Skip to content

RGPV B.Tech · 4th Year

Cyber Security 7th Semester Syllabus

Cyber Security (CY): the official syllabus of all 9 7th sem subjects, unit by unit, with previous year papers, notes and important questions. Free to read.

Subjects

CY 7th semester syllabus, unit by unit

Every subject of RGPV Cyber Security 7th semester (4th year), as the official syllabus lists it.

Machine Learning (ML)

CY-701
  1. Unit 1Introduction to Machine Learning

    introduction to machine learning · scope and limitations of machine learning · regression · probability · statistics · linear algebra for machine learning · convex optimization · data visualization · hypothesis function and testing · data distributions · data preprocessing · data augmentation · normalizing data sets · machine learning models · supervised learning · unsupervised learning

  2. Unit 2Deep Learning Fundamentals

    linearity vs non‑linearity · activation functions (sigmoid, ReLU, etc.) · weights and bias · loss function · gradient descent · multilayer network · back‑propagation · weight initialization · training and testing of networks · unstable gradient problem · auto‑encoders · batch normalization · dropout · L1 regularization · L2 regularization · momentum · tuning hyper‑parameters

  3. Unit 3Convolutional Neural Networks

    convolutional neural network (CNN) · flattening · subsampling · padding · stride · convolution layer · pooling layer · loss layer · 1x1 convolution (depthwise) layer · inception network · input channels · transfer learning · one‑shot learning · dimension reduction · implementation of CNN with TensorFlow · implementation of CNN with Keras

  4. Unit 4Recurrent Neural Networks and Reinforcement Learning

    recurrent neural network (RNN) · long short‑term memory (LSTM) · gated recurrent unit (GRU) · translation models · beam search and beam width · BLEU score · attention model · reinforcement learning (RL) · RL framework · Markov decision process (MDP) · Bellman equations · value iteration · policy iteration · actor‑critic model · Q‑learning · SARSA

  5. Unit 5Support Vector Machines and Applications

    support vector machines (SVM) · Bayesian learning · application of machine learning in computer vision · application of machine learning in speech processing · application of machine learning in natural language processing · case study: ImageNet competition

Penetration Testing and Vulnerability Analysis (PTVA)

CY-702 (A)
  1. Unit 1Introduction to Penetration Testing

    Legal and ethical considerations · Types of penetration testing · Penetration testing methodologies · Information gathering and scanning · Foot printing and reconnaissance techniques · Network scanning and enumeration · SINT (Open‑source intelligence) gathering · Vulnerability scanning tools

  2. Unit 2Exploitation and Post‑Exploitation

    Exploiting system and network vulnerabilities · Privilege escalation techniques · Post‑exploitation activities · Maintaining access and pivoting · Web application security · Common web application vulnerabilities · Web application penetration testing methodologies · Web vulnerability scanners and tools

  3. Unit 3Wireless Network Security and Social Engineering

    Wireless network security concepts · Wi‑Fi vulnerabilities and attacks · Wireless penetration testing techniques · Securing wireless networks · Introduction to social engineering · Techniques and tactics of social engineering · Physical security vulnerabilities and testing · Mitigating social engineering and physical security risks

  4. Unit 4Cryptography and Secure Communications

    Basics of cryptography · Cryptographic algorithms and protocols · Encryption, decryption, and key management · Secure communication channels · Documentation and reporting of findings · Prioritizing and mitigating vulnerabilities · Engaging stakeholders and communicating recommendations · Post‑testing activities and continuous improvement

  5. Unit 5Advanced Topics in Penetration Testing

    Mobile application security · Cloud security and testing (IoT security) · Red teaming and adversary simulation · Review of real‑world penetration testing cases · Practical hands‑on exercises · Capture the Flag (CTF) competitions · Final project and presentations

Block Chain & Crypto-Currencies (BCCC)

CY-702 (B)
  1. Unit 1Basics of Blockchain

    Introduction · Concept of Blockchain · Fundamentals of Blockchain · Characteristics of Blockchain · Consensus in Trust‑Building Exercise · Public, Private, and Hybrid Blockchains · Distributed Ledger Technologies · Architecture of Blockchain · Transactions · Chaining Blocks · Value Proposition of Blockchain · Permissioned Model of Blockchain

  2. Unit 2Hash Functions

    Hash Functions · Hashing · Message Authentication Code (MAC) · Secure Hash Algorithms (SHA‑1) · Distributed Hash Tables · Hashing in Blockchain Mining Consensus · Consensus Algorithm · Byzantine Agreement Methods

  3. Unit 3Blockchain Components

    Blockchain Components · Ethereum Virtual Machine (EVM) · Working of Ethereum · Ethereum Clients · Ethereum Transactions · Ethereum Development Tools · Introduction to Cryptography · Cryptography Primitives · Symmetric Cryptography · Asymmetric Cryptography · Architecture of Hyperledger

  4. Unit 4Smart Contracts

    Smart Contracts · Absolute and Immutable Contracts · Contractual Confidentiality · Supply Chain Management · Darknet · Future Bitcoins · Working of Bitcoin · Merkle Trees · Bitcoin Block Structure · Bitcoin Address · Bitcoin Transactions · Bitcoin Payments · Mining in Blockchain

  5. Unit 5Blockchain Vertical Solutions and Use Cases

    Blockchain Vertical Solutions and Use Cases · Blockchain in Insurance · Blockchain in Asset Management · Blockchain in Healthcare · Smart Assets · Electronic Currency · Manufacturing Blockchain and Allied Technologies · Blockchain and Cloud Computing · Characteristics of Blockchain Cloud

Mobile Security and Forensics (MSF)

CY-702 (C)
  1. Unit 1Introduction to Mobile Forensics

    Mobile forensics · Challenges in mobile forensics · Mobile phone evidence extraction · Documenting and reporting phase · Presentation phase · Archiving phase · Overview of mobile operating systems · Data acquisition methods · Examination and analysis of evidence stored on mobile phones

  2. Unit 2Android Forensics

    Understanding Android and Android model · Android security – secure kernel · Security‑Enhanced Linux (SELinux) · Full Disk Encryption · Trusted Execution Environment (TEE) · Android file system · Android forensic setup and pre‑data extraction techniques · Android data extraction techniques · Android data analysis and recovery · Android app analysis · Android malware analysis · Reverse engineering of Android applications · Extracting APK files from Android devices

  3. Unit 3iOS Forensics

    iOS application security · Basics of iOS and application development · Developing a first iOS app · Running apps on iDevice · iOS MVC design pattern · iOS security model · iOS secure boot chain · iOS application signing

  4. Unit 4Android Security

    Sandboxing and Android permission model · Application signing · Android startup process · Setting up the development environment · Creating an Android virtual device (AVD) · Useful utilities for Android pentesting · Android Debug Bridge (ADB) · Burp Suite for Android traffic analysis · APKTool for reverse engineering

  5. Unit 5Traffic Analysis

    Traffic analysis for Android devices · Android traffic interception · Passive traffic analysis techniques · Active traffic analysis techniques · HTTPS proxy interception

Multimedia Security & Forensics (MSF)

CY-702 (D)
  1. Unit 1Introduction

    Multimedia Application Areas · Interdisciplinary Aspects of Multimedia · Multimedia Data Encoding · Concept of data compression in multimedia field

  2. Unit 2Quality of Service & Operating System

    Requirements and Constraints · Quality of Services Concept · Resource Management · Media Server Architecture · Storage Management · Services · Protocols · Layers

  3. Unit 3Security in Multimedia Applications

    Security attacks · Multimedia Encryption · Steganography · Digital image watermarking · Multimedia Authentications

  4. Unit 4Multimedia Evidence Handling

    Digital Forensics Laboratories in Operation · Standards and Best Practices in Digital and Multimedia Forensics · Digital Evidence Extraction · Multimedia File Carving

  5. Unit 5Multimedia Device and Source Forensics

    Forensic Camera Model Identification · Printer and Scanner Forensics · Microphone Forensics · Multimedia Content Forensics

Ethical Hacking (EH)

CY-703 (A)
  1. Unit 1Ethical Hacking

    Introduction to ethical hacking · Fundamentals of networking and basic concepts · Foot‑printing and scanning – information gathering · Determining the network range · Identifying active machines · Finding open ports and access points · Operating system fingerprinting · Service enumeration · Network attack surface mapping · Google hacking techniques · Scanning methodologies · Windows platform hacking · Linux platform hacking

  2. Unit 2The Business Perspective

    Definition of business objectives for security testing · Development of security policy · Analysis of previous test results · Identification of business challenges · Planning a controlled attack – inherent limitations · Planning a controlled attack – imposed limitations · Timing considerations for testing · Selection of attack type · Definition of source point · Required knowledge and skill set · Design of multi‑phased attacks · Team organization and attack structure · Engagement planning procedures · Role of the security consultant · Role of the tester · Logistics and resource allocation · Use of intermediaries · Coordination with law‑enforcement agencies

  3. Unit 3Preparing for a Hack

    Technical preparation for penetration testing · Management of the testing engagement · Social engineering techniques for reconnaissance · Physical security assessment methods · Internet‑based reconnaissance · Steganography concepts and applications · Cryptography fundamentals relevant to hacking · Wireless network hacking tactics · Firewall configuration and honeypot deployment · Intrusion detection and prevention system (IDS/IPS) evasion · Vulnerability identification strategies · Complete penetration testing workflow

  4. Unit 4Enumeration

    Enumeration techniques and methodology · Definition of soft objectives during enumeration · Techniques for “looking around” or initial probing · Core elements of enumeration (hosts, services, users) · Preparation for exploitation phase · Intuitive testing approaches · Evasion tactics against defensive mechanisms · Threat and threat‑group analysis · Operating system specific enumeration · Password cracking strategies · Rootkit detection and analysis · Application‑level enumeration · Wardialing and telephone system probing · Network service enumeration · Denial‑of‑service (DoS) attack considerations · Identification of areas of concern for further testing

  5. Unit 5Advanced Topics

    Reverse engineering of binaries and scripts · Email hacking techniques and countermeasures · Incident handling and response procedures · Bluetooth protocol hacking · Mobile phone hacking methodologies · Overview of basic ethical hacking tools and their professional usage · Legal considerations for ethical hacking · Professional and ethical responsibilities of security testers · Maintaining professional integrity in security assessments · Appropriate use of tools and techniques in ethical hacking engagements

Cyber Security Policies & Standards (CSPS)

CY-703 (B)
  1. Unit 1Introduction to Cyber Security

    Basic Cyber Security Concepts · Layers of security · Vulnerability · Threat · Harmful acts · Internet Governance – Challenges and Constraints · Computer Criminals · CIA Triad · Assets and Threat · Motive of attackers · Active attacks · Passive attacks · Software attacks · Hardware attacks · Cyber Threats – Cyber Warfare · Cyber Crime · Cyber terrorism · Cyber Espionage · Comprehensive Cyber Security Policy

  2. Unit 2Cyberspace and the Law & Cyber Forensics

    Introduction · Cyber Security Regulations · Roles of International Law · The INDIAN Cyberspace · National Cyber Security Policy · Historical background of Cyber forensics · Digital Forensics Science · The Need for Computer Forensics · Cyber Forensics and Digital evidence · Forensics Analysis of Email · Digital Forensics Lifecycle · Forensics Investigation · Challenges in Computer Forensics

  3. Unit 3Organizational Implications of Cyber Security

    Introduction cost of cybercrimes and IPR issues · Web threats for organizations · Security and privacy implications · Social media marketing: security risks and perils for organizations · Social computing and the associated challenges for organizations

  4. Unit 4Privacy Issues

    Basic Data Privacy Concepts: Fundamental Concepts · Data Privacy Attacks · Datalinking and profiling · Privacy policies and their specifications · Privacy policy languages · Privacy in different domains – medical, financial etc.

  5. Unit 5Introduction to Security Policies and Cyber Laws

    Need for an Information Security Policy · Information Security Standards – ISO · Introducing Various Security Policies and Their Review Process · Introduction to Indian Cyber Law · Objective and Scope of the IT Act, 2000 · Intellectual Property Issues · Overview of Intellectual Property Related Legislation in India · Patent · Copyright · Law Related to Semiconductor Layout and Design · Software License

Data Engineering (DE)

CY-703 (C)
  1. Unit 1Introduction to Data Engineering

    Definition · Evolution · Life Cycle · Data Engineering skills and activities · Data Maturity · Data Lifecycle Versus the Data Engineering Lifecycle · Security · Data Management · DataOps

  2. Unit 2Source Systems and Data Ingestion

    Types of Data Architecture · Data Lake · Data Lakehouses · Modern Data Stack · Lambda Architecture · Kappa Architecture

  3. Unit 3Data Platforms

    Stream-to-Batch Storage Architecture · Data Catalog · Data Sharing · Data Modeling · Dimensional Modeling · Creating Tables · Schema Migration · Building the data warehouse

  4. Unit 4Data Ingestion

    SFTP and SCP · Webhooks · Web Interface · Web Scraping · Business Intelligence Tools · Introduction to Superset · Creating visualizations · Data Quality · Data Catalogs · Data Lineage · Data Governance

  5. Unit 5ETL and Reverse ETL

    ETL · Reverse ETL · Security · Privacy · Future of Data Engineering · Patch and Update Systems · Logging · Monitoring · Alerting

Cloud Computing (CC)

CY-703 (D)
  1. Unit 1Introduction of Grid and Cloud Computing

    Grid and Cloud computing concepts · Characteristics of cloud computing · Components of cloud computing · Business and IT perspective of cloud · Cloud services requirements · Cloud service models (public, private, hybrid) · Security in public cloud model · Public versus private clouds · Cloud computing platforms: Amazon EC2, Google App Engine, Microsoft Azure · Utility Computing · Elastic Computing

  2. Unit 2Cloud Services

    Software as a Service (SaaS) · Platform as a Service (PaaS) · Infrastructure as a Service (IaaS) · Cloud design and implementation using Service Oriented Architecture (SOA) · Conceptual cloud model · Cloud stack · Computing on demand · Information life‑cycle management · Cloud analytics · Information security in cloud · Virtual desktop infrastructure · Storage cloud

  3. Unit 3Virtualization Technology

    Definition and benefits of virtualization · Sensor virtualization · Hardware‑assisted virtualization (HVM) · Study of hypervisors · Logical partitioning (LPAR) · Storage virtualization · Storage Area Networks (SAN) · Network‑attached storage (NAS) · Cloud server virtualization · Virtualized data centre

  4. Unit 4Cloud Security Fundamentals

    Vulnerability assessment tools for cloud · Privacy and security in cloud environments · Cloud security architecture · Architectural considerations – general issues · Trusted cloud computing · Secure execution environments and communications · Micro‑architectures · Identity management · Access control mechanisms · Autonomic security · Virtualization security management · Virtual machine (VM) security recommendations · VM‑specific security techniques

  5. Unit 5SOA and Cloud

    SOA integration with IaaS · Cloud infrastructure benchmarks · Online Analytical Processing (OLAP) · Business intelligence in cloud · e‑Business considerations · Independent Software Vendors (ISV) in cloud · Cloud performance monitoring commands · Quality of Service (QoS) issues in cloud · Mobile cloud computing · Inter‑cloud issues · Sky computing · Cloud computing platforms: Xen, Eucalyptus, OpenNebula, Nimbus, TPlatform, Apache Virtual Computing Lab (VCL) · Anomaly Elastic Computing Platform