Cybersecurity
Syllabus
Module 1: Introduction to Cybersecurity
● Basics of Cybersecurity & Threat Landscape
● CIA Triad (Confidentiality, Integrity, Availability)
● Security Terminologies: Vulnerabilities, Threats, Risks, Exploits
● Cybersecurity Domains (Network, Web Application, Cloud)
Module 2: Networking & Operating Systems
● OSI & TCP/IP Models
● Common Protocols (HTTP, DNS, SMTP, FTP, SSH)
● Network Devices & Firewalls
● Linux & Windows Security Basics
● File Permissions, User Management, and Hardening
Module 3: Security Tools & Fundamentals
● Network Scanning with Nmap
● Vulnerability Scanning (Nessus, Nikto)
● Traffic Analysis with Wireshark
● Exploitation Frameworks (Metasploit, Hydra)
● Git/GitHub for Security Projects
Module 4: Web & API Security
● OWASP Top 10 Web Application Threats
● Web Attacks: XSS, SQL Injection, CSRF, IDOR
● Authentication & Session Management Vulnerabilities
● API Security: REST & GraphQL Vulnerabilities
● Hands-on with Burp Suite & OWASP ZAP
Module 5: Penetration Testing & Vulnerability Assessment
● Penetration Testing Methodology
● Reconnaissance & Information Gathering
● Exploit Development (Basics)
● Privilege Escalation Techniques
● Reporting & Documentation of Findings
● Risk Assessment & Mitigation
Module 6: Cryptography & Security Fundamentals
● Encryption, Hashing, Digital Signatures
● PKI & Certificates (SSL/TLS)
● Password Security & Cracking Techniques
● Cryptographic Attacks & Defenses
Module 7: Cloud & Emerging Security
● Basics of Cloud Security (AWS, Azure)
● Cloud Threats & Shared Responsibility Model
● Container & API Security Considerations
● AI & Cybersecurity (overview of ML in security)
Module 8: Case Studies & Practical Labs
● Real-world Breach Case Studies
● Capture The Flag (CTF) Challenges
● Exploit Labs: Web + API + Network Testing
● Final Project: Vulnerability Assessment & Exploit Report