Overview
This chapter explores how information and communication technologies (ICT) shape society — their benefits, risks and responsibilities. It introduces positive impacts (education, healthcare, e-governance, business, communication, accessibility) and negative consequences (digital divide, job displacement, privacy breaches, cybercrime, misinformation, e-waste). The chapter emphasises legal and ethical frameworks (Information Technology Act, data protection and privacy principles), intellectual property and software licensing, and practical measures for security (authentication, encryption, digital signatures, firewalls, backups). It also covers environmental concerns and best practices (e-waste management, green computing) and promotes digital citizenship: rights, responsibilities and safe, responsible use of technology. Students learn to analyse societal impacts, identify and prevent cyber threats, understand relevant laws and ethics, and propose solutions for inclusive, secure and sustainable use of ICT.
Learning Objectives
- Define key terms related to societal impacts of ICT such as privacy, digital divide, cyber security, e-waste and intellectual property
- Explain how information and communication technologies affect individual privacy and data protection
- Describe the causes, consequences and mitigation strategies for the digital divide in India
- Analyze examples of cyber threats (phishing, malware, identity theft) and outline preventive measures
- Compare different forms of intellectual property (copyright, trademark, patent) and their relevance to software and content
- Apply basic principles of safe online behaviour to evaluate the security of a given digital scenario
- Illustrate the environmental and health impacts of e-waste and suggest sustainable disposal practices
- Evaluate the ethical issues related to AI, algorithms, surveillance and automated decision-making
Topics in this chapter
18 topics · tap a topic title to jump straight to it.
Introduction to Societal Impacts
What are societal impacts? Societal impacts are the effects that information and communication technologies (ICT) and related practices have on people, communities, institutions and the environment. These effects can be positive (benefits) or negative (harms), and they influence social, economic, cultural, legal and ethical aspects of life.
Scope of the topic: This introduction covers how modern computing, the internet, mobile technologies and data-driven systems change education, health, work, governance, privacy, security, the environment and digital inclusion (who gets access).
Positive impacts
- Access to information and learning: e-learning platforms, open educational resources, remote classrooms.
- Improved services: telemedicine, e-governance, online banking and digital payments (faster, often cheaper).
- Economic opportunities: new jobs in IT, gig economy, e-commerce for small businesses.
- Social connectivity: social networks, communication across distances, civic engagement tools.
- Efficiency and productivity: automation, data analytics, faster decision-making.
Negative impacts
- Digital divide: unequal access to devices, connectivity and skills leading to social inequality.
- Privacy & security risks: data breaches, surveillance, misuse of personal information.
- Misinformation and social harms: fake news, online radicalisation, cyberbullying.
- Job displacement and skill shifts: automation replacing routine jobs, requiring reskilling.
- Environmental costs: energy use of data centres, e-waste from rapid device turnover.
Ethical, legal and policy considerations: Balancing innovation and rights requires laws (data protection, cyber laws), ethical guidelines (consent, fairness), digital literacy, and inclusive policies.
How to study impacts: Identify stakeholders, measure access and outcomes, evaluate trade-offs, and propose mitigations (education, regulation, green practices, privacy-by-design).
- Digital payments (UPI) replacing cash in everyday transactions — increases convenience and financial inclusion but raises privacy and fraud risks.
- Online classes during COVID-19 — kept education running but exposed the digital divide where students without devices/connectivity fell behind.
- E-commerce platforms allowing artisans to sell nationwide — boosts incomes but can disrupt traditional retail jobs.
- Telemedicine enabling remote consultations in rural areas — improves health access but depends on network availability and local infrastructure.
- Social media spreading both awareness and misinformation — useful for campaigns but can amplify rumours and polarisation.
- Surveillance cameras and facial recognition in public spaces — increase safety but raise civil liberties and privacy concerns.
- Internet Penetration Rate (%) = (Number of internet users / Total population) × 100
- Digital Divide Percentage = ((Access in urban areas − Access in rural areas) / Access in urban areas) × 100
- Employment Change (%) = ((Jobs after digitisation − Jobs before digitisation) / Jobs before digitisation) × 100
- Productivity Gain (%) = ((Output with ICT − Output without ICT) / Output without ICT) × 100
- E‑waste per capita (kg/person) = Total e‑waste generated (kg) / Total population
- ICT Carbon Emissions (kg CO2) = Energy consumption by ICT (kWh) × Emission factor (kg CO2/kWh)
Social and Ethical Issues
Overview: Social and ethical issues refer to the impacts information technology (IT) and digital systems have on individuals, groups and society. These include privacy, security, intellectual property, access (digital divide), e‑waste, cybercrime, digital rights, algorithmic bias and social behaviour online. Understanding these helps users, developers and policymakers make responsible decisions.
Major issues (concise explanation):
- Privacy: Protection of personal information collected, stored and shared by apps, websites and institutions. Key concerns: consent, purpose limitation and data minimisation.
- Security: Measures (encryption, authentication, access control) to prevent unauthorised access, data breaches and cyberattacks.
- Intellectual Property (IP): Copyright, patents and trademarks for software, digital content and databases. Ethical use requires attribution and respect for licensing.
- Digital Divide: Unequal access to internet, devices, digital skills between urban/rural, rich/poor, age groups — leads to unequal opportunities.
- Cybercrime and Misuse: Hacking, phishing, identity theft, online fraud, cyberstalking and cyberbullying harming individuals and organisations.
- Plagiarism and Academic Dishonesty: Copying code, assignments or content without acknowledgement—an ethical and often legal issue.
- E‑waste and Environment: Disposal of electronic devices causes pollution; ethical responsibility to recycle and design for longevity.
- Surveillance and Freedom: Government or corporate surveillance can threaten civil liberties and privacy if unchecked.
- Algorithmic Bias & AI Ethics: Machine learning models may produce biased results (discrimination) if trained on biased data; transparency and fairness are required.
Ethical principles to follow: respect for privacy, transparency, accountability, fairness, safety, data minimisation, informed consent and accessibility.
Laws and standards (examples): IT Act (India), Copyright Act, GDPR (EU), data protection policies and school/college codes of conduct. These set legal obligations and penalties for misuse.
Responsibilities & mitigation: Organisations: secure systems, privacy policies, audits, accessibility; Developers: privacy by design, secure coding, explainable AI; Users: strong passwords, cautious sharing, reporting abuse; Governments: digital literacy programs, regulations and safe disposal rules for e‑waste.
Student perspective (what to practice): avoid plagiarism, follow licensing rules, protect passwords, verify sources, be respectful online, report cyberbullying, recycle electronics responsibly.
- Cambridge Analytica (Facebook) — misuse of personal data for targeted political advertising; raised privacy and consent concerns.
- Aadhaar data leak reports — highlighted need for stronger data protection and access control in large databases.
- E‑waste in Agbogbloshie (Ghana) — discarded electronics from wealthier countries create health and environmental hazards.
- Cyberbullying incidents leading to emotional harm among teenagers — shows social impact of online harassment.
- Amazon's recruiting AI reportedly biased against women — example of algorithmic bias from training data.
- Ransomware attacks on hospitals — security failures affecting critical services and patient safety.
- Internet Penetration Rate (%) = (Number of Internet Users / Total Population) × 100
- Rural/Urban Penetration Ratio = (Internet users in rural areas / Internet users in urban areas)
- Average Cost per Data Record Breached = Total Loss from Breach / Number of Records Exposed
- Keyspace Size (symmetric key) = 2^(key length in bits) (used to estimate brute‑force resistance of an encryption key)
- Accuracy = (TP + TN) / (TP + TN + FP + FN) — useful when evaluating algorithm performance and fairness
- Precision = TP / (TP + FP); Recall = TP / (TP + FN); F1‑score = 2 × (Precision × Recall) / (Precision + Recall)
Privacy and Confidentiality
Overview
Privacy is an individual's right to control access to personal information about themselves. Confidentiality is an obligation (often legal or professional) on others to protect information they hold about individuals and not disclose it without authorization.
Key concepts
- Personal data / PII: data that identifies a person (name, address, phone, email, Aadhaar/ID numbers, health records, biometric data).
- CIA triad: Confidentiality (preventing unauthorized disclosure), Integrity (preventing unauthorized modification), Availability (ensuring authorized users can access when needed).
- Data lifecycle: collection → storage → processing → sharing → archival → deletion. Privacy and confidentiality must be enforced at each stage.
- Principles: purpose limitation, consent, data minimization, accuracy, storage limitation, security safeguards, accountability and transparency.
Common threats
- Unauthorized access (hacking, leaked credentials)
- Insider misuse (employees accessing data without need)
- Data interception (unsecured networks)
- Re-identification after anonymization
- Surveillance and profiling (tracking across websites/apps)
Technical & organizational controls
- Access control: least privilege, role-based access control (RBAC), authentication (passwords, MFA).
- Encryption: data-at-rest and data-in-transit encryption prevent readable disclosure to unauthorized parties.
- Anonymization / Pseudonymization: remove or replace identifiers to reduce re-identification risk (e.g., k-anonymity).
- Audit logs and monitoring: record who accessed what and when to detect misuse.
- Policies and training: confidentiality agreements, employee training, breach response plans.
Trade-offs & societal impact
Stronger privacy controls can reduce convenience (e.g., fewer personalized services). Conversely, poor privacy erodes trust, can cause identity theft, financial loss, discrimination, or chilling effects on free expression. Effective regulation (GDPR, national data-protection laws) and technical design (privacy by design, default) balance utility and protection.
Short practical checklist
- Collect only necessary data and inform users about purpose.
- Use strong passwords and enable MFA.
- Encrypt sensitive data during storage and transmission.
- Limit access using RBAC and review permissions periodically.
- Have clear retention and deletion policies.
- Doctor-patient confidentiality: A hospital must not disclose a patient’s medical history to employers or insurers without the patient’s consent.
- Social media privacy: A user posts photos; if privacy settings are public, anyone can view and reuse them—privacy settings and platform policies control disclosure.
- Employee data: HR systems store salary and performance reviews; access should be limited to HR and relevant managers to maintain confidentiality.
- Targeted advertising: Browsing and app usage are tracked to build profiles; lack of informed consent violates user privacy expectations.
- Data breach: An e-commerce site that stores unencrypted payment details suffers a breach leading to financial fraud—shows importance of encryption and minimization.
- Surveillance vs privacy: CCTV in public places increases security but raises questions about constant monitoring and data retention periods.
- Risk = Likelihood × Impact — used to prioritize privacy/security controls (qualitative or quantitative scoring).
- Encryption (conceptual): Ciphertext = Encrypt(Plaintext, Key); Plaintext = Decrypt(Ciphertext, Key).
- k-anonymity condition: For every record, at least k−1 other records share the same combination of quasi-identifiers (equivalence class size ≥ k).
- Access Control Matrix representation: ACM[subject, object] = set of permissions (e.g., {read, write, execute}).
- Differential privacy (informal inequality): For mechanism M and neighboring datasets D1,D2, for all outputs S: Pr[M(D1) ∈ S] ≤ e^ε × Pr[M(D2) ∈ S] — smaller ε means stronger privacy.
Digital Footprint and Data Protection
Definition: A digital footprint is the trail of data a person leaves online when using internet services—posts, searches, location data, cookies, transaction records, metadata, and more. Data protection refers to the policies, laws and technical measures used to keep personal and sensitive data secure, private, and accurate.
Types of digital footprint
- Active footprint: Data you intentionally create and share (social media posts, comments, uploads).
- Passive footprint: Data collected without deliberate input (cookies, location tracking, browsing logs, device metadata).
Sources of digital footprints include social networks, search engines, e-commerce sites, mobile apps, IoT devices, emails, public records, and third-party trackers (advertising networks, analytics).
Why it matters
- Privacy risks: unwanted profiling, targeted advertising, or sensitive information exposure.
- Security risks: identity theft, social engineering, account takeover after data breaches.
- Reputation risks: employers or institutions checking online behaviour (hiring decisions, college admissions).
Key legal & policy context (class-level overview)
- International example: GDPR (EU) — rights to access, rectification, erasure, purpose limitation, and consent requirements.
- India: Right to privacy is a fundamental right (Supreme Court judgment, 2017). Cyber laws such as the Information Technology Act aim to regulate electronic data; a Personal Data Protection law has been proposed to govern collection and processing.
Data protection principles (simple list)
- Lawfulness, fairness and transparency
- Purpose limitation (collect only for specified purpose)
- Data minimisation (collect only what is necessary)
- Accuracy (keep data up to date)
- Storage limitation (retain only as long as required)
- Security and confidentiality
Technical measures to protect data
- Encryption: transforms readable data into ciphertext so only holders of the key can read it (use HTTPS, encrypt sensitive files).
- Authentication & access control: strong passwords, two-factor authentication (2FA), least-privilege access.
- Hashing: one-way functions for storing passwords or verifying integrity (e.g., SHA-family; salted hashes).
- Anonymisation & pseudonymisation: remove or replace identifiers to reduce re-identification risk.
- Network security: firewalls, VPNs, secure Wi‑Fi; regular software updates and antivirus.
- Backup & recovery: regular encrypted backups and tested recovery plans.
Personal digital hygiene (practical tips for students)
- Review and tighten privacy settings on social media and apps.
- Use strong, unique passwords and a password manager.
- Enable 2FA for critical accounts (email, banking, social media).
- Think before you post; assume public visibility.
- Clear cookies and browser history regularly; limit third-party tracking.
- Be cautious of public Wi‑Fi and phishing attempts; verify senders before clicking links.
Data breach response (basic steps)
- Contain: stop further loss (lock accounts, change keys).
- Assess: determine what was exposed and who is affected.
- Notify: inform affected users and relevant authorities as required by law.
- Recover & improve: restore systems, patch vulnerabilities, update policies.
Summary: A digital footprint is inevitable but manageable. Understanding where data is created and stored, applying basic protection measures, and following legal and ethical principles help protect privacy, security, and reputation.
- Cambridge Analytica (2018): data from millions of Facebook profiles was harvested to build political profiles for targeted ads and messaging—illustrates how passive and third-party-collected data can be repurposed.
- Targeted advertising: online shopping and search history combined with cookies and social data lead advertisers to show personalized product ads, demonstrating how digital footprints are used for profiling.
- Identity theft after a data breach: if an online retailer leaks customer records (names, emails, hashed passwords), attackers can attempt credential stuffing on banking or email accounts.
- Employer background checks: recruiters often review candidates' social media posts and online presence; inappropriate public posts or photos can affect hiring decisions.
- Reported government/registry leaks (e.g., reported Aadhaar data incidents): large centralised databases can become high-risk targets if not properly protected, showing the need for strong access controls and encryption.
- Risk = Likelihood × Impact — used conceptually to assess data protection priorities (higher likelihood or impact increases risk).
- CIA triad (conceptual, not numeric): Security = {Confidentiality, Integrity, Availability} — base pillars to evaluate protection measures.
- Encryption notation: C = E_k(P), P = D_k(C) where P = plaintext, C = ciphertext, E_k = encryption with key k, D_k = decryption with key k.
- Hashing (conceptual): H = hash(M) — a one-way function producing fixed-length digest H from message M (used for integrity and password storage).
- Password entropy estimate: Entropy (bits) ≈ L × log2(N) where L = password length, N = size of character set (e.g., 26 lowercase + 26 uppercase + 10 digits + symbols).
Intellectual Property Rights (IPR)
What are Intellectual Property Rights (IPR)?
Intellectual Property Rights are legal rights granted to creators and owners of works that result from human intellect. They protect creations—such as inventions, literary and artistic works, symbols, names, designs and trade secrets—so creators can control and benefit from their work.
Main types of IPR
- Copyright: protects literary, dramatic, musical and artistic works, films, sound recordings and software code.
- Patent: grants exclusive rights to an inventor for a new, useful and non-obvious invention (product or process).
- Trademark: protects brand identifiers such as names, logos, slogans and shapes that distinguish goods or services.
- Industrial Design / Design Right: protects the visual design, shape or appearance of an article.
- Geographical Indications (GI): protect products that have a specific geographical origin and possess qualities or a reputation due to that origin (e.g., Darjeeling tea).
- Trade Secret: protects confidential business information (formulas, practices, processes) as long as secrecy is maintained.
Why IPR matters
- Encourages innovation and creativity by giving creators exclusive rights to exploit their work for a limited time.
- Helps businesses build brand identity and consumer trust.
- Promotes economic growth by enabling monetization (licensing, sale) and attracting investment.
- Balances public interest: protection is usually time-limited so works eventually enter the public domain.
How IPR is obtained and enforced (brief)
- Copyright: automatic on creation, registration optional (helps in legal proof).
- Patent: requires filing a patent application, examination and grant by the patent office; grants exclusive rights for a fixed term.
- Trademark: register with the trademark office to get legal protection; can be renewed.
- Trade secret: no registration; protection depends on confidentiality measures (NDAs, access controls).
Infringement and remedies
Using someone’s protected work without permission can lead to civil remedies (damages, injunctions) and sometimes criminal penalties. Licensing, fair use/fair dealing exceptions and obtaining permissions are lawful alternatives.
Practical considerations for students and developers
- Always cite sources and obtain permission to reuse code, images, music or text not authored by you.
- Understand software licenses: proprietary (restrictive) versus open-source (permissive or copyleft).
- Use Creative Commons–licensed material in accordance with the license terms (attribution, share-alike, non-commercial restrictions).
- Copyright: A song or movie—rights to reproduce, distribute and perform belong to the creator/producer (e.g., a film studio).
- Patent: A pharmaceutical company patents a new drug formulation giving exclusive manufacturing rights for the patent term (e.g., patent on a molecule).
- Trademark: The Nike 'swoosh' and the Apple logo identify brand origin and are protected as trademarks.
- Trade secret: Coca-Cola’s secret formula is protected as a trade secret rather than a patent to avoid public disclosure.
- Geographical Indication: Darjeeling tea and Basmati rice are protected GIs tied to their region of origin.
- Open-source software: Linux (kernel) and Apache HTTP Server are distributed under open-source licenses that permit reuse under license terms.
- Patent_expiry_year = Filing_year + 20 (patent term: 20 years from filing, in most jurisdictions)
- Copyright_expiry_year = Year_of_death_of_author + 60 (in India: most works; varies by country)
- Trademark_renewal_period = Registration_year + n*10 (trademarks typically renewable every 10 years)
- Design_protection_term = Registration_year + 15 (example: India design protection often totals 15 years via renewals)
- Trade_secret_duration = Indefinite if secrecy is maintained (no fixed legal expiry)
Copyright and Related Rights
What is Copyright?
Copyright is a legal right that gives the creator of an original work exclusive control over its use and distribution for a limited time. It protects expressions of ideas (literary works, music, films, software, paintings, photographs, etc.), not the ideas themselves.
Related Rights
Related rights (neighbouring rights) protect people and organizations involved in making works available: performers (actors, musicians), producers of sound recordings, and broadcasting organizations. These rights are distinct from copyright but complement it.
Key Components
- Economic rights: Exclusive rights to reproduce, distribute, perform, communicate to the public, adapt and make translations. These can be licensed or transferred.
- Moral rights: Right of the author to claim authorship and object to derogatory treatment of the work (cannot be transferred, though may be waived in some jurisdictions).
- Duration: Copyright lasts for a limited time (see formulas below for common rules).
- Exceptions & limitations: Allow certain uses without permission — for example private/educational use, quotation, reporting, criticism, and parody — subject to conditions. In India, the law follows specific permitted uses rather than a broad fair use doctrine.
When is Copyright Created?
Copyright arises automatically when an original work is fixed in a tangible medium (written, recorded, saved). No registration is required for protection, though registration can serve as evidence in legal disputes.
Infringement
Infringement occurs when someone exercises one of the exclusive rights without permission and no exception applies. Courts typically look for (a) access to the original work and (b) substantial similarity in protected expression.
Remedies
Remedies for infringement can include injunctions (stop the activity), damages (compensation), account of profits, and sometimes criminal penalties for piracy.
Licences and Alternatives
Creators can license their rights (exclusive or non‑exclusive). Common licensing systems include standard commercial licences and open licences such as Creative Commons, which let authors permit reuse under specified conditions (attribution, noncommercial, share-alike, etc.). Open-source software licences (MIT, GPL, Apache) govern software reuse.
Digital Issues
Digital distribution and the internet create enforcement challenges: copying and sharing are easy. Digital Rights Management (DRM) technologies and takedown procedures (e.g., notice-and-takedown) are commonly used to protect works online. At the same time, open-licence models enable legal sharing and remixing.
Why it Matters (Societal Impacts)
- Protects creators’ livelihoods and promotes investment in creative industries.
- Balancing protection and access influences education, innovation, culture and freedom of expression.
- Overly long or broad protection may limit access to knowledge; too little protection may discourage creators.
- A student copies a chapter from a textbook and distributes it in class without permission — this can infringe the publisher's copyright unless an exception applies.
- A musician uploads a cover of a copyrighted song to a streaming site. If the recording uses the original composition without licence, permission from the copyright owner (or a compulsory licence where available) is needed.
- A photographer’s image is used by a website without credit or permission — the photographer can claim infringement and seek removal and damages.
- A movie is uploaded to a torrent site and shared widely — this is an act of piracy and a criminal/civil offence in many jurisdictions.
- A teacher scans small excerpts of several articles for classroom use under an educational exception or fair dealing provision (subject to local law and limits).
- A software developer uses an open-source library under the MIT licence — they may reuse the code while complying with licence conditions (usually including attribution).
- Duration (literary/other works) = Life of author + 60 years (Indian law)
- Duration (cinematograph films, sound recordings, photographs) = 60 years from year of publication (India)
- Infringement_test = Access_to_original + Substantial_similarity_in_protected_expression
- Exclusive_Rights_set = {Reproduce, Distribute, Perform_publicly, Communicate_to_public, Adapt/Translate}
- Licence_spectrum (conceptual) = Proprietary ⟷ Permissive_Open_Source (e.g., MIT) ⟷ Copyleft_Open_Source (e.g., GPL)
Patents, Trademarks and Trade Secrets
Overview
Intellectual property (IP) protects creations of the mind. Three common forms studied in Class 12 Informatics Practices are patents, trademarks and trade secrets. Each protects different kinds of assets and gives different legal rights and durations.
Patents
- What it protects: New inventions — processes, machines, manufactured articles, compositions of matter or useful improvements.
- Requirements: Novelty (new), inventive step/non‑obviousness, and industrial applicability (useful).
- How to obtain: File a patent application with the relevant patent office. It is examined; if granted, an exclusive right is given.
- Rights conferred: The patentee has the exclusive right to make, use, sell or import the invention for the patent term; others need permission (licence).
- Duration: Typically 20 years from the filing date (subject to national law and maintenance fees).
- Remedies for infringement: Injunctions, damages or account of profits, possible criminal sanctions for willful infringement (varies by jurisdiction).
- Notes: Patent requires public disclosure of the invention in exchange for exclusivity — once expired, the invention enters the public domain.
Trademarks
- What it protects: Signs that distinguish goods or services of one trader from another — words, names, logos, symbols, colours, slogans, shapes (trade dress).
- How to obtain: A mark can have rights by use (common law) but registering with the trademark office gives stronger, easier-to-enforce rights. Registration involves application, examination and publication for opposition.
- Rights conferred: Exclusive right to use the mark for specified classes of goods/services and to prevent confusingly similar marks.
- Duration: Typically an initial term (e.g., 10 years) renewable indefinitely by renewal filings and fees.
- Remedies for infringement: Injunctions, damages, delivery up of infringing goods, cancellation of the infringing mark.
- Notes: A trademark protects brand identity, not functional features. Well-known marks may enjoy broader protection.
Trade Secrets
- What it protects: Confidential business information that gives a competitive advantage — formulas, recipes, processes, customer lists, algorithms, manufacturing methods.
- How to obtain: No formal registration. Protection relies on keeping information secret and using confidentiality measures (NDAs, access controls, physical and digital security).
- Rights conferred: Protection against unlawful acquisition, use or disclosure of the secret (through contract law, unfair competition law, sometimes criminal law).
- Duration: Potentially indefinite — as long as the information remains secret and provides economic value.
- Remedies for misappropriation: Injunctions, damages, account of profits, and contractual penalties if an NDA is breached.
- Notes: If the secret becomes public (reverse engineering, independent discovery or disclosure), protection is lost.
Comparison (quick)
- Patents: Protect technical inventions, require disclosure, limited term (≈20 years), must be registered/granted.
- Trademarks: Protect brand identifiers, can be renewable indefinitely, registration strengthens rights but unregistered use can also give limited rights.
- Trade secrets: Protect confidential info, no registration, indefinite duration if secrecy maintained.
Practical considerations for businesses and developers
- Choose patents for truly novel technical inventions that you can and are willing to disclose in exchange for time‑limited exclusivity.
- Use trademarks to protect brand names, logos and product identities.
- Use trade secrets for know‑how or formulas that are hard to reverse‑engineer and where indefinite secrecy provides more value than patenting.
- Combine protections: an algorithm could be a trade secret; the software UI could be protected by trademark; a specific new device could be patented.
CBSE exam tip: Be able to define each term, give one example, state duration and explain one advantage and one disadvantage of each form of protection.
- Patent: Pharmaceutical companies patent new drug molecules (e.g., Lipitor) to get exclusive marketing rights for a limited time.
- Patent: Design and utility patents for smartphones (features, mechanisms) — Apple holds various patents on iPhone technology.
- Trademark: The Apple logo, Nike’s swoosh and McDonald’s golden arches identify brands and are protected as trademarks.
- Trade secret: Coca‑Cola’s original formula and KFC's 11‑herb spice mix are kept as trade secrets rather than patented.
- Trade secret: Google’s search ranking algorithms and many companies’ customer lists are protected by confidentiality measures.
- Hybrid example: A software firm may keep internal algorithms as trade secrets while registering a trademark for the product name.
- Patent term (typical): Patent_term ≈ 20 years from filing date (subject to national rules and maintenance fees).
- Trademark term (typical): Trademark_term = Initial_term (e.g., 10 years) + Renewals (indefinite if renewed).
- Trade secret duration: Trade_secret_duration = Indefinite while confidentiality is maintained.
- Simple economic model for trade secret value: Expected_value = P_retention × Benefit_from_secret − Cost_of_protection (where P_retention = probability the secret remains confidential).
Open Source and Proprietary Software
Overview
Software can be classified by how its source code is made available and how it may be used: Open Source Software (OSS) provides access to source code and allows users to run, study, modify and redistribute it under specific licenses; Proprietary (Closed‑source) Software keeps source code private and restricts copying, modification and redistribution. Both models have social, economic and technical implications.
Open Source Software (OSS)
- Definition: Source code is available; rights granted depend on license (e.g., GNU GPL, MIT, Apache).
- Key characteristics: Transparency, collaborative development, community support, modifiability and redistribution rights.
- Advantages:
- Lower licensing cost (often free), easier customization, faster bug fixing by community, avoids vendor lock‑in, promotes learning and innovation.
- Disadvantages:
- Support can be variable (community vs paid support), integration and training costs, license compatibility issues (e.g., GPL’s copyleft effect), possible fragmentation.
Proprietary Software
- Definition: Source code is closed; use is governed by vendor licenses (EULAs); redistribution and modification are prohibited or tightly controlled.
- Key characteristics: Vendor accountability, paid support, formal release cycles, intellectual property protection.
- Advantages:
- Professional support and warranties, polished user experience, certified integrations, predictable update schedules and clear legal terms.
- Disadvantages:
- Higher licensing costs, risk of vendor lock‑in, slower feature adoption if vendor is slow, less transparency about vulnerabilities.
Licenses — short notes
- Copyleft (e.g., GNU GPL): Derivatives must be distributed under the same license.
- Permissive (e.g., MIT, Apache): Few restrictions — code can be used in proprietary software.
- Proprietary EULA: Grants limited usage rights; source code not shared.
Societal and Practical Impacts
- Access and Digital Divide: OSS reduces cost barriers for education, governments and NGOs, increasing access to technology.
- Security and Trust: Transparency of OSS allows public auditing, but actual security depends on active maintenance. Proprietary vendors may provide timely patches and liability guarantees.
- Economic models: OSS enables service/support‑based businesses (e.g., Red Hat); proprietary relies on license revenue and subscriptions.
- Innovation and Collaboration: OSS often accelerates shared innovation; proprietary R&D can fund specialized features and polished products.
- Vendor lock‑in vs Portability: Proprietary systems can lock organizations to a vendor, increasing future switching costs; OSS encourages portability and standards compliance.
How organizations decide
Decision factors include total cost of ownership (not just license cost), availability of trained staff, integration needs, regulatory/compliance requirements, required SLAs (service level agreements), and long‑term strategic control over software.
Short Case Notes
- Android: Based on open‑source AOSP but many device vendors add proprietary components and Google services.
- Red Hat: Succeeds by selling enterprise support and services for open source (Linux).
- Microsoft Office vs LibreOffice: Office is proprietary with paid licenses and enterprise features; LibreOffice is open source and reduces licensing costs but may need compatibility checks.
Conclusion: Both open source and proprietary software have roles. OSS promotes accessibility, transparency and collaborative innovation; proprietary software offers integrated support, guarantees and polished experiences. Choosing between them requires weighing cost, control, support and strategic needs.
- Open Source: Linux (Ubuntu, Fedora), Apache HTTP Server, Mozilla Firefox, LibreOffice, GIMP, WordPress, MySQL (community edition), VLC Media Player
- Proprietary: Microsoft Windows, Microsoft Office, Adobe Photoshop, Adobe Creative Cloud suite, macOS, Oracle Database (enterprise editions), MATLAB
- Hybrid/Dual models: Android (AOSP open core + proprietary apps/services), Red Hat Enterprise Linux (open source kernel + paid support), Google Chrome (Chromium open source + proprietary additions)
- Total Cost of Ownership (TCO) ≈ Initial Cost (licenses or implementation) + Maintenance + Support + Training + Migration/Integration costs + Hardware costs
- Return on Investment (ROI) = (Net Benefit / Total Cost) × 100, where Net Benefit = Monetary benefits − Total Cost
- Payback Period = Initial Investment / Annual Net Benefits
- Open Source Adoption (%) = (Number of OSS applications used / Total number of applications used) × 100
Cybercrime: Types and Examples
What is cybercrime? Cybercrime is any illegal activity that uses a computer, network or electronic device as its primary means of committing a crime, or that targets a computer or network as its victim. It ranges from individual misuse (e.g., identity theft) to organised attacks (e.g., ransomware campaigns).
Classification (high level)
- Cyber-dependent crimes — offences that can only be committed using computers or networks (e.g., writing and deploying malware, DDoS attacks, exploiting software vulnerabilities).
- Cyber-enabled crimes — traditional crimes that are made easier or more widespread by digital technology (e.g., online fraud, distribution of child sexual abuse material, identity theft).
Common types with short explanations
- Phishing & Social Engineering: Deceptive emails, messages or sites trick users into revealing credentials or sensitive data. Example method: fake bank email with a link to a credential-stealing page.
- Malware: Software designed to harm/steal data — viruses, worms, trojans, ransomware, spyware, cryptojackers. Ransomware encrypts files and demands payment for decryption keys.
- Hacking / Unauthorized Access: Gaining access to systems or data without permission, often by exploiting vulnerabilities or weak passwords.
- Denial of Service (DoS/DDoS): Flooding a server or network to make services unavailable to legitimate users.
- Man-in-the-Middle (MitM): Intercepting and potentially altering communications between two parties (e.g., on insecure Wi‑Fi).
- SQL Injection & Web Application Attacks: Exploiting web input validation flaws to access or manipulate databases.
- Identity Theft & Financial Fraud: Using stolen personal data to open accounts, make transfers or conduct card fraud.
- Data Breach & Data Leak: Unauthorized access and disclosure of personal/business data stored by organisations.
- Cyberstalking / Online Harassment: Repeated threatening, stalking or harassing behaviour online.
- Intellectual Property (IP) Theft: Stealing software code, designs, research or other proprietary material.
- Cryptojacking: Running cryptocurrency-mining code secretly on victims' devices to mine coins for the attacker.
Societal impacts: financial loss for individuals and organisations, reputational damage, erosion of trust in digital services, psychological harm (victims of cyberstalking), disruption of critical services (healthcare, banking), and national security risks when state infrastructure is targeted.
Basic prevention measures
- Keep systems and software updated (patch management).
- Use strong, unique passwords and multi-factor authentication.
- Be sceptical of unsolicited emails/links; verify senders.
- Install reputable antivirus/endpoint protection and firewalls.
- Back up important data regularly and test restores (important vs ransomware).
- Secure web applications with input validation and parameterised queries; perform security testing.
- Employee awareness training and incident response plans for organisations.
Legal framework (brief): Many countries have cybercrime laws (in India: Information Technology Act, 2000 and amendments). Reporting and cooperation with law enforcement and CERTs (Computer Emergency Response Teams) are part of the response ecosystem.
- WannaCry ransomware (2017) — global ransomware worm that infected hundreds of thousands of computers including NHS services in the UK, encrypting files and demanding ransom.
- Equifax data breach (2017) — personal data of about 147 million people exposed due to an unpatched web application vulnerability; led to identity theft concerns.
- Cambridge Analytica / Facebook data misuse (2018) — harvesting of millions of Facebook profiles for political profiling and targeted advertising without informed consent.
- Cosmos Bank cyber heist (India, 2018) — cyberattack led to fraudulent international ATM withdrawals and transfers of about ₹94 crore via compromised switch servers and prepaid card networks.
- Aadhaar-related leaks and unauthorised access incidents (India, 2018–2019) — multiple reports of personal data being available through insecure endpoints or misconfigured databases.
- SQL injection attack on TalkTalk (UK, 2015) — customer data breach caused by an injection vulnerability in a web application, resulting in fines and loss of customer trust.
- CIA triad (conceptual): Confidentiality + Integrity + Availability — core security goals (not a numeric formula but a framework).
- Risk (conceptual) = Threat × Vulnerability × Asset Value (used conceptually to prioritise protections).
- Single Loss Expectancy (SLE) = Asset Value × Exposure Factor (EF) — EF is percentage loss in one event.
- Annualized Rate of Occurrence (ARO) = expected number of occurrences per year.
- Annualized Loss Expectancy (ALE) = SLE × ARO — expected annual monetary loss from a threat.
- Detection / classification metrics: Precision = TP / (TP + FP); Recall (Sensitivity) = TP / (TP + FN) (useful when evaluating phishing/malware detectors).
Cybersecurity Principles and Measures
Overview
Cybersecurity principles and measures protect information systems from unauthorized access, damage, disruption or misuse. The goal is to preserve confidentiality, integrity and availability (the CIA triad) while enabling safe, reliable use of digital services.
- Core Principles
- Confidentiality — ensure information is accessible only to authorized users (e.g., encryption, access control).
- Integrity — ensure data is accurate and has not been tampered with (e.g., hashing, digital signatures).
- Availability — ensure systems and data are available when needed (e.g., redundancy, backups).
- Authentication — verify identity (passwords, biometrics, multi-factor authentication).
- Authorization — limit actions after authenticating (role-based access control, least privilege).
- Non-repudiation — prevent denial of an action (digital signatures, audit logs).
- Accountability & Logging — maintain audit trails for actions and incidents.
- Defense in Depth — layered controls so a single failure does not lead to compromise (network, host, application, user layers).
- Security by Design — integrate security in planning, development and lifecycle management.
- Technical Measures
- Encryption — symmetric (AES) and asymmetric (RSA, ECC) to protect data at rest and in transit (TLS for web).
- Hashing & Digital Signatures — verify integrity and authenticity (SHA-family, HMAC).
- Access Controls — RBAC, ACLs, principle of least privilege.
- Network Security — firewalls, VPNs, segmentation, DMZ, IDS/IPS.
- Endpoint Protection — anti-malware, patch management, application whitelisting.
- Authentication Enhancements — multi-factor authentication (MFA), single sign-on (SSO), biometrics.
- Public Key Infrastructure (PKI) — certificate issuance, revocation and management.
- Administrative & Organizational Measures
- Security policies and standards, acceptable use, change management.
- Incident response planning and regular drills (prepare, detect, contain, eradicate, recover).
- User awareness and training to combat social engineering (phishing simulations).
- Regular risk assessment, vulnerability scanning and penetration testing.
- Backup and disaster recovery strategies, business continuity planning.
- Physical Measures
- Controlled access to data centers, CCTV, locks, environmental controls (fire suppression, UPS).
- Risk Management Cycle
- Identify assets & threats, assess vulnerabilities, estimate likelihood and impact, prioritize controls, implement controls, monitor and review.
- Best Practices (practical)
- Use strong, unique passwords or a password manager; enable MFA.
- Keep software and firmware patched; limit unnecessary services.
- Encrypt sensitive data at rest and in transit; use HTTPS/TLS for websites.
- Segregate critical systems and monitor logs for anomalies.
- Prepare and test backups; verify recovery procedures.
Outcome for students: Understanding these principles enables safe use and design of systems, improves digital hygiene and prepares students to think critically about technological risks and protections.
- Phishing email to a bank customer: attacker sends a convincing fake email asking for credentials; applying user training, email filters and MFA blocks the attack.
- Ransomware on a hospital server: patient records encrypted by malware; proper offline backups, network segmentation and incident response minimize downtime and data loss.
- HTTPS on e-commerce sites: TLS encrypts payment details between browser and server preventing eavesdropping during checkout.
- Two-factor authentication for an email account: password plus OTP (one-time password) stops an attacker who has guessed the password.
- Data breach from weak access control: an employee with excessive privileges leaks sensitive files; applying least privilege and periodic access reviews prevents such breaches.
- ATM skimming: physical tampering captures card data; anti-tamper designs, CCTV and customer awareness reduce risk.
- Risk = Likelihood × Impact (simple risk estimation used to prioritize controls)
- Risk (alternative) = Threat × Vulnerability × Impact (qualitative/quantitative risk model)
- Password entropy (bits) = L × log2(N) where L = password length, N = size of character set (e.g., 26 lowercase + 26 uppercase + 10 digits + symbols ≈ 94).
- Hash verification: H(message) = digest. Integrity check passes if H(received_message) == expected_digest.
- False Positive Rate (FPR) = FP / (FP + TN) and False Negative Rate (FNR) = FN / (FN + TP) (useful for IDS/antivirus evaluation).
- Precision = TP / (TP + FP), Recall = TP / (TP + FN) (accuracy metrics for detection systems).
IT Act and Cyber Laws (India)
Overview
The Information Technology Act, 2000 (IT Act) is the primary law in India dealing with electronic communications, digital signatures, cybercrimes and liability of intermediaries. It was amended in 2008 to add new offences, strengthen penalties and address emerging cyber issues. The Act aims to provide legal recognition to electronic records, promote e-commerce, deter cybercrime and establish mechanisms for investigation and adjudication.
Objectives
Protect electronic transactions and data; define offences (hacking, identity theft, publishing obscene content, etc.); specify penalties; regulate intermediaries and provide legal framework for digital signatures and electronic records.
Key definitions
Electronic record: data, record or data generated, stored or transmitted electronically.
Digital signature: authentication technique based on asymmetric cryptography.
Intermediary: network service providers, ISPs, search engines, social media platforms, etc., that store/route information for users.
Important provisions (selected)
- Section 43: Civil liability for damage to computer systems or data (compensation).
- Section 66: Hacking (unauthorized access) — criminal offence with imprisonment/fine.
- Section 66B: Receiving stolen computer resources or communication device.
- Section 66C: Identity theft (fraudulent use of another’s electronic signature/digital identity).
- Section 66D: Cheating by personation using computer resources (e.g., online impersonation scams).
- Section 66E: Violation of privacy (capturing/distributing images of private area).
- Section 67/67A/67B: Publishing/transmitting obscene content, sexually explicit material, child pornography (increasing penalties for more severe offences).
- Section 72/72A: Breach of confidentiality/privacy by a person in possession of data or by disclosure in breach of lawful contract.
- Section 79: Safe‑harbour protection for intermediaries (no liability for third‑party content if due‑diligence requirements are met and they act on court/authority orders).
- Section 69: Powers of government/authorities to direct interception, monitoring or decryption in certain circumstances.
Amendments & landmark judgments
- IT (Amendment) Act, 2008: strengthened provisions on cybercrime, added sections on data/privacy and enhanced penalties.
- Shreya Singhal v. Union of India (2015): Supreme Court struck down Section 66A (which criminalized “offensive” online content) as unconstitutional for being vague and overbroad; affirmed freedom of speech online subject to reasonable restrictions.
Enforcement bodies & mechanisms
- CERT‑In (Indian Computer Emergency Response Team): incident response, alerts and technical guidance.
- Cybercrime cells / law enforcement: investigation and prosecution of offences; many states have dedicated cyber cells.
- Ministry of Electronics & IT (MeitY) and Telecom/Other bodies issue rules and guidelines (e.g., Intermediary Guidelines and grievance redressal rules).
Intermediaries & safe harbour
Intermediaries (social platforms, ISPs, cloud providers) are generally not held liable for user content if they follow due diligence, have grievance redressal mechanisms, and follow lawful orders to remove content. Failure to follow intermediate rules can remove safe‑harbour protection.
Typical cybercrimes (classes & examples)
- Financial frauds: phishing, online banking frauds, credit/debit card misuse.
- Unauthorized access & data theft: hacking, ransomware, theft of databases.
- Identity crimes: SIM swap, identity theft for impersonation or financial gain.
- Content offences: defamation, revenge porn, publication of obscene/child sexual content.
- Cyberstalking & harassment: repeated unwanted contact and threats.
- Cyber terrorism: attacks aimed at disrupting critical infrastructure.
Reporting & remedies
- Citizens can file complaints on national cybercrime portals (e.g., cybercrime.gov.in) or at local police stations to register FIRs.
- CERT‑In issues advisories; banks and intermediaries may block/trace transactions; civil suits for compensation and injunctions are available under the IT Act and other laws (e.g., IPC, Indian Evidence Act, Consumer Protection).
Prevention & best practices (brief)
Use strong passwords and multi‑factor authentication, avoid clicking suspicious links, keep software updated, back up data, educate users on social engineering and phishing, follow privacy settings on social media, and businesses must adopt encryption and data‑protection measures.
Class‑12 relevance (Societal impacts)
The IT Act shapes how individuals, businesses, platforms and the state interact online. It balances innovation and free expression with privacy and security. Understanding it helps students appreciate legal responsibilities, digital ethics and how society responds to cyber risks.
Note: This is an educational summary. For legal advice or current statutory details consult the text of the IT Act, official government notifications and a qualified legal professional.
- Shreya Singhal v. Union of India (2015): Supreme Court struck down Section 66A of the IT Act (which criminalized broadly defined offensive online content) for violating freedom of speech—landmark case for online speech rights.
- Phishing banking fraud: A user receives a forged bank email, enters credentials on a fake site; attacker transfers money from the account. Such cases are prosecuted under sections like 66D (cheating by personation) and sections of IPC.
- Identity theft / SIM‑swap scam: Attacker convinces mobile operator to transfer victim’s mobile number, receives OTPs and gains access to online banking—cases pursued under sections 66C (identity theft) and related cybercrime provisions.
- Data breach of a company database: Personal records of customers are leaked online; victims seek compensation under Section 43 (damage/compensation) and remedies under consumer protection and data‑privacy rules.
- Cyberstalking and revenge porn: Repeated harassment and non‑consensual sharing of intimate images—offences under Sections 66E (privacy), 67A/67B (obscene content) and criminal law provisions; platforms asked to remove content under intermediary rules.
- How to think about a cyber‑offence: Actus Reus (prohibited digital act, e.g., unauthorized access or data disclosure) + Mens Rea (intent/knowledge) → Criminal liability (except where statute prescribes strict liability).
- Intermediary safe harbour checklist (to retain protection): Due diligence + Grievance redressal mechanism + Timely compliance with court/authority takedown orders = Limited liability for third‑party content.
- Penalty severity (conceptual): Minor offences (privacy breach, small fraud) → civil compensation or short imprisonment; Serious offences (child pornography, large‑scale hacking, terrorism‑linked attacks) → higher imprisonment and fines as per statute.
- Reporting flow (process formula): Incident detected → Preserve evidence (logs, screenshots) → Report to CERT‑In / Cybercrime portal / Local police → Investigation → Civil/criminal remedies.
Cyber Safety and Safe Online Practices
Cyber Safety and Safe Online Practices
Cyber safety means protecting yourself, your devices and your data while using the internet. With increasing online activity, understanding threats and practising safe behaviour (cyber hygiene) is critical to protect privacy, finances, reputation and mental health.
Common online threats
- Malware: viruses, trojans, ransomware and spyware that damage or steal data.
- Phishing & social engineering: fraudulent emails, messages or calls that trick users into revealing credentials or money.
- Identity theft & data breaches: stolen personal data used to commit fraud.
- Man-in-the-middle & insecure Wi‑Fi: eavesdropping on network traffic.
- Cyberbullying & harassment: abusive behaviour on social platforms and messaging apps.
- Account takeover / SIM swap: attackers gain control of online accounts by stealing authentication methods.
Safe online practices
- Strong, unique passwords: use different passwords per account and prefer passphrases; use a reputable password manager.
- Two-factor authentication (2FA): enable 2FA (app-based or hardware tokens) for critical accounts.
- Keep software updated: install OS, browser and app updates and security patches promptly.
- Back up data: maintain regular offline or encrypted backups to recover from ransomware or accidental loss.
- Verify before you click: hover over links, check sender addresses, and avoid downloading unknown attachments.
- Use secure connections: prefer sites with HTTPS, avoid sensitive transactions on public Wi‑Fi (use VPN if necessary).
- Limit sharing & privacy settings: share minimal personal information and review privacy settings on social networks.
- Be cautious with apps & permissions: install apps from trusted stores and restrict unnecessary permissions.
- Educate and report: teach family members (especially children and elders) safe habits and report suspicious activity to service providers and authorities.
Digital footprint and netiquette
Everything posted online leaves a digital footprint that can be permanent. Think before you post: consider future consequences (college, job, legal). Follow respectful online behaviour (netiquette) to avoid conflicts and reputation damage.
Incident response & legal aspects
- Immediate actions: disconnect affected device, change passwords from a safe device, restore from backups, alert banks if financial data is compromised.
- Report: report cybercrimes to service providers, platform moderators and relevant law enforcement (in India, file complaints via the cyber crime portal or local cyber cell under the IT Act).
- For organisations: maintain an incident response plan, logs, and regular security audits.
Practical tips summary
- Use long, unique passwords + password manager.
- Enable 2FA wherever possible.
- Keep devices and apps updated and use antivirus/anti-malware tools.
- Back up important data offline or in encrypted cloud storage.
- Think before clicking, downloading or sharing sensitive info.
- Use secure networks, VPNs for public Wi‑Fi.
- Teach safe habits to family and report abuse or fraud early.
Following these practices reduces the chance of falling victim to common attacks, protects your privacy and helps create a safer online community.
- Phishing email posing as a bank: A user receives an email claiming their bank account will be locked unless they click a link and enter credentials. The site is a fake. Result: account compromise and financial loss. Safe practice: verify sender, open bank site manually or call bank, enable 2FA.
- Ransomware in a hospital: An employee opens an infected attachment and ransomware encrypts patient records, disrupting services. Safe practice: regular backups, restrict attachment types and training for staff.
- Social media overshare leading to burglary: A family posts travel dates publicly. Burglars learn the house is empty and break in. Safe practice: avoid posting real-time location and use privacy settings.
- SIM-swap attack: An attacker socially engineers telecom support to port a victim's number to a new SIM, receives OTPs, and accesses bank accounts. Safe practice: set telecom PINs, use app-based 2FA, monitor account activity.
- Data breach & identity theft: Personal details leaked from an online retailer are used to open fraudulent credit accounts. Safe practice: monitor credit reports, use unique passwords, and enable breach notifications.
- Cyberbullying case: A student receives repeated offensive messages leading to emotional distress. Safe practice: keep evidence, report to platform/school, block abusers and seek support.
- Password entropy (approx.): H = L * log2(N) (H = entropy in bits, L = password length, N = size of character set). Higher H means stronger password.
- General information entropy: H = -Σ p_i * log2(p_i) (measures unpredictability of characters/choices).
- Brute-force time estimate: T ≈ N^L / R (N^L = number of combinations, R = attempts per second). Use this to compare how long it would take to crack a password.)
- Risk (qualitative): Risk = Threat × Vulnerability × Impact (useful for prioritising security measures; factors can be scored numerically for assessment).
Social Networking and Media Impact
Overview: Social networking sites and social media are platforms that allow people to create profiles, connect, share content, and communicate online. They include networks (Facebook, LinkedIn), microblogging (Twitter/X), media-sharing (Instagram, TikTok, YouTube), and messaging apps (WhatsApp, Telegram). These platforms shape how information spreads, how communities form, and how individuals, businesses and governments interact.
How they work (key mechanisms):
- Network effects: value increases as more users join and connect.
- Algorithms and personalization: platforms use recommendation algorithms to rank and show content based on engagement, relevance and user behaviour (creating filter bubbles).
- Sharing and virality: content spreads via re-shares, likes and comments; reach depends on connections and engagement.
- Data collection: platforms gather behavioural data to improve targeting and ads.
Positive impacts:
- Connectivity: easy communication with friends, family and professionals across distance.
- Access to information: news, educational resources, tutorials and citizen journalism.
- Economic opportunities: businesses, influencers and freelancers find customers and markets.
- Social mobilization: campaigns and movements can organize rapidly (awareness, fundraising, disaster response).
Negative impacts:
- Misinformation and fake news: rapid spread can influence public opinion and elections.
- Privacy risks: personal data can be misused for profiling and targeted ads.
- Cyberbullying and harassment: can cause mental health issues, especially among youth.
- Echo chambers and polarization: algorithms can reinforce existing views and reduce exposure to diverse opinions.
- Addiction and mental health: excessive use linked to anxiety, depression and reduced attention span.
Societal roles and responsibilities:
- Users should practise digital literacy: verify sources, check bias, and protect privacy (strong passwords, privacy settings).
- Platforms must moderate harmful content, be transparent about algorithms, and protect user data.
- Governments and educators should promote rules, law enforcement against crime, and teach safe online behaviour in schools.
Practical classroom links (Informatics Practices relevance): analysing social media datasets, measuring engagement and sentiment, creating visualisations, understanding networks (nodes & edges), and discussing ethical, legal and societal issues such as data protection (e.g., Digital Personal Data Protection concepts), cyber safety and digital citizenship.
Summary: Social networking and media have transformed communication, economy and politics. They bring benefits (connectivity, information, opportunity) but also risks (misinformation, privacy loss, mental health effects). Balanced use, regulation, education and technical safeguards are needed to maximise benefits and reduce harms.
- Arab Spring (2010–2012): Social media helped activists organise protests and share information rapidly across countries.
- Influencer marketing: Small businesses use Instagram/TikTok creators to reach target audiences and boost sales.
- Fake news during elections: False stories spread on platforms and messaging apps have influenced voter opinion in several countries.
- WhatsApp misinformation in crises: Forwarded messages have sometimes caused panic or communal tensions.
- Twitter as breaking-news source: People use Twitter/X to report earthquakes, accidents and live events faster than traditional media.
- LinkedIn for job networking: Professionals get job offers and career opportunities through connections and posts.
- Engagement Rate (%) = (Likes + Comments + Shares) / Impressions × 100
- Reach vs Impressions: Reach = number of unique users who saw content; Impressions = total times content was displayed (including repeats).
- Metcalfe's Law (network value approximation): Value ∝ n(n − 1) / 2, where n is number of users (number of possible connections).
- Virality coefficient (K) (simple model): K = average number of shares per user × conversion rate to new viewers. If K > 1, content spreads exponentially.
- Sentiment Score (simple): Sentiment = (Positive_count − Negative_count) / Total_count (ranges from −1 to +1).
- Degree distribution (social graph): Often follows a power law: P(k) ∝ k^(−γ), where P(k) is fraction of nodes with degree k (explains presence of influencers/hubs).
Digital Divide and Inclusion
Definition: The digital divide is the gap between individuals, households, businesses and geographic areas at different socio‑economic levels with regard to their opportunities to access information and communication technologies (ICTs) and to use the Internet for a wide variety of activities. Digital inclusion means ensuring all people have access to affordable connectivity, devices, digital skills, relevant content and accessibility features so they can participate fully in society and the economy.
Types of digital divide
- Access divide: Availability of devices, networks and electricity (urban vs rural, inter‑state differences).
- Connectivity/Quality divide: Speed, reliability and data affordability (broadband vs low‑speed mobile).
- Skills divide: Ability to use digital tools—basic to advanced digital literacy.
- Usage divide: Differences in how people use the internet (social, educational, economic).
- Content & language divide: Lack of local language content or culturally relevant services.
- Accessibility divide: Barriers faced by persons with disabilities.
Causes: poor infrastructure (backhaul, towers, fiber), unaffordable devices/data, low digital literacy, gender & socio‑economic inequalities, policy gaps, lack of localized content, and power/electricity issues.
Societal impacts
- Education: Students without access miss online learning—widening learning losses.
- Employment & income: Digital jobs and gig work favor the connected; others are excluded from new opportunities.
- Healthcare: Telemedicine and health information remain inaccessible to many.
- Democracy & governance: E‑services, grievance redressal and civic participation depend on connectivity.
- Economic growth: Regions with poor digital access lag in productivity and entrepreneurship.
Digital inclusion strategies
- Expand affordable broadband infrastructure (fiber, wireless, public Wi‑Fi) and reliable electricity.
- Subsidize devices or offer low‑cost device financing; affordable data plans and public access points (libraries, community centres, CSCs).
- Invest in digital literacy programs across ages and genders; include critical thinking and online safety.
- Create local language content, simplified UI/UX and assistive technologies for persons with disabilities.
- Policy actions: universal service funds, public‑private partnerships, targeted subsidies, regulation to ensure fair competition and affordability.
- Monitor inclusion with metrics and targeted interventions (e.g., gender‑specific programs, rural incentives).
Role of stakeholders: Governments set policy & funding; telecoms build networks; schools and NGOs deliver skills; private sector creates inclusive services; communities provide feedback and localized solutions.
Summary: Closing the digital divide requires a combination of infrastructure, affordability, skills and inclusive design so all citizens can benefit from the social, educational and economic opportunities of the digital age.
- Rural school students lacking home internet access miss live online classes—example: many villages rely on shared mobile phones or no devices, causing learning loss during prolonged school closures.
- Urban vs rural broadband: City A has 80% household broadband penetration while District B has 15%—students and businesses in District B cannot access e‑resources or e‑commerce effectively.
- Gender divide: In some regions, women have much lower smartphone ownership and digital literacy than men, limiting access to health information and digital banking.
- Digital public services: Aadhaar‑linked e‑services and UPI payments increase convenience for connected citizens; those without ID documents, phones or literacy are excluded.
- Healthcare access: Telemedicine platforms work well in cities but are ineffective in areas without reliable internet or electricity, leaving rural patients reliant on distant physical clinics.
- Internet Penetration Rate (%) = (Number of Internet Users / Total Population) × 100
- Broadband Penetration (per 100 inhabitants) = (Number of Broadband Subscriptions / Total Population) × 100
- Access Gap (%) = Penetration_urban − Penetration_rural (use same units e.g., percentage points)
- Device Ownership Ratio = (Households with Device / Total Households) × 100
- Weighted Digital Inclusion Index (example) = w1×AccessScore + w2×AffordabilityScore + w3×SkillsScore + w4×AccessibilityScore (weights w1..w4 sum to 1)
- \[Gini coefficient (digital access inequality) = (1 / (2n^2μ)) × sum_{i=1..n} sum_{j=1..n} |xi − xj| (where xi are access measures, μ is mean\]\[optional advanced metric)\]
Accessibility and Assistive Technologies
What is accessibility? Accessibility means designing products, environments and systems so that people with a wide range of abilities and disabilities can use them. In computing, accessibility ensures digital content and applications can be perceived, operated, understood and interacted with by everyone.
What are assistive technologies (AT)? Assistive technologies are tools, devices or software that help people with disabilities perform tasks that would otherwise be difficult or impossible. Examples include screen readers, magnifiers, speech-to-text systems, alternative input devices and braille displays.
Core principles (POUR)
- Perceivable – information must be presented so all users can perceive it (text alternatives for images, captions for audio).
- Operable – interface components and navigation must be usable (keyboard access, clear focus indicators).
- Understandable – content and operation must be understandable (simple language, predictable navigation).
- Robust – content must work with current and future user agents, including assistive technologies (semantic HTML, ARIA where needed).
Standards and guidelines: The Web Content Accessibility Guidelines (WCAG) classify success criteria into three levels: A, AA and AAA. Following WCAG helps achieve universal access.
Types of disabilities and common assistive technologies
- Visual impairments – screen readers (JAWS, NVDA, VoiceOver), screen magnifiers, braille displays.
- Hearing impairments – captions/subtitles, visual alerts, sign-language videos.
- Motor impairments – alternative keyboards, switch control, eye-tracking systems, voice input.
- Cognitive impairments – simplified layouts, text-to-speech, consistent navigation and symbols.
Design & development practices: Use semantic HTML, provide alt text for images, ensure keyboard operability, provide visible focus, use sufficient color contrast, label forms clearly, provide captions/transcripts for audio/video, follow WCAG success criteria, and test with real assistive technologies.
Benefits: Accessibility improves usability for all (including elderly users), increases market reach, meets legal/ethical obligations, and often improves overall code and design quality.
Testing tools & methods: Automated tools (WAVE, Lighthouse), manual keyboard-only testing, screen reader testing (NVDA/VoiceOver), user testing with people with disabilities, and accessibility audits using WCAG checklists.
Challenges: Ensuring compatibility across diverse AT, retrofitting legacy systems, balancing visual design with contrast/legibility, and educating teams on inclusive design.
- A blind student uses a screen reader (NVDA/VoiceOver) to read textbook pages and navigate government websites.
- Automatic captions on YouTube and live-captioning in video calls help deaf or hard-of-hearing participants.
- Speech-to-text (voice typing) in Google Docs allows people with motor impairments to write documents hands-free.
- Refreshable braille displays let a visually impaired user read text output from a computer or smartphone.
- Eye-tracking systems enable communication and control for people with severe motor disabilities (e.g., ALS).
- Accessible ATM machines provide tactile keypads, high-contrast screens and audio output for visually impaired users.
- Accessibility percentage = (Number of users able to use the feature / Total target users) × 100
- Contrast ratio = (L1 + 0.05) / (L2 + 0.05), where L1 is the relative luminance of the lighter color and L2 of the darker color (WCAG uses this to assess text/background contrast).
- Words per minute (speech throughput) = (Total words spoken / Total seconds) × 60 — useful to evaluate speech-based interfaces.
- Flesch-Kincaid Grade Level = 0.39 × (words/sentences) + 11.8 × (syllables/words) − 15.59 — helps measure textual readability for cognitive accessibility.
E-Governance and Digital Initiatives
E-Governance: Definition & Purpose
E‑Governance is the use of information and communication technologies (ICT) by government to provide services, share information, perform transactions and engage citizens in governance. Its main goals are to increase transparency, improve efficiency and accessibility of public services, reduce corruption and empower citizens.
Core Models
- G2C (Government to Citizen): e.g., online tax filing, digital certificates.
- G2B (Government to Business): e.g., e‑procurement, business registrations.
- G2G (Government to Government): departmental data exchange, shared services.
- G2E (Government to Employee): payroll, HR portals.
Key Components
- ICT Infrastructure: data centers, networks, cloud and broadband connectivity.
- Core Applications & Databases: portals, payment gateways, identity systems.
- Security & Privacy: authentication, encryption, access control, data‑protection policies.
- Legal & Institutional Framework: laws, standards, interoperability rules.
- Human Capacity & Change Management: training, citizen awareness and digital literacy.
Benefits
- Improved accessibility and convenience (24x7 services, mobile access).
- Faster service delivery and reduced turnaround time.
- Cost savings for government and citizens.
- Greater transparency and accountability in transactions.
- Data‑driven policymaking using aggregated service data.
Challenges
- Digital divide: uneven access to devices and internet among regions and groups.
- Privacy and security risks: data breaches, identity theft.
- Interoperability issues across legacy systems.
- Resistance to change and limited digital literacy.
- Infrastructure constraints in rural/remote areas.
Typical Implementation Steps
- Policy formulation and standards (open data, interoperability).
- Establish digital identity and secure authentication.
- Design citizen‑centric portals and single‑window services.
- Integrate payments, databases and backend workflows.
- Monitor performance (KPIs), iterate and scale.
Digital Initiatives (examples and impact)
Digital initiatives bundle multiple e‑governance services to create a unified citizen experience and to deliver benefits directly. Successful initiatives typically combine digital identity, secure storage, mobile apps and integrated payment systems to reduce friction and increase uptake.
Measuring Success
Success is measured by KPIs such as adoption rate, number of digital transactions, uptime, average service delivery time, cost per transaction and citizen satisfaction scores. Continuous monitoring and feedback loops are essential to improve services and bridge the digital divide.
- Aadhaar (India): biometric-based digital identity used for authentication across many e‑services, enabling direct benefit transfers and identity verification.
- DigiLocker: a secure cloud-based platform for storing and sharing government-issued documents (driving license, educational certificates).
- UMANG (Unified Mobile Application for New-age Governance): single mobile app providing access to multiple central and state government services (payments, certificates, utility services).
- e‑Filing of Income Tax Returns: allows citizens and businesses to submit tax returns, make payments and get refunds digitally.
- e‑Procurement portals (e.g., Government eMarketplace): online tendering and procurement to increase transparency and reduce corruption.
- e‑Courts and e‑Filing: digital case filing and virtual hearings to speed up judicial processes.
- Adoption Rate (%) = (Number of active users / Eligible population) × 100 — measures how widely a service is used.
- Uptime (%) = (Total operational time − Downtime) / Total operational time × 100 — indicates reliability of online services.
- Average Response Time = (Sum of individual response times) / Number of requests — used to monitor service performance.
- Cost per Transaction = Total operating cost of service / Number of transactions processed — helps evaluate cost-efficiency.
- Service Improvement (%) = (Old average delivery time − New average delivery time) / Old average delivery time × 100 — quantifies improvement after digitization.
- ROI (%) = (Monetary benefits − Cost of implementation) / Cost of implementation × 100 — assesses financial return of an initiative.
Environmental and Health Impacts
Overview
Environmental and health impacts refer to the direct and indirect effects information and communication technologies (ICT) and digital practices have on ecosystems, natural resources and human well‑being. This includes energy consumption and greenhouse gas emissions, electronic waste (e‑waste) and toxic materials, water use and resource depletion, plus physical and mental health effects from device use and workplace conditions.
Environmental impacts
- Energy consumption and GHG emissions: Data centers, networks and user devices consume large amounts of electricity. Electricity production often produces CO₂ and other greenhouse gases, contributing to climate change.
- Electronic waste (e‑waste): Rapid device turnover creates e‑waste containing valuable materials (gold, copper) and hazardous substances (lead, mercury, cadmium). Improper disposal pollutes soil and water.
- Resource depletion and lifecycle impacts: Mining for rare metals, manufacturing and transport all consume resources and produce emissions. A lifecycle assessment (LCA) sums impacts across production, use and end‑of‑life.
- Water and chemical pollution: Manufacturing semiconductors and batteries uses large volumes of water and chemicals; poor treatment can contaminate freshwater.
- Indirect environmental effects: Digital services encourage increased consumption (streaming, cloud services) and can shift energy use geographically (e.g., concentrated data centers).
Health impacts
- Physical health – occupational: Poor ergonomics, prolonged sitting, repetitive tasks cause musculoskeletal disorders (neck, back, carpal tunnel), eye strain (computer vision syndrome) and sleep problems.
- Physical health – exposure risks: Improper handling of e‑waste exposes workers and communities to toxic metals. Electromagnetic field (EMF) exposure from devices and base stations is studied for potential effects; exposure falls quickly with distance.
- Mental health: Excessive screen time, social media and constant connectivity can increase stress, anxiety, depression and reduce attention span and sleep quality.
- Public health risks: Improper recycling and informal processing practices (open burning of PCBs, acid baths) create local air and water pollution with serious health consequences.
Mitigation and best practices
- Improve energy efficiency (efficient servers, optimized code, virtualization).
- Use renewable energy for data centers and charging infrastructure.
- Design for repairability and longer device life; encourage take‑back and formal recycling.
- Adopt ergonomic workplaces, enforce breaks, use adjustable furniture and proper lighting.
- Enforce safe e‑waste processing regulations and worker protections.
- Raise awareness about healthy digital habits: screen limits, blue‑light filters, sleep hygiene.
Role of Informatics Practitioners
Software developers, system architects and IT managers can reduce impacts by optimizing code and services for lower energy use, choosing energy‑efficient hardware, monitoring PUE for data centers, and supporting circular economy policies (repair, reuse, recycle).
- E‑waste in India: Rapid smartphone turnover and low formal recycling rates have led to informal e‑waste recycling hubs (e.g., in Delhi, Mumbai) where open burning releases toxic fumes and contaminates soil and water.
- Data center energy demand: A cloud provider opens a large data center near a city. If powered by grid electricity with a high emissions factor, its CO₂ footprint becomes significant; switching to onsite solar or renewable contracts reduces that footprint.
- Ergonomics and office workers: Employees who work 8+ hours daily without ergonomic chairs, adjustable monitors or breaks develop neck/back pain and repetitive strain injuries (e.g., carpal tunnel) over months/years.
- Blue light and sleep: Late‑night smartphone use exposes users to blue light that suppresses melatonin, delaying sleep onset and reducing sleep quality, especially in adolescents.
- Improved efficiency example: Virtualization consolidates many underutilized physical servers into fewer machines, reducing total power consumption and cooling needs, lowering PUE and emissions.
- Energy (kWh) = Power (kW) × Time (h). Example: 0.2 kW × 8 h = 1.6 kWh.
- CO₂ emissions (kg CO₂) = Energy consumed (kWh) × Emission factor (kg CO₂/kWh). Example: 1.6 kWh × 0.7 kg CO₂/kWh = 1.12 kg CO₂.
- Power Usage Effectiveness (PUE) = Total Facility Energy / IT Equipment Energy. PUE ≥ 1.0; closer to 1.0 is more efficient.
- Energy per transaction (or per user request) = Total energy consumed / Number of transactions (useful to measure service efficiency).
- E‑waste per capita (kg/person) = Total e‑waste generated (kg) / Population (persons).
- Specific Absorption Rate (SAR) ≈ (σ × E²) / ρ, where σ is tissue conductivity (S/m), E is electric field (V/m), and ρ is tissue density (kg/m³). (Used in bioelectromagnetics; practical exposure limits are set by standards authorities.)
Responsible Use, Policy and Professional Conduct
Overview: Responsible use, policy and professional conduct refers to the set of ethical rules, organisational policies and legal obligations that guide how information technology is created, deployed and used. It ensures technology serves society without causing harm to individuals, organisations or communities.
Core principles:
- Legality: Comply with applicable laws (e.g., data-protection, copyright, cyber laws).
- Privacy & Confidentiality: Collect and process only necessary personal data and protect it from unauthorized access.
- Security: Safeguard systems and data through appropriate controls and incident response planning.
- Integrity & Accuracy: Ensure data and software are correct, unaltered and reliable.
- Accountability & Transparency: Roles, responsibilities and decision-making must be clear and auditable.
- Fairness & Non-discrimination: Avoid bias in algorithms, hiring, access and use of IT resources.
- Professionalism: Maintain competence, honesty and respect for colleagues, clients and users.
Common policies and their purpose:
- Acceptable Use Policy (AUP): Rules for what employees/students may do with network, devices and services.
- Data Protection / Privacy Policy: How personal data is collected, stored, shared and deleted.
- Information Security Policy: Controls for access, encryption, backups and incident response.
- Intellectual Property & Licensing Policy: Proper use of software, respect for copyrights and open-source license obligations.
- Bring Your Own Device (BYOD) Policy: Conditions for using personal devices to access organisational resources.
- Code of Conduct / Professional Ethics: Behavioural standards (conflicts of interest, integrity, harassment).
Professional conduct for IT practitioners: Keep skills up-to-date, clearly communicate limitations, document work, protect client privacy, avoid intentional misuse (malware, unauthorized access), and report security incidents. Ethical decision-making balances stakeholder rights, legal obligations and societal good.
Consequences of irresponsible behaviour: Data breaches, financial loss, legal penalties, reputational damage, loss of trust and harm to individuals (identity theft, discrimination, harassment).
Implementation & governance: Effective implementation requires training, monitoring, enforcement (disciplinary measures), audits, incident drills and continuous policy review to keep pace with new technologies and threats.
- A school issues an Acceptable Use Policy requiring students to use the network for learning only; a student caught hacking into the grading system faces disciplinary action.
- An IT company enforces a Data Protection Policy: employees must encrypt laptops and report lost devices to prevent exposure of customer personal data.
- A developer discovers a security bug in a client system and follows responsible disclosure procedures—informing the client, patching and documenting the fix—instead of publishing the exploit publicly.
- A company uses facial-recognition hiring tools that inadvertently discriminate against certain groups; a review leads to algorithm adjustments and a fairness audit policy.
- An employee copies licensed software onto a home computer (violates licensing policy)—the organisation enforces sanctions and mandates software awareness training.
- A hospital defines a BYOD policy: only registered, encrypted mobile devices with endpoint security can access patient records to preserve confidentiality and comply with healthcare privacy laws.
- Risk Score = Likelihood × Impact — used to prioritise security risks by estimating how likely an event is and how severe its consequences are.
- Single Loss Expectancy (SLE) = Asset Value × Exposure Factor (EF). Annualised Loss Expectancy (ALE) = SLE × Annual Rate of Occurrence (ARO) — used for estimating expected monetary loss from threats.
- Compliance Percentage = (Number of compliant systems or users / Total systems or users) × 100 — simple measure of policy adoption.
- Password Entropy (bits) ≈ Password length × log2(character_set_size) — estimates password strength (higher is better).
- SLE example: If Asset Value = ₹100,000 and EF = 0.3, then SLE = ₹30,000. If ARO = 0.2 (once every five years), then ALE = ₹6,000.
Key Concepts
- Digital Divide
- The gap between individuals or communities with and without access to information and communication technologies (ICT) and the skills to use them.
- Privacy
- The right of individuals to control access to their personal information and how it is collected, used, or shared.
- Cybersecurity
- Measures, practices and technologies used to protect computers, networks, data and systems from digital attacks or unauthorized access.
- Intellectual Property
- Legal rights over creations of the mind such as inventions, literary and artistic works, designs and symbols.
- Plagiarism
- Presenting someone else's words, ideas or work as one's own without proper acknowledgment.
- Piracy
- Unauthorized copying, distribution or use of copyrighted digital content such as software, music, movies or books.
- Data Protection
- Policies and practices to ensure personal and sensitive data are collected, stored and processed securely and lawfully.
- Surveillance
- Monitoring of individuals or groups by governments, organizations or individuals using digital technologies.
- E-waste
- Discarded electronic devices and components that can harm the environment and health if not recycled properly.
- Cyberbullying
- Use of digital platforms to harass, intimidate or harm someone repeatedly or maliciously.
- Net Neutrality
- Principle that internet service providers must treat all internet data equally without favoring or blocking particular services or websites.
- Censorship
- Suppression, restriction or control of information and expression by authorities or platforms.
- Digital Citizenship
- Responsible, ethical and safe behavior when using technology and participating in online communities.
- Online Safety
- Practices and precautions to protect individuals, especially children, from online risks like scams, abuse or exposure to harmful content.
- Encryption
- Technique of converting data into a coded form to prevent unauthorized access; only those with the key can decrypt it.
- Authentication
- Process of verifying the identity of a user or device before granting access to systems or data.
- Identity Theft
- Fraud where someone steals personal information to impersonate another person and commit crimes or financial fraud.
- Malware
- Malicious software designed to damage, disrupt, or gain unauthorized access to computers, networks or data.
- Social Engineering
- Manipulative techniques used to trick people into revealing confidential information or performing actions that compromise security.
- Digital Footprint
- The trail of data and traces individuals leave online through their activities, posts, searches and interactions.
End-of-Chapter Trial Paper & Test Questions
Topic-wise questions to test your understanding of every concept in this chapter.
-
Define digital footprint and distinguish between its active and passive types. / डिजिटल फुटप्रिंट को परिभाषित कीजिए और इसके सक्रिय तथा निष्क्रिय प्रकारों में अंतर कीजिए।
Show answer
A digital footprint is the trail of data a person leaves online (posts, searches, cookies, metadata). Active footprint is data you intentionally share (posts, uploads); passive footprint is data collected without deliberate input (cookies, location, browsing logs). / डिजिटल फुटप्रिंट वह डेटा-निशान है जो व्यक्ति ऑनलाइन छोड़ता है। सक्रिय फुटप्रिंट जानबूझकर साझा डेटा (पोस्ट, अपलोड) है; निष्क्रिय फुटप्रिंट बिना इरादे के एकत्र डेटा (कुकीज़, लोकेशन, ब्राउज़िंग लॉग) है।
-
Explain the digital divide and state two strategies to reduce it in India. / डिजिटल डिवाइड को समझाइए और भारत में इसे कम करने की दो रणनीतियाँ बताइए।
Show answer
Digital divide is the unequal access to devices, connectivity and digital skills, e.g. between urban and rural areas, causing social inequality. Strategies: government digital-literacy programs and inclusive infrastructure/low-cost connectivity, aided by open-source software to cut cost barriers. / डिजिटल डिवाइड डिवाइस, कनेक्टिविटी व कौशल तक असमान पहुँच है, जैसे शहरी-ग्रामीण अंतर, जिससे असमानता बढ़ती है। रणनीतियाँ: सरकारी डिजिटल-साक्षरता कार्यक्रम तथा समावेशी इन्फ्रास्ट्रक्चर/सस्ती कनेक्टिविटी, ओपन-सोर्स सॉफ़्टवेयर से लागत कम करना।
-
If a country has 90 crore internet users out of a population of 140 crore, calculate the internet penetration rate. / यदि किसी देश में 140 करोड़ जनसंख्या में 90 करोड़ इंटरनेट उपयोगकर्ता हैं, तो इंटरनेट पेनिट्रेशन दर ज्ञात कीजिए।
Show answer
Penetration Rate = (Users / Population) × 100 = (90 / 140) × 100 ≈ 64.3%. / पेनिट्रेशन दर = (उपयोगकर्ता / जनसंख्या) × 100 = (90 / 140) × 100 ≈ 64.3%।
-
Differentiate between privacy and confidentiality with one example each. / गोपनीयता (प्राइवेसी) और गोपनीयता-दायित्व (कॉन्फिडेंशियलिटी) में उदाहरण सहित अंतर कीजिए।
Show answer
Privacy is an individual's right to control access to their personal information; confidentiality is the duty of those holding such data not to disclose it without authorization. Example: a patient's right to keep medical data private (privacy) vs. a hospital's obligation not to reveal it (confidentiality). / प्राइवेसी व्यक्ति का अपनी जानकारी तक पहुँच नियंत्रित करने का अधिकार है; कॉन्फिडेंशियलिटी डेटा-धारक का उसे बिना अनुमति न प्रकट करने का दायित्व है। उदाहरण: रोगी का चिकित्सा-डेटा गुप्त रखने का अधिकार बनाम अस्पताल का उसे न बताने का दायित्व।
-
State the CIA triad of cybersecurity and name one technical measure for each component. / साइबर सुरक्षा के CIA त्रय को बताइए और प्रत्येक घटक के लिए एक तकनीकी उपाय नामित कीजिए।
Show answer
Confidentiality (encryption/access control), Integrity (hashing/digital signatures), Availability (backups/redundancy). / गोपनीयता (एन्क्रिप्शन/एक्सेस कंट्रोल), अखंडता (हैशिंग/डिजिटल हस्ताक्षर), उपलब्धता (बैकअप/रिडंडेंसी)।
-
Compare patent, trademark and trade secret in terms of what they protect and their duration. / पेटेंट, ट्रेडमार्क और ट्रेड सीक्रेट की वे क्या सुरक्षा देते हैं और अवधि के आधार पर तुलना कीजिए।
Show answer
Patent protects new inventions for ~20 years from filing; trademark protects brand identifiers (logos, names) for an initial term (e.g. 10 years), renewable indefinitely; trade secret protects confidential business info indefinitely while secrecy is maintained. / पेटेंट नई खोजों को दाखिल करने से ~20 वर्ष तक सुरक्षा देता है; ट्रेडमार्क ब्रांड पहचान (लोगो, नाम) को प्रारंभिक अवधि (जैसे 10 वर्ष) के लिए, असीमित नवीकरण योग्य; ट्रेड सीक्रेट गोपनीय व्यावसायिक जानकारी को गुप्तता बनी रहने तक असीमित रूप से सुरक्षा देता है।
-
What is phishing? List two preventive measures against it. / फ़िशिंग क्या है? इसके विरुद्ध दो रोकथाम उपाय बताइए।
Show answer
Phishing is social engineering using deceptive emails/messages/sites to trick users into revealing credentials or sensitive data. Prevention: be sceptical of unsolicited links and verify senders; use multi-factor authentication. / फ़िशिंग एक सोशल इंजीनियरिंग है जिसमें भ्रामक ईमेल/संदेश/साइट से उपयोगकर्ता से क्रेडेंशियल या संवेदनशील डेटा निकलवाया जाता है। रोकथाम: अनचाहे लिंक पर संदेह करें व प्रेषक सत्यापित करें; बहु-कारक प्रमाणीकरण उपयोग करें।
-
Distinguish between open source and proprietary software, giving one advantage of each. / ओपन सोर्स और प्रोप्राइटरी सॉफ़्टवेयर में अंतर कीजिए, प्रत्येक का एक लाभ बताइए।
Show answer
Open source software shares its source code and allows modification/redistribution under licenses (e.g. GPL, MIT) — advantage: low/no licensing cost and easy customization. Proprietary software keeps source code closed under an EULA — advantage: professional vendor support and warranties. / ओपन सोर्स सॉफ़्टवेयर अपना सोर्स कोड साझा करता है और लाइसेंस (जैसे GPL, MIT) के तहत संशोधन/पुनर्वितरण की अनुमति देता है — लाभ: कम/शून्य लाइसेंस लागत व आसान अनुकूलन। प्रोप्राइटरी सॉफ़्टवेयर EULA के तहत कोड बंद रखता है — लाभ: पेशेवर वेंडर समर्थन व वारंटी।
Related Laws & Principles
Explore allFoundational laws & principles behind this chapter. Each one opens a full page — what it says, why it matters, five practice questions and the mistakes to avoid.