Teacher
Category
Still no participant
Still no reviews
1.Develop skills to manage a Linux server and provide basic security to the server
2.Master hacking methodology to be used in penetration testing
3.Good understanding on network infrastructure and identify points of vulnerability in networks
4. Hands on experience on various tools & techniques of vulnerability assessment & penetration testing used in Linux and shall pursue a career in penetration testing domain
| COs | Course outcomes | Mapping COs with POs(High-3, Medium-2, Low-1) |
| CO1 | Able to gain knowledge on the various ways through which hackers’ attempts to compromise an Application, Service, Desktop or a server and its countermeasuresce |
PO1 (3) |
| CO2 | Analyse and perform different type of attack and find the vulnerabilities |
PO2(3) |
| CO3 | Identify some of the problems driving the need for network security |
PO2 (3) |
| CO4 | Able to design client and server side configuration of different services, build networks and subnets, configure network devices for switching and routing etc. |
PO3(3),PO5(1) |
1.CUCS2045 - Linux Server Management and Security (50 HRs)
1.1 Access the command line, Recovery of the root user password
1.2 Managing files from the command line
1.3 Creating,Viewing,and Editing Text Files
1.4 Managing Local Linux Users and Groups
1.5 Linux File System Permissions
1.6 Monitoring and Managing Linux Processes
1.7 Archiving and Copying Files Between Systems
1.8 Installing and Updating Software Packages
1.9 Accessing Linux File Systems
1.10 Linux Networking
1.11 Analyzing and Storing Logs
1.12 Configuring and Securing OpenSSH Service
1.13 Using Regular Expressions with grep
1.14 Scheduling Future Linux Tasks
1.15 ACLs
1.16 SELinux Security
1.17 Adding Disks, Partitions, and File Systems to a Linux System
1.18 Managing Logical Volume Management (LVM) Storage
1.19 Boot Process
1.20 Managing different services using systemctl
1.21 Planning and Configuring Security Updates
1.22 Basics of System Auditing
1.23 Security guidelines during installation
1.24 Configuring firewalld
1.25 Compliance Policy and Vulnerability Scanning With OPENSCAP
2.CUCS2046 -Advanced Hacking Techniques (56 HRs)
2.1 What is zero day vulnerability and how it works.
2.2 Replay attack, pass the hash
2.3 Hijacking, Clickjacking, Session hijacking, URL hijacking
2.4 Typo squatting, Manipulating Driver, Shimming
2.5 Refactoring, Pivot, Initial exploitation, Persistence
2.6 Techniques of Penetration Testing, vulnerability scanning
2.7 Passively test Security Controls
2.8 Identifying vulnerability, lack of security control, common misconfigurations
2.9 Intrusive vs non intrusive, Credentialed vs non- credentialed, False positive
2.10Security using Firewall, ACL, Application based vs network based
2.11 Stateful vs Stateless, Implicit deny
2.12 Remote access vs site-to-site
2.13 IPSec, Tunnel mode, Transport mode, AH, ESP
2.14 Split tunnel vs full tunnel, TLS, Always-on VPN
2.15 HIDS/HIPS,Antivirus
2.16 File integrity check, Host based firewall
2.17 Application whitelisting, Removable media control
2.18 Advanced malware tools,Patch management tools
2.19 Data execution prevention, web application firewall
2.20 Network Segmentation, Blackholes, Sinkholes, and Honeypots
2.21 System Hardening
2.22 Google Dork
2.23 Proxy
2.24, Password Guessing
2.25 Browser Password Hacking
2.26 Application Password Hacking
2.27 OS Password Hacking
2.28 Server Password Hacking
3.CUCS2047 - IT Networking and Network Security (54 Hrs)
3.1 Network Fundamentals
3.2 OSI model
3.3 TCP/IP protocol suite
3.4 IP addressing- IPv4
3.5 IP addressing- IPv6
3.6 Subnetting
3.7 Wireshark
3.8 Packet capturing
3.9 Analysis of packet
3.10 DHCP
3.11 DNS
3.12 IP configuration
3.13 WAN connectivity
3.14 Authentication
3.15 Basic switching
3.16 Static routing
3.17 Dynamic routing
3.18 VLAN
3.19 IPSec
3.20 ACL
3.21 Firewall
3.22 SSL
3.23 VPN
3.24 NAT
3.25, AAA
4.CUCS2048 - Vulnerability Assessment & Penetration Testing (44 HRs)
4.1 To gain knowledge about how VAPT works, as well as network security protocols, devices, and controls.
4.2 Initiate and manage incidents, as well as do penetration testing.
4.3 Comprehend packet sniffing techniques.
4.4 Learn about network penetration testing models and procedures, security analysis
4.5 scanning and its types(network, port and vulnerability scanning)
4.6 Nmap and live scanning on ports and networks
4.7 Netcat usage on TCP/UDP ports
4.8 Wireshark basics and capturing data
4.9 NFS ,SMB ,SMTP enumeration
4.10 Vulnerability scanning overview
4.11 Different types of vulnerability scanning
4.12 Nessus installation and configuration
4.13 Vulnerability scanning with Nessus
4.14 Web application assessment with nikto, burp suite and Vega
4.15 Vulnerability analysis with Metasploit framework
4.16 Application security testing using acunetix
4.17 OWASP mobile vulnearibility
4.18 Tools for Mobile application vulnearibility
4.19 Identify and mitigate security issues using Microsoft TMT
4.20 Automated software testing using VAF tool
4.21 password security auditing and password recovery using John the Ripper
4.22 Penetration testing using BeEF tool
1.Linux Server Management and Security
Session 1 & 2 : Access the command line, Recovery of the root user password
https://www.youtube.com/watch?v=gU4-2NjeWkg
https://www.youtube.com/watch?v=UvgfIL1yPa8
Session 3 & 4: Managing files from the command line
https://www.youtube.com/watch?v=HbgzrKJvDRw&t=12s
https://www.youtube.com/watch?v=GKEGNdNIQrw
Session 5 & 6:Creating,Viewing,and Editing Text Files
https://www.youtube.com/watch?v=S24LN5h_pac
Session 7 & 8: Managing Local Linux Users and Groups
https://www.youtube.com/watch?v=iXUHWtgzPMY
Session 9 & 10: Linux File System Permissions
https://www.youtube.com/watch?v=D-VqgvBMV7g&t=356s
Session 11 & 12: Monitoring and Managing Linux Processes
https://www.youtube.com/watch?v=fOGVB1FABXU
https://www.youtube.com/watch?v=jPj6QGZTC-c
Session 13 & 14: Archiving and Copying Files Between Systems
https://www.youtube.com/watch?v=tSRlNwaUgPQ
Session 15 & 16: Installing and Updating Software Packages
https://www.youtube.com/watch?v=JueTMXab8xI
https://www.youtube.com/watch?v=JueTMXab8xI
Session 17 & 18: Accessing Linux File Systems
https://www.youtube.com/watch?v=O2O0yd1UOxA
Session 19 & 20: Linux Networking
https://www.youtube.com/watch?v=F_H5InvMyBg
Session 21 & 22: Analyzing and Storing Logs
https://www.youtube.com/watch?v=f-xNGEU-PZM
Session 23 & 24: Configuring and Securing OpenSSH Service
https://www.youtube.com/watch?v=ouPexmoqURQ&t=198s
Session 25 & 26: Using Regular Expressions with grep
https://www.youtube.com/watch?v=VGgTmxXp7xQ
Session 27 & 28: Scheduling Future Linux Tasks
https://www.youtube.com/watch?v=8j0SWYNglcw
Session 29 & 30: ACLs
https://www.youtube.com/watch?v=WhCIuGjhH-0&t=41s
Session 31 & 32: SELinux Security
https://www.youtube.com/watch?v=gma-IRr5mnk
Session 33 & 34: Adding Disks, Partitions, and File Systems to a Linux System
https://www.youtube.com/watch?v=vyFY_KP3SZ8
Session 35 & 36: Managing Logical Volume Management (LVM) Storage
https://www.youtube.com/watch?v=IGBblZQ5KCg&t=47s
Session 37 & 38: NFS, SMB
https://www.youtube.com/watch?v=5SoCOnU3J34
Session 39 & 40: Boot Process
https://www.youtube.com/watch?v=E4qGvdryFa4
Session 41 & 42: Network Port Security and Firewall
https://www.youtube.com/watch?v=TyMallqnWiw
Session 43 & 44: Managing DNS for Servers
https://www.youtube.com/watch?v=DuVNclBfykw
Session 45 & 46: Providing Apache HTTPD Web Service
https://www.youtube.com/watch?v=L9Gz08Z5Psg
Session 47 & 48: Configuring Email Transmission
https://www.youtube.com/watch?v=HmG6g0ujhJc
Session 49 & 50: Configuring Databases
https://www.youtube.com/watch?v=CZvf_k99C0Q
2 Advanced Hacking Technique
Session 1 & 2 What is zero day vulnerability and how it works.
https://www.youtube.com/watch?v=3-zQlUJweE4
https://www.youtube.com/watch?v=BBVkpRNDnzE
Session 3 & 4 Replay attack, pass the hash
https://www.youtube.com/watch?v=gZ0ZF74rUB8
https://www.youtube.com/watch?v=cBXdoIuLzmA
Session 5 & 6 Hijacking, Clickjacking, Session hijacking, URL hijacking
https://www.youtube.com/watch?v=f2VK7jq-s5A
https://www.youtube.com/watch?v=WWy_zK9z0PQ
https://www.youtube.com/watch?v=vjQ_cwsyPNs
Session 7 & 8 Typo squatting, Manipulating Driver, Shimming
https://www.youtube.com/watch?v=T4_mQE7L290
https://www.youtube.com/watch?v=yQb2A-KoA6Y
Session 9 & 10 Refactoring, Pivot, Initial exploitation, Persistence
https://www.youtube.com/watch?v=bT8aGhCLpEc
https://www.youtube.com/watch?v=ImGaqVHAbCk
Session 11 & 12 Techniques of Penetration Testing, vulnerability scanning
https://www.youtube.com/watch?v=HukLd-6C4Ew
https://www.youtube.com/watch?v=HukLd-6C4Ew
Session 13 & 14 Passively test Security Controls
https://www.youtube.com/watch?v=gKo7aRU59HU
Session 15 & 16 Identifying vulnerability, lack of security control, common misconfigurations
https://www.youtube.com/watch?v=SpSNvSUpc3k
https://www.youtube.com/watch?v=vheGnopQm6s
Session 17 & 18 Intrusive vs non intrusive, Credentialed vs non- credentialed, False positive
https://www.youtube.com/watch?v=nF7ZL4kc5aM
https://www.youtube.com/watch?v=bUNBzMnfHLw
Session 19 & 20 Security using Firewall, ACL, Application based vs network based
https://www.youtube.com/watch?v=_HF99sTLPUI
https://www.youtube.com/watch?v=mDKKqPxMpb0
Session 21 & 22 Stateful vs Stateless, Implicit deny
https://www.youtube.com/watch?v=nFPzI_Qg3FU
https://www.youtube.com/watch?v=gMvXruavqDI
https://www.youtube.com/watch?v=A7QJhVS-pkI&pbjreload=101
Session 23 & 24 Remote access vs site-to-site
https://www.youtube.com/watch?v=34ldGdtlvmk
Session 25 & 26 IPSec, Tunnel mode, Transport mode, AH, ESP
https://www.youtube.com/watch?v=IivniPzXejE
https://www.youtube.com/watch?v=uVmkL8uPZPk
Session 27 & 28 & 29 Split tunnel vs full tunnel, TLS, Always-on VPN
https://www.youtube.com/watch?v=vj_VGganQfs
https://www.youtube.com/watch?v=iK9ihmjZLY8
Session 30 & 31 HIDS/HIPS,Antivirus
https://www.youtube.com/watch?v=hEgWPWIuq_s
https://www.youtube.com/watch?v=YTWO7Q5iWzE
https://www.youtube.com/watch?v=e8U0HVns3pY
Session 32 & 33 File integrity check, Host based firewall
https://www.youtube.com/watch?v=v_5HojP4jic
https://www.youtube.com/watch?v=_sqMXy9BAoI
Session 34 & 35 Application whitelisting, Removable media control
https://www.youtube.com/watch?v=5dMZ9xXCh00
https://www.youtube.com/watch?v=8bpU8S3bVnU
Session 36 & 37 Advanced malware tools, Patch management tools
https://www.youtube.com/watch?v=dk39uVyrS_o
https://www.youtube.com/watch?v=lDCgSbrKKGc
Session 38 & 39 UTM, DLP
https://www.youtube.com/watch?v=IS4Y-eLIFdc
https://www.youtube.com/watch?v=jf-GSmiQZgw
Session 40 & 41 Data execution prevention, web application firewall
https://www.youtube.com/watch?v=0EYUE437Img
https://www.youtube.com/watch?v=82fpELOJ1hs
Session 42 & 43 & 44 Network Segmentation, Blackholes, Sinkholes, and Honeypots
https://www.youtube.com/watch?v=9L4qDmvKPjQ
https://www.youtube.com/watch?v=uWeTUptQeW4
https://www.youtube.com/watch?v=1PTw-uy6LA0
Session 45 & 46 System Hardening
https://www.youtube.com/watch?v=YSwTfealIV4
Session 47 & 48 & 49 Group Policies and MAC, Endpoint Security, Network Access Control
https://www.youtube.com/watch?v=azup50LaIN0
https://www.youtube.com/watch?v=Oh0su6tQSVQ
Session 50 & 51 Identity Management, Context-based Authentication
https://www.youtube.com/watch?v=Tcvsefz5DmA
https://www.youtube.com/watch?v=yAJEB9UNnbI
Session 52 & 53 Single Sign On and Federations
https://www.youtube.com/watch?v=Gs-7mAdEMek
https://www.youtube.com/watch?v=KNHqVquc39M
Session 54 & 55 & 56 Vulnerability Management: Identification of requirements, Configure tools to perform scans
https://www.youtube.com/watch?v=tvDmo-mvoL0
https://www.youtube.com/watch?v=IoIsTrKrl-0
Session 57 & 58 Execute scanning, Generate reports, Analyze reports , Remediation
https://www.youtube.com/watch?v=koMo_fSQGlk
Session 59 & 60 Incident recovery planning and process
https://www.youtube.com/watch?v=PhROeWMPBqU
https://www.youtube.com/watch?v=03AxkV9bQew
Session 61 & 62 & 63 Data acquisition, Preservation, Recovery, implementations of business continuity
Session 64 & 65 Understand the principles of forensics, Backing up a Server
https://www.youtube.com/watch?v=NmuhGa4QekU
https://www.youtube.com/watch?v=j1kZ6hDivAM
3. IT Networking and Network Security
Session 1 & 2 Introduction to systems and networks
https://www.slideshare.net/AxlNRvl/computer-system-and-network-configurationspptx
Session 3 & 4 Threats, Defense against online threats
https://slideplayer.com/slide/5683722/
Session 5 & 6 Threat modeling and risk assessments, malware, exploit kits
https://owasp.org/www-pdf-archive//Slide_Deck_-_Threat_Modelling.pdf
Session 7 & 8 & 9 Web application security principles, application design & development security
https://www.slideshare.net/rob.ragan/intro-to-web-application-security
Session 10 & 11 Environment and controls, Essence of secure software development
https://slideplayer.com/slide/1574814/
Session 12 & 13 Foundations of operating system security and privacy functionality
Session 14 & 15 Windows 10 privacy issues
Session 16 & 17 OS Hardening
Session 18 & 19 Defense against tracking
Session 20 & 21 & 22 Zombie super cookies, browser fingerprinting and browser profiling
https://www.slideserve.com/odysseus-sheppard/browser-fingerprinting-online-tracking-without-cookies
Session 23 & 24 Search engine privacy
https://epic.org/privacy/search-engine/
https://www.youtube.com/watch?v=kLgJYBRzUXY
Session 25 & 26 Browser security
Session 27 & 28 Authentication including passwords
Session 29 & 30 Multi-factor authentication - soft tokens and hard tokens
https://scotch.io/tutorials/the-ins-and-outs-of-token-based-authentication
Session 31 & 32 HTTP Header Manipulation, Basics of Exception Management
Session 33 & 34 & 35 Introduction to configuration management & session management
Session 36 & 37 Unauthorized access to administration interfaces and configuration stores
Session 38 & 39 Retrieval of clear text configuration data, Lack of individual accountability
Session 40 & 41 Over-privileged process and service accounts
Session 42 & 43 Basics of Session Management
Session 44 & 45 Session replay attack
Session 46 & 47 Bypassing censors, firewalls, and proxies
https://www.slideshare.net/nullowaspmumbai/internet-censorship-circumvention-techniques
Session 48 & 49 mitigating de-anonymization attacks
Session 50 & 51 & 52 Defenses against phishing, SMShing, vishing, identity theft, scam,
Session 53 & 54 Defenses against social engineering threats
https://www.slideshare.net/RamiroCid/social-engineering-attacks
Session 55 & 56 Network Protocol Analyzer and it’s advantages
https://www.totalphase.com/blog/2018/10/prot-analyzer-muocolst-know-advantages/
Session 57 & 58 Network Protocol Analyzer Tools
https://www.slideshare.net/sourav894/network-protocol-analyzer
Session 59 & 60 Internet Content Filter and it’s advantages
Session 61 & 62 & 63 UTM and NAC, NAC solutions
https://www.slideshare.net/LokeshSharma81/utm-unified-threat-management-55531150
Session 64 & 65 DMZ, RADIUS and S/MIME
4. Vulnerability Assessment & Penetration Testing
Session 1 & 2 Data security – background, Data security – a need, Data security – its importance
https://www.youtube.com/watch?v=3Nxmv9NmMrQ
https://www.youtube.com/watch?v=jD_r9n2L8s8
Session 3 & 4 Factors for implementing a robust data security, Data security processes, Data security threats
https://www.youtube.com/watch?v=UKfjqottAek
Session 5 & 6 Network Driven Threats to Data Security, Phishing, Identity Theft.
https://www.youtube.com/watch?v=Jt9aI9UKVWo
https://www.youtube.com/watch?v=PR0c-gJ20kA
https://www.youtube.com/watch?v=kDFeSUUwRnA
Session 7 & 8 More Network based Threat types, Cryptographic Threats, Threats to database security, Banking frauds
https://www.youtube.com/watch?v=wjcT1A2CGJo
https://www.youtube.com/watch?v=L6Ifdv4voDM
Session 9 & 10 Threats to web- application, Physical security threats, Hacking and social engineering
https://www.youtube.com/watch?v=T9HT1NAgjhI
https://www.youtube.com/watch?v=xm_gznvJIsY
https://www.youtube.com/watch?v=gIt2sRfLVMY
Session 11 Threats – wireless network, Threats – blue tooth devices
https://www.youtube.com/watch?v=-EWWF6IhQNg&list=PLGN_yckFx1chiinORY75UUzLX4ug95EYm&index=5
https://www.youtube.com/watch?v=JmQk4Yp9bww
Session 12 &13 Threats in Current technological environment, Data security -benefits
https://swiftsystems.com/guides-tips/benefits-of-data-protection/
Session 14 & 15 Threat techniques - an introduction, Malware threat techniques, Network based threat techniques -botnet
Session 16 & 17 Network Based Threat Techniques - PHISHING, Network Based Threat Techniques - SNIFFING
https://www.youtube.com/watch?v=j6oR5Qoph68
Session 18 & 19 Network Based Threat Techniques – PASSWORD ATTACK, Transmission interception
https://www.youtube.com/watch?v=bedozUALP1w
Session 20 Cryptographic Threat Techniques, Database Threat Techniques
Session 21 & 22 Threat technique - sql injection, More Database Threat Techniques
https://www.youtube.com/watch?v=BtZzOrqbA9k
https://www.youtube.com/watch?v=3Axp3VDnf0I
Session 23 & 24 Banking Fraud Techniques, Web-application Threat Techniques
Session 25 & 26 Webapplication Threat Techniques – More, Cross-site Scripting Forgery - XSS
https://www.youtube.com/watch?v=gg4ICohrRXk
Session 27 & 28 Physical security threat techniques, Wireless network threat techniques
Session 29 & 30 DoS attack, Bluetooth device threat techniques
https://www.youtube.com/watch?v=gg4ICohrRXk
Session 31 & 32 Introduction to Countermeasures, Importance of data protection, Evolution of mitigation techniques
https://www.youtube.com/watch?v=xXLDjL_gLNY
Session 33 Countermeasures, Malware counter measures, Network threats - counter measures
https://www.youtube.com/watch?v=5nf-Q8_QyHs
https://www.youtube.com/watch?v=DLiP7y51OAQ
Session 34 & 35 Cryptography threats - counter measures, Database threats – countermeasures
https://sites.google.com/a/pccare.vn/it/security-pages/cryptographic-attacks-and-countermeasures
https://www.datasunrise.com/blog/potential-db-threats/database-security-threats-and-countermeasures/
Session 36 & 37 Banking frauds - countermeasures, Web application - countermeasures
Session 38 & 39 Physical barrier: - a countermeasure for Physical Threat
Session 40 & 41 Mantrap and perimeter security, Hardware security
Session 42 & 43 Security zone, Partitioning, Biometric and power system, Emi shielding, Hot and cold aisles
Session 44 & 45 Fire suppression, Natural and manmade countermeasures, Insider threat countermeasures
Session 47 & 48 Hacking and social networking - countermeasures,
Session 49 & 50 Wireless Network Security Countermeasures, Bluetooth Device Countermeasures.
1.Hardening the Operating system
2.Website vulnerabilities and counter measures
3.Secure application development
He is currently working as an Assistant Professor in the Department of Computer Science and Engineering under Centurion University of Technology and Management, Odisha. He is pursuing his Ph.D. in the field of Information Security at Centurion University of Technology & Management and received, MTech (CS) Degree from Berhampur University in the year 2009. […]
