STUDY GUIDE · GKU 2
Data security: cryptography, forensics and databases study guide (Cybersecurity)
Data is the asset most attacks are after, and this unit is the three ways a defender protects it. Cryptography turns readable data into data that only a key holder can read, detects changes, proves origin and supports non-repudiation; its failures — a bad mode, a reused nonce, a weak parameter, a stolen key — are more common than broken mathematics. Digital forensics is the disciplined recovery of what happened from devices and logs, in an order that does not destroy the evidence and in a form a Saudi court will accept. Database security is the last line: the DBMS itself decides who may read which row, how queries are built, what is stored in a password column and how a stolen backup is made useless. Each section opens with a quick-revision card, and the worked examples run from easy to exam level. The cryptographic arithmetic uses deliberately small numbers so that every step can be checked by hand; the real systems named alongside it use keys hundreds of times longer.
Structured by the official ETEC subject standard for this topic: every listed topic and learning outcome, with formulas, figures and worked examples. The full sections are available to members in the app.
SKU 2.1 · Basic cryptography
Cryptography: functions, ciphers and protocols
The four security services cryptography provides, the components of a cryptographic system, symmetric and public-key ciphers worked by hand, hashes, MACs, signatures, certificates and TLS, and why real systems combine them.
Challenges and failures in cryptographic systems
Why sound algorithms fail in practice: ECB pattern leakage, fixed IVs, nonce reuse, weak parameters, padding oracles, replay, birthday collisions, side channels, key management and the quantum threat, with the fix for each.
SKU 2.2 · Digital forensics
Forensic foundations and evidence handling
Forensic soundness, the order of volatility, chain of custody, write blockers, imaging and hashing, live and dead acquisition, timeline analysis and the artefact sources an investigator uses, with tool selection.
Legal compliance and reporting in digital forensics
Authority and scope, the Saudi legal frame (Anti-Cybercrime Law, PDPL, NCA controls), privacy and admissibility, the structure of an expert report, evidence retention and court testimony.
SKU 2.3 · Database security
Database management systems and their types
What a DBMS does and its components, the relational model and keys, ACID, hierarchical, network, object-based, object-oriented, NoSQL and distributed systems, and the security consequences of each choice.
Database security models and access control
Inference and aggregation, SQL injection, hashing and salting, encryption at rest and in transit, corruption and backups, unauthorised access, and the DAC, MAC, RBAC and Clark-Wilson models, with views and row-level security.
MORE CYBERSECURITY GUIDES
- Cybersecurity foundations: principles, threats, risk and governance study guideGKU 1 · 3 sections
- Software security: development, secure coding, design and algorithms study guideGKU 3 · 5 sections
- Component security: architecture, vulnerabilities and environments study guideGKU 4 · 2 sections
- Network security study guideGKU 5 · 5 sections
- System security study guideGKU 6 · 4 sections
- Human security: threat actors, techniques and awareness study guideGKU 7 · 2 sections
- Organisational security: ethics, law, risk and economics study guideGKU 8 · 3 sections