per person /

Free

Home Courses

Domain Track : Cyber Security

Domain Track : Cyber Security

Teacher

Suvendu Kumar Nayak

Category

Domain Courses

Course Attendees

Still no participant

Course Reviews

Still no reviews

Courses Division :

1.Linux Administration(2-2-0)

2. Advanced Hacking Techniques(2-3-0)

3.System and Network Security(2-3-0)

4.IT Data Security(2-2-0)

5.Project(0-0-6)


Domain Track Title : Cyber Security

Track Total Credits: CSCU2040 ( 8-10-6)

Domain Track Objectives:

1.Develop skills to manage a Linux server and provide basic security to the server

2.Master hacking methodology to be used in penetration testing

3. Identify  points of vulnerability in system and  networks

4. To train students in the organizing and the technical realization
and security of data

Domain Track Learning Outcomes:

1.Able to setup Linux server

2.Able to do client and server side configuration of different services

3.Able to provide security to the server

4.Perform different type of attack and find the vulnerabilities

5.Identify some of the factors driving the need for network security

6.Describe the ways in which the security of an information system
can be endangered

7.Suggest the optimal way to organize information system security

8.Choose an appropriate engineering approach to problem solving

Domain Syllabus:

1.Linux  Administration (50 Hrs)

1.1 Access the command line, Recovery of the root user password
1.2 Managing files from the command line
1.3 Creating,Viewing,and Editing Text Files
1.4 Managing Local Linux Users and Groups
1.5 Linux File System Permissions
1.6 Monitoring and Managing Linux Processes
1.7 Archiving and Copying Files Between Systems
1.8 Installing and Updating Software Packages
1.9 Accessing Linux File Systems
1.10 Linux Networking
1.11 Analyzing and Storing Logs
1.12 Configuring and Securing OpenSSH Service
1.13 Using Regular Expressions with grep
1.14 Scheduling Future Linux Tasks
1.15 ACLs
1.16 SELinux Security
1.17 Adding Disks, Partitions, and File Systems to a Linux System
1.18 Managing Logical Volume Management (LVM) Storage
1.19 NFS, SMB
1.20 Boot Process
1.21 Network Port Security and Firewall
1.22 Managing DNS for Servers
1.23 Providing Apache HTTPD Web Service
1.24 Configuring Email Transmission
1.25 Configuring Databases

2. Advanced Hacking Techniques (65 Hrs)

2.1 What is zero day vulnerability and how it works.

2.2 Replay attack, pass the hash

2.3 Hijacking, Clickjacking, Session hijacking, URL hijacking

2.4 Typo squatting, Manipulating Driver, Shimming

2.5 Refactoring, Pivot, Initial exploitation, Persistence

2.6 Techniques of Penetration Testing, vulnerability scanning

2.7 Passively test Security Controls

2.8 Identifying vulnerability, lack of security control, common misconfigurations

2.9 Intrusive vs non intrusive, Credentialed vs non- credentialed, False positive

2.10Security using Firewall, ACL, Application based vs network based

2.11 Stateful vs Stateless, Implicit deny

2.12 Remote access vs site-to-site

2.13 IPSec, Tunnel mode, Transport mode, AH, ESP

2.14 Split tunnel vs full tunnel, TLS, Always-on VPN

2.15 HIDS/HIPS,Antivirus

2.16 File integrity check, Host based firewall

2.17 Application whitelisting, Removable media control

2.18 Advanced malware tools,Patch management tools

2.19 UTM,DLP

2.20 Data execution prevention, web application firewall

2.21 Network Segmentation, Blackholes, Sinkholes, and Honeypots

2.22 System Hardening

2.23 Group Policies and MAC, Endpoint Security, Network Access Control

2.24, Identity Management, Context-based Authentication

2.25 Single Sign On and Federations

2.26 Vulnerability Management:  Identification of requirements, Configure tools to perform scans

2.27 Execute scanning, Generate reports, Analyze reports , Remediation

2.28 Incident recovery planning and process

2.29 Data acquisition, Preservation, Recovery, implementations of business continuity

2.30 Understand the principles of forensics, Backing up a Server

3. System And Network Security (65 Hrs)

3.1 Introduction to systems and networks

3.2 Threats, Defense against online threats

3.3 Threat modeling and risk assessments, malware, exploit kits

3.4 Web application security principles, application design & development security

3.5 Environment and controls, Essence of secure software development

3.6 Foundations of operating system security and privacy functionality

3.7 Windows 10 privacy issues

3.8 OS Hardening

3.9 Defense against tracking

3.10 Zombie super cookies, browser fingerprinting and browser profiling,

3.11 Search engine privacy

3.12 Browser security

3.13 Authentication including passwords

3.14 Multi-factor authentication - soft tokens and hard tokens

3.15 HTTP Header Manipulation, Basics of Exception Management

3.16 Introduction to configuration management & session management

3.17 Unauthorized access to administration interfaces and configuration stores

3.18Retrieval of clear text configuration data, Lack of individual accountability

3.19 Over-privileged process and service accounts

3.20 Basics of Session Management

3.21 Session replay attack

3.22 Bypassing censors, firewalls, and proxies

3.23 mitigating de-anonymization attacks

3.24 Defenses against phishing,  SMShing, vishing, identity theft, scam,

3.25, Defenses against social engineering threats

3.26 Network Protocol Analyzer and it’s advantages

3.27 Network Protocol Analyzer Tools

3.28 Internet Content Filter and it’s advantages

3.29 UTM and NAC, NAC solutions

3.30 DMZ, RADIUS and S/MIME

4. IT Data Security ( 50 Hrs)

4.1 Data security – background, Data security – a need, Data security – its importance

4.2 Factors for implementing a robust data security, Data security processes, Data security        threats

4.3 Network Driven Threats to Data Security, Phishing, Identity Theft.

4.4 More Network based Threat types, Cryptographic Threats, Threats to database security, Banking frauds,

4.5 Threats to web- application, Physical security threats, Hacking and social engineering

4.6 Threats – wireless network, Threats – bluetooth devices,

4.7 Threats in Current technological environment, Data security -benefits.

4.8 Threat techniques - an introduction, Malware threat techniques, Network based threat techniques -botnet,

4.9 Network Based Threat Techniques - PHISHING, Network Based Threat Techniques - SNIFFING,

4.10 Network Based Threat Techniques – PASSWORD ATTACK, Transmission interception.

4.11 Cryptographic Threat Techniques, Database Threat Techniques

4.12 Threat technique - sql injection, More Database Threat Techniques

4.13 Banking Fraud Techniques, Web-application Threat Techniques

4.14 Web application Threat Techniques – More, Cross-site Scripting Forgery - XSS,

4.15 Physical security threat techniques, Wireless network threat techniques

4.16 DoS attack, Bluetooth device threat techniques.

4.17 Introduction to Countermeasures, Importance of data protection, Evolution of mitigation techniques,

4.18 Countermeasures, Malware counter measures, Network threats - counter measures,

4.19 Cryptography threats - counter measures, Database threats – countermeasures

4.20 Banking frauds - countermeasures, Web application - countermeasures

4.21 Physical barrier: - a countermeasure for Physical Threat

4.22 Mantrap and perimeter security, Hardware security

4.24 Security zone, Partitioning, Biometric and power system, Emi shielding, Hot and cold aisles

4.25 Fire suppression, Natural and man made countermeasures, Insider threat countermeasures

4.26 Hacking and social networking - countermeasures,

4.27 Wireless Network Security Countermeasures, Bluetooth Device Countermeasures.

Session Plan for the Entire Domain:

1.Linux  Administration

Session 1 & 2 : Access the command line, Recovery of the root user password

https://www.youtube.com/watch?v=gU4-2NjeWkg

https://www.youtube.com/watch?v=UvgfIL1yPa8

Session 3 & 4:  Managing files from the command line

https://www.youtube.com/watch?v=HbgzrKJvDRw&t=12s

https://www.youtube.com/watch?v=GKEGNdNIQrw

Session 5 & 6:Creating,Viewing,and Editing Text Files

https://www.youtube.com/watch?v=S24LN5h_pac

Session 7 & 8: Managing Local Linux Users and Groups

https://www.youtube.com/watch?v=iXUHWtgzPMY

Session 9 & 10: Linux File System Permissions

https://www.youtube.com/watch?v=D-VqgvBMV7g&t=356s

Session 11 & 12: Monitoring and Managing Linux Processes

https://www.youtube.com/watch?v=fOGVB1FABXU

https://www.youtube.com/watch?v=jPj6QGZTC-c

Session 13 & 14: Archiving and Copying Files Between Systems

https://www.youtube.com/watch?v=tSRlNwaUgPQ

Session 15 & 16: Installing and Updating Software Packages

https://www.youtube.com/watch?v=JueTMXab8xI

https://www.youtube.com/watch?v=JueTMXab8xI

Session 17 & 18: Accessing Linux File Systems

https://www.youtube.com/watch?v=O2O0yd1UOxA

Session 19 & 20: Linux Networking

https://www.youtube.com/watch?v=F_H5InvMyBg

Session 21 & 22: Analyzing and Storing Logs

https://www.youtube.com/watch?v=f-xNGEU-PZM

Session 23 & 24: Configuring and Securing OpenSSH Service

Session 25 & 26: Using Regular Expressions with grep

Session 27 & 28: Scheduling Future Linux Tasks

Session 29 & 30: ACLs

Session 31 & 32: SELinux Security

Session 33 & 34: Adding Disks, Partitions, and File Systems to a Linux System

Session 35 & 36: Managing Logical Volume Management (LVM) Storage

Session 37 & 38: NFS, SMB

Session 39 & 40: Boot Process

Session 41 & 42: Network Port Security and Firewall

Session 43 & 44: Managing DNS for Servers

Session 45 & 46: Providing Apache HTTPD Web Service

Session 47 & 48: Configuring Email Transmission

Session 49 & 50: Configuring Databases

2 Advanced Hacking Technique

Session 1 & 2  What is zero day vulnerability and how it works.

https://www.youtube.com/watch?v=3-zQlUJweE4

https://www.youtube.com/watch?v=BBVkpRNDnzE

Session 3 & 4  Replay attack, pass the hash

https://www.youtube.com/watch?v=gZ0ZF74rUB8 

https://www.youtube.com/watch?v=cBXdoIuLzmA

Session 5 & 6  Hijacking, Clickjacking, Session hijacking, URL hijacking

https://www.youtube.com/watch?v=f2VK7jq-s5A

https://www.youtube.com/watch?v=WWy_zK9z0PQ

https://www.youtube.com/watch?v=vjQ_cwsyPNs

Session 7 & 8  Typo squatting, Manipulating Driver, Shimming

https://www.youtube.com/watch?v=T4_mQE7L290

https://www.youtube.com/watch?v=yQb2A-KoA6Y

Session 9 & 10  Refactoring, Pivot, Initial exploitation, Persistence

https://www.youtube.com/watch?v=bT8aGhCLpEc

https://www.youtube.com/watch?v=ImGaqVHAbCk

Session 11 & 12 Techniques of Penetration Testing, vulnerability scanning

https://www.youtube.com/watch?v=HukLd-6C4Ew

https://www.youtube.com/watch?v=HukLd-6C4Ew

Session 13 & 14  Passively test Security Controls

https://www.youtube.com/watch?v=gKo7aRU59HU

Session 15 & 16  Identifying vulnerability, lack of security control, common misconfigurations

https://www.youtube.com/watch?v=SpSNvSUpc3k

https://www.youtube.com/watch?v=vheGnopQm6s

Session 17 & 18  Intrusive vs non intrusive, Credentialed vs non- credentialed, False positive

https://www.youtube.com/watch?v=nF7ZL4kc5aM

https://www.youtube.com/watch?v=bUNBzMnfHLw

Session 19 & 20  Security using Firewall, ACL, Application based vs network based

https://www.youtube.com/watch?v=_HF99sTLPUI

https://www.youtube.com/watch?v=mDKKqPxMpb0

Session 21 & 22  Stateful vs Stateless, Implicit deny

https://www.youtube.com/watch?v=nFPzI_Qg3FU

https://www.youtube.com/watch?v=gMvXruavqDI

https://www.youtube.com/watch?v=A7QJhVS-pkI&pbjreload=101

Session 23 & 24  Remote access vs site-to-site

https://www.youtube.com/watch?v=34ldGdtlvmk

Session 25 & 26  IPSec, Tunnel mode, Transport mode, AH, ESP

https://www.youtube.com/watch?v=IivniPzXejE

https://www.youtube.com/watch?v=uVmkL8uPZPk

Session 27 & 28 & 29  Split tunnel vs full tunnel, TLS, Always-on VPN

https://www.youtube.com/watch?v=vj_VGganQfs

https://www.youtube.com/watch?v=iK9ihmjZLY8

Session 30 & 31 HIDS/HIPS,Antivirus

https://www.youtube.com/watch?v=hEgWPWIuq_s

https://www.youtube.com/watch?v=YTWO7Q5iWzE

https://www.youtube.com/watch?v=e8U0HVns3pY

Session 32 & 33  File integrity check, Host based firewall

https://www.youtube.com/watch?v=v_5HojP4jic

https://www.youtube.com/watch?v=_sqMXy9BAoI

Session 34 & 35  Application whitelisting, Removable media control

https://www.youtube.com/watch?v=5dMZ9xXCh00

https://www.youtube.com/watch?v=8bpU8S3bVnU

Session 36 & 37  Advanced malware tools, Patch management tools

https://www.youtube.com/watch?v=dk39uVyrS_o

https://www.youtube.com/watch?v=lDCgSbrKKGc

Session 38 & 39  UTM, DLP

https://www.youtube.com/watch?v=IS4Y-eLIFdc

https://www.youtube.com/watch?v=jf-GSmiQZgw

Session 40 & 41  Data execution prevention, web application firewall

https://www.youtube.com/watch?v=0EYUE437Img

https://www.youtube.com/watch?v=82fpELOJ1hs

Session 42 & 43 & 44 Network Segmentation, Blackholes, Sinkholes, and Honeypots

https://www.youtube.com/watch?v=9L4qDmvKPjQ

https://www.youtube.com/watch?v=uWeTUptQeW4

https://www.youtube.com/watch?v=1PTw-uy6LA0

Session 45 & 46 System Hardening

https://www.youtube.com/watch?v=YSwTfealIV4

Session 47 & 48 & 49  Group Policies and MAC, Endpoint Security, Network Access Control

https://www.youtube.com/watch?v=azup50LaIN0

https://www.youtube.com/watch?v=Oh0su6tQSVQ

Session 50 & 51 Identity Management, Context-based Authentication

https://www.youtube.com/watch?v=Tcvsefz5DmA

https://www.youtube.com/watch?v=yAJEB9UNnbI

Session 52 & 53  Single Sign On and Federations

https://www.youtube.com/watch?v=Gs-7mAdEMek

https://www.youtube.com/watch?v=KNHqVquc39M

Session 54 & 55 & 56  Vulnerability Management:  Identification of requirements, Configure tools to perform scans

https://www.youtube.com/watch?v=tvDmo-mvoL0

https://www.youtube.com/watch?v=IoIsTrKrl-0

Session 57 & 58  Execute scanning, Generate reports, Analyze reports , Remediation

https://www.youtube.com/watch?v=koMo_fSQGlk

Session 59 & 60 Incident recovery planning and process

https://www.youtube.com/watch?v=PhROeWMPBqU

https://www.youtube.com/watch?v=03AxkV9bQew

Session 61 & 62 & 63 Data acquisition, Preservation, Recovery, implementations of business continuity

Session 64 & 65  Understand the principles of forensics, Backing up a Server 

https://www.youtube.com/watch?v=NmuhGa4QekU

https://www.youtube.com/watch?v=j1kZ6hDivAM

3. System And Network Security

Session 1 & 2 Introduction to systems and networks

https://youtu.be/ECfGOa_-nWQ

https://youtu.be/g_kNTa9y6Is

Session 3 & 4 Threats, Defense against online threats

https://youtu.be/8Ic5nVatFw8

Session 5 & 6 Threat modeling and risk assessments, malware, exploit kits

https://youtu.be/gwceUHyAyTQ

https://youtu.be/I6JUbT81KmM

https://youtu.be/j1aBqoPine4

Session 7 & 8 & 9 Web application security principles, application design & development security

https://youtu.be/bIsl_Hil4WA

https://youtu.be/snJGzyXzVec

Session 10 & 11 Environment and controls, Essence of secure software development

https://youtu.be/l5_n4yi9dMU

Session 12 & 13 Foundations of operating system security and privacy functionality

https://youtu.be/29p3TEft1t4

Session 14 & 15 Windows 10 privacy issues

https://youtu.be/bx3DsDtBSxU

Session 16 & 17 OS Hardening

https://youtu.be/YSwTfealIV4

Session 18 & 19 Defense against tracking

https://youtu.be/u4fwoyAXJdY

Session 20 & 21 & 22 Zombie super cookies, browser fingerprinting and browser profiling

https://youtu.be/lDbbPs_rg50

https://www.slideserve.com/odysseus-sheppard/browser-fingerprinting-online-tracking-without-cookies

Session 23 & 24 Search engine privacy 

https://epic.org/privacy/search-engine/

https://www.youtube.com/watch?v=kLgJYBRzUXY

Session 25 & 26 Browser security

https://youtu.be/kS1QZWGyCcI

Session 27 & 28 Authentication including passwords

https://youtu.be/IHDOrBymD_w

Session 29 & 30 Multi-factor authentication - soft tokens and hard tokens

https://youtu.be/Julnk-1TfWU

https://scotch.io/tutorials/the-ins-and-outs-of-token-based-authentication

Session 31 & 32 HTTP Header Manipulation, Basics of Exception Management

https://youtu.be/eDui1JX49zc

Session 33 & 34 & 35 Introduction to configuration management & session management

Session 36 & 37 Unauthorized access to administration interfaces and configuration stores

Session 38 & 39 Retrieval of clear text configuration data, Lack of individual accountability

Session 40 & 41 Over-privileged process and service accounts

Session 42 & 43 Basics of Session Management

Session 44 & 45 Session replay attack

Session 46 & 47 Bypassing censors, firewalls, and proxies

Session 48 & 49 mitigating de-anonymization attacks

Session 50 & 51 & 52 Defenses against phishing,  SMShing, vishing, identity theft, scam,

Session 53 & 54 Defenses against social engineering threats

Session 55 & 56 Network Protocol Analyzer and it’s advantages

https://www.totalphase.com/blog/2018/10/prot-analyzer-muocolst-know-advantages/

Session 57 & 58 Network Protocol Analyzer Tools

https://www.slideshare.net/sourav894/network-protocol-analyzer

Session 59 & 60 Internet Content Filter and it’s advantages

Session 61 & 62 & 63 UTM and NAC, NAC solutions

Session 64 & 65 DMZ, RADIUS and S/MIME

4. IT Data Security

Session 1 & 2 Data security – background, Data security – a need, Data security – its importance

https://www.youtube.com/watch?v=3Nxmv9NmMrQ

https://www.youtube.com/watch?v=jD_r9n2L8s8

Session 3 & 4 Factors for implementing a robust data security, Data security processes, Data security threats

https://www.youtube.com/watch?v=UKfjqottAek

Session 5 & 6 Network Driven Threats to Data Security, Phishing, Identity Theft.

https://www.youtube.com/watch?v=Jt9aI9UKVWo

https://www.youtube.com/watch?v=PR0c-gJ20kA

https://www.youtube.com/watch?v=kDFeSUUwRnA

Session 7 & 8 More Network based Threat types, Cryptographic Threats, Threats to database security, Banking frauds

https://www.youtube.com/watch?v=wjcT1A2CGJo

https://www.youtube.com/watch?v=L6Ifdv4voDM

Session 9 & 10 Threats to web- application, Physical security threats, Hacking and social engineering

https://www.youtube.com/watch?v=T9HT1NAgjhI

https://www.youtube.com/watch?v=xm_gznvJIsY

https://www.youtube.com/watch?v=gIt2sRfLVMY

 Session 11 Threats – wireless network, Threats – blue tooth devices

https://www.youtube.com/watch?v=-EWWF6IhQNg&list=PLGN_yckFx1chiinORY75UUzLX4ug95EYm&index=5

https://www.youtube.com/watch?v=JmQk4Yp9bww

Session 12 &13 Threats in Current technological environment, Data security -benefits

Session 14 & 15 Threat techniques - an introduction, Malware threat techniques, Network based threat techniques -botnet

Session 16 & 17 Network Based Threat Techniques - PHISHING, Network Based Threat Techniques - SNIFFING

https://www.youtube.com/watch?v=j6oR5Qoph68

Session 18 & 19 Network Based Threat Techniques – PASSWORD ATTACK, Transmission interception

https://www.youtube.com/watch?v=bedozUALP1w

Session 20 Cryptographic Threat Techniques, Database Threat Techniques

Session 21 & 22 Threat technique - sql injection, More Database Threat Techniques

https://www.youtube.com/watch?v=BtZzOrqbA9k

https://www.youtube.com/watch?v=3Axp3VDnf0I

Session 23 & 24 Banking Fraud Techniques, Web-application Threat Techniques

Session 25 & 26 Webapplication Threat Techniques – More, Cross-site Scripting Forgery - XSS

https://www.youtube.com/watch?v=gg4ICohrRXk

Session 27 & 28 Physical security threat techniques, Wireless network threat techniques

Session 29 & 30 DoS attack, Bluetooth device threat techniques

https://www.youtube.com/watch?v=gg4ICohrRXk

Session 31 & 32 Introduction to Countermeasures, Importance of data protection, Evolution of mitigation techniques

https://www.youtube.com/watch?v=xXLDjL_gLNY

Session 33 Countermeasures, Malware counter measures, Network threats - counter measures

https://www.youtube.com/watch?v=5nf-Q8_QyHs

https://www.youtube.com/watch?v=DLiP7y51OAQ

Session 34 & 35 Cryptography threats - counter measures, Database threats – countermeasures

Session 36 & 37 Banking frauds - countermeasures, Web application - countermeasures

Session 38 & 39 Physical barrier: - a countermeasure for Physical Threat

Session 40 & 41 Mantrap and perimeter security, Hardware security

Session 42 & 43 Security zone, Partitioning, Biometric and power system, Emi shielding, Hot and cold aisles

 Session 44 & 45 Fire suppression, Natural and manmade countermeasures, Insider threat countermeasures

Session 47 & 48 Hacking and social networking - countermeasures,

Session 49 & 50 Wireless Network Security Countermeasures, Bluetooth Device Countermeasures.

List of Projects to be done in domain:

1.Hardening the Operating system

2.Website vulnerabilities and counter measures

3.Secure application development

Our Main Teachers

Suvendu Kumar Nayak

Faculty, Dept. of Computer Science & Engineering, SoET
VIEW PROFILE

  He is currently working as an Assistant Professor in the Department of Computer Science and Engineering under Centurion University of Technology and Management, Odisha. He is pursuing his Ph.D. in the field of Information Security at  Centurion University of Technology & Management and received, MTech (CS) Degree from Berhampur University in the year 2009. […]