STUDY GUIDE · GKU 2

Data security: cryptography, forensics and databases study guide (Cybersecurity)

Data is the asset most attacks are after, and this unit is the three ways a defender protects it. Cryptography turns readable data into data that only a key holder can read, detects changes, proves origin and supports non-repudiation; its failures — a bad mode, a reused nonce, a weak parameter, a stolen key — are more common than broken mathematics. Digital forensics is the disciplined recovery of what happened from devices and logs, in an order that does not destroy the evidence and in a form a Saudi court will accept. Database security is the last line: the DBMS itself decides who may read which row, how queries are built, what is stored in a password column and how a stolen backup is made useless. Each section opens with a quick-revision card, and the worked examples run from easy to exam level. The cryptographic arithmetic uses deliberately small numbers so that every step can be checked by hand; the real systems named alongside it use keys hundreds of times longer.

Structured by the official ETEC subject standard for this topic: every listed topic and learning outcome, with formulas, figures and worked examples. The full sections are available to members in the app.

SKU 2.1 · Basic cryptography

  1. Cryptography: functions, ciphers and protocols

    The four security services cryptography provides, the components of a cryptographic system, symmetric and public-key ciphers worked by hand, hashes, MACs, signatures, certificates and TLS, and why real systems combine them.

  2. Challenges and failures in cryptographic systems

    Why sound algorithms fail in practice: ECB pattern leakage, fixed IVs, nonce reuse, weak parameters, padding oracles, replay, birthday collisions, side channels, key management and the quantum threat, with the fix for each.

SKU 2.2 · Digital forensics

  1. Forensic foundations and evidence handling

    Forensic soundness, the order of volatility, chain of custody, write blockers, imaging and hashing, live and dead acquisition, timeline analysis and the artefact sources an investigator uses, with tool selection.

  2. Legal compliance and reporting in digital forensics

    Authority and scope, the Saudi legal frame (Anti-Cybercrime Law, PDPL, NCA controls), privacy and admissibility, the structure of an expert report, evidence retention and court testimony.

SKU 2.3 · Database security

  1. Database management systems and their types

    What a DBMS does and its components, the relational model and keys, ACID, hierarchical, network, object-based, object-oriented, NoSQL and distributed systems, and the security consequences of each choice.

  2. Database security models and access control

    Inference and aggregation, SQL injection, hashing and salting, encryption at rest and in transit, corruption and backups, unauthorised access, and the DAC, MAC, RBAC and Clark-Wilson models, with views and row-level security.

MORE CYBERSECURITY GUIDES

All study guides

Read the full guide beside your practice questions.

Open the app