Cybersecurity, Cloud & Emerging ICT

Cybersecurity digital systems, networks, data को unauthorised access, attacks, damage, theft से protect करना है।

Key Objectives (CIA Triad):

• Confidentiality — गोपनीयता: Only authorised access to information
• Integrity — अखंडता: Data is accurate and unaltered
• Availability — उपलब्धता: Data and systems available when needed

• Virus — वायरस: Host file/program से जुड़ता है, user action से फैलता है
• Worm — वर्म: Network पर self-replicate कर सकता है, host की आवश्यकता नहीं
• Trojan Horse — ट्रोजन: Legitimate software जैसा दिखता है, पर malicious कार्य करता है
• Ransomware — रैंसमवेयर: Data encrypt करके ransom माँगता है
• Spyware — स्पायवेयर: Secretly information collect करता है
• Adware — ऐडवेयर: Unwanted advertisements display करता है
• Rootkit — रूटकिट: Malicious access/process को छिपाता है
• Logic Bomb — लॉजिक बॉम्ब: Specific event/condition पर activate होता है

• Phishing — फिशिंग: Fraudulent e-mail/message (email-based)
• Spear Phishing — स्पीयर फिशिंग: Targeted phishing (specific individual/organisation)
• Smishing — स्मिशिंग: SMS-based phishing
• Vishing — विशिंग: Voice-call-based fraud
• Pharming — फार्मिंग: User को fraudulent website पर redirect करना
• Spoofing — स्पूफिंग: False identity/address दिखाना (IP spoofing, email spoofing)

Exam Trap: Worm self-replicate कर सकता है; virus को host की आवश्यकता होती है।

• Ransomware — रैंसमवेयर: User के files/data को encrypt कर देता है और decrypt करने के लिए ransom (payment) माँगता है।
• Spyware — स्पायवेयर: User की activities, keystrokes, personal information को secretly monitor और collect करता है।

• Strong Passwords: Complex, unique passwords for each account
• Multi-Factor Authentication (MFA): Multiple layers of verification
• Antivirus/Anti-malware: Protects against malicious software
• Firewall: Blocks unauthorised access
• Encryption: Converts data to unreadable format
• Regular Updates: Patches vulnerabilities
• Backup: Regular data backup (3-2-1 rule)
• Secure Wi-Fi: Strong encryption (WPA2/WPA3)
• Employee Training: Awareness of threats
• Access Control: Role-based permissions

• Something you know — आप जानते हैं: Password, PIN, security question
• Something you have — आपके पास है: Phone, token, smart card, OTP
• Something you are — आप हैं: Fingerprint, iris scan, facial recognition

Exam Trap: Password + PIN = NOT two-factor authentication (both are "something you know"). Correct 2FA: Password + fingerprint, Password + OTP on phone, etc.

Encryption data को unreadable format में convert करने की process है — only authorised parties can decrypt.

• Symmetric Encryption: Same key for encryption and decryption
• Asymmetric Encryption: Public key for encryption, private key for decryption
• HTTPS: Uses SSL/TLS encryption for secure web communication
• End-to-End Encryption: Messages encrypted from sender to receiver (WhatsApp, Signal)

• Firewall — फ़ायरवॉल: Network security system that monitors and controls incoming/outgoing traffic based on rules. Blocks unauthorised access.
• Antivirus — एंटीवायरस: Software that detects, prevents, and removes malicious software (viruses, worms, trojans, etc.).

Difference: Firewall controls traffic; Antivirus protects against malware.

Cloud Computing computing resources (servers, storage, databases, software) को Internet के माध्यम से on-demand delivery करना है।

Characteristics:

• On-demand self-service
• Broad network access
• Resource pooling
• Rapid elasticity
• Measured service

• SaaS (Software as a Service) — SaaS: Ready-to-use software through the Internet. Examples: Google Docs, Gmail, Office 365, Salesforce.
• PaaS (Platform as a Service) — PaaS: Application development platform. Examples: Google App Engine, AWS Elastic Beanstalk, Microsoft Azure.
• IaaS (Infrastructure as a Service) — IaaS: Virtual servers, storage, networking. Examples: AWS EC2, Google Compute Engine, Microsoft Azure.

• Public Cloud — पब्लिक क्लाउड: Services available to the general public over the Internet (AWS, Google Cloud, Azure).
• Private Cloud — प्राइवेट क्लाउड: Dedicated infrastructure for a single organisation. More control and security.
• Hybrid Cloud — हाइब्रिड क्लाउड: Combination of public and private clouds. Flexibility + security.
• Community Cloud — कम्युनिटी क्लाउड: Shared infrastructure for a specific community/organisations with common concerns.

• Artificial Intelligence (AI) — कृत्रिम बुद्धिमत्ता: Machines performing tasks that typically require human intelligence.
• Internet of Things (IoT) — इंटरनेट ऑफ थिंग्स: Physical devices connected to the Internet, collecting and sharing data.
• Big Data — बिग डेटा: Large, complex datasets that require advanced tools for analysis.
• Blockchain — ब्लॉकचेन: Decentralised, distributed ledger technology for secure transactions.
• AR/VR — AR/VR: Augmented Reality (overlay digital info on real world) and Virtual Reality (immersive digital environment).
• 5G — 5G: Fifth-generation mobile network technology — high speed, low latency.

AI machines की ability को simulate human intelligence tasks — learning, reasoning, problem-solving, perception.

Subfields:

• Machine Learning (ML): Systems learn from data without explicit programming.
• Deep Learning: Neural networks with multiple layers.
• NLP (Natural Language Processing): Understanding and generating human language.
• Computer Vision: Analysing and interpreting visual information.

Applications in Education: Adaptive learning, automated assessment, intelligent tutoring, chatbots.

IoT physical devices (sensors, appliances, vehicles) that are connected to the Internet and can collect, send, and receive data.

Examples: Smart home devices, wearable fitness trackers, smart cities, industrial sensors.

Challenges:

• Security and privacy concerns
• Data management and storage
• Interoperability
• Energy consumption

Big Data large and complex datasets that cannot be processed using traditional data-processing tools.

5 V's of Big Data:

• Volume — मात्रा: Large amount of data
• Velocity — गति: Fast generation and processing
• Variety — विविधता: Different types of data (structured, unstructured)
• Veracity — सत्यता: Data quality and accuracy
• Value — मूल्य: Useful insights from data

Tools: Hadoop, Spark, NoSQL databases.

Blockchain एक decentralised, distributed digital ledger है जो transactions को secure और transparent रूप से record करता है।

• Key Features: Immutable, transparent, decentralised, secure
• Blocks: Contain transaction data, timestamp, and hash of previous block
• Applications: Cryptocurrency (Bitcoin), smart contracts, supply chain, digital identity

• AR (Augmented Reality) — संवर्धित वास्तविकता: Digital information को real-world environment पर overlay करना। Example: Pokémon Go, Google Lens.
• VR (Virtual Reality) — आभासी वास्तविकता: Complete immersive digital environment that replaces the real world. Example: VR gaming, VR simulations.

Applications in Education: Virtual field trips, medical simulations, 3D modelling, interactive learning.

5G fifth-generation mobile network technology — significantly faster speeds, lower latency, and more capacity than 4G.

• Speed: Up to 10 Gbps
• Latency: 1 ms (ultra-low)
• Capacity: Supports many connected devices
• Applications: IoT, autonomous vehicles, smart cities, AR/VR, telemedicine

• Trap 1: Virus = worm → ❌ Virus needs host; worm is self-replicating without host.
• Trap 2: Trojan = virus → ❌ Trojan appears legitimate; does not self-replicate.
• Trap 3: Phishing = SMS-based → ❌ Phishing is email-based; Smishing is SMS-based.
• Trap 4: Vishing = email-based → ❌ Vishing is voice-call-based.
• Trap 5: Password + PIN = 2FA → ❌ Both are "something you know" — not 2FA.
• Trap 6: SaaS = IaaS → ❌ SaaS is software; IaaS is infrastructure.
• Trap 7: Public cloud = always less secure → ❌ Security depends on implementation.
• Trap 8: AI = machine learning only → ❌ AI includes many subfields (NLP, robotics, computer vision).
• Trap 9: IoT = only smart home devices → ❌ IoT includes many applications (industrial, healthcare, agriculture).

Which type of malware can self-replicate without a host file?

• A. Virus
• B. Worm
• C. Trojan
• D. Ransomware

Explanation: A worm can self-replicate and spread independently without a host file. A virus requires a host file.

SMS-based phishing attack is called:

• A. Phishing
• B. Smishing
• C. Vishing
• D. Pharming

Explanation: Smishing is phishing through SMS. Phishing is email-based; Vishing is voice-call-based.

Which combination correctly represents two-factor authentication?

• A. Password + PIN
• B. Password + fingerprint
• C. PIN + security question
• D. Two passwords

Explanation: Two-factor authentication requires two different factors. Password = something you know; fingerprint = something you are.

Which cloud service model provides ready-to-use software through the Internet?

• A. IaaS
• B. PaaS
• C. SaaS
• D. DaaS

Explanation: SaaS (Software as a Service) provides ready-to-use software applications over the Internet.

Which technology uses a decentralised distributed ledger?

• A. AI
• B. IoT
• C. Blockchain
• D. Big Data

Explanation: Blockchain is a decentralised, distributed digital ledger technology.

Which of the following is NOT a V of Big Data?

• A. Volume
• B. Velocity
• C. Variety
• D. Vector

Explanation: The 5 V's of Big Data are Volume, Velocity, Variety, Veracity, and Value. "Vector" is not one of them.

Malware Types:

• Virus (host required), Worm (self-replicating), Trojan (deceptive)
• Ransomware (encrypts & demands ransom), Spyware (steals data)

Social Engineering:

• Phishing (email), Smishing (SMS), Vishing (voice), Pharming (redirect)

Cloud Models:

• SaaS (Software), PaaS (Platform), IaaS (Infrastructure)
• Public, Private, Hybrid, Community

Emerging ICT:

• AI (intelligent systems), IoT (connected devices)
• Big Data (5 V's), Blockchain (decentralised ledger)
• AR/VR (augmented/virtual reality), 5G (high-speed network)

Exam Formula:

UGC NET में Cybersecurity, Cloud & Emerging ICT के questions malware types, social engineering, cloud models, and emerging technologies पर based होते हैं।