU' and 'IPU' are used only to describe the syllabus our notes follow. For official information, visit ipu.ac.in.