Syllabus

Fundamentals of Cyber Security and Risk Assessment: Introduction to cyber security, information security principles, CIA triad, authentication, authorization and accountability, security goals and design principles, cyber threats, vulnerabilities, attacks and exploits, attack lifecycle, cyber kill chain, security models, threat modeling, risk assessment methodologies, quantitative and qualitative risk analysis, security metrics, CVSS scoring, Annual Loss Expectancy (ALE), Return on Security Investment (ROSI), security policies and standards.

Cryptography and Secure Communication: Classical and modern cryptography, symmetric and asymmetric encryption, block and stream ciphers, DES, AES, RSA, Diffie–Hellman key exchange, Elliptic Curve Cryptography (ECC), hash functions, message authentication codes, digital signatures, Public Key Infrastructure (PKI), certificates, SSL/TLS, secure communication protocols and authentication mechanisms.

Network Security and Secure Communication Protocols: Network security principles, TCP/IP vulnerabilities, firewalls, intrusion detection and prevention systems, virtual private networks, network access control, wireless security, secure routing, email security, DNS security, zero trust networking, software-defined network security, secure communication protocols and network monitoring.

System Security, Authentication and Access Control: Operating system security, Linux and Windows security mechanisms, user authentication, password security, multi-factor authentication, access control models (DAC, MAC, RBAC and ABAC), privilege management, virtualization security, container security, secure boot, patch management and endpoint protection.

Secure Software Development and Web: Secure Software Development Life Cycle (SSDLC), secure coding practices, threat modeling, input validation, session management, authentication protocols, OWASP Top 10, SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), buffer overflow, API security, DevSecOps, secure software testing and vulnerability assessment.

Malware Analysis, Incident Response and Digital Forensics: Classification of malware, viruses, worms, Trojans, spyware, ransomware, botnets and rootkits, malware propagation models, cyber threat intelligence, incident response lifecycle, Security Operations Centre (SOC), SIEM, digital forensics, evidence acquisition, chain of custody, log analysis and cyber incident investigation.

Cloud, IoT and Emerging Cyber Security Technologies: Cloud security architecture, shared responsibility model, identity and access management (IAM), virtualization and container security, Kubernetes security, IoT security challenges, edge computing security, mobile security, blockchain security, artificial intelligence in cyber security, adversarial machine learning, zero trust architecture and cyber security for Industry 4.0.

Cyber Laws, Governance, Ethics and Compliance: Cyber ethics, privacy principles, cyber laws, Information Technology Act 2000, Digital Personal Data Protection Act, cyber crime investigation, information security governance, ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, CERT-In guidelines, business continuity planning, disaster recovery planning and security auditing.

Design secure digital systems that support resilient and sustainable critical infrastructure.

Protect privacy, data confidentiality, and digital rights through ethical cybersecurity practices.

Develop secure software and cloud-based solutions that foster innovation and economic growth.

Apply cybersecurity principles to smart cities, healthcare, transportation, and e-governance systems.

Engage in continuous professional learning to address evolving cybersecurity threats and technologies.

Explain cyber security principles, security models, cyber threats, vulnerabilities, attacks, and risk management concepts. Bloom's Level: Understand.

Apply cryptographic algorithms, authentication techniques, access control mechanisms, and security protocols to protect digital information.

Analyze security vulnerabilities in operating systems, computer networks, cloud platforms, IoT devices, and web applications using engineering principles and quantitative security metrics.

Design secure software systems and network architectures using secure coding practices, threat modeling, Zero Trust principles, and security-by-design methodologies.

Perform vulnerability assessment, penetration testing, security auditing, and incident response using modern cyber security tools and interpret the obtained results.

Evaluate cyber security governance, digital forensics, cyber laws, ethical responsibilities, privacy regulations, and emerging security challenges in real-world scenarios.

William Stallings, Cryptography and Network Security: Principles and Practice, Pearson , 9th Edition, 2024.

William Stallings, Network Security Essentials, Pearson , 7th Edition, 2023.

Nina Godbole and Sunit Belapure, Cyber Security: Understanding Cyber Crimes, Computer Forensics and Legal Perspectives, Wiley India.

Jon Erickson, Hacking: The Art of Exploitation, No Starch Press , 2nd Edition.

Mark Stamp, Information Security: Principles and Practice, Wiley , 3rd Edition.