So, next will be the information communication technology and the robotics, this is the second part. The first part we have spoken about the space technology, defense technology, electronic and green technology, second part we are speaking with the IT. So, IT as per the previous thing what I have said, please be very clear that information technology is one such a kind of a topic which is highly connected to your daily life. Please pay attention in such a way highly connected to your daily life, observation matters a lot for this topic rather than reading plenty of informations, observe a lot of things. What happens in and around you that matters a lot for this kind of a topic, okay. Let me decode, individual area what are the things that you need to cover under the IT topics. So, first comes the computings, computing times, so here try to focus with respect to the quantum computing, super computing, cloud computing, grid computing, nano computing, H computing, fog computing, optical computing, green computing, mobile computing, these are the different types of computing which we need to focus, almost some 10 different types of computing as it. Now, under the computing topic, read the computing topic in such a way with respect to their futures. So, future and sense, quantum computing and all task specific, they can do the only one task at a time, they are not eligible to do the multitasking, quantum computing, super computing were task specific nature, that is one among the future. If you come across a word called as a quantum computing, we have a word called as quantum supremacy. Recently this Google company had done a project Saika Amur under that they have achieved the quantum supremacy concept, you don't know about what is quantum supremacy, what is quantum entanglement, like that have an analysis with respect to future. If you are coming at the future and sense, your answer for the future need to be computed within a single line, it should not exceed more than a single line, like that you need to arrive to a conclusion in a nutshell word. So, your nutshell definition need to be there for each and every kind of a future. So, questions can be there with respect to computing in such a way, first you need to go with respect to the futures behind the computing, second you need to go with respect to the applications, third focus with respect to the examples, recent example, if you come across a word called as a submit, even today also we had reported and used with respect to submit, one such a kind of a faster super computer in the world, world's fastest super in submit, they are using the submit super computer to identify the drug which can be an effectively fight against this coronal outbreak disease. So, they are testing which drug can be effective with the help of the submit super computer. So, like that each and every super computer will have their own application. So, try to go with respect to application and third one have some examples behind each and every super computers. For an Indian level, faster super computer in India and the current day remain to be the produce, no with respect to the examples. So, these three things if you are going to cover it for all the different types of computing that's more than enough. And finally, if you want to complete it, suppose you don't have an example instance, go with respect to project names. In order to promote the cloud computing, what project government of India initiated? What is Digilocker? Whether Digilocker comes under this cloud computing or not? What is project? Macharades, like that try to have a glance. So, if you are covering that types of computing will be getting over. Second type of a topic is types of malware. Tips of malware. So, here try to focus with respect to the hackers. First focus with respect to the hackers. Next with respect to the names of malware. Names of the malware. When I come for names of the malware, please kick start your population with the virus. Next, worms. Trojan. Ransomware. Viper. Viper. Viper. Scarware. Adware. Spyware. Under the spyware try to complete sponage, subortage. DOS. DDOS. DOS. DDOS. Juicejacking. One such a kind of word what we have seen in the recent time. Juicejacking. Cryptojacking. QRLjacking. QRLjacking. Web crawlers. So, these are the names of the malware what we came across in the recent time. In case of a malware topic how we need to read the topic and sense. First get with respect to the features of the malware. So, first get with respect to the mode of infection. That will be the first kind of addressing. Mode of infection. Some will recurse online mode. Some recurse offline mode. Some recurse both the things. So, first go through the topic with respect to the mode of infection. Second. Second line of scenario you need to touch with respect to what happens to the infected system after the attack. Some will corrupt all your files and folders. Some will make your system to perform in a porous manner. Some will be able to lock all your files and folders in the local drives. So, each and every malware will have their own specification in order to trouble your infected system. That is the second line of focusing. So, first line mode of infection happens. Second line what happens further due to infection. And third line go with respect to the remedial messes. So, remedial messes in sense some recurse anti-virus software. Some recurse with respect to the sandboxing technique. Which is recurse sandboxing technique? Trojan of course, recurse sandboxing technique. So, like that regarding to the remedial messes that should be the third line. And finally, complete a topic with respect to recent examples what we came across the malware. More than enough. Types of Malwares. Third, third comes with respect to the data transferring technology. Data transferring technology. Start with respect to IRDA. Infrared data transfer. Next, Bluetooth. Wi-Fi. Wi-Max. RFID. NFC. Near field communication. Li-Fi. Li-Fi. Wi-Fi. Wi-Fi direct. In-flight connectivity. So, these are the data transferring technology which we need to focus. Now, in this data transferring technology what are the point of scenario I need to focus on things. First point of scenario I need to focus with the regions of spectrum which is used by the technology. Some technology requires radio waves. Some requires IR waves. Some requires with respect to visibility region. You don't have to focus with respect to region which is used by the spectrum for the technology. Second point of focus whether it's a two-way connection or a two-way connection. So, some requires point-to-point. Some will be the point-to-multipoint. That will be the second point of focusing. And third will be the whether transmission and receiving takes place simultaneously or only it can support for a transmission or receiving allowed. Which means dual mode or one mode of transmission takes place. Fourth. The fourth comes in such a way regarding to the authentication. So, regarding to the authentication of the Q. One example I can able to say that in case of a Bluetooth and all. Mode of data transferring is secured or highly non-secured and since mode of transferring is highly secured because in case of a Bluetooth dual verification is required in both ends. Sender need to verify the device who is going to be the receiver. Receiver need to verify who is going to be the sending device. Since verification is required in both ends dual verification is there of course the Bluetooth mode of data transferring after completing with the mode of security. Finally, complete the topic with recent examples. For example, Wi-Fi direct charit application which we widely use with the smart phones works based up on the Wi-Fi direct. Next example go with the support of the fast tax stickers which we are mounted with the vehicles for the crossing the E-told plaza works based up on the RFID. Metro station cars it works based up on the NFC. Like that try to complete the topic with the examples which you quite common have in the market. That's it. If you complete it then the topic will be getting over. On one nation one car it uses the NFC as well as the chip based technology is there. If you are going with respect to the Indian post office payment card there it uses the QR codes alone. It doesn't have the magnetic strip black color magnetic strip it doesn't have the IC chip it has only the QR code the technology which is used with the QR codes. So like that complete the topic with respect to the examples which we tend to have in the market. Next. Fourth one. Different types of digital payment system. In this case start your topic with the net banking after net banking other card enable payment service. Next. BIM UPI QR codes mobile valets plastic money it refers for the credit card and the debit cards. So these are the things that we tend to cover under the different types of digital payment system. In case of the digital payment system what are the point of focus you need to have in sense. First get an idea in such a way. What is the basic technology you tend to have. What one thing I can commonly say in sense. What are the digital type of payment you tend to have in the market. Whether it is net banking or QR codes scanner. API API technology is common API technology is common. Apart from API technology each and every different types of payment will have their own technology that will be a secondary scenario. So first focus with respect to what kind of technologies that begin the digital payment. Second after that try to focus with respect to levels of authentication. That comes a major important area to have a question. You need to know about how many levels of authentication there for the BIM. How many level is there for UPI. How many level is there for the QR code. No with respect levels of authentication. And third go with respect to some types and examples. In case of QR code and all we have the static QR code as well as dynamic QR code. In case of a government owned Barth QR code we have a static Barth QR code as well as dynamic Barth QR code. So you need to know about glance with respect to types as well as with respect to some examples. So complete the topic in such a way so that you will be getting satisfied with respect to different types of digital payments. Next the fifth one complete the topic with respect to the mobile generation networks. Mobile generation network. When we come for mobile generation network currently in India we tend to stand in the 4G volt. So next generation is going to be the 5G. Better start the preparation from the 0G 0 generation 1G 2G under 2G we have 2.5 2.75. Next 3G 3.5 3.75 3.9 that is otherwise called as LTE under 4G under the 4G we have 4.5G that is the 4G voltage. Finally complete your topic with 5G that is it. Different types of mobile generation network. In case of mobile generation network what need to be focused. First comes go with respect to one technical concept what kind of a switching it uses circuit switching or packet switching that will be a technicality but no other option to be left to try to know it as a kind of a factual information. Second data transfer rate in order to worry about the new molecule try to get an idea whether data transmission takes place in KVBS or MVBS or GBBS. That much amount of information is more than sufficient you need to know about either the data transmission takes place in KVBS or MVBS or GBBS you need not to worry about the numerical values. Third third comes with respect to the other names which we tend to give for the generations. For example 2.5 is otherwise called as an edge 2.75 sorry 2.5 is called as a GPRS 2.75 is called as an edge so 7.5 is edge 2.5 is a GPRS so that you need to know about the other generation other names for the generations apart from the other generation you need to know about the meaning behind each and every alphabet letter which you tend to come across about the signal strength we come across HHSPA 3.5 H plus incense 3.75 advanced HS plus improved HSPA that is called as an H plus so like that behind each and every alphabet we have setting kind of an information to be present so try to know that information so once you have done it then the topic which is required for the mobile generation network will be getting over that is it so these are the areas which we need to focus with respect to the information communication technology further we have set in other topics also so still the robotics topic need to touch and other things need to be there so next we need to move with respect to big data IOT, artificial intelligence next blockchain technology for these topics what I can recommend sense focus more with the applications focus more with the application that is required for covering this topic apart from the application if they are going to frame the sentence sentence will be coming with respect to the futures even in 2018 we got a question about the IOT in order to make the statement is right for an IOT you need to read the whole paragraph it was nearly about some 10 to 15 lines the whole paragraph was given a larger paragraph was given as a matter of reading it you can able to come to a conclusion the paragraph speaks for the IOT so the answer is going to be simple the question will be there from the applications only so first focus with the application then focus with respect to the futures that is more than enough for this kind of a topic because all the topic what I had mentioned over here is kind of a main slide topic even though it is a main slide topic still scope is there for the problems in the aspect of applications they would neglect it in case of artificial intelligence try to read the topic with respect to types of artificial intelligence applications and recent examples like the Vayu Mitra what the ISRO had unveiled as well as SOFIA a second of a self-awareness robot that we have in the world world's first robotic citizen you need to go with respect to the recent examples what we have came across the artificial intelligence blockchain technology the same as a kind of a future go with respect to the futures first applications and some current news regarding the Libra cryptocurrency Libra cryptocurrency because cryptocurrency is one such kind of an area which functions based upon the blockchain but make it very clear that blockchain is not used only for the cryptocurrency trading apart from the cryptocurrencies it is used for several sectors make this point is very clear that mainly it was previously preferred for the cryptocurrency trading but now it is used for several sectors like the enterprise news in the name called as a Libra a kind of a cryptocurrency of the Facebook company and next the seventh one this topic will be a kind of a pure technicality topic net neutrality versus free basics pure technical topic in this case try to know about what is net neutrality what is the free basics what is the recent recommendations given by the TRY telecommunication and regulatory authority of India what recommendations they are given almost they are given some seven recommendations go through the seven recommendations for this topic so this seventh topic alone will be a slightly technicality and technicality in sense concepts should wise technicality they won't frame any kind of a technical words concepts of understanding need to be there to solve some questions finally as usual go with respect to some miscellaneous current of S let me give you a few current of S one such a kind of a thing is called as voice over wifi voice over wifi interconnection utility charge IUC charge interoperable wifi interoperable wifi sim swapping sim swapping e sim versus virtual sim next project Shakti under that difference we have spoken about mission Shakti this is project Shakti project of IIT Madras to develop India's first indigenous microprocessor in the name called as rice creek project Shakti project Para Shakti last year we got a question in the name called as digital signature parallel try to complete with respect to electronic signature electronic signatures facial recognition facial recognition so these are like this you try to DTH's so DTH types of DTH application of DTH so like this if you are completing that miscellaneous current of S part will be getting over so go with the question analysis so this is the question what we got in 2019 LT with the volt if you are learning under the mobile generation topic definitely it will be coming across LT is commonly marked as 3G and volt is commonly marked as an advanced 3G it is a 4G so first is wrong LT is data only technology and volt is a LT is data only that is right volt is a voice only technology so both the segment is wrong which is right they are asking that neither one not both the segment is wrong see concepts are based question if you are knowing even though it is a concept it is a simple concept if you are knowing with respect to simple concept then easily hardly you are spending about some less than a minute to say the statement is right or wrong second comes in the name called as a li-fi with reference to the li-fi recently seen in the news which among the following statement is right so this is a previous year UPHC question only so li-fi instance instead of a radio waves for the Wi-Fi we are using the radio waves but in case of a li-fi instead of a radio waves we tend to prefer with respect to the visible light region they are saying that it uses light as a medium yes if you are using the light of course what happened high speed data transmission will be there statement 1 is right statement 2 it is a wireless technology of course it is a wireless only wireless technology it is several times much faster than the Wi-Fi when you are preferring with visibility region for an operation light travels much faster when compared to other such kind of waves automatically statement 2 will also be getting right so which segment is correct so both the segment is right answer both 1 and 2 simple question let us go with our institute question the same scenario so what is the question here speaks for instance which among the following super computer because the first two question from the UPHC examination we are connected with the communication technology the topic is information communication technology to justify that let me give you our institute question with respect to the super computers which will have a processing power in the order of estimator processing power of human brain ok the question is too specific that you need to answer for a super computer where the super computer need to function it need to perform similar to the human beings brain it means it need to be a kind of an x of flop super computer 10 to the power 18 then only a super computer can able to have a processing power similar to those human beings brain so now in that case among the 5 you need to identify which is an x of flop frontier going to be there in USA it is a kind of an x of flop aurora USA belongs to an x of flop tianhe 3 belongs to the china it also a kind of an x of flop bull sequana joint development of India and France 10 petaflops only friend 2 and we are answered spinnaker this is an area where we will be committing a mistake see if you are reading a current phase for a prolonged period of time at least for about some 2019 current phase often you can able to come across this word spinnaker is a neuromorphic super computer developed by Europe in union which can generate artificial brain signals like the human beings brain and moreover it is eligible to cure brain disorders like the alzheimer's and the parkinson disorders can be cured with the help of this spinnaker anyhow since you are came across this word spinnaker is a neuromorphic super computer since that word will be preoccupying in your mind what you will be committing a mistake means you will be considering spinnaker will be a kind of a human beings brain related computer make it very clear that human beings brain power need to be there in sense it will be an x of flop spinnaker can perform only with 200 teraflops not an answer this is a trap where you will be felling into this trap please be very clear it is a kind of a teraflop so it won't function simply to the human beings brain so now in this case frontier aurora and the tian here 3 will be an answer so answer will be 3, 4 and the 5 answer is deli that is a kind of a simple question but trickier question if you are being aware about this trick then definitely you won't commit a mistake so this is how you know to prepare for the topic called as information communication technology and the robotics so next comes the name called as a nuclear technology in case of a nuclear technology try to segregate the topic in such a way into two areas one is the conventional other is current affairs one is conventional other one is the current affairs in case of a conventional go with the in case of a nct go with the basic terms basic terms because 50-50 possibility is there with this topic so nct based terms start with the basic itself so what is nuclear fusion what is nuclear fusion fissile material fertile material isotopes moderator coolant control rods like that have a familiarity with the basic terminologies and here itself try to know about among the uranium you don't have the different isotopes which is a natural uranium which is an artificial uranium whether uranium is best or thorium is best try to have a comparison all these things need to be done under the conversion topic itself criticality one such a kind of word which we come across with the nuclear science basically criticality in the english sense it gives you the dangerous note it gives the wrong assumption negativity thought will be there when you come across a word called as a criticality but in case of the nuclear technology criticality means the safest operating conditions of the nuclear power plant is called as a criticality so now if you are covering all this kind of a thing it is called as a conversion so in case of a current of s the second part is a current of s in case of a current of s try to cover the current of s part with respect to the recent terms what you came across so with respect to the low mo so academic low mo so world's first floating nuclear power plant which is there in the Russia it's a current of s news further cyclone 30 cyclone 30 there will be keeping a trap cyclone 30 doesn't speaks for any kind of geographical cyclone cyclone 30 is the name of the cyclotron facility which got recently launched in the Kolkata so like that try to focus with the current of s so if you are covering the current of s almost some about a proton therapy proton therapy doomsday clock flurry meter periodic table try to complete it because periodic table recently we are completed the 150th year celebration for the current existing periodic table which was given by the mentality in that case since 150 years had been completed we need to have some attention with this periodic table topic also so once you are done with respect to this current of s topic almost some about some 15 to 18 current of s news is there in the nuclear technology in the recent times if you are covering with this 15 to 18 current of s then nothing will be left out with respect to current of s part so 50% probability there with the conversion and 50% probability there with respect to the current of s if you are covering that nothing will be left out let me give you some examples what kind of a trend they are following in the previous year what we are going to face so with respect to the previous year comparison is being made with respect to the thorium versus the uranium thorium is the most abundant in nature than the uranium yes thorium can be generated more energy when compared to the natural uranium yes thorium produces less harmful this is when compared to the uranium yes all the three is right 1 2 3 where I can able to get this information means ncrt the class 9th and the 10th which I had recommended for you as an old ncrt there you can able to find this information the basic science which is a record for the nuclear technologies there in the ncrt itself go to the ncrt you can able to make all the three statements to be getting right conceptual question is previous so this is a kind of a factorator question so iter somewhere else as a matter of reading the current of s definitely you need to come across a work as an iter iter is a kind of an international project where India is also participating where iter is going to be the kind of a first fusion based reactor in the case if you come across the word fusion then definitely there is an answer so now nothing is speaking with this profession it is a kind of a fusion based reactor it is a kind of a factual question previous question was a conceptual over here it is a kind of a factual question so what you can observe the question number 1 and 2 in sense current of s based question is also there conventional question is also there so if you are learning the ncrt you can able to answer the question number 1 if you are learning the current of s you can able to answer the question number 2 so 50-50 possibility is there with respect to nuclear technology this is a second of scenario we have never seen with respect to IT we have never seen with respect to the different sectional but here we have this possibility so do not miss out this possibility if you are learning such a kind of a ncrt definitely you can able to answer it so this is our institute question the term proton therapy the current of s based news is sometimes seen in the news is related to so proton therapy is a type of non-radiation make it clear definitely it cannot be a non-radiation it should be a radiation therapy since we are speaking with this particular nuclear technology and second of a therapy which is used for curing the cancer of course it is weird radiation therapy can be combined with the existing x-ray therapy chemo therapy and the immunotherapy that can be right so definitely as a matter of reading this word non-radiation statement will be getting wrong smaller doses of protons are used to reduce the damage to the healthy diseases they won't use the smaller doses a weird doses need to be there high exit dose doesn't have an exit dose so if you are sending the proton women sense it stops within your body itself it never comes outside so now in order to say the second statement is right now what kind of a care taking unit to be there you need to have a clear cut idea about the term what is proton therapy in the current of s then alone you are supposed to say that among the four statement which is right which is wrong purely it is a kind of a concept you are understanding nothing is a technicality concepts are understanding if you are understanding the concept definitely you can fulfill the statement b is to be the right statement right so this is how the statement will be there for the nuclear technology the next comes the nano technology of the particle sense the nano technology of the particle sense is once a second of a more scoring topic more scoring topic in your NTSN technology is a more scoring topic because the syllabus is well framed and the topic is also very very small amount of topic alone is there with respect to the nano technology of the particle sense even you can able to predict also so first let me say about the particle sense what you need to focus with the particle sense for particle sense go with respect to the particles and its properties present in the NCRT what is that particle sense nearly about some 10 to 12 particles you can able to find in the NCRT itself those particle whichever is there in the NCRT that is more than enough and what kind of information you need to gather from the particle sense you need to know about the name of the particles other name of the particle for example Higgs boson is called as the God's particle you need to know about the other names gluon so gluon is responsible for the binding properties so like that each and every particle will have other names try to know about the other names and their properties that is the first line of scenario second know with respect to their abundance some will be more abundance some will be the least present some will be present within the air some won't be present in the air so try to know with respect to the abundance nature and third comes with respect to the mass whether the particle is heavier or lighter so this much amount of importance is more than enough with respect to the mass and fourth comes with respect to the word called as charging the most important point which we need to focus for this topic is charge whether it's a positive charge or negative or a neutral so like that you need to focus and you need to complete the topic if you are doing such a way then that's more than enough with respect to the topic related to the particles and the properties you not to search anywhere else it's already there in the NCRT try to utilize this NCRT properly that's the source ok so next next comes the nanotechnology in case of nanotechnology what I can recommend sense go completely with respect to current affairs completely the current affairs classic example you can go with respect to the recent smog tower which got recently established in the Delhi region to combat the pollution it works based upon the nanotechnology carbon nanofibers and here also they can able to frame some basic information try to get the basic clarification what is carbon fibers nanofibers nano tube nano rod nano rattles right so have this information have the distinguishing feature among these kind of terms so beyond that they won't frame you basically further you can able to go with the graphene and its properties so this much amount of basic information is more than sufficient for the nanotechnology because question anyhow is going to be there only from the current affairs ok they won't question with the conversion area question is anyhow going to be there only from the current affairs further in case of nanotechnology for the current affairs you can able to add one more thing gold nano rattles nano pharmaceuticals so these are some current news what the nano generators which were came across with respect to nanotechnology so once you have done it these much amount of because in case of nanotechnology of particle sense if any question is going to arise don't skip that question because sure shot you can able to make those kind of question to be getting right because since there is a kind of an emerging technology and more also kind of a niche technology they won't frame any second of a statement to be getting ambiguity the statement whichever they are going to frame might be getting possibly to be right only so this is one of the advantage what you can have with respect to nanotechnology of particle sense so mostly you can able to find out which statement is right or wrong as a matter of reading first statement or second statement itself you can come to an answer so this is one such kind of a mark scoring topic don't skip it don't miss it try to understand it next have some examples look at the question Higgs boson UPC prior previously question only 2013 question but previously we got this question only in 2013 after that we never received question about the particle sense so it enables us to understand Higgs boson and unable to understand to why the element particle has a mass definitely if you are reading the NCRT you can say that Higgs boson is the kind of a fundamental particle which unveils how the particle is subject to have a mass statement one will be the right statement two it will enable us to in the near future to develop the technology to transfer the matter from one point to another point as a matter of reading the second statement you can't able to come to a conclusion if you are familiar you can able to say it if you are unfamiliar then definitely it will be troubling you ok stop a while second statement I can't arrive to a conclusion let me give a scope for the third statement it will enable us to create a better fuels for nuclear fission fission heavy element heavy element alone can able to support more fission fission instance the particle need to be there right from the quark this information is already there in the NCRT once again I am going with the NCRT only point that thing the particle which is starting from the quark can able to support for the fission about to the quark ok so now in this case any of Higgs boson can't able to since it is a fundamental particle it can't able to support for the fission to have a nuclear fission you need to have an element the particle need to unite together to form an element so now in this case to fulfill the nuclear fission definitely Higgs boson can't able to support it sure start I can say that statement three is wrong statement three is wrong remove three in all the given option B is removed C is removed D is removed only option to be left out is A see easily you can select an option but what will be a panic condition in terms as a matter of learning the three statement you will be getting tediousness you will be getting nervousness ok some amount of tediousness will be there either into attend or not don't get tense please be cool you definitely will be having some scope to eliminate some option go for option illumination illumination illumination technique definitely you can find the answer even though the second statement is not clearly known as a matter of knowing only one statement three is wrong you can able to find out which statement is right next so next the second type of a question which we got in the 2015 first question is a conceptual second question here also it's a kind of a slightly conceptual but practicality observation need not to learn any kind of a thing observation matters a lot over here nanotechnology targeted drug delivery system is possible because nanotechnology is focusing only to the particular materials particular cells definitely statement one will be universal right statement nanotechnology can largely contribute to the gene therapies yes of course so now both the statement will be right the answer is both one and two so the second question what we have seen is a kind of a simple factual question slightly tend to have some concepts so next go with respect to our institute question SAI question regarding the nano pharmaceuticals the current affairs news so now government is going to come and say I can have a committee to frame some guidelines how to use the nano materials for the pharmaceutical sector some committee is going to be there so that's the reason to have this word nano pharmaceuticals to be reported in the newspaper so now with the nano pharmaceutical some four statement have been framed what kind of a mistake you'll be committing at first and sense now among the four statement this is an area where we will be committing a mistake nano pharmaceutical means the pharmaceutical particle size ranges from 1 to 100 nanometer not 9 nanometers nano instance your mind is fixed with the number 9 no here nano pharmaceutical size ranges from 1 to 100 nanometer make this clear because these kind of a factual error you'll be committing it please be very clear with respect to these kind of a factual error don't run with a preoccupied mind setup next nano materials present the drugs is used for only for external purpose whenever you come across these kind of a word only or basically in sense it's a kind of a pillar word speed breaker word you need to stop a word and read the statement one second so only for external purpose if you're using only because nano drugs can be concerned internally it can be applied externally both the purpose you can be able to use it so now can we use the external purpose definitely statement b is wrong now nano pharmaceutical lines gets classified under the schedule h category this is a matter of having the day to day activities itself you can able to find it if you tend to purchase any tablet strip you can able to find back say they'll be mentioning schedule h that they'll be printing that this doc comes in a schedule h which need to be consumed only with the proper advice of the doctor and tablet need to be sold only with the proper prescription letter of the doctor so this is what recommend for the schedule h nano pharmaceutical doesn't comes on schedule h it comes in the y category so as a matter of once again statement a is connecting to the syllabus only application development of science and technology in daily life so statement a is wrong so now answer will be statement d only now in this case definitely as a matter of observing the tablet strip on a daily basis you can say that a is wrong and b is wrong you're suppose if I'm unfamiliar you can able to make a guess either with c or d only and mostly 90% of you will be selecting the statement c because nano material 9 you had remember with the number so it will be making you to commit a mistake please be very clear with this faction mistake also because it's a kind of a trend so only if you are connecting with the current of s then only you can able to connect in answer with d so these kind of a question will have a probabilities but anyhow if you're struggling to make something to be good as a decent score to clear with the prelims instance in that case no other option to be left to you know to attend these kind of a question suppose if you are the safest level safest zone means don't touch this kind of question because doubt will be there either with c or d definitely a and b is wrong doubt will be there either with the c or d in the doubtful condition if you are in the safest level naka please leave it if you are struggling at least one question I need to get right or two question I need to get right naka rather than touching this kind of a question you can able to consider with some other areas there at least you can have some scope because it's a kind of a factual logic factual error if you are strong with the factual naka touch with this you can clear the fact naka don't touch it it will commit a mistake biotechnology and the health issues so we are completed information communication technology robotics in the second part as well as nanotechnology on the particle sense nuclear technology three topic we are completed the fourth topic comes in the name biotechnology as well as the health issues in case of biotechnology as per my words please stick to with respect to the conversion and the current of this for conventional follow with respect to the 11th and the told to biology but told to biology is mandatory even if I skipping the 11th leave it told to the biology is mandatory and that too already I mentioned with respect to the unit which you need to study under the told to biology that unit is more than enough so why I am recommending in sense if you are strong with the conventional then only you can able to understand what they tend to convey you under the current of this to make a statement that comes to the current of this to be right or wrong you need to have some basic understanding about the biotechnology where I can get that basic information means once again depend on the NCRT I am asking you to refer only the source which you tend to have in your hand go with the NCRT you can able to learn about the conversion topic then fit this conversion topic to the current of this this is enough so this is the way how you need to learn the biotechnology in case of biotechnology what are the areas you need to focus in sense when you come for reproduction go with respect to the ART techniques artificial reproductive technology based on the ability to have been inserted into the parliament ART techniques three parent child technique IVF surrogacy next come for the cloning reproductive cloning non-reproductive clonings next come for the genome sequencing try to have some information about genome sequencing project like indigent project of CSIR national genomics grid earth biogenome project 100k asia genome project human genome project read and write first stage was a read now we tend to have stand in the right so these are the areas which we need to cover under the genome sequencing next go for the gene editing when you come for a gene editing two such a kind of a technique which we should not forget to read is that one comes in the name called as a CRISPR-Cas9 which is a response for trimming as well as joining next come for the repair CAS13 as a kind of a pasting work so two such a kind of gene editing technique we need to follow so gene editing CRISPR-Cas9 repair CAS13 gene silencing gene modification that is the GM sterile insect techniques that is the current affairs news population replacement strategy that is also current affairs news hope you might be coming across a word insert some of the old BHA bacteria into the ADCGT mosquito can able to stop the spreading of the dengue other mosquito bond diseases so in that case population replacement strategy old BHA bacterias so these are the things which is highly connected to the topic as a gene so next pay attention with respect to some hybrid crops hybrid crops since you are done with respect to GM crops parallely try to complete with the hybrid crops also so recent news with respect to the ind mussoori crop so either have a glance so these information is more than half with respect to gene sequences further you can able to go with respect to other miscellaneous areas like one more thing is there stem cell therapies stem cell therapies try to know with respect to types of stem cells from where these kind of stem cells is getting extracted and recent news that current affairs news is there the name called as organoids organoids it is a kind of one artificial stem cell growing conditions induced pluripotent stem cell category we have organoids organoids ok next go with respect to the next topic in the name called as health and hygiene ok so far we have spoken about the biotechnology related to conventional and the current affairs first touch with the conventional then only you can able to understand the current affairs topic so once you are done with the biotechnology the next part in this case is the health issues ok in case of health issues plenty of diseases coming in the newspaper where I need to stick which I need to focus that comes a challenging task over here make it clear question will be coming mostly with respect to the human being related diseases zoonotic disease to also report in the newspaper need not to worry much in detail about the zoonotic diseases pain intensive with the human being related diseases ok in case of human being related diseases also with respect to the proved diseases proved diseases where you have the presence of vaccines where you have the presence of vaccines our government have taken any kind of an effective measure to combat such a kind of diseases or time bound elimination will be there like our malaria like our tuberculosis time bound elimination might be there from the government of India in that case you need to select these kind of topics or at least you need to have the mentioning of these kind of diseases in case of the INCRTs if you turn to find that then please don't skip and reading it please pay an attention reading this kind of a topic with the proved kind of diseases this is how we used to say a disease to be kind of a proved diseases and what is not recurrent sense not to pay much more importance about the drug which is being used when you come for time bound elimination like the malaria tuberculosis try to pay an attention with respect to the drug what they are using for tuberculosis if I am saying we are using pain intensive with the drug name unless until apart from that we not to worry about the drug names forget about the drug names ok so this is how you need to select the human being related topic ok in case of diseases what need to be understand in sense first focus with respect to the causative agent second comes with respect to the symptoms third comes with respect to the treatment fourth comes with respect to the programs or schemes which have been launched either by the government of India or with respect to the world health organization pain attention these informations more than enough with respect to the health based topic with respect to the human beings and rarely and rare rest they can able to frame a question about the animal bond diseases in that case animal bond disease will be a factual please make it clear have a reference with respect to previous UPC questions also you can able to find that animal based question is coming in sense it will be based upon the fact because human being related diseases if they are framing a question that will be a common scenario everyone will have an option to write it but if they are framing any kind of a question related to the animal bond disease only a person from the veterinary background can be able to answer it it will be a kind of a technicality question so in that case diseases it will be a factual and factual in sense you need to know about which causative agent is responsible for spreading this kind of disease that is more than enough so monkey fever nipah fever in sense try to know about the thing which is a causative agent so once you have done it go with respect to some current affairs regarding to the programs and schemes can be the current affairs and you can go with respect to antimicrobial resistance antimicrobial resistance that is an umbrella term which we use for for antibacterial antifungal antiviral for everything we recommend a common word which is called as an antimicrobial resistance antimicrobial resistance you can need to cover with respect to Chennai declaration, Ritalin campaigns essential antibiotics so these are the information which you need to cover under the antibiotics category the next go for the personal genomics, gene therapy salvage therapy so these information is more than enough and come for the health writer issues ok let me go with respect to some examples about the cushions which got arise in the recent times so 2019 with reference to the recent developments in the science which one among the following statement is not correct 2019 cushion only so functional chromosomes can be created by joining the segments of DNA taken from the cells of different species pieces of artificial DNA functional DNA can be created by laboratories yes this is right piece of DNA taken from the animals yes replicate outside the living cell laboratory yes DNA replication they are speaking that yes petri decisively you can able to grow it yes so the incorrect statement is A1 where I can able to get this statement already there in the NCRT one thing is you need to learn the NCRT if you learn the NCRT you can able to get that statement A is wrong so which is incorrect it's a kind of a concept based cushion even though it's a concept based cushion if you are strong with the NCRT learning definitely you can able to answer these questions it's not a tough once again it will be a kind of a school based topic only because certain kind of options is there even below the option is there so option B and option D is all the way below to the ten standard level itself we have these statements ok so it's a kind of a conceptual question which we got in 2019 next the same 2019 we got cushion about the health issue which is none other than the hepatitis hepatitis B virus regarding the hepatitis which is not correct so to make it simple you can go with the B statement because hepatitis B unlike hepatitis C does not have a vaccine make it clear for hepatitis B comes under the UIP universal immunization program we are endlessly in the hepatitis B so in this case since you are curing the hepatitis B universal immunization program is recommending for the hepatitis B drug is there then definitely B statement will be there because they say that hepatitis B doesn't have any kind of a vaccine like the hepatitis C for hepatitis B we have the vaccine that's the reason you are including under the UIP program so B is the incorrect statement rest of the other A, C and D will be the right so where I can able to get this information means as a matter of learning the government programs and schemes these word will be there under the UIP so the answer is bombay so go with the same pulse with respect to current of S okay consider following statement with respect to organoids once a second of a current of S so here organoids is a kind of an induced pluripotent stem cells so since the word is pluripotent try to find whether any pluripotent word is there no pluripotent they are saying the totipotent stem cell technique definitely statement 3 is wrong so to find out which statement is right or wrong what you are using instance only one key word you are using that is a kind of a pluripotent you don't have any pluripotent unfortunately you have the word called as a totipotent totipotent means 3 is wrong remove statement 3 C is removed you don't have to find out which is not correct not correct in sense your answer need to have a 3 so not correct statement it can be a 3 or it can be none of the above so here we have a scope for a 3 now go with respect to 2 because 3 is getting wrong we need to find out whether 2 is right or wrong organoids had achieved all functional maturity human organs in the labs maturity takes place only within the human beings not in the labs statement 2 is wrong definitely 2 and 3 is wrong have a cross check with respect to 1 it's a group of cells grown in the labs into 3 dimensional structure of a fully organ yes 1 is right so 1 speaks for about the statement what is organoids see here in this case as a matter of finding that pluripotent stem cell you are finding the totipotent which is getting mismatched you are saying that statement 3 is wrong of course you are coming with the statement your answer need to have a 3 your answer is c only even with the current of years you have this option illumination technique strategy in sense definitely you can able to say even here if you are unaware about this organoid also as a matter of knowing about the maturity of any such kind of stem cell can able to take place only within the human beings body maturity can't take place growth can take place in the lab but maturity need to be there within the human beings body so you can say that second statement is wrong so this is how you know to deal with the topic related to the biotechnology as well as with the health hygiene and finally we are coming with the IPR related topics when you come for IPR related topic what I can say in sense first get the information what are the things that comes under the IPR then you can able to plan accordingly so first thing that comes under the IPR is go with respect to the copyright copyright patent evergreen patent evergreen patent trademark trademark trade secret industrial design biosimilars biologics branded drugs chemical drugs which is the generic drugs branded drugs generic drugs ppv and fr protection of plant varieties and farmers rights these information is more than enough to deal with the question which is related to the IPR under the IPR these are the topics which we are enlisted now plan accordingly so when you come for a copyright try to know about the other name so copyright is otherwise called as a regional rights how many years the eligibility years in India it is given for about 60 years what are the products is eligible to get the copyright try to have a glance whether copyright can be transferred to the other person suppose if a person is obtained a copyright can he able to sell the copyright to the other person or he can able to share a copyright to the other persons what are the recent issues that we have came across with the copyright so these information need to be done for all the sub topics which are enlisted so far for the IPR if we done it then this part will be getting over in this case where you can expert a probability of questions since probability of questions will be there with respect to the GA attacks because GA attacks question will be there in the form of a factual or nowadays what is the natural changing it is slightly previously until the year of 2015 and 16 we got the question only the factual analysis with IPR but slowly after 2016 the nature of question is moving towards with respect to the conceptual this you can able to witness with the last 2 years of question paper conceptual question is coming from the IPR so please be very clear in learning the conceptual based questions ok so now let me show you some examples regarding the question what we have got in the recent times in 2019 according to Indian patterns act biological process to create seeds can be patterned by India why do you have this question in sense with respect to PepsiCo versus the potato farmers that is the reason to have this question so make it clear we do not have any such a kind of a thing biological seed to be getting patterned in India that is not available in India one is wrong so you need to identify which is correct so automatically A is removed D is removed your answer can be settled between B or C in India there is no intellectual property applied boat no we have intellectual property applied boat so without that intellectual property applied boat how you can able to promote it so definitely one is wrong as well as three is wrong three of course three need to be there plant varieties plant varieties are not eligible to be patterned in India yes third settlement is right so you can able to find if you are saying that one is wrong automatically you can say that three is right because one and three is getting contradicted so one is wrong three need to be right so now you can able to definitely you can say that three is the right answer so C is the right answer next so since seed based question is there this year you can export some question based upon PPV and FR or interest seed 3T so next we can go with respect to the our industrial pre-storming question so next we can go with respect to our industrial pre-storming question so consider the following statement with respect to the GA attacks issued in India so GA attack GA attack comes under regional right so GA attack doesn't come under regional right which is considered as a regional right means copyright is considered to be the regional right so first is wrong foreign products can also be tacked okay go with the current of in 2019 iris whiskey had obtained the GA attack in India product got originated from Ireland where they are getting the GA attack and since they are getting the GA attack in India so now statement 2 as a matter of going to the current of this you can find it statement 2 is right statement 3 valid for the 10 years from the data of issue so that even the statement is right even if you are unfamiliar right from the data of issue 10 years is valid for the renewal is possible even if you are unfamiliar with the third statement go with the respect to the option illumination technique which is not correct blind as a matter of learning the current of issue itself you can able to say that statement 2 is right if statement 2 is right in sense you are supposed to ask with the not correct B can't be your answer C can't be your answer D can't be answer because 2 statement is right only option to be left is A see even if you are unfamiliar with the respect to the nature of the statement number 3 still you have an option still you have a choice to select the right answer the answer is A only which is not correct 1 only so the last part of the strategy analysis process is miscellaneous issue when you come for miscellaneous issue so here miscellaneous issue will be anyhow highly connected to the NCRT so try to have a touch with respect to NCRT what I had asked so as a matter of touching with the NCRT you will be having an idea to start with respect to miscellaneous basically miscellaneous issue will be connected to the current of issue only current of issue only and that too will be in such a way of the term the term ABC got sometimes seen in the recently seen in the newspaper like that some terms should be there that's the kind of a miscellaneous area that miscellaneous area we can't be able to fit anywhere else with the so far spoken topic but anyhow it is connected to the science let me give you some example in 2014 we got this question which some of the following can be used in the biometric identification process iris scanning retinal voice recognition all the three can be used for the biometric identification so answer goes for D123 so this we can't be able to fit for anywhere else next with respect to same scenario if you are expecting a question you can go with respect to the kibble balance so recently the terminology for the definition for the kilogram got reverse got change where currently instead of using with respect to any kind of a balancing method currently the kilogram is being defined with respect to the Planck's constant so this kind of a word can be fitted to anywhere else with so far spoken topic it is a kind of a miscellaneous area but anyhow the question is connected to the science only so it is a current phase based topic so kibble balance will be used to measure the mass of an object yes this is the balance we are using values will be expressed in the Planck's constant yes second statement is also right third it will be it will change the measurement in our day to day life from groceries up to the industries anyhow your daily life won't have any kind of change with respect to the change with respect to definition of this kilogram so it won't affect your day to life the previously what how much amount of sugar you obtained for one kilogram remains to be the same you won't have any kind of an extra amount of sugar and up so in that case it won't affect your daily life so now you can able to find the statement number three which is connected to the our syllabus application development of science and technology in everyday life so third statement is connected to the syllabus itself so as a matter of bringing this changes with the kilogram it won't affect your day to day life activities so third statement is wrong so third statement is wrong you need to identify which among the following statement is right so one on two is right so answer is a one on two third statement is wrong so you can remove the b you can remove the c answer is a so this is a way how you need to miscellaneous part one more example let me give you for the miscellaneous part our industry will question itself which among the following is since we are observing with respect to 150th year celebration for the helium go with respect to the properties of the helium you need to identify which is correct helium is the most once again you can't be able to fit this word anywhere else with respect to so forth spoken topic it's a miscellaneous area helium is the most common and lightest ever material found in the universe which is the lightest whether helium or hydrogen hydrogen first is wrong lightest nature of helium makes it remain to be the most abundant material in the earth and the sun's atmosphere in the earth it's an hydrogen in the sun's atmosphere it's hydrogen it gets mostly trapped beneath the surface of the earth in the radioactive rocks of uranium and the thorium yes earth doesn't have that much amount of helium because earth's gravitational force is that much not sufficient to hold the larger volume of helium into it but still we have some trace amount of helium is there that is being stored under the radioactive rocks of uranium and thorium we have meager amount is there fourth statement helium is unstable helium comes under the inert gas group so if it is an inert gas in sense it should be kind of a stable it should not be an unstable how I can able to get an answer solving technique over here in sense once again I recommend you to go for an NCRT only topic is current affairs question is current affairs but answer you can able to find it out as a matter of any NCRT itself so that's more than enough so here the right answer goes for option C that's it so with this the strategy which is required for your forthcoming problems is getting completed for the particular science and technology topic so what I still recommend you in sense for science and technology based topic please focus more with respect to the option elimination technique option elimination so for the spoken examples and all the questions what I had narrowed down you can able to find option elimination will be there so option elimination matters a lot focus more with the option elimination next focus more with respect to current affairs in case of a current affairs focus with respect to the proved concept don't focus with any kind such a kind of a thing that remain to be in hypothesis you will be observing the certain universities certain colleges ABC colleges XYZ universities had developed so on so technology need not to be an attention these kind of news and criticism been proved or if had been publishes a kind of a news in case of the PIB NACA PN attention unless until you not to worry about these kind of a news and all and finally please be confident with respect to science and technology based questions because questions will be simple no technical trap will be there common man trap alone will be there don't get afraid don't get threatened with respect to the number of statement they are framing maximum you can have a three statement only most probably on an average three statement will be there four options will be there that also I had explained four options so in that case so four option statement if it is coming in sense don't get panic don't get threatened definitely the statement will be simple science and technology based questions won't have any kind of a technical trap technical it is not required it is a common man examination only a non-technical analysis is required concepts of understanding is required and that too a non-technical concepts of understanding alone is required so these information is more than enough I hope that you can able to crack the examination in the simplest way all the best for your forthcoming preliminary examination put your maximum effort and try to come out with the success all the best thank you


Hello everyone. Today, my colleague June Nakajima and myself Ravi Sahita will talk to you about the architectural extensions that we are working on to advance confidential computing for public cloud environments. Specifically, we'll talk about Intel TDX or Intel Trust domain extensions. So we'll cover the following items. We'll cover the cloud thread vectors we're trying to address with Intel TDX. We'll look at quickly an evolution of the cloud workload isolation. Then we'll dive into Intel TDX. We'll try to cover the key architectural building blocks, the thread model and coverage. And finally, June Nakajima will cover the software implications of Intel TDX. Let's look at the cloud thread vectors quickly. The first area we're trying to address are for cloud tenants that are worried about exploits that may lead to loss of their data. At the same time, providers are worried about privilege escalation that may lead to loss of control of the infrastructure. The second key tenant we're trying to address is cloud providers where they want to address the fact that they don't want the visibility into the customer workloads. They want to make sure that the data that's in use is always encrypted and addresses the key privacy and security requirements. And then the third is that we're trying to address in terms of the usage models is to be able to support isolation models and confidentiality models that go across applications to virtual machines and eventually also to containers and microservices. Let's look at how the cloud workload isolation has evolved. So today, we already have Intel virtualization technology, which is used by virtual machine monitors to isolate hardware virtual machines today. And Intel TXT or Trusted Execution Technology, which can be used to measure the VMM on launch so that its measurements can be reported. We also have the capabilities of total memory encryption and multi-key total memory encryption that can be used to encrypt either all the physical memory on the system or under the VMM's control selected memory on the system at a page granular level. And that can be enabled either just basically through the BIOS, for the total memory encryption or additionally through the VMM for multi-key total memory encryption. In both of these cases, however, the VMM remains in the Trusted Computing Base or TCV for both the cloud providers and the cloud tenants. Let's look forward at what other options our capabilities Intel has provided for removing the VMM from the TCV. So first, we have Intel Software Guard Extensions or SGX, which removes the OS VMM from the TCV. It requires enabling of the application or some library OS along with the OS and the VMM. Today, we are introducing Trusted Domain Extensions or Intel TDX, which essentially operates at the VMM's root level and can be used to remove the CSP provided software and the VMM from the TCV while isolating the VMM as the container boundary. And we call such an isolated VMM that's isolated through Intel TDX, a Trusted Domain or a TD. The important aspect of Intel TDX is that with the right enabling done for the VMM and the operating systems, the goal is to not require any changes to the applications to be able to protect them in a confidential manner. So let's start diving into the Intel TDX architecture with some key goals or scope. The first is to provide confidentiality access control and integrity protection for VMS that run as TDs or Trusted Domains on an environment for which a VMM has been enabled. We want to maintain the resource management role of the VMM and that also means ensuring that neither VMs or legacy VMs or new TDs cannot launch a privileged escalation attack on the platform. Some attacks though are out of scope since the VMM retains the resource management role on the platform, any VMM induced denial of service is out of scope and also some hardware adversary attacks such as memory replay are out of scope. Let's start diving into the building blocks for Intel TDX. We start with the CPU ISA. The first key capability is a CPU mode of operation called secure arbitration mode which is used to host a Intel TDX module. The Intel TDX module is software that runs using the CPU seam mode of operation and is protected through capabilities that the CPU provides including a specific set of instructions that are used to enable guest host interactions. The TDX module uses this CPU mode to host the security functions that are exposed to the VMM and in order to protect the TDX module this mode restricts the use of certain ISA so the TDX module can use those instructions. It also provides range registers to protect the TDX module from other host software on the platform. The TDX module is loaded into this range register protected region through an Intel authenticated code module also called a seam loader. Further the TDX module is also protected for against physical attacks or using the total memory encryption engine to ensure the confidentiality and more importantly the integrity of the contents of the TDX module while it is executing. So let's look at how the secure arbitration mode interacts with the legacy state machine. So what I'm showing here is sort of the traditional VMX operation where the CPU essentially through VM exit and VM enter transitions between VMX root mode and non-root mode of operation. Where the secure arbitration mode comes in is as shown on the right hand side where software can enter the seam VMX root mode of operation through a seam call and can exit seam VMX root mode of operation and come out into ordinary legacy VMX root through seam red. VMX and VM enters work almost similarly as ordinary VMX and VM enters in the seam mode of operation with some subtle differences that during the CPU being in the seam VMX root mode of operation interrupts like SMIs are kept pending and they may be taken when the CPU is in seam VMX non-root of operation and are even inhibited until the seam returns to the legacy VMX root mode of operation where they are un-pended. This picture on the left hand side shows that interaction that most of the interactions with opt-out SMM legacy SMM operation or opt-in SDM operation remain unmodified with the interaction of seam mode. So with those three key capabilities defined the Intel TDX module the ACMs used to load the the seam loader ACM used to load the TDX module and obviously the CPU hardware. The fourth key capability that sits in the trusted computing base for TDs is the is a coating on clip and as I described in a later file we leveraged the coating and attestation infrastructure that Intel SGX offers to make it simpler for for you know folks using Intel TDX to leverage the seam attestation infrastructure as Intel SGX. As this picture shows all of the other remaining capabilities on the platform including devices all other host software platform firmware BIOS SMM the host OS and the VMM etc are all not trusted by the TDA and outside the TCB for Intel TDX. So let's dive into the next building block which is memory confidentiality. So I'm showing a simple picture here of of an SOC with with memory exposed and the MKTME or the multi-geed total memory encryption engine is is reused as a building block for Intel TDX and that's programmed through an instruction called pconfig to program the the key IDs in the memory controller and the MKTME engine. The for Intel TDX what we do here is that the key ID space that that is used to program the the MKTME engine is effectively partitioned into a TD private and a shared key ID space. This allows the VMM to select what key IDs to use for TDs and what key IDs to retain for legacy VMs and this partition is configured at system BIOS time system initialization time through BIOS and is verified and locked down by Intel and check. The key important mechanism here as I was referring to in the previous slide is some ISA is restricted in some operations for the Intel TDX module through the C mode of the CPU and pconfig is one specific example. The partitioning of the the key ID namespace is enforced to allow the TDX module to be able to use pconfig to program the keys for TDs while the VMM can assign key IDs as shown in this picture but cannot actually access or program those keys through pconfig. A related point also is that the VMM may optionally retain some key IDs for legacy VMs and that's you know that's really an opt-in capability for the for the VMM. Let's look at the next building block which is memory integrity and as shown by various researchers it is not sufficient to just provide confidentiality through encryption for for for the correct operation of the TDs. It is also important to provide some level of tamper resistance against against attacks that untrusted software may perform. So that is enabled through the through memory integrity capability in the MKTV engine and that is as I said to protect against various forms of memory modification tamper relocation splicing and cross TD corruption. Memory integrity is enabled in the MKTV engine through a shatter-based MAC. It is used in a in a truncated fashion with 28 bits of the of the integrity MAC being retained and that is managed through the DDR5 metadata. Further the metadata also contains a TD owner bit which ensures that the untrusted software does not have any access to the to ciphertext even when a memory when memory is under use by a TD and any attempt from untrusted software to read memory that belongs to a TD will essentially return zero data and depending on the the the type of access performed we also poison the cache line. At the same time we also want to protect the the platform from TD so the VMM can ensure through the through the TDX module that any memory used by the TD is correctly initialized first using direct stores and and this protects the VMM. Further any as I said in the previous point any untrusted software or hardware writes to the to the memory corrupts the MAC and therefore protects the TD. So we achieve this sort of dual goal of protecting both the VMM and the and the TD. Next let's look at how the private keys are managed both by the TDX module and the CPU as TD is operating. So if you recall I described in a previous file that the TID space is partitioned between private key IDs and shared TID space. The private TID space are managed by the TDX module and it tracks their allocation to ensure that the VMM does not misuse a key ID that has been assigned to a particular TD. And that TID is loaded by the CPU during VM entry as the virtual CPUs for the TDs are executing on a logical processor. The TD expresses its goals of what data is accessed as private and what data is accessed as shared through a new architecture convention that is expressed through the IEP aging structures managed by the TD through the bit 51 or 47 depending on the physical address available on the system and is expressed through a control bit called the shared bit. And the shared bit if cleared specifies that the TD wishes to access private data through those through those guest physical addresses and for that the view automatically uses the private key ID assigned by the VMM and tracked by the TDX module. If the shared bit is set however the CPU will use the VMM specified MKTME key ID to access any shared data and that example usages of that may be parallelized IO data. Now while this convention is in place it's also important to enforce that the malicious VMM cannot modify the address translation structures or specifically the extended page table second level address translation structures such that the TD may access incorrect data. And the Intel TDX module and the CPU both work in conjunction to mitigate this attack specifically when TD private GPAs are being translated. So TDVMs unlike a Lake CVM have a second EPTP or extended page table pointer called a secure EPTP and that references a secure extended page table that will be used by the CPU when the TD is accessing private memory. So private GPAs always get walked through the secure extended page tables whereas shared GPA is expressed through the shared bit being one the GPA get translated through the shared EPT structure and that both of these walks are same as legacy walks however the security properties are enforced by the TDX module on the secure extended page table. And the CPU further also enforces through appropriate tags in the TLB that any translations combined translations that are cached through the security are tagged as being derived from the secure EPT in the same non-note mode of operation. An important point to note here that whenever the CPU is enforcing address translation for TDs it enforces that code fetches from the TD or any address translation always occurs in TD private memory and if that's not the case then the CPU throws a fart. Now let's look at the next building block of physical memory management or specifically guest physical management and how the TDX module enforces that memory assigned to a TD is is tracked appropriately. So all the physical memory that a VMM may assign to a TD is tracked by the TDX module through a data structure called a PAMT or physical address metadata table and this structure is through which the TDX module enforces that a page can be owned by only a particular TD and that it's in the right state based on the memory management operation being performed by the VMM. This structure is simply a bookkeeping structure and is not blocked by the CPU. Any properties that are book keep through this book kept through this structure are enforced through the security mappings for the TD private memory and thereby we ensure that there is no additional latency for a TD pagewalk while enforcing the security properties. The VMM assigns memory for TD dynamically and that all comes through the VMM managed memory through the scene called APIs that the TDX module in exposes and the TDX module use of this TDX module APIs ensures that the TD ephemeral key gets used to ensure the integrity of the ZPD structures so that they cannot be tampered with while guest private memory has been assigned and mapped through the ZPD structures. Because the PAMT structure maintains information at 1 gigabyte, 2 megabyte and 4 kilobyte levels the TD private memory can be mapped in any of these sizes. Also the TD private memory may be relocated or relocated by the VMM to support various NUMA optimization strategies the VMM may already be used. Last but not the least let's talk about the building block for supporting of attestation. So as is clear for most confidential computing use cases without a relying party being able to attest that a workload is running inside a TD it's kind of pointless to to do any confidential computing. So we leverage the same attestation model and infrastructure that we have for Intel SGX and this flow may be familiar to a lot of you but I'll just summarize it quickly here. The process starts with a challenger requesting a TD to prove its authenticity to prove that it's running as a valid TD with the expected measurements on an authentic Intel TDX platform and the TD can add at its own data as students step through to through a TD call request a local report for for its state. The that local request into the TDX module is translated by the TD module into a CMOPS invocation and the CMOPS leaf used for this purpose it's called CM report and that generates a locally macked report which contains both the measurement of the TDX module as measured as measured during and recorded during load time and the measurement of the TD that is managed by the TDX module. That locally macked report is then passed back to the TD which in step six is shared with the with the VMM since this mack is this report is locally macked it can be verified on the platform by a quoting enclave and converted into a quote signed with the attestation key and that quote is then returned to the TD and then may be returned to the to the challenger which can share it with with a relying party that can validate that the court is coming from a valid Intel TDX platform with an expected Intel TDX module version and the measurement of the TD that it expects. The relying party can then proceed to to provision any secrets etc. onto the onto the TD and allow the workload to proceed. So in that understanding of the base building block for Intel TDX let's start looking through the the thread coverage based on the thread model we presented earlier. For these different scenarios we will walk through the software adversary attacks the hardware adversary attacks and so on and in each of these cases we will note what we consider the the attacking entities to be. For the software adversary attacks we consider the any of the CSP software which includes the VMM any other colluding TDs on the platform the system operators etc to be in the scope of the attackers and the first attack last we look at is the software attempts direct access to the TD private memory whether to read the contents or to access the ciphertext or to inject content into it and that's mitigated through both the culmination of the access control properties of the TD one orbit and also additionally the the FMRL key based memory encryption and integrity. The next attack vectors are secondary sort of attack vectors which is through Rohamer or through using system system address map aliases created by malicious bios and both of those are addressed basically through the memory integrity mechanisms but also for preventing the malicious aliases through an additional alias check enforcement authentication authenticated code modules from Intel. The next class of software attacks fall into the next these two buckets through the address translation attacks through software based EPT remapping and that's addressed through the security architecture is right as well as any malicious interruptor exception injection by the VMM to essentially cause invalid execution inside the TD and that's mitigated by the TDX module by ensuring that it protects the virtual epic page thereby mitigating any violation of TPR levels or virtual NMI blocking etc by the by the VMM and also protecting obviously the TD control structures through that same confidentiality and integrity protected memory further the CPUs also enforces disallowing any external interrupts with vectors that are reserved for exceptions and that's a change over the previous VFX architecture. The next area of threat coverage we will cover hardware adversary attacks and in this case we add to the attacker set the the ability for the VMM to induce devices to perform these attacks and we'll first look at the you know sort of DMA attacks coming with the use of these private key IDs effectively the VMM using a DMA from a device rogue device as a conduit and the mitigation in the platform is to essentially prevent those DMA access that contain the private key IDs in the host physical addresses. The next set of online hardware attacks are the VMM trying to use the devices to either inject data or move the data from from one location to the other across TDs and that's mitigated through the FMM key base memory encryption and integrity model however any replay of memory hardware replay of memory that targets the same physical address for a specific TD is not protected against in the current generation. Finally looking at some of the offline DRAM attack methods those are basically mitigated by the memory encryption using the TDF MRL keys. Let's look at the next class of attack which is attacks on the attestation infrastructure or the TDX module itself for example by rolling back the TDX module to a prior version which may have a vulnerability. That's mitigated essentially by ensuring that the CME loader ECM will prevent such downgrades because of verification of the security version number of the Intel TDX module. Further the relying party that verifies the attestation can also use that mechanism to verify that the correct TDX module isn't used by the platform. In the other attack case where a tamper TDX module is loaded by the VMM it's also addressed partially by the CME loader ECM verifying the integrity of the module at launch time and recording those measurements through the CPU SVN but it's also important to ensure the runtime integrity of that module and that is enforced by the CPU for in terms of software access control using the range register the CME range register and also from hardware attacks as I described in the previous slide through the memory integrity mechanisms. Last but not the least we also have to consider since we are considering system software that's outside the TCP we also have to consider side channel attacks that may be attempted and we look at these different classes the first one is the poisoning of the branch prediction units to extract you know side channel information through the through the cache and that is essentially prevented through the mechanisms we have already talked about such as using IVPB and IVRS or branch prediction barrier methods that are enforced by the TDX module during the CME call CME rate transitions. Further the TDX module also enforces the isolation of the spec control MSR for TDs to ensure the selected properties through that MSR are enforced. The next you know capabilities that can potentially be used as side channels or performance monitoring and debug right both of these capabilities are optionally available to the to the TDs that choose to turn on perfmon and debug and if those capabilities are enabled then the appropriate perfmon information and debug information is isolated by the TDX module for the for the TD. Further the information that the fact that the TD has opted in to debug and perfmon is reported through the through the TD attestation mechanisms so that it can cannot be malicious enabled by untrusted software. The last couple of side channels are EPT fault information that may be extracted as a TD is initializing as well as you know broad cache based side channel attacks like Prime probe and those are not mitigated in the current generation so with that I'll pause here and hand it over to my colleague June Nakajima who will walk through a summary of the architecture building blocks and continue discussing the software touchpoints for the TDX. Thank you for listening. Thank you Ravi. Now we're going to talk about software therefore required to enable TDX. Before jumping to the details I'd like to recap what Ravi shared so far. If you look at the data structures shared in the if you look at data structures here for example the CPU state virtual epic page or CQB extended page table and then various VM control structures they are maintained in private memory which is protected by the CPU and invisible to non-TD system software including the VMM itself and if you look at the TD the memory itself is in the private memory and Ravi uses the access control such as TD owner bit and then also power TD private key to mitigate VMM attacks from modifying observing the tenant's memory whether in a cache or in DDR. Let's take a look at software implications or solve the effort with touchpoint or Intel TDX. First of all the TD. TD starts from a guest firmware we call TDVF just a TD virtual firmware. It needs to accommodate private shared memory and then also need to enumerate the TD capabilities and then we simplify the implementation initialization of the CPU booting. So those changes are required in the guest firmware. Also the TD the guest OS it's a word kernel mostly all are in the kernel areas. It has to be it's a virtual exception that exception handler it will be generated by the hardware and then for various cases for example handle instructions that are not supported in the TD and that would be that would generate the HBEE. Also the OS it's a need to explicitly tell about the shared memory by default all memory is the entire memory is private memory. Okay. Also since the private memory cannot be accessed by the host BMM the TD guest needs to use bounce buffer for data movement. For example that the BMM needs to copy the data or read the data to the shared memory first then the guest what TD needs to copy from shared to the private memory. Okay to that end we need a DMA API changes in the TD. So there are many touch points in the BMM. The BMM needs to use a TDX module interface for API to manage the TD life cycle. For example assigning key IDs, allocating and then use setting control structure and also setting up the secure EPT and then modifying secure EPT entries. And then if you look at the boot loader or the platform boot loader BIOS it needs to enable MKTMAi and then partition the key ID space between MKTMA and then the TDX and need to load M-check and MCM loader. Now take a look at a software deployment auto. Although TD memory is encrypted so it's kind of special we can use TD for existing models without modifying the upper layers like applications. As long as we have TD enlightenment basically enhancement or modification in support of TDX in the OS especially in the again the kernel. For example this is the typical most kind of conventional case basically you have a full operating system and random operating system within a TD or container. Container in the operating system and then if you have guest OS with TD enlightenment then you can run that unmodified container inside a TD or even smaller ones. And in the future we may be able to support unmodified legacy OS and more IO interactions. Now switching gear to the KBM I will briefly mention the key beam touch point. This will give a good you know more specific example what we need to do. So starting from our TD initialization on the host at the BSB we launch seam loader SCM module and then at the boot time configure TDX module on the old CPUs and then the KBM corporate one thing we need to do is TDX and BMX coexistence. That's a bit complex but I think we can achieve that. Also we need a summer modification to the BMX to support interrupt handling and like I said before the TDX requires the BMM to use TDX module API for various operations so we need to add the code to use TDX module API and when we're doing so we want to reuse existing AMD SCB IO control code as much as possible. On the MMU side we need to add shed or the primary memory handling. Also it's good to MMM guest primary memory from the kernel or the user space BMM because if the kernel or user memory user sorry user BMM accidentally modifies the guest memory that can be captured by the integrity detection and that can cause machine check. We have more on the MMU side so we added the secure EPT and like I said secure EPT itself the page table would be in private memory and the BMM cannot modify the BMM the EPT entries directly and for that kind of case the the BMM needs to use the CIM call CIM API to modify the EPT entries and also the BMM needs to set up the EPT page table to generate the hash BE especially to support MMIO and MMIO upon the MMIO the emulated MMO in the guest that would generate hash BE in the guest and then the guest needs to handle the hash of the MMIO from there okay and then the private memory management there are various data structures that need to be allocated in private memory and then and the primary memory must reside in a trusted domain memory region TDMR. We have more details at the KBM forum Friday tomorrow and then we'll be presenting TDAC's enabling port KBM. Now switching gears to the guest Linux guest starting from actually guest BIOS. Guest BIOS is not a part of Linux but we need to add the TD support to the guest forum here or TDVF and the sub the changes required there will be basically subset of changes required for the TD Linux but one important role of the guest BIOS is the measurement and the attestation of the Linux on the guest itself okay I don't cover that measurement and attestation and hear the details but I'll basically talk about the Linux switch to the Linux and the Linux side we simplified the booting and initials in its state is different in a TD so we need a modification to support that thing and then also TD can get a TD execution environment from TDX module so the Linux needs to have some changes to accommodate such modifications more importantly the Linux needs some TD specific modifications we call TDX enlightenment basically the Linux needs to know whether it's running in a TD or not and if it's running a TD it needs to take a different code path for that we encourage to use GHCI and it we propose as a spec cover up talk about more on the next page so GHCI is a guest hypervisor communication interface and it covers the changes for booting because of TDX support and TDX enlightenment the guest and then defines the API or services from the BMM as API we have a working group the GHCI working group it's of the goal here is that ensure the kernel Linux kernel is built into the single Linux TD binary that can boot and operate in a major operating system major BMMs today and common interface in a GHCI and implementation consistent implementation across the BMMs the key to achieve the goal now we are almost there this is probably the final page and I just want to recap what we presented so far today this is a hardware we have also firmware then firmware does mcheck let's get it mcheck and then load boot loader load the same loader as a SCM then eventually BMM comes up and it can run the legacy VMs and legacy VMs is a VM exit VM mentor now for TD we need a TDX module and then uses new instructions same call same rate then to create a TD we need a private memory mapped by TDMR protected by TDMR and we need to create TD related data structures like SEPT or TDCS and also TD memory cell in the private memory okay now we can create more TDs or again those would be the key data structure need to be in a private memory and whenever the BMM needs operation against the TD related data structure it needs to use a same call basically API okay we also talk about the TDX GHCI against hypervisor communication API okay and finally we didn't cover this one but we have ISO leaves for attestation purposes thanks John so in summary we are developing Intel TDX to scale confidential computing capabilities for the cloud while we try to reduce developer friction due to recompile refactoring etc and we really look forward to continue working with this community and appreciate all the feedback that we've already started getting the links at the bottom are the references to the documentation for Intel TDX as well as the source trees for the KVM changes and the next guest changes that we're proposing thanks for listening again and talk to you soon online