Pre-Requisites

1. Basic knowledge of Computers
2. Basic knowledge of networking and Internet
3. Hands on Windows operating system

Objectives

The course has been designed to give students an extensive overview of cyber security issues, tools and techniques that are critical in solving problems in cyber security domains.The course aims at providing students with concepts of computer security, cryptography, digital money, secure protocols, detection and other security techniques. The course will help students to gauge understanding in essential techniques in protecting Information Systems, IT infrastructure, analysing and monitoring potential tHoureats and attacks, devising security architecture and implementing security solutions. The students will also have a wider perspective to information security from national security perspective from both technology and legal perspective.

Learning Outcomes

After completion of this course, the students should be able to:

1. Understand, appreciate, employ, design and implement appropriate security technologies and policies to protect computers and digital information.
2. Identify & Evaluate Information Security tHoureats and vulnerabilities in Information Systems and apply security measures to real time scenarios
3. Identify common trade-offs and compromises that are made in the design and development process of Information Systems
4. Demonstrate the use of standards and cyber laws to enhance information security in the development process and infrastructure protection

S.No. TOPIC DESCRIPTION DURATION Cyber Security Concepts Essential Terminologies: CIA, Risks, Breaches, THoureats, Attacks, Exploits. Information Gathering (Social Engineering, Foot Printing & Scanning). Open Source/ Free/ Trial Tools: nmap, zenmap, Port Scanners, Network scanners. (4 Hour) Cryptography and Cryptanalysis Introduction to Cryptography, Symmetric key Cryptography, Asymmetric key Cryptography, Message Authentication, Digital Signatures, Applications of Cryptography. Overview of Firewalls- Types of Firewalls, User Management, VPN Security, Security Protocols: – security at the Application Layer- PGP and S/MIME, Security at Transport Layer- SSL and TLS, Security at Network Layer-IPSec. Open Source/ Free/ Trial Tools: Implementation of Cryptographic techniques, OpenSSL, Hash Values Calculations MD5, SHA1, SHA256, SHA 512, Steganography (Stools) (8 Hour) Infrastructure and Network Security Introduction to System Security, Server Security, OS Security, Physical Security, Introduction to Networks, Network packet Sniffing, Network Design Simulation. DOS/ DDOS attacks. Asset Management and Audits, Vulnerabilities and Attacks. Intrusion detection and Prevention Techniques, Host based Intrusion prevention Systems, Security Information Management, Network Session Analysis, System Integrity Validation. Open Source/ Free/ Trial Tools: DOS Attacks, DDOS attacks, Wireshark, Cain & abel, iptables/ Windows Firewall, snort, suricata, fail2ban (8 Hour) Cyber Security Vulnerabilities& Safe Guards Internet Security, Cloud Computing & Security, Social Network sites security, Cyber Security Vulnerabilities-Overview, vulnerabilities in software, System administration, Complex Network Architectures, Open Access to Organizational Data, Weak Authentication, Authorization, Unprotected Broadband communications, Poor Cyber Security Awareness. Cyber Security Safeguards- Overview, Access control, IT Audit, Authentication. Open Web Application Security Project (OWASP), Web Site Audit and Vulnerabilities assessment. Open Source/ Free/ Trial Tools: WinAudit, Zap proxy (OWASP), burp suite, DVWA kit. (10 Hour)

List of Suggested Books

1. William Stallings, “Cryptography and Network Security”, Pearson Education/PHI, 2006.
2. V.K. Jain, “Cryptography and Network Security”, Khanna Publishing House.
3. Gupta Sarika, “Information and Cyber Security”, Khanna Publishing House, Delhi.
4. Atul Kahate, “Cryptography and Network Security”, McGraw Hill.
5. V.K. Pachghare, “Cryptography and Information Security”, PHI Learning
6. Nina Godbole, “Information System Security”, Wiley
7. Bothra Harsh, “Hacking”, Khanna Publishing House, Delhi.