Saturday, June 13, 2026

Unit 5: Dimensionality Reduction, Genetic Algorithms & Reinforcement Learning

 

Machine Learning Techniques (MCA556)


From your syllabus.


Dimensionality Reduction

In Machine Learning, datasets may contain many features (columns).

Example:

Student Data
------------
Name
Age
Gender
Address
Attendance
Marks
Projects
Activities
...

Too many features can:

  • Increase training time
  • Increase memory usage
  • Cause overfitting

Dimensionality Reduction reduces the number of features while preserving important information.


Benefits

  • Faster computation
  • Less storage
  • Better visualization
  • Reduced overfitting

Principal Component Analysis (PCA)

Most important dimensionality reduction technique.

Purpose:

  • Convert many features into fewer important features.

Idea:

  • Preserve maximum variance.
  • Reduce dimensions.

Example:

100 Features
     ↓
PCA
     ↓
10 Important Features

Applications:

  • Face Recognition
  • Image Compression
  • Data Visualization

Linear Discriminant Analysis (LDA)

Used for:

  • Dimensionality Reduction
  • Classification

Difference:

PCA LDA
Unsupervised Supervised
Maximizes variance Maximizes class separation

Applications:

  • Face recognition
  • Pattern classification

Factor Analysis

Statistical method used to identify hidden factors affecting data.

Example:

Student Performance depends on:

  • Intelligence
  • Study Hours
  • Motivation

These hidden variables are called factors.

Applications:

  • Psychology
  • Market Research
  • Social Sciences

Independent Component Analysis (ICA)

Separates mixed signals into independent components.

Example:

Two people speaking simultaneously.

ICA can separate:

Mixed Audio
      ↓
ICA
      ↓
Speaker 1
Speaker 2

Applications:

  • Signal Processing
  • Medical Data Analysis
  • Audio Separation

Locally Linear Embedding (LLE)

Non-linear dimensionality reduction technique.

Assumption: Nearby data points remain nearby after transformation.

Used when data lies on a curved surface.

Applications:

  • Pattern recognition
  • Data visualization

Isomap

Isomap = Isometric Mapping

Advanced dimensionality reduction technique.

Purpose:

  • Preserve geometric structure of data.

Applications:

  • Image analysis
  • Visualization
  • Pattern recognition

Least Squares Optimization

Used to minimize prediction error.

Idea:

Find the best line that minimizes squared errors.

Linear Regression is based on Least Squares Optimization.


Evolutionary Learning

Inspired by biological evolution.

Key concepts:

  • Selection
  • Mutation
  • Crossover
  • Survival of the fittest

Used to solve optimization problems.


Genetic Algorithms (GA)

One of the most important evolutionary algorithms.

Inspired by natural selection.


Basic Terminology

Chromosome

A possible solution.


Population

Collection of chromosomes.


Fitness Function

Measures solution quality.

Higher fitness = Better solution.


Genetic Algorithm Steps

Step 1

Initialize Population

Generate random solutions.


Step 2

Evaluate Fitness

Check quality of each solution.


Step 3

Selection

Choose best solutions.


Step 4

Crossover

Combine parents to create offspring.

Parent A + Parent B
          ↓
       Child

Step 5

Mutation

Randomly modify genes.

Purpose:

  • Maintain diversity

Step 6

Replacement

Create next generation.

Repeat until optimal solution found.


Applications of Genetic Algorithms

  • Scheduling
  • Route Optimization
  • Machine Learning
  • Robotics
  • Engineering Design

Reinforcement Learning (RL)

Learning through rewards and punishments.

Agent learns by interacting with environment.


Components of RL

Agent

Learner.

Example: Robot


Environment

World around the agent.

Example: Road


Action

Decision taken by agent.

Example: Move Left


Reward

Feedback received.

Example:

Correct Action → +10
Wrong Action → -5

Reinforcement Learning Process

Agent
  ↓
Action
  ↓
Environment
  ↓
Reward
  ↓
Learning

Applications of Reinforcement Learning

  • Self-driving cars
  • Robotics
  • Game playing AI
  • Resource management

Markov Decision Process (MDP)

Mathematical framework for Reinforcement Learning.

An MDP contains:

  1. State (S)
  2. Action (A)
  3. Reward (R)
  4. Transition Probability (P)

Example of MDP

Robot Navigation:

State:
Current Position

Action:
Move Left / Right

Reward:
Reach Destination

Next State:
New Position

Markov Property

Future state depends only on the current state.

Not on previous history.


Important Exam Questions

Short Questions

  1. What is PCA?
  2. Define LDA.
  3. What is ICA?
  4. Define Isomap.
  5. What is Genetic Algorithm?
  6. What is Fitness Function?
  7. Define Reinforcement Learning.
  8. What is MDP?

Long Questions

  1. Explain PCA with advantages.
  2. Differentiate PCA and LDA.
  3. Explain Genetic Algorithm with steps.
  4. Discuss Evolutionary Learning.
  5. Explain Reinforcement Learning architecture.
  6. Explain Markov Decision Process.

Quick Revision

  • PCA = Reduce dimensions while preserving variance.
  • LDA = Reduce dimensions while separating classes.
  • ICA = Separate mixed signals.
  • Isomap = Preserve geometric structure.
  • GA = Optimization inspired by evolution.
  • Population = Collection of solutions.
  • Fitness Function = Quality measure.
  • RL = Learning through rewards.
  • MDP = Mathematical model for RL.
  • Markov Property = Future depends only on current state.

Machine Learning Techniques (MCA556) is now complete.

Next Subject Options

  1. .NET Framework with C# (MCA552)
  2. Compiler Design (MCA554)
  3. Optimization Techniques (MCA555)
  4. Advanced JavaScript (MCA557 B/C)

For exams, I would suggest Compiler Design next because it is usually considered the toughest paper and benefits from early preparation.

Unit 4: Decision Trees, CART, Ensemble Learning, Bagging, Boosting & Nearest Neighbour

 Machine Learning Techniques (MCA556)

From your syllabus. 

---

Learning with Trees

Decision Trees are one of the most popular machine learning algorithms.

They make decisions using a tree-like structure.

Example:

Study Hours?

      |

   > 5 Hours

      |

     Pass


   < 5 Hours

      |

     Fail



---

Components of Decision Tree


Root Node


Starting point of the tree.


Example:


Study Hours?



---


Internal Node


Represents a condition.


Example:


Attendance > 75%?



---


Leaf Node


Final prediction.


Example:


Pass

Fail



---


Advantages of Decision Trees


Easy to understand


Easy to visualize


Works with numerical and categorical data


Requires little data preparation




---


Disadvantages


Can overfit


Sensitive to data changes


Large trees become complex




---


Constructing Decision Trees


Steps:


1. Select best feature



2. Split dataset



3. Create branches



4. Repeat recursively



5. Stop when classification is complete





---


Classification and Regression Trees (CART)


CART stands for:


Classification And Regression Trees


Used for:


Classification


Output is a category.


Examples:


Pass/Fail


Spam/Not Spam




---


Regression


Output is a numerical value.


Examples:


Salary prediction


House price prediction




---


Ensemble Learning


Combining multiple models to create a stronger model.


Idea:


Weak Learners

      ↓

Combine

      ↓

Strong Learner


Benefits:


Higher accuracy


Better generalization


Reduced overfitting




---


Types of Ensemble Learning


Bagging


Boosting



---


Bagging (Bootstrap Aggregating)


Multiple models are trained independently.


Process:


Dataset

   ↓

Random Samples

   ↓

Many Models

   ↓

Voting/Average

   ↓

Final Prediction



---


Advantages of Bagging


Reduces variance


Prevents overfitting


Improves stability




---


Example


Random Forest


Most famous Bagging algorithm.


Random Forest:


Uses many Decision Trees


Final answer through voting




---


Boosting


Boosting improves weak models sequentially.


Idea:


Model 1

 ↓

Fix Mistakes

 ↓

Model 2

 ↓

Fix Mistakes

 ↓

Model 3

 ↓

Final Strong Model



---


Advantages of Boosting


High accuracy


Handles complex problems


Improves weak learners




---


Popular Boosting Algorithms


AdaBoost


Adaptive Boosting.



---


Gradient Boosting


Improves prediction by minimizing errors.



---


XGBoost


Most widely used boosting algorithm.


Applications:


Data science competitions


Industry projects




---


Difference Between Bagging and Boosting


Bagging Boosting


Models trained independently Models trained sequentially

Reduces variance Reduces bias

Faster Slower

Random Forest AdaBoost, XGBoost




---


Probability and Learning


Machine Learning often uses probability.


Probability helps:


Handle uncertainty


Make predictions


Estimate outcomes



Applications:


Spam filtering


Disease prediction


Recommendation systems




---


Data into Probabilities


Example:


80 students passed

20 students failed


Probability of passing:


80/100 = 0.8


or


80%



---


Basic Statistics


Statistics helps understand data.


Important terms:



---


Mean


Average value.


\bar{x}=\frac{\sum x}{n}



---


Median


Middle value after sorting.



---


Mode


Most frequent value.



---


Variance


Measures spread of data.


Variance=\frac{\sum (x-\bar{x})^2}{n}



---


Gaussian Mixture Models (GMM)


Advanced clustering algorithm.


Assumption: Data is generated from multiple Gaussian distributions.


Advantages:


Flexible cluster shapes


Better than K-Means in many cases



Applications:


Image processing


Speech recognition

Pattern recognition




---

Nearest Neighbour Methods

One of the simplest ML techniques.

Most common:

K-Nearest Neighbour (KNN)


Idea:


Find the K closest data points and classify based on neighbors.


Example:


New Student

     ↓

Find 5 nearest students

     ↓

Majority Vote

     ↓

Prediction

---

Advantages of KNN

Easy to understand

No training phase

Good for small datasets

---

Disadvantages of KNN

Slow for large datasets

Sensitive to irrelevant features

Requires choosing K value

---

Applications of KNN

Recommendation systems

Image recognition

Medical diagnosis

Pattern recognition

---

Important Exam Questions

Short Questions

1. What is a Decision Tree?

2. Define CART.

3. What is Ensemble Learning?

4. Define Bagging.

5. Define Boosting.

6. What is Random Forest?

7. What is KNN?

8. What is GMM?

---

Long Questions

1. Explain Decision Tree construction.

2. Discuss CART with examples.

3. Explain Ensemble Learning.

4. Differentiate Bagging and Boosting.

5. Explain KNN algorithm.

6. Explain Gaussian Mixture Models.

---

Quick Revision

Decision Tree = Tree-based prediction model.

CART = Classification and Regression Trees.

Ensemble Learning = Combining multiple models.

Bagging = Independent model training.

Random Forest = Bagging-based algorithm.

Boosting = Sequential improvement of models.

KNN = Nearest neighbour classification.

GMM = Advanced clustering model.

Next Unit 5:


PCA, LDA, Factor Analysis, ICA, Isomap, Genetic Algorithms, Evolutionary Learning, Reinforcement Learning, Markov Decision Process (MDP) — the final unit of Machine Learning and often asked in theory exams. 

Unit 3: Logistic Regression, SVM, Neural Networks & Deep Learning

 

Machine Learning Techniques (MCA556)


From your syllabus.


Supervised Learning

In supervised learning:

  • Input data is given
  • Correct output (label) is known
  • Model learns relationship between input and output

Examples:

  • Spam detection
  • Disease prediction
  • Student result prediction

Logistic Regression

Used for classification problems.

Unlike Linear Regression, Logistic Regression predicts categories.

Examples:

  • Pass / Fail
  • Spam / Not Spam
  • Yes / No

Sigmoid Function

Logistic Regression uses the Sigmoid Function.

Output range:

0 to 1

Interpretation:

  • Close to 1 → Positive Class
  • Close to 0 → Negative Class

Applications of Logistic Regression

  • Email spam detection
  • Disease diagnosis
  • Loan approval
  • Fraud detection

Support Vector Machine (SVM)

SVM is a powerful classification algorithm.

Goal:

  • Find the best boundary that separates classes.

Example:

Students
Pass  ● ● ● ●

-----------
Boundary

○ ○ ○ ○
Fail

The boundary is called a:

Hyperplane


Advantages of SVM

  • High accuracy
  • Effective in high dimensions
  • Works well with small datasets

Kernel Function

Sometimes data cannot be separated by a straight line.

Kernel functions transform data into higher dimensions.

Types:

Linear Kernel

Used for linearly separable data.


Polynomial Kernel

Creates curved boundaries.


Radial Basis Function (RBF)

Most commonly used kernel.


Sigmoid Kernel

Similar to neural networks.


Neural Network

Inspired by the human brain.

Consists of:

Input Layer
      ↓
Hidden Layer
      ↓
Output Layer

Used for:

  • Classification
  • Prediction
  • Pattern recognition

Artificial Neuron

Basic building block of neural networks.

Components:

  1. Inputs
  2. Weights
  3. Summation
  4. Activation Function
  5. Output

Perceptron

Simplest neural network model.

Developed by:

Structure:

Inputs
  ↓
Weights
  ↓
Activation
  ↓
Output

Used for binary classification.


Limitations of Perceptron

Cannot solve complex non-linear problems.

Example:

  • XOR problem

Multilayer Neural Network

Contains multiple hidden layers.

Input
 ↓
Hidden Layer 1
 ↓
Hidden Layer 2
 ↓
Output

Advantages:

  • Handles complex patterns
  • Better prediction

Backpropagation

Most important neural network learning algorithm.

Purpose:

  • Update weights
  • Reduce prediction error

Steps:

Step 1

Forward Pass

Prediction is generated.


Step 2

Calculate Error

Difference between actual and predicted values.


Step 3

Backward Pass

Error travels backward.


Step 4

Update Weights

Model learns and improves.


Activation Functions

Used to introduce non-linearity.

Sigmoid

Output between 0 and 1.


Tanh

Output between -1 and 1.


ReLU

Most popular activation function.

Advantages:

  • Fast
  • Efficient

Deep Neural Network (DNN)

Neural network with many hidden layers.

Input
 ↓
Hidden Layer
 ↓
Hidden Layer
 ↓
Hidden Layer
 ↓
Output

Deep Learning

Branch of Machine Learning using Deep Neural Networks.

Applications:

Image Recognition

Face detection

Speech Recognition

Voice assistants

Natural Language Processing

ChatGPT, translation systems

Self Driving Cars

Object detection


Difference Between ML and Deep Learning

Machine Learning Deep Learning
Less data needed Large data needed
Faster training Slower training
Manual feature extraction Automatic feature extraction
Simpler models Complex neural networks

Important Exam Questions

Short Questions

  1. Define Logistic Regression.
  2. What is SVM?
  3. Define Hyperplane.
  4. What is a Kernel Function?
  5. Define Perceptron.
  6. What is Backpropagation?
  7. What is Deep Learning?
  8. What is ReLU?

Long Questions

  1. Explain Logistic Regression with Sigmoid Function.
  2. Explain SVM and Kernel Functions.
  3. Discuss Neural Networks and their architecture.
  4. Explain Perceptron and its limitations.
  5. Explain Backpropagation Algorithm.
  6. Differentiate Machine Learning and Deep Learning.

Quick Revision

  • Logistic Regression = Classification algorithm.
  • Sigmoid Function = Converts output to probability.
  • SVM = Finds best separating boundary.
  • Hyperplane = Decision boundary.
  • Kernel = Converts data to higher dimensions.
  • Perceptron = Basic neural network.
  • Backpropagation = Weight update algorithm.
  • ReLU = Most popular activation function.
  • Deep Learning = Neural networks with many layers.

Next Unit 4:

Decision Trees, CART, Ensemble Learning, Bagging, Boosting, Probability & Learning, Gaussian Mixture Models, Nearest Neighbour Methods. This unit is frequently asked in university exams.

Unit 2: Evaluation Metrics, K-Means, Bayes Learning, Clustering & Feature Reduction

 



From your syllabus.


Evaluation Metrics

Evaluation metrics help us measure how good a machine learning model is.


Confusion Matrix

Used for classification problems.

Actual / Predicted Positive Negative
Positive TP FN
Negative FP TN

Where:

  • TP = True Positive
  • TN = True Negative
  • FP = False Positive
  • FN = False Negative

Precision

Measures how many predicted positives are actually correct.

Example: If 100 emails are predicted as spam and 90 are actually spam:

Precision = 90%


Recall

Measures how many actual positives were correctly identified.

Example: Out of 100 spam emails, if system detects 80:

Recall = 80%


F1 Score

Balance between Precision and Recall.

Higher F1 Score means better model.


Mean Squared Error (MSE)

Used in regression models.

Measures average squared prediction error.

Smaller MSE = Better model.


Flexibility vs Interpretability

Flexible Models

Examples:

  • Neural Networks
  • Deep Learning

Advantages:

  • High accuracy

Disadvantages:

  • Hard to understand

Interpretable Models

Examples:

  • Linear Regression
  • Decision Trees

Advantages:

  • Easy to understand

Disadvantages:

  • Sometimes less accurate

Reducible and Irreducible Error

Reducible Error

Can be reduced by:

  • Better data
  • Better algorithms

Irreducible Error

Cannot be eliminated.

Caused by:

  • Randomness
  • Noise in data

Unsupervised Learning

Learning from unlabeled data.

Goal:

  • Discover hidden patterns

K-Means Clustering

Most important clustering algorithm.

Purpose:

  • Divide data into K groups.

Steps

  1. Select K clusters.
  2. Choose initial centroids.
  3. Assign points to nearest centroid.
  4. Update centroid positions.
  5. Repeat until stable.

Example:

Students grouped by marks:
Cluster 1 → High Performers
Cluster 2 → Average
Cluster 3 → Low Performers

Advantages:

  • Simple
  • Fast

Disadvantages:

  • Need to choose K beforehand

Vector Quantization

Technique for compressing data.

Applications:

  • Image compression
  • Signal processing

Self Organizing Feature Map (SOFM)

Neural network used for:

  • Visualization
  • Clustering
  • Pattern recognition

Developed by:

Also called: Kohonen Map


Instance Based Learning

Stores training examples and compares new examples.

Example:

  • K-Nearest Neighbour (KNN)

Advantages:

  • Simple

Disadvantages:

  • Slow for large datasets

Feature Reduction

Reducing the number of features while keeping important information.

Benefits:

  • Faster training
  • Reduced storage
  • Less overfitting

Probability in Machine Learning

Probability measures uncertainty.

Range:

0 ≤ Probability ≤ 1
  • 0 = Impossible
  • 1 = Certain

Bayes Learning

Based on Bayes Theorem.

Most important probability concept in ML.

Used in:

  • Spam detection
  • Disease prediction
  • Recommendation systems

Clustering

Grouping similar data points.

Applications:

  • Customer segmentation
  • Image processing
  • Market analysis

Adaptive Hierarchical Clustering

Creates clusters in tree form.

Types:

Agglomerative

Start with individual points and merge.

Divisive

Start with one cluster and split.


Gaussian Mixture Model (GMM)

Advanced clustering technique.

Assumes data is generated from multiple Gaussian distributions.

Advantages:

  • Flexible clusters
  • Better than K-Means for complex data

Applications:

  • Pattern recognition
  • Speech processing
  • Image segmentation

Important Exam Questions

Short Questions

  1. Define Precision.
  2. Define Recall.
  3. What is F1 Score?
  4. What is MSE?
  5. What is K-Means?
  6. What is Feature Reduction?
  7. State Bayes Theorem.
  8. What is GMM?

Long Questions

  1. Explain Precision, Recall and F1 Score.
  2. Explain K-Means Clustering with steps.
  3. Discuss Bayes Learning.
  4. Explain Gaussian Mixture Models.
  5. Explain Feature Reduction.
  6. Compare K-Means and Hierarchical Clustering.

Quick Revision

  • Precision = Correct positive predictions.
  • Recall = Found actual positives.
  • F1 Score = Balance of Precision and Recall.
  • MSE = Regression error measure.
  • K-Means = Popular clustering algorithm.
  • Bayes Theorem = Probability-based learning.
  • GMM = Advanced clustering method.
  • Feature Reduction = Fewer but important features.

Next Unit 3:

Logistic Regression, Support Vector Machine (SVM), Kernel Functions, Perceptron, Neural Networks, Backpropagation, Deep Neural Networks — the most important ML unit for exams and interviews.

Unit 1: Introduction to Machine Learning

 Subject: Machine Learning Techniques (MCA556)


From your Semester III syllabus. 




---


What is Machine Learning?


Machine Learning (ML) is a branch of Artificial Intelligence (AI) that enables computers to learn from data and make decisions without being explicitly programmed.


Example


Netflix recommends movies.


YouTube recommends videos.


Gmail detects spam emails.




---


Basic Definitions


Data


Raw facts and figures.


Example:


Age = 20

Marks = 85


Dataset


Collection of data.


Example:


Age Marks


18 70

19 75

20 85




---


Learning


Learning means improving performance using experience (data).


Formula:


Experience + Data → Learning → Better Predictions



---


Types of Machine Learning


The syllabus covers several learning types. 


1. Supervised Learning


Data contains inputs and correct outputs (labels).


Examples:


Predicting house prices


Predicting exam results



Algorithms:


Linear Regression


Decision Trees


SVM




---


2. Unsupervised Learning


Data has no labels.


Purpose:


Find hidden patterns


Group similar data



Examples:


Customer segmentation


Clustering



Algorithms:


K-Means


Hierarchical Clustering




---


3. Reinforcement Learning


Learning through rewards and penalties.


Example:


Self-driving cars


Game-playing AI




---


Hypothesis Space


A hypothesis is a possible solution/model.


Example: For predicting marks:


Marks = 5 × Study Hours + 30


All possible models together form the Hypothesis Space.



---


Inductive Bias


Assumptions made by a learning algorithm to generalize unseen data.


Example: Linear Regression assumes a linear relationship.



---


Evaluation of a Model


After training, we evaluate performance.


Questions:


Is the model accurate?


Can it predict correctly on new data?




---


Cross Validation


Used to test model reliability.


Most common:


K-Fold Cross Validation


Steps:


1. Split data into K parts.



2. Train on K−1 parts.



3. Test on remaining part.



4. Repeat K times.



5. Calculate average accuracy.




Benefits:


Better evaluation


Reduces overfitting




---


Linear Regression


One of the simplest ML algorithms.


Used for:


Predicting continuous values



Example:


House price prediction


Salary prediction



The model is represented by:


genui{"math_block_widget_always_prefetch_v2":{"content":"y=mx+b"}}Where:


y = predicted value


m = slope


b = intercept




---


Decision Trees


A tree-like model used for classification and prediction.


Example:


Study?

   |

  Yes

   |

Pass


No

 |

Fail


Advantages:


Easy to understand


Easy to visualize




---


Overfitting


Occurs when a model memorizes training data instead of learning patterns.


Symptoms


High training accuracy


Poor test accuracy



Example: Student memorizes answers but cannot solve new questions.



---


Learning System Design


Steps:


1. Collect Data



2. Preprocess Data



3. Select Features



4. Train Model



5. Evaluate Model



6. Deploy Model





---


Perspectives and Issues in ML


Common challenges:


Data Quality


Bad data → Bad predictions


Overfitting


Model learns noise


Underfitting


Model is too simple


Computational Cost


Large datasets need more resources



---


Ensemble Learning


Combines multiple models to improve performance.


Idea:


Many Weak Models

       ↓

Combined

       ↓

Strong Model


Examples:


Random Forest


Boosting




---


Applications of Machine Learning


Healthcare


Disease prediction


Banking


Fraud detection


Education


Student performance prediction


E-commerce


Product recommendations


Agriculture


Crop prediction



---


Feature Engineering


Process of selecting and transforming useful features.


Example:


Original Data:


Date: 13-06-2026


Feature Engineering:


Day = Saturday

Month = June

Year = 2026


Benefits:


Improves accuracy


Reduces complexity




---


Important Exam Questions


Short Questions


1. Define Machine Learning.



2. What is Supervised Learning?



3. What is Unsupervised Learning?



4. Define Reinforcement Learning.



5. What is Cross Validation?



6. What is Overfitting?



7. What is Feature Engineering?



8. Define Hypothesis Space.





---


Long Questions


1. Explain different types of Machine Learning.



2. Discuss Cross Validation with examples.



3. Explain Linear Regression.



4. Explain Decision Trees.



5. What is Overfitting? How can it be reduced?



6. Explain the design of a learning system.





---


Quick Revision


ML = Learning from data.


Supervised = Labeled data.


Unsupervised = Unlabeled data.


Reinforcement = Reward/Penalty.


Linear Regression = Prediction algorithm.


Decision Tree = Tree-based model.


Overfitting = Memorizing training data.


Cross Validation = Reliable testing.


Feature Engineering = Creating useful features.



Next: Unit 2


Evaluation Metrics (Precision, Recall, F1, MSE), K-Means Clustering, Bayes Learning, Gaussian Mixture Models, Feature Reduction. This unit is very important for both exams and ML interviews.

Unit 5 — Malware, OS Hardening, Firewall, Digital Signature Standard

 

From MCA553 (Principles of Cryptography and Cyber Security). 



---


Malware


Malware = Malicious Software


Software designed to damage, steal, spy on, or disrupt computer systems.


Objectives:


Steal information


Destroy data


Spy on users


Gain unauthorized access




---


Types of Malware


1. Virus


A virus attaches itself to a file or program and spreads when that file runs.


Characteristics:


Requires user action


Can corrupt files


Slows system performance



Example: Infected USB drive.



---


2. Worm


A worm spreads automatically through networks.


Characteristics:


No user action required


Self-replicating


Consumes bandwidth



Example: WannaCry Worm.



---


Difference Between Virus and Worm


Virus Worm


Needs host file Independent

User action needed Automatic spread

Slower spread Faster spread




---


3. Trojan Horse


Malware disguised as legitimate software.


Example: Fake antivirus software.


Characteristics:


Looks genuine


Creates backdoor access


Steals information




---


4. Rootkit


Designed to hide malware activities.


Functions:


Hides files


Hides processes


Hides network connections



Danger: Very difficult to detect.



---


5. Bot (Robot)


An infected computer controlled remotely by attackers.


A collection of bots forms a:


Botnet


Used for:


Spam attacks


DDoS attacks


Cryptocurrency mining




---


6. Adware


Displays unwanted advertisements.


Effects:


Pop-up ads


Browser redirection


Slow performance




---


7. Spyware


Secretly collects information.


Steals:


Passwords


Banking details


Browsing history




---


8. Ransomware


Encrypts files and demands money.


Process:


Files Locked

      ↓

Payment Demanded

      ↓

Decryption Key Promised


Example: WannaCry Ransomware.



---


9. Zombie


A compromised computer controlled remotely.


Used in:


DDoS attacks


Botnets



User usually does not know their system is infected.



---


Malware Analysis


Process of studying malware.


Purpose:


Understand behavior


Identify threats


Develop defenses



Types:


Static Analysis


Without running malware.


Examines:


Code


Strings


File structure




---


Dynamic Analysis


Running malware in a controlled environment.


Observes:


Network activity


File modifications


Registry changes




---


OS Hardening


OS Hardening means securing an operating system by reducing vulnerabilities.


Purpose:


Increase security


Reduce attack surface




---


Process Management


Monitor running processes.


Actions:


Stop suspicious programs


Limit privileges




---


Memory Management


Protect memory from unauthorized access.


Methods:


Access control


Memory protection




---


Task Management


Control applications and services.


Benefits:


Remove unnecessary programs


Improve security




---


Windows Registry Security


Registry stores system settings.


Hardening Steps:


Restrict access


Backup registry


Remove malicious entries




---


Services Configuration


Disable unnecessary services.


Examples:


Unused FTP services


Unused Remote Access services



Benefits:


Reduced attack surface




---


Antivirus Protection


Antivirus software detects and removes malware.


Functions:


Scan files


Real-time protection


Quarantine threats



Examples:


Microsoft Defender


Quick Heal


Avast




---


Anti-Spyware Tools


Designed specifically to detect spyware.


Functions:


Remove tracking software


Protect privacy




---


System Tuning Tools


Improve performance and security.


Functions:


Remove junk files


Optimize startup


Clean registry




---


Anti-Phishing Tools


Protect users from fake websites and emails.


Features:


URL checking


Email scanning


Browser protection




---


Firewall


A firewall monitors and controls network traffic.


Acts as a security gate between:


Internet

   ↓

Firewall

   ↓

Private Network



---


Firewall Design Principles


1. All traffic must pass through firewall


No direct access.



---


2. Only authorized traffic allowed


Rules determine access.



---


3. Firewall itself must be secure


Cannot be easily attacked.



---


Types of Firewalls


Packet Filtering Firewall


Checks packets individually.



---


Stateful Inspection Firewall


Tracks active connections.



---


Application Firewall


Protects applications.


Example: Web Application Firewall (WAF)



---


Trusted Systems


Systems designed with built-in security mechanisms.


Features:


Access control


Auditing


Authentication




---


Digital Signature


Digital signature proves:


1. Sender identity



2. Data integrity



3. Non-repudiation




Uses:


Private Key


Public Key




---


Authentication Protocol


Rules used to verify identity.


Examples:


Password Authentication


OTP Authentication


Kerberos


Multi-Factor Authentication (MFA)




---


Digital Signature Standard (DSS)


A standard developed by the U.S. government for digital signatures.


Purpose:


Secure electronic communication


Verify authenticity



Benefits:


Authentication


Integrity


Non-repudiation




---


Important Exam Questions


Short Questions


1. What is Malware?



2. Define Virus.



3. Define Worm.



4. What is Trojan Horse?



5. What is Ransomware?



6. What is OS Hardening?



7. What is a Firewall?



8. What is DSS?





---


Long Questions


1. Explain various types of malware.



2. Differentiate Virus and Worm.



3. Explain OS Hardening techniques.



4. Discuss Firewall design principles.



5. Explain Digital Signature Standard.



6. Explain Malware Analysis techniques.





---


One-Day Exam Revision (MCA553)


Remember:


CIA = Confidentiality, Integrity, Availability


Cyber Forensics = Investigation of digital crimes


RSA = Public Key Cryptography


Diffie-Hellman = Key Exchange


AES = Modern Encryption Standard


Triple DES = DES × 3


Hash Function = Fixed-size fingerprint


MAC = Message Authentication Code


Virus = Needs host file


Worm = Self-spreading


Trojan = Fake software


Ransomware = Encrypts files for money


Firewall = Controls network traffic


DSS = Digital Signature Standard



You have now completed Cyber Security (MCA553) from your Semester III syllabus. Next, I recommend Machine Learning Techniques (MCA556) because it is one of the easiest and most scoring papers in Semester III. 

Unit 4 — Advanced Encryption Standard (AES), Triple DES, RC4, Hash Functions & MAC

 


From MCA553 (Principles of Cryptography and Cyber Security).


Advanced Encryption Standard (AES)

AES is the modern replacement for DES.

Developed by:

  • NIST (National Institute of Standards and Technology)

Features:

  • Symmetric Key Algorithm
  • Faster than DES
  • More Secure

AES Key Sizes

  • 128-bit
  • 192-bit
  • 256-bit

AES Block Size

  • 128 bits

Why AES Replaced DES?

DES AES
56-bit key 128/192/256-bit key
Less secure Highly secure
Slower Faster
Vulnerable to brute force Resistant to brute force

AES Working

AES performs multiple rounds:

  • SubBytes
  • ShiftRows
  • MixColumns
  • AddRoundKey

Rounds:

  • AES-128 → 10 rounds
  • AES-192 → 12 rounds
  • AES-256 → 14 rounds

Evaluation Criteria for AES

While selecting AES, the following were considered:

  1. Security
  2. Performance
  3. Flexibility
  4. Simplicity
  5. Implementation efficiency

Multiple Encryption

Applying encryption more than once.

Purpose:

  • Increase security
  • Reduce vulnerability

Example:

Plain Text
   ↓
DES
   ↓
Cipher Text
   ↓
DES Again
   ↓
More Secure Cipher Text

Triple DES (3DES)

Uses DES three times.

Process:

Encrypt
 ↓
Decrypt
 ↓
Encrypt

(EDE Method)

Key Length

  • 168 bits

Advantages

  • More secure than DES

Disadvantages

  • Slower than AES

Block Cipher Modes of Operation

When data is larger than one block, special modes are used.

ECB (Electronic Code Book)

Each block encrypted separately.

Advantages:

  • Simple

Disadvantages:

  • Pattern leakage
  • Less secure

CBC (Cipher Block Chaining)

Each block depends on previous block.

Advantages:

  • Better security

Disadvantages:

  • Error propagation

CFB (Cipher Feedback)

Converts block cipher into stream cipher.

Used in:

  • Real-time communication

OFB (Output Feedback)

Generates key stream independently.

Advantages:

  • Errors do not propagate

Stream Cipher

Encrypts data one bit or byte at a time.

Advantages:

  • Fast
  • Suitable for communication systems

Examples:

  • RC4

RC4

A famous stream cipher.

Features:

  • Variable key length
  • Fast execution
  • Simple implementation

Applications:

  • SSL/TLS (older versions)
  • Wireless security

Disadvantage:

  • Several security weaknesses discovered
  • Not recommended today

Message Authentication

Ensures:

  1. Sender is genuine
  2. Message is not modified

Authentication Requirements

A secure system should provide:

  • Integrity
  • Authentication
  • Non-repudiation

Authentication Functions

Used to verify authenticity.

Methods:

  • Hash Functions
  • Digital Signatures
  • MAC

Hash Function

Converts data of any size into fixed-size output.

Properties:

  • One-way function
  • Fast computation
  • Difficult to reverse

Example:

HELLO
↓
Hash Function
↓
8b1a9953...

Characteristics of Good Hash Function

  1. Fixed length output
  2. Fast computation
  3. Collision resistant
  4. One-way operation

Popular Hash Algorithms

  • MD5
  • SHA-1
  • SHA-256
  • SHA-512

Message Authentication Code (MAC)

Used to verify:

  • Message Integrity
  • Sender Authenticity

Structure:

Message + Secret Key
         ↓
       MAC

Receiver recalculates MAC and compares.

If same:

  • Message is authentic.

Difference Between Hash and MAC

Hash MAC
No secret key Uses secret key
Integrity only Integrity + Authentication
SHA-256 HMAC-SHA256

Security of Hash Functions

A secure hash function must resist:

1. Preimage Attack

Finding original message from hash.


2. Second Preimage Attack

Finding another message with same hash.


3. Collision Attack

Finding two different messages with same hash.


Digital Signature

Provides:

  • Authentication
  • Integrity
  • Non-repudiation

Process:

Message
 ↓
Hash
 ↓
Encrypt with Private Key
 ↓
Digital Signature

Verification:

Public Key
 ↓
Verify Signature

Importance of Digital Signature

Used in:

  • E-commerce
  • E-governance
  • Online banking
  • Digital documents

Important Exam Questions

Short Questions

  1. What is AES?
  2. Why is AES better than DES?
  3. What is Triple DES?
  4. Define RC4.
  5. What is MAC?
  6. Define Hash Function.
  7. What is Digital Signature?
  8. Explain Collision Attack.

Long Questions

  1. Explain AES architecture and working.
  2. Compare AES, DES, and Triple DES.
  3. Explain Hash Functions and their security requirements.
  4. Discuss Message Authentication Code (MAC).
  5. Explain Digital Signature with diagram.
  6. Describe different block cipher modes.

Quick Revision

  • AES = Modern symmetric encryption standard.
  • DES = Old encryption standard.
  • Triple DES = DES applied three times.
  • RC4 = Stream cipher.
  • Hash Function = Fixed-size fingerprint of data.
  • MAC = Authentication + Integrity.
  • Digital Signature = Authentication + Non-repudiation.
  • SHA-256 = Popular secure hash algorithm.

Next Unit 5:

Malware, Virus, Worm, Trojan, Rootkit, Ransomware, Firewalls, OS Hardening, Antivirus, Digital Signature Standard (DSS), Authentication Protocols — usually asked directly in exams and viva.

Unit 3 — Public Key Cryptography and RSA

 

From MCA553 (Principles of Cryptography and Cyber Security). 


This is one of the most important units for exams.



---


Introduction to Cryptography


Cryptography is the science of protecting information by converting it into a secret form.


Goals of Cryptography


1. Confidentiality



2. Integrity



3. Authentication



4. Non-Repudiation





---


Plaintext and Ciphertext


Plaintext


Original readable message.


Example:


HELLO


Ciphertext


Encrypted unreadable message.


Example:


XKJ92A


Encryption


Converts plaintext into ciphertext.


Decryption


Converts ciphertext back into plaintext.



---


Symmetric Key Cryptography


Uses the same key for encryption and decryption.


Plain Text

    ↓

Encryption Key

    ↓

Cipher Text

    ↓

Decryption Key (Same Key)

    ↓

Plain Text


Advantages


Fast


Efficient


Suitable for large data



Disadvantages


Key distribution problem


Less secure for communication over open networks



Examples


DES


AES


Triple DES




---


Asymmetric Key Cryptography


Uses two different keys:


1. Public Key



2. Private Key




Public Key → Encrypt

Private Key → Decrypt


Advantages


Better security


Solves key distribution problem



Disadvantages


Slower than symmetric encryption



Examples


RSA


Diffie-Hellman


ECC




---


Difference Between Symmetric and Asymmetric Cryptography


Symmetric Asymmetric


One key Two keys

Faster Slower

Less secure key sharing More secure

DES, AES RSA, ECC




---


Message Authentication


Ensures that the message is genuine and has not been modified.


Methods:


Hash Functions


Digital Signatures


MAC (Message Authentication Code)




---


Public Key Cryptosystem Principles


Requirements:


1. Easy to generate key pair



2. Easy to encrypt



3. Easy to decrypt



4. Difficult to derive private key from public key



5. Difficult to recover plaintext without key





---


Diffie-Hellman Key Exchange


Used for securely sharing a secret key over an insecure network.


Steps


Suppose:


Prime number P = 23


Generator G = 5



Alice chooses:


a = 6


Bob chooses:


b = 15


Alice computes:


A = G^a mod P


Bob computes:


B = G^b mod P


They exchange A and B publicly.


Both calculate:


Secret Key = B^a mod P


and


Secret Key = A^b mod P


Result: Same secret key generated on both sides.



---


RSA Algorithm


Most important topic for exams.


RSA is based on:


> Difficulty of factoring large prime numbers.





---


RSA Key Generation


Step 1


Choose two prime numbers.


p = 3

q = 11


Step 2


Calculate:


n = p × q


n = 33



---


Step 3


Calculate:


φ(n) = (p−1)(q−1)


\phi(n)=(p-1)(q-1)


For this example:


φ(n) = 20



---


Step 4


Choose e such that:


1 < e < φ(n)


Choose:


e = 3



---


Step 5


Find d:


d × e ≡ 1 mod φ(n)


Result:


d = 7



---


Public Key


(e,n)

=

(3,33)


Private Key


(d,n)

=

(7,33)



---


Key Management


Process of:


Creating keys


Distributing keys


Storing keys


Revoking keys



Poor key management can break even strong encryption.



---


Symmetric Cipher Modes


Used to encrypt large amounts of data.


ECB


Electronic Code Book


Simple


Less secure



CBC


Cipher Block Chaining


More secure


Most commonly used



CFB


Cipher Feedback


OFB


Output Feedback



---


Substitution Technique


Replace characters with other characters.


Example:


A → D

B → E

C → F


Used in Caesar Cipher.



---


Transposition Technique


Characters remain the same but positions change.


Example:


HELLO

LHEOL



---


Block Cipher


Encrypts data block by block.


Example:


64-bit block

128-bit block


Popular Algorithms:


DES


AES




---


Data Encryption Standard (DES)


Developed by IBM.


Characteristics:


Symmetric algorithm


64-bit block size


56-bit key



Advantages


Fast



Disadvantages


Small key size


Vulnerable to brute force attack




---


Strength of DES


Originally strong.


Today:


Not secure enough


Can be cracked using modern computers




---


Differential Cryptanalysis


Studies differences in ciphertext to discover keys.


Purpose:


Break encryption algorithms




---


Linear Cryptanalysis


Uses linear relationships between plaintext and ciphertext.


Another method used to attack DES.



---


Block Cipher Design Principles


Good block cipher should have:


1. Confusion



2. Diffusion



3. Strong key management



4. Resistance to attacks





---


Important Exam Questions


Short Questions


1. Define Cryptography.



2. Difference between Symmetric and Asymmetric Encryption.



3. What is RSA?



4. What is Diffie-Hellman?



5. Define DES.



6. What is Ciphertext?



7. What is Key Management?



8. What is a Block Cipher?





---


Long Questions


1. Explain RSA algorithm with example.



2. Explain Diffie-Hellman key exchange.



3. Compare Symmetric and Asymmetric Cryptography.



4. Explain DES and its strengths.



5. Explain Differential and Linear Cryptanalysis.



6. Discuss block cipher design principles.





---


Quick Revision


Cryptography = Protecting information.


Symmetric = One key.


Asymmetric = Public + Private key.


RSA = Public key cryptography.


Diffie-Hellman = Secure key exchange.


DES = Symmetric block cipher.


Ciphertext = Encrypted message.


Key Management = Handling cryptographic keys.



Next Unit 4 covers AES, Triple DES, RC4, Hash Functions, MAC, and Message Authentication, which is also very important for university exams.

Unit 2 — Cyber Laws and Cyber Forensics

 


From MCA553 (Principles of Cryptography and Cyber Security) syllabus. 



---


Cyber Laws


Cyber Laws are laws that govern activities on computers, networks, and the internet.


Objectives


Prevent cyber crimes


Protect user privacy


Secure digital transactions


Punish cyber criminals



Examples of Cyber Crimes


Hacking


Identity theft


Phishing


Online fraud


Cyber stalking


Data theft




---


Cyber Security Regulations


These are rules and standards organizations follow to protect information.


Benefits:


Protect sensitive data


Reduce cyber attacks


Ensure legal compliance


Improve trust



Examples:


ISO 27001


GDPR


IT Act 2000 (India)




---


Role of International Law in Cyberspace


Since the internet connects countries, international cooperation is necessary.


Functions:


Prevent cyber warfare


Control cyber terrorism


Handle cross-border cyber crimes


Protect critical infrastructure



Organizations:


United Nations (UN)


INTERPOL


International Telecommunication Union (ITU)




---


Role of the State


Governments are responsible for:


Creating cyber laws


Protecting citizens


Developing cyber security policies


Investigating cyber crimes



Example: The Government of India established CERT-In.


CERT-In


CERT-In handles cyber security incidents in India.



---


Role of Private Sector


Private companies:


Secure their networks


Protect customer data


Report breaches


Follow security standards



Examples: Banks, IT companies, e-commerce websites.



---


National Cyber Security Policy 2013


India launched this policy to improve cyber security.


Objectives:


Create secure cyber ecosystem


Protect critical infrastructure


Increase cyber awareness


Develop skilled professionals




---


Introduction to Cyber Forensics


Cyber Forensics (Digital Forensics) is the process of collecting, preserving, analyzing, and presenting digital evidence.


Purpose:


Investigate cyber crimes


Recover deleted data


Identify attackers


Support legal cases




---


Need for Cyber Forensics


Why is it needed?


Rising cyber crimes


Digital evidence in courts


Data recovery


Tracking attackers




---


Cyber Evidence


Information stored digitally that can be used in investigations.


Examples:


Emails


Photos


Videos


Chat messages


System logs


Browser history




---


Documentation and Management of Crime Scene


During investigation:


Step 1


Secure the crime scene.


Step 2


Document everything.


Step 3


Collect evidence carefully.


Step 4


Maintain chain of custody.


Step 5


Analyze evidence.


Step 6


Prepare investigation report.



---


Chain of Custody


A record showing:


Who collected evidence


When it was collected


Who handled it later



Importance:


Prevents evidence tampering


Makes evidence acceptable in court




---


Image Capturing


Creating an exact copy of storage devices.


Example: Making a forensic copy of a hard disk.


Advantages:


Original data remains untouched.


Investigation can be repeated.




---


Partial Volume Image


Instead of copying the entire disk, only important sections are copied.


Benefits:


Faster analysis


Less storage required




---


Web Attack Investigation


Investigates attacks against websites.


Examples:


SQL Injection


Cross Site Scripting (XSS)


Website defacement



Evidence:


Server logs


Database logs


Firewall logs




---


Denial of Service (DoS) Investigation


DoS attack: An attacker floods a server with traffic.


Effects:


Website becomes unavailable


Slow performance



Investigators examine:


Traffic logs


IP addresses


Firewall records




---


Internet Crime Investigation


Investigates crimes committed online.


Examples:


Online fraud


Social media crimes


Fake websites


Cyber harassment




---


Internet Forensics


Analysis of internet activities.


Sources:


Browsing history


Cookies


Emails


Chat records


Server logs




---


Steps in Investigating Internet Crime


1. Identify incident



2. Collect evidence



3. Preserve evidence



4. Analyze evidence



5. Identify suspect



6. Prepare report



7. Present findings





---


Email Crime Investigation


Email-related crimes include:


Phishing


Email spoofing


Threat emails


Fraudulent emails



Investigators analyze:


Email headers


Sender IP


Attachments


Mail server logs




---


Important Exam Questions


Short Questions


1. What is Cyber Law?



2. Define Cyber Forensics.



3. What is Cyber Evidence?



4. Explain Chain of Custody.



5. What is Email Forensics?



6. What is CERT-In?



7. What is a DoS attack?



8. Define Image Capturing.





---


Long Questions (6–10 Marks)


1. Explain Cyber Forensics and its importance.



2. Discuss National Cyber Security Policy 2013.



3. Explain the steps of Internet Crime Investigation.



4. Describe Email Crime Investigation.



5. Explain Cyber Evidence and Chain of Custody.



6. Discuss the role of Government and Private Sector in Cyber Security.





---


Quick Revision


Cyber Law = Laws related to computers and internet.


Cyber Forensics = Investigation of digital crimes.


Cyber Evidence = Digital proof.


Chain of Custody = Evidence handling record.


Image Capturing = Exact copy of storage media.


DoS = Denial of Service attack.


CERT-In = India's cyber incident response team.


Email Forensics = Investigation of email crimes.



Next Unit 3:


Cryptography, Symmetric & Asymmetric Encryption, Diffie-Hellman Key Exchange, RSA Algorithm, DES, Block Ciphers — one of the most important units for exams and interviews.

Friday, June 12, 2026

Unit 1 — Principles of Cryptography & Cyber Security

Unit 1 — Principles of Cryptography & Cyber Security


---

Foundations of Cyber Security Concepts

Cyber Security means protecting:

Computers

Networks

Software

Data

Digital systems


from:

Unauthorized access

Attacks

Damage

Theft

Malware



---

Why Cyber Security is Important

Today everything is online:

Banking

Shopping

Government services

Education

Social media


If security is weak:

Data can be stolen

Money can be lost

Systems may stop working

Privacy gets compromised



---

Essential Terminologies

1. CIA Triad

CIA is the foundation of Cyber Security.

(A) Confidentiality

Data should only be accessible to authorized people.

Example:

ATM PIN

Passwords

Bank details


Methods:

Encryption

Passwords

Authentication



---

(B) Integrity

Data should not be modified illegally.

Example: Marks stored in university database should remain correct.

Methods:

Hashing

Digital signatures

Access control



---

(C) Availability

Systems and data should be available whenever needed.

Example: Bank servers should work 24×7.

Methods:

Backups

Firewalls

Disaster recovery



---

Risks

A risk is the possibility of damage or loss.

Example: Weak password can create risk of hacking.

Formula: Risk = Threat × Vulnerability


---

Threats

Anything that can cause harm to a system.

Examples:

Hackers

Viruses

Natural disasters

Insider attacks


Types:

Internal threats

External threats



---

Breach

Unauthorized access to confidential data.

Example: A hacker steals customer credit card information.

Data breaches may cause:

Financial loss

Reputation damage

Legal problems



---

Attacks

An attempt to exploit vulnerabilities.

Types:

Phishing

Malware attack

SQL Injection

Denial of Service (DoS)



---

Exploits

Code or techniques used to take advantage of vulnerabilities.

Example: Using a software bug to gain admin access.


---

Information Gathering

The first step of hacking.

Attackers collect information about target systems.

Two main methods:

1. Social Engineering


2. Footprinting & Scanning




---

Social Engineering

Manipulating people to reveal confidential information.

Example: Fake call asking for OTP or password.

Types:

Phishing

Vishing (voice call fraud)

Smishing (SMS fraud)


Prevention:

User awareness

Verification methods

Security training



---

Footprinting

Collecting information about a target.

Information collected:

IP address

Domain details

Employee details

Network information


Methods:

WHOIS lookup

Google hacking

DNS queries



---

Scanning

Used to identify:

Open ports

Services

Vulnerabilities


Types:

Port scanning

Network scanning

Vulnerability scanning



---

Open Source / Free Tools

Nmap

Popular network scanning tool.

Features:

Detect hosts

Open ports

Services running

OS detection


Example command:

nmap 192.168.1.1


---

Zenmap

GUI version of Nmap.

Advantages:

Easy interface

Visual scanning

Network mapping



---

Port Scanner

Checks which ports are open.

Common ports:

80 → HTTP

443 → HTTPS

21 → FTP



---

Network Scanner

Scans entire networks to identify:

Devices

IP addresses

Active systems



---

Cyber Security Vulnerabilities

Weaknesses in systems.

Types:

1. Software Vulnerabilities

Errors or bugs in software.

Example: Outdated Windows OS.


---

2. Weak Authentication

Weak passwords or no multi-factor authentication.

Example: Password = 123456


---

3. Poor Authorization

Users getting access they should not have.


---

4. Complex Networks

Large networks become difficult to manage securely.


---

5. Open Access to Data

Sensitive data available publicly.


---

6. Unprotected Communication

Data sent without encryption.

Example: Using HTTP instead of HTTPS.


---

Cyber Security Safeguards

Methods used to protect systems.


---

Access Control

Restricts who can access resources.

Types:

Role-based access

Password protection

Biometric authentication



---

IT Audit

Checking security policies and systems regularly.

Purpose:

Find vulnerabilities

Ensure compliance

Improve security



---

Authentication

Verifying identity of users.

Methods:

Passwords

OTP

Biometrics

Smart cards



---

Important Exam Questions

Short Questions

1. Define Cyber Security.


2. Explain CIA Triad.


3. What is Footprinting?


4. Difference between Threat and Risk.


5. What is Social Engineering?


6. Define Vulnerability.


7. What is Authentication?


8. Explain Nmap.




---

Long Questions (6–10 Marks)

1. Explain CIA Triad with examples.


2. Describe various Cyber Security vulnerabilities.


3. Explain Information Gathering techniques.


4. Discuss Social Engineering attacks and prevention.


5. Explain different Cyber Security safeguards.


6. Write detailed notes on Nmap and Zenmap.




---

Quick Revision Notes

CIA = Confidentiality + Integrity + Availability

Threat = Possible danger

Risk = Chance of loss

Vulnerability = Weakness

Exploit = Method to attack weakness

Nmap = Network scanner

Footprinting = Information collection

Scanning = Finding open services

Authentication = Identity verification


Next topics in Unit 1:

Access Control

IT Audit

Authentication methods

Advanced scanning concepts

Practical cybersecurity tools

Friday, June 5, 2026

Starting September 2026, Google will block any Android app whose developer hasn't registered and provided government ID. This affects every Android device worldwide. Learn more:

Your point is about to stop being yours


89 days until lockdown 

Starting September 2026, a silent update, nonconsensually pushed by Google, will block every Android app whose developer hasn't registered with Google, signed their contract, paid up, and handed over government ID. 

Every app and every device
Worldwide, with no opt-out. 

What Google is doing
In August 2025, Google announced a new requirement: starting September 2026, every Android app developer must register centrally with Google before their software can be installed on any device. Not just Play Store apps: all apps. This includes apps shared between friends, distributed through F-Droid, built by hobbyists for personal use. Independent developers, church and community groups, and hobbyists alike will all be frozen out of being able to develop and distribute their software.

Registration requires:

Paying a fee to Google
Agreeing to Google's Terms and Conditions
Surrendering your government-issued identification
Providing evidence of your private signing key
Listing all current and all future application identifiers


If a developer does not comply, their apps get silently blocked on every Android device worldwide.

Who this hurts
You
You bought an Android phone because Google told you it was open. You could install what you wanted, and that was the deal.

Google is now rewriting that deal, retroactively, on hardware you already own. After the update lands, you can only run software that Google has pre-approved. On your phone: your property, that you paid for.

Independent developers
A teenager's first app, a volunteer's privacy tool, or a company's confidential internal beta. It doesn't matter. After September 2026, none of these can be installed without Google's blessing.

F-Droid, home to thousands of free and open-source Android apps, has called this an "existential" threat. Cory Doctorow calls it "Darth Android".

Governments & civil society
Google has a documented track record of complying when authoritarian regimes demand app removals. With this program, the software that runs your country's institutions will exist at the pleasure of a single unaccountable foreign corporation.

The EFF calls app gatekeeping "an ever-expanding pathway to internet censorship."

This is bigger than Android
If Google can retroactively lock down billions of devices that were sold as open platforms, every hardware manufacturer on the planet is watching.

The principle being established: the company that made your device gets to decide, after you've bought it, what software you're allowed to run. In software, this is called a "rug pull"; but at least you could always install competing software. In hardware, it is a fait accompli that strips you of your agency and renders you powerless to the whims of a single unaccountable gatekeeper and convicted monopolist.

Android's openness was never just a feature. It was the promise that distinguished it from iPhone. Millions chose Android for exactly that reason. Google is now revoking that promise unilaterally, on devices already in people's pockets, because they've decided they have enough market dominance and regulatory capture to get away with it.

Ars Technica: "Google's Apple envy threatens to dismantle Android's open legacy."

But wait, isn't this...
"...just about security?"
"...still sideloading if you use the advanced flow?"
"...only a problem if you have something to hide?"
"...the same thing Apple does?"
"...just $25 and some paperwork?"





Wednesday, May 20, 2026

UGC NET Paper 1 Crash Plan (20 May – 22 June)

 

UGC NET Paper 1 Crash Plan (20 May – 22 June)

🎯 Goal

Target: Strong score in Paper 1 through:

  • PYQs
  • MCQs
  • Revision
  • Mock Tests
  • Fast concept coverage

Daily Time Required:

  • Minimum: 1.5–2 hrs
  • Ideal: 3 hrs

📅 DAILY STRUCTURE

Session 1 (Concepts) – 60 mins

Learn theory + short notes

Session 2 (MCQs/PYQs) – 60 mins

Solve questions from previous years

Session 3 (Revision) – 30 mins

Revise old topics only


WEEK 1 (20 May – 26 May)

Focus: Teaching + Research Aptitude

Day 1 – 20 May

Teaching Aptitude

Topics:

  • Nature of Teaching
  • Characteristics of good teacher
  • Learner characteristics
  • Teaching methods

Practice:

  • 25 MCQs
  • 1 PYQ set

Day 2 – 21 May

Teaching Aptitude

Topics:

  • Levels of teaching
  • Teaching aids
  • Evaluation systems
  • Bloom’s taxonomy

Practice:

  • 30 MCQs

Day 3 – 22 May

Research Aptitude

Topics:

  • Meaning of research
  • Types of research
  • Research ethics
  • Objectives of research

Practice:

  • PYQs

Day 4 – 23 May

Research Aptitude

Topics:

  • Sampling methods
  • Hypothesis
  • Variables
  • Research design

Practice:

  • 30 MCQs

Day 5 – 24 May

Communication

Topics:

  • Types of communication
  • Barriers
  • Classroom communication
  • Effective communication

Practice:

  • PYQs + MCQs

Day 6 – 25 May

Revision Day

Revise:

  • Teaching Aptitude
  • Research Aptitude
  • Communication

Practice:

  • Mixed MCQs

Day 7 – 26 May

Mock Test 1

  • Full Paper 1 mock
  • Analyze mistakes
  • Make weak-topic list

WEEK 2 (27 May – 2 June)

Focus: Reasoning + Logical Reasoning

Day 8

  • Analogy
  • Series
  • Coding-Decoding

Day 9

  • Blood Relation
  • Direction Sense
  • Classification

Day 10

  • Syllogism
  • Statements & Conclusions

Day 11

  • Arguments
  • Fallacies
  • Logical structures

Day 12

  • Practice set
  • PYQs

Day 13

  • Full revision of reasoning

Day 14

Mock Test 2


WEEK 3 (3 June – 9 June)

Focus: ICT + Data Interpretation

Day 15

ICT

  • Computer basics
  • Memory units
  • Hardware/software

Day 16

ICT

  • Internet
  • Networking
  • Cybersecurity basics

Day 17

Data Interpretation

  • Tables
  • Pie charts

Day 18

Data Interpretation

  • Line graph
  • Bar graph
  • Percentage questions

Day 19

  • PYQs practice

Day 20

  • Revision of ICT + DI

Day 21

Mock Test 3


WEEK 4 (10 June – 16 June)

Focus: Environment + Higher Education + Reading Comprehension

Day 22

Environment

  • Pollution
  • Climate change
  • Sustainable development

Day 23

Environment

  • Biodiversity
  • Renewable resources

Day 24

Higher Education

  • NAAC
  • UGC
  • NEP
  • Open universities

Day 25

Reading Comprehension

  • Practice passages
  • Speed improvement

Day 26

  • Mixed MCQs
  • PYQs

Day 27

  • Revision of all week topics

Day 28

Mock Test 4


FINAL REVISION WEEK (17 June – 21 June)

Day 29 – 17 June

  • Teaching Aptitude Revision
  • Research Aptitude Revision

Day 30 – 18 June

  • Reasoning Revision
  • Logical Reasoning Revision

Day 31 – 19 June

  • ICT Revision
  • Data Interpretation Revision

Day 32 – 20 June

Full Mock Test

Analyze weak topics only

Day 33 – 21 June

Light Revision Only

  • Formulas
  • Notes
  • Short tricks
  • Important facts

Sleep early.


🎯 EXAM DAY – 22 June

Before Exam

  • No heavy study
  • Revise notes only
  • Stay calm

Attempt Strategy

  1. Solve easiest questions first
  2. Skip time-consuming questions
  3. Use elimination method
  4. Keep last 10 mins for review

📌 MOST IMPORTANT TOPICS

High Priority

  • Research Aptitude
  • Teaching Aptitude
  • ICT
  • Logical Reasoning
  • Data Interpretation

📚 DAILY TARGETS

TaskDaily Goal
MCQs25–50
PYQs10–20
Revision30 mins
Mock TestsWeekly

🔥 FINAL SUCCESS RULES

DO:

  • Solve PYQs daily
  • Revise every day
  • Practice mocks weekly
  • Focus on accuracy

DON’T:

  • Read too many books
  • Skip revision
  • Ignore mock analysis
  • Study without MCQs