Part 1 - Introduction to Security

Topics Covered: Need of Cybersecurity, CIA Triad, Security Architecture, Security Governance, Security Auditing, Regulations & Frameworks, Ethical Hacking, Types of Hackers, Phases of Ethical Hacking, Penetration Testing, Types of Penetration Testing, Footprinting, Objectives of Footprinting, Types of Footprinting, Footprinting Techniques, Types of cryptography, Hash functions, Digital signatures, Public Key Infrastructure (PKI), Attacks on cryptosystems

Learning Objectives:​

• Learn about the essential building blocks and basic concepts around cybersecurity such as Confidentiality, Integrity, Availability, Security Architecture, Security Policies, and so on. In addition to these concepts, students will also explore the core topics such as Security Governance, Audit, Compliance, and Security Architecture.  

• Learn various forms of cryptographic techniques, their pragmatic relevance & weaknesses. Students will learn how cryptography, its components, methods, and its usage are employed in the enterprise to store and transmit messages safely.

 

Part 2- Attacks and Exploits

Topics Covered: Introduction to Computer Networks, Computer Networks - Architecture, Layered architecture, Open Systems Interconnect (OSI) Model, TCP/IP, Network Scanning, Enumeration, Common Network Threats/Attacks, Web server architecture, Web server attacks, Countermeasures and patch management, Web application architecture, Web application attacks, idAM, Vulnerability Analysis & System Hacking, Sniffing & SQL Injection, Attacks and Hijacking

Learning Objectives:

• Learn about various aspects related to computer networks and in-parallel delve into understanding the weaknesses & concepts around securing the networks.

• Explore various known application weaknesses, techniques to attack them, and various controls/solutions to these vulnerabilities.

• Overview of countermeasures that can be employed to protect from different cyber threats.

• Learn about the aspects related to the principle of Identity & Access Management, various intricacies around concepts of authorization, authentication, identity & access management, and its benefits to an enterprise.

• Learn how to analyze a system for various vulnerabilities. 

• Learn the concept of malwares, its propagation techniques, its types, concept of sniffing, types of sniffing attacks, SQL injection & its types, and SQL injection methodologies.