Domain Track Title :COMPUTER NETWORK
Track Total Credits ( T-P-P) :(9-7-6)
Courses Division( list all divisions):
Basket – V: Computer Network (CN) | Total Credit:22 | |||
Area | Code | Course | Credit | Structure |
CUDM2508 | Computer Networks | 4 | 2+2+0 | |
CUCS2046 | Advanced Hacking Techniques | 4 | 2+2+0 | |
Network Security and Threat Intelligence | 4 | 2+1+1 | ||
Network Engineering with Junos ,Cisco , and 5G Readiness |
4 |
2+1+1 |
||
Traffic Engineering in Computer Networks | 3 | 1+2+1 | ||
CUCN1126 | Capstone Project | 3 | 0+0+3 |
Domain Track Objectives:
-
Foundation in Computer Networks – Covering protocols, architectures (OSI/TCP-IP), IP addressing, routing, switching, transport, and application layer protocols.
-
Advanced Network Security & Threat Intelligence – Focusing on cyber threats, cryptography, VPNs, IDS/IPS, Zero Trust models, and cloud security practices.
-
Hands-on with Network Engineering Tools – Cisco (IOS), Junos OS (CLI), GNS3, Packet Tracer, Wireshark, and SIEM platforms.
-
Mastery of Ethical Hacking Techniques – Including penetration testing, exploitation, and defense mechanisms.
-
Traffic Engineering and Optimization – Applying QoS, MPLS, SDN-based routing strategies, and real-time network performance analysis.
-
Capstone Project for Industry Readiness – Integrating multi-disciplinary skills into solving complex, real-world networking problems.
Domain Track Learning Outcomes:
-
Understand and Design Computer Networks
-
Analyze and Secure Networks against Cyber Threats
-
Configure, Manage, and Troubleshoot Network Devices
-
Apply Cryptography and Security Policies in Networks
-
Optimize Network Performance using Traffic Engineering
-
Implement Modern Network Architectures (SASE, XDR)
-
Execute and Present Comprehensive Network Projects
-
Use Industry Tools for Network Monitoring and Incident Response
Domain Syllabus:
COURSE-01
COMPUTER NETWORKS (60 Hours)
Course Code | Course Title | Credits | Type (T+P+Pj) |
CUDM-2508 | COMPUTER NETWORKS | 4 | 2+2+0 |
Course Description:
To provide a solid understanding of how computer networks operate and how they can be secured. This course builds foundational knowledge required for understanding threats, vulnerabilities, and network defense mechanisms in cyber security. The curriculum includes 30 hours of theory and 30 practical experiments to reinforce the theoretical concepts.
Course Objectives:
- The course on Computer Networks aims to provide students with a comprehensive understanding of the fundamental principles, architectures, and protocols that enable communication over digital networks.
- The objective is to introduce learners to the layered structure of network models, particularly the OSI and TCP/IP models, and to explore the functionalities of each layer, including physical transmission, data link control, network routing, transport services, and application
- The course also focuses on key concepts such as IP addressing, error detection and correction, switching techniques, congestion control, and network security.
- By the end of the course, students will be equipped with the theoretical foundation and practical skills necessary to design, implement, analyze, and troubleshoot modern computer networks, preparing them for advanced studies and careers in networking and communication technologies.
Course Outcomes (COs):
- CO1: Explain the basic concepts of computer networks, network models (OSI and TCP/IP), and the roles of different layers in data communication. (Understand)
- CO2: Analyze data transmission methods, including switching techniques, transmission media, and error detection and correction mechanisms. (Analyze)
- CO3: Illustrate the functionalities of network layer protocols such as IP addressing, routing algorithms, and sub netting techniques. (Apply)
- CO4: Compare various transport layer protocols like TCP and UDP and describe flow control and congestion control mechanisms. (Analyze)
- CO5: Demonstrate knowledge of application layer protocols such as HTTP, DNS, SMTP, and FTP and their role in network services. (Apply)
- CO6: Evaluate network security concepts including cryptographic algorithms, authentication, and firewall configurations. (Evaluate)
Course Syllabus:
Module 1: Introduction to Computer Networks (5 Hours) Theory :
- Overview of Computer Network, Types of Networks, Network Topologies, Network Devices,
- ISO/OSI Model, TCP/IP Model, Basics of Data
Practical:
Experiment 1.1: Study of Network Devices and Topologies
Experiment 1.2: Simulation of OSI and TCP/IP Layers Using Packet Tracer Experiment 1.3: Demonstration of Data Transmission Using Encoding Techniques
Module 2: Physical & Data Link Layer ( 5 Hours) Theory:
- MAC and Logical Link Control, Ethernet and IEEE 802 standards,
- ARP and RARP, Error Detection & Correction: CRC, Checksum,
- Framing Techniques and flow
Practical:
Experiment 2.1: Simulation of ARP and RARP Protocols
Experiment 2.2: Implement Error Detection Using CRC and Checksum
Experiment 2.3: Study and Simulate Framing Techniques and Flow Control
Module 3: Network Layer & IP Addressing (10 Hours) Theory:
- IP Addressing (IPv4 and IPv6), Subnetting, Supernetting, & CIDR, IP Routing (static vs Dynamic)
- Routing Algorithms, Routing Protocols, NAT, PAT, ICMP (Ping & Traceroute)
Practical:
Experiment 3.1: Subnetting and IP Address Planning (IPV4 & IPV6) Experiment 3.2: Configure Static and Dynamic IP Routing
Experiment 3.3: NAT, PAT, and ICMP Testing (Ping & Traceroute)
Module 4: Transport Layer (7 Hours) Theory:
- TCP and UDP, Port numbers, Flow control
- Congestion control, Packet sniffing & TCP Session Hijacking (Wireshark).
Practical:
Experiment 4.1: Study and Comparison of TCP and UDP Protocols using Socket Programming Experiment 4.2: Demonstration of Flow Control and Congestion Control using Simulation Tool (NS2/NS3 or Cisco Packet Tracer)
Experiment 4.3: Packet Sniffing and TCP Session Analysis using Wireshark
Module 5: Application Layer ( 10 Hours)
Theory:
- DNS, DHCP, HTTP/HTTPS, FTP, SMTP, POP3,
- DNS Poisoning, HTTP Vulnerabilities, Email Protocols and Spoofing
Practical:
Experiment 5.1: Analyzing Network Protocols using Wireshark
Experiment 5.2: Demonstration of DNS Poisoning Attack (In a Simulated Environment)
Experiment 5.3: Email Spoofing Demonstration
Module 6: Network Security Basics (10 Hours) Theory:
- Sniffing, Spoofing, MITM, DOS/DDOS, IDS/IPS,
- VPN and Secure Tunneling, Wireless Network
Practical:
Experiment 6.1: Packet Sniffing and Spoofing using Wireshark and Scapy Experiment 6.2: MITM Attack and Detection with Ettercap and IDS Experiment 6.3: Setup and Configuration of a VPN with Secure Tunneling
Module 7: Introduction to Cryptography (10 hours) Theory:
- History of Cryptography, CIA, Types of cryptography, Encryption Techniques,
- Symmetric key Cryptography, Asymmetric Key Cryptography, Hashing
- PRACTICAL
- Experiment 7.1: Implement Caesar Cipher and Vigenère Cipher (Classical Encryption Techniques)
Experiment 7.2: Implement Symmetric Key Encryption using AES Algorithm
Experiment 7.3: Implement a Hashing Algorithm using SHA-256
Recommended Books:
- Computer Networking: A Top-Down Approach by Kurose & Ross
- Data Communications and Networking by Behrouz Forouzan
- Cisco Networking Academy materials (NetAcad)
- Cryptography and Network Security by William Stallings
- Applied Cryptography by Bruce Schneier
Online Resources:
- Online Labs: TryHackMe – Network Fundamentals Path, [HackTheBox Academy]
- Online Labs: CrypTool, OverTheWire: Cryptography challenges
CO-PO-PSO Mapping:
CO/PO/PSO | PO 1 | PO 2 | PO 3 | PO 4 | PO 5 | PO 6 | PO 7 | PO 8 | PO 9 | PO1 0 | PO1 1 | PO1 2 | PSO 1 | PSO 2 | PSO 3 |
CO1 | 3 | 3 | 3 | 2 | 3 | – | – | – | 2 | 2 | 2 | 2 | 3 | 3 | 3 |
CO2 | 3 | 2 | 3 | 3 | 3 | – | – | – | 2 | 2 | 2 | 2 | 3 | 3 | 3 |
CO3 | 3 | 2 | 3 | 3 | 3 | – | – | – | 2 | 2 | 2 | 2 | 3 | 3 | 3 |
CO4 | 3 | 2 | 3 | 3 | 3 | – | – | – | 3 | 3 | 2 | 2 | 3 | 3 | 3 |
CO5 | 3 | 2 | 3 | 3 | 3 | – | – | – | 3 | 3 | 3 | 3 | 3 | 3 | 3 |
COURSE -02
Advanced Hacking Techniques (56 Hours)
Course Code | Course Title | Credits | Type (T+P+Pj) |
CUCS2046 | Advanced Hacking Techniques | 4 | 2+2+0 |
Course Description:
The “Advanced Hacking Techniques” course is designed to provide students with an in-depth understanding of the methodologies and tools used by ethical hackers to identify and exploit vulnerabilities in modern computing systems. The course covers advanced topics in penetration testing, including network, web, and application-level attacks, as well as exploitation techniques used against operating systems and mobile platforms. Students will learn about the latest hacking tools, frameworks, and strategies employed by cybercriminals, along with the corresponding defensive measures.
Course Objective:
- Gain expertise in sophisticated penetration testing techniques, identifying and exploiting complex vulnerabilities in various systems and networks.
- Implement and bypass advanced security mechanisms, conducting thorough security assessments to fortify organizational defenses.
- Adapt to evolving cyber security threats and trends, continuously updating skills with the latest hacking tools and techniques
Course Outcomes (COs):
- CO1: Understand the concepts of cyber security and Ethical hacking and their
- CO2: Analyze the Zero day vulnerabilities and DOS and DDOS attacks and their
- CO3: Evaluate and Install Kali Linux and its commands, Deep web and surface web v/s Dark
- CO4: Analyze Website attacks, penetration testing, Top 10 OWASP tools, SQL
Syllabus:
Module 1: Cyber Security and Ethical Hacking Stages: Laws and Standards. (8 Hours) Theory:
Definition of Cyber Security, Essential Terminologies, OSI Reference Model, TCP/IP Model, Types of Cyber Attacks, Threat categories, Attack vectors, Risk assessment, CIA Triad, Ethical Hacking Essentials, Stages of Hacking, Types of Hackers, Cyber Laws and Standards.
Practice:
Experiment 1.1: Explore the cyber security and their essential terminologies
Experiment 1.2: Analyze Cyber attacks and Risk Assessment.
Experiment 1.3: Understand the ethical hacking and stages of hacking.
Experiment 1.4: Study and evaluate the types of Hackers its laws and standards
Module 2: Network basics, Vulnerabilities, DOS attack Evolution. (10 Hours) Theory:
Networking Basics, TCP and UDP, Important Port Numbers, Network Mapping, Vulnerability analysis, Zero-day Vulnerabilities Nessus, Nikto, Lynis, Searchsploit, Metasploit framework, Android Hacking, Malware tools, Denial of Service, DoS Evolution, Types of DoS, Symptoms of DoS, DDOS (Distributed Denial of Service), Hammer, Dos attack Prevention.
Practice:
- Experiment 1: Study the importance of Network basics.
- Experiment 2: Understand the importance of TCP and UDP and different port numbers.
- Experiment 3: Analyze Zero-day Vulnerabilities and its importance.
- Experiment 4: Know the different tools such as Nessus, Nikto, Lynis, Searchsploit
- Experiment 5: Evaluate Metasploit Framework, Android Hacking, Malware Tools
- Experiment 6: Implement DOS attack and DDOS attack and its prevention.
Module 3: Kali linux and its commands, Different types of Browsers and webs. (15 Hours) Theory:
Kali Linux Installation, Basic Overview with Kali Linux, Basic Linux commands, Directory commands, File commands. File access commands, Tor Browser, Dark Web, Deep Web, Surface web v/s Dark web. IP address, Types of IP address, MAC address, Types of MAC address, Hijacking, Clickjacking, Session hijacking, URL hijacking, Proxy Server, Spoofing, Password Guessing, Server Password Hacking.
Practice:
- Experiment 1: Install kali linux and know its commands.
- Experiment 2: Explore Tor Browser, Dark web, Deep web
- Experiment 3: Understand the Difference between Surface web v/s Dark web.
- Experiment 4: Implement Session Hijacking and URL Hijacking and clickjacking.
- Experiment 5: Evaluate Proxy Server, password Guessing and Spoofing.
Module 4: Top 10 OWASP Tools and HIDS/HIPS, Penetration Testing. (15 Hours) Theory:
Types of Website attacks, website penetration testing, web application analysis, Burpsuite, OWASP TOP 10, OWASP-ZAP, CROSS-SITE SCRIPTING, BEEF FRAMEWORK, SQL
INJECTION, SQLMAP, Sniffing, Network Penetration Testing. HIDS/HIPS, Antivirus.
Practice:
- Experiment 1: Understand Website attacks and website penetration testing.
- Experiment 2: Implement Burpsuite tool.
- Experiment 3: Evaluate TOP 10 OWASP Tools and penetration testing.
- Experiment 4: Explore Cross-site scripting and BEEF Framework.
- Experiment 5: Analyse SQL injection, SQLMAP, Sniffing, HIDS/HIPS, and Antivirus.
Module: Advanced Cryptography and Steganography.(10 Hours) Theory:
Cryptography Attacks, Advanced Cryptanalysis techniques, exploiting weakness in cryptographic protocols, Steganography Techniques, Methods for hiding information in digital media, Detection and analysis of steganographic methods.
Practice:
- Experiment 1: Understand the advanced cryptanalysis techniques.
- Experiment 2: Analyse the weakness in cryptographic protocols.
- Experiment 3: Explore quantum cryptography and its challenges.
- Experiment 4: Implement the methods to hide information in digital media.
- Experiment 5: Evaluate and analysis of steganographic methods.
Project (26 hours) References:
- “Hacking: The Art of Exploitation” by Jon Erickson.
- “Metasploit: The Penetration Tester’s Guide “by David Kennedy, Jim O’Gorman, Devon Kearns, and Mati Aharoni.
- “CEH v11: Certified Ethical Hacker Study Guide” by Ric Messier.
- “Penetration Testing: A Hands-On Introduction to Hacking” by Georgia Weidman.
COURSE-03
Network Engineering with Junos ,Cisco , and 5G Readiness (56 Hours)
Course Code | Course Title | Credits | Type (T+P+Pj) |
NEW CODE | Network Engineering with Junos ,Cisco , and 5G
Readiness |
4 | 2+1+1 |
Course Objectives (COs)
- Understand the architecture and configuration of Cisco and Junos-based network
- Demonstrate skills in configuring routing and switching features in enterprise
- Analyze and implement network security policies including ACLs, NAT, VPNs, and firewall
- Explore advanced networking technologies including SDN, NFV, and 5G core
- Develop troubleshooting skills and operational monitoring for both Cisco and Junos
- Design and simulate scalable and secure networks using modern tools and Course Outcomes (COs)
Course Outcome
CO1 Configure and manage basic to advanced Cisco networking features including VLANs, ACLs, NAT, and routing protocols.
CO2 Operate and troubleshoot Juniper devices using Junos CLI and J-Web interface.
CO3 Apply subnetting, supernetting, and routing techniques to optimize IP addressing and network performance.
CO4 Design and enforce network security policies using firewalls, VPNs, and logical segmentation.
CO5 Understand and implement key concepts of SDN, NFV, and 5G technologies in a simulated environment.
CO6 Build integrated projects simulating real-world network infrastructure, performance testing, and failover analysis.
³ CO-PO Mapping Matrix
CO \
PO |
PO1 | PO2 | PO3 | PO4 | PO5 | PO6 | PO7 | PO8 | PO9 | PO10 | PO11 | PO12 |
CO1 | 3 | 3 | 2 | 2 | 2 | 1 | 1 | 1 | 2 | 2 | 2 | 2 |
CO2 | 3 | 2 | 3 | 2 | 2 | 1 | 1 | 1 | 2 | 2 | 2 | 2 |
CO3 | 3 | 3 | 2 | 2 | 2 | 1 | 1 | 1 | 2 | 2 | 2 | 2 |
CO4 | 2 | 3 | 3 | 3 | 3 | 2 | 2 | 2 | 3 | 2 | 3 | 3 |
CO5 | 3 | 3 | 2 | 2 | 3 | 2 | 1 | 1 | 3 | 3 | 3 | 2 |
CO6 | 3 | 3 | 3 | 3 | 3 | 2 | 2 | 2 | 3 | 3 | 3 | 3 |
Module:1 Cisco Configurations
Cisco Device Details : Introduction to routers, switches, IOS, Navigating CLI: user exec, privileged exec, and global config modes ,IOS file system and basic commandsInterface configuration (IPv4/IPv6),Saving & backing up configurations, VLANs and Trunking , Static routing ,Dynamic Routing Protocols , Switching Concepts ,Access Control and NAT: Standard & Extended ACLs,NAT (Static, Dynamic, PAT),DHCP configuration, Troubleshooting and Final Lab .
PRACTICALS :
- What are the key differences between user EXEC, privileged EXEC, and global config mode?
- How does Inter-VLAN Routing work and what is Router-on-a-Stick?
- Explain the difference between RIP, OSPF, and EIGRP
- What is EtherChannel and how does it improve redundancy?
- Describe the configuration steps for setting up NAT (Static, Dynamic, PAT).
Module:2 Junos OS Fundamentals, User Interfaces , . Configuration &. Operational Monitoring and Maintenance
Software architecture, Control and forwarding planes, Routing Engine and Packet Forwarding Engine, Transit and exception traffic processing, Global Knowledge ,Junos CLI functionality and modes,CLI navigation and help features, Filtering output,Active vs. candidate configurations,Modifying, managing, and saving configuration files ,J-Web interface basics
,Factory-default state and initial configuration,User accounts and authentication methods,Interface types and properties ,Show and monitor commands,Interface statistics and errors,Network tools (ping, traceroute, telnet, SSH),Junos OS installation and upgrades,Powering on and shutting down devices,Root password recovery.
PRACTICALS :
- What is the difference between active and candidate configuration in Junos OS?
- Explain the roles of Routing Engine and Packet Forwarding Engine in Junos
- How do you configure a rescue configuration and what is its purpose?
- Which commands are used to monitor interface errors and statistics?
- What is the process for recovering a lost root password in Junos OS?
Module :3 Subnetting and Supernetting in Modern Network Routing and Switching
Switching Details :Role of switches in LANs ,MAC Address Table ,Switching methods: Store-
and-forward, cut-through ,Collision domains vs broadcast domains , VLANs and Trunking, Spanning Tree Protocol (STP), Routing Details :Routing vs Switching,Types of routing: Static vs Dynamic,Routing table and path selection, Administrative Distance & Metric, Dynamic Routing Protocols),Routing protocol comparison .
PRACTICALS :
- What is the function of the MAC address table in a switch?
- How does the Spanning Tree Protocol prevent switching loops?
- What are collision domains and how are they different from broadcast domains?
- Compare the administrative distances of RIP, OSPF, and
- What happens during OSPF neighbor formation?
Module:4 Security Policies and Zones: configuration and troubleshooting:Advanced Threat Protection (ATP) ,IPSec VPNs: configuration and monitoring,High Availability: chassis clustering
,Security Director: centralized management,Logical Systems and Tenant Systems . PRACTICALS :
- What is the purpose of configuring security zones in a firewall?
- How do you configure a site-to-site IPSec VPN and what parameters are essential?
- What is Chassis Clustering and how does it ensure high availability?
- What is the function of Junos Security Director?
- How do tenant systems improve network segmentation in multi-tenant environments?
Module:5 SDN,NFV,5G
Software-Defined Networking (SDN)Network Function Virtualization (NFV) 5G and Beyond
PRACTICALS :
- What is the main difference between traditional networking and SDN?
- How does NFV help in deploying network functions like firewalls and routers?
- Explain the basic architecture of a 5G Core
- What are OpenFlow rules and how are they used in SDN?
- What is the purpose of Service Function Chaining in NFV/SDN environments?
PROJECTS :
- Cisco-Based Full Network Topology with VLANs and Routing
- Dynamic Routing with EIGRP and OSPF Failover Simulation
- Redundancy Testing Using STP and EtherChannel
- Advanced Cisco ACL and NAT Security Policy Framework
- Campus Network with DHCP, VLANs, and Static Routing
- Automated Junos Device Configuration and Backup System
- Junos-Based Network Health Monitoring Dashboard
- Interactive Junos CLI Simulation and Training Tool
- Secure Junos Root Password Recovery Automation
- Junos OS Upgrade and Rollback Pipeline with Logging
- Cisco-Based Full Network Topology with VLANs and Routing
- Dynamic Routing with EIGRP and OSPF Failover Simulation
- Redundancy Testing Using STP and EtherChannel
- Advanced Cisco ACL and NAT Security Policy Framework
- Campus Network with DHCP, VLANs, and Static Routing
- OSPF EIGRP Protocol Performance Analysis
- VLAN Trunking and Loop Prevention Using STP
- Routing Table Visualizer Using GNS3 and Python
- Layered Network Design with ACLs and Redundant Links
- Event-Based Routing Protocol Switch Using Python
- High Availability IPSec VPN with Chassis Clustering
- Zone-Based Security Policy Architecture for Enterprise
- Tenant-Aware Logical Network Segmentation Framework
- Simulated Attack Detection Using Advanced Threat Protection
- Firewall Policy Automation via Juniper Security Director
- Dynamic Traffic Routing Using SDN Controller
- NFV-Based Virtual Firewall Deployment and Testing
- End-to-End 5G Core Simulation with Open5GS
- OpenFlow-Based SDN Traffic Optimization Platform
- Multi-Vendor NFV Lab Environment with KVM/QEMU General Reference Books (Applicable Across All Modules):
- “Computer Networking: A Top-Down Approach” by James Kurose & Keith Ross
- “Data and Computer Communications” by William Stallings
- Cisco Networking Academy Series – Official Cisco Courseware
- Juniper Networks Day One Series – Available Free atnet
COURSE-04
Network Security and Threat Intelligence (56 Hours)
Course Code | Course Title | Credits | Type
(T+P+Pj) |
CUCN1122 | Network Security and Threat Intelligence | 4 | 2+1+1 |
Course Objectives (COBJ)
- Understand and implement secure network communication using protocols, firewalls, IDS/IPS, and email security mechanisms.
- Apply cryptographic principles to ensure confidentiality, integrity, authentication, andsecure VPN communication.
- Implement identity, access management, and Zero Trust architecture in modern enterprise
- Deploy endpoint, wireless, and cloud security techniques using industry tools and
- Monitor networks using logging, SIEMs, and threat intelligence platforms to respond to security incidents.
- Analyze and apply modern security architectures (SASE, XDR, SD-WAN) and evaluate real- world threat case studies.
Course Outcomes (CO)
CO
No.
Course Outcome Description
CO1 Configure and secure protocols, firewalls, IDS/IPS, and web/email systems for enterprise-grade protection.
CO2 Use cryptographic tools and VPNs to secure data and communication over untrusted networks.
CO3 Implement AAA, IAM, MFA, and Zero Trust models using tools like Keycloak, Okta, and Azure AD.
CO4 Apply endpoint, wireless, and cloud security principles using EDR, MDM, GuardDuty, and CSPM tools.
CO5 Analyze logs, detect anomalies using SIEMs, and build SOAR-driven incident response workflows.
CO6 Evaluate and simulate modern network architectures and threat scenarios with tools like Cisco Umbrella, XDR.
CO \ PO |
PO1 |
PO2 |
PO3 |
PO4 |
PO5 |
PO6 |
PO7 |
PO8 |
PO9 |
PO10 |
PO11 |
PO12 |
CO1: Secure protocols, firewalls, |
3 |
2 |
3 |
2 |
3 |
1 |
– |
1 |
2 |
2 |
2 |
3 |
IDS/IPS, email systems | ||||||||||||
CO2:
Cryptographic tools, VPN communication |
3 |
3 |
2 |
2 |
3 |
1 |
– |
2 |
2 |
2 |
2 |
3 |
CO3: IAM,
MFA, SSO, Zero Trust |
3 |
3 |
3 |
2 |
3 |
2 |
– |
2 |
3 |
2 |
2 |
3 |
CO4:
Endpoint, Wireless, Cloud Security |
3 |
3 |
3 |
2 |
3 |
2 |
– |
1 |
3 |
2 |
2 |
3 |
CO5: Logging, SIEM, Incident Response, SOAR |
2 |
3 |
3 |
3 |
3 |
3 |
– |
3 |
3 |
3 |
3 |
3 |
CO6: Modern architectures (SASE, XDR),
Case Studies |
3 |
3 |
3 |
3 |
3 |
2 |
1 |
2 |
3 |
3 |
3 |
3 |
Module 1: Network Security Protocols & Devices
Secure Protocols: SSH, SFTP, HTTPS, SNMPv3, DNSSEC, Firewalls: Stateful, UTM, NGFW (Palo Alto, Fortinet), IDS/IPS: Signature vs Anomaly-based (Snort, Suricata, Zeek),Web Application Firewalls (WAFs),Email Security: SPF, DKIM, DMARC,Tools: Snort, Suricata, pfSense, Zeek
Practicals:
- Secure a file transfer using SSH and SFTP
- Configure SNMPv3 and test secure monitoring
- Enable DNSSEC on a DNS server and validate with DNS query tools
- Deploy and test Snort or Suricata for intrusion detection
- Configure firewall rules using pfSense for specific traffic
- Set up SPF, DKIM, and DMARC for a test email domain
- Simulate WAF functionality to block SQL Injection or XSS
Module 2 : Cryptography and Secure Communication
Symmetric vs Asymmetric Encryption (AES, RSA, ECC), Hashing (SHA-2, SHA-3, HMAC), Digital Signatures & Certificates (PKI, X.509), TLS 1.3 & HTTPS internals, VPN Technologies: IPsec, SSL VPN, Wire Guard, Tools: OpenSSL, GnuPG, WireGuard
Practicals:
- Encrypt and decrypt messages using AES and RSA with OpenSSL
- Generate digital signatures and verify using GnuPG
- Create and analyze a self-signed 509 digital certificate
- Capture and decode TLS 3 handshake using Wireshark
- Set up and test an IPsec tunnel between two hosts
- Deploy and test a WireGuard VPN with client/server setup
Module 3: Identity, Access, and Zero Trust
Authentication & Authorization: AAA, RADIUS, TACACS+, MFA, SSO, OAuth 2.0, OpenID Connect, Identity & Access Management (IAM), Zero Trust Architecture (ZTA), Network Access Control (NAC), Tools: Okta, Key cloak, Cisco ISE, Azure AD
Practicals:
- Configure AAA using RADIUS or TACACS+ with a simulated router
- Implement Multi-Factor Authentication (MFA) with Google Authenticator
- Deploy OAuth 0 + OpenID Connect using Keycloak and test SSO
- Create IAM policies on AWS or Azure and test least privilege access
- Simulate Zero Trust Architecture access control using Cisco ISE or Azure AD Conditional Access
- Integrate Okta with a sample web application for identity federation Module 4: Endpoint, Wireless & Cloud Security
Endpoint Detection & Response (EDR), secure wireless protocols: WPA3, 802.1X, Mobile device
management (MDM), Cloud security basics: Shared Responsibility Model, CSPM (Cloud Security Posture Management), CNAPP, Cloud provider tools: AWS Guard Duty, Azure Defender, Tools: CrowdStrike Falcon, Microsoft Defender, and AWS Config
Practicals:
- Simulate endpoint detection using Microsoft Defender or CrowdStrike trial
- Configure WPA3 wireless security with 1X authentication
- Set up Mobile Device Management (MDM) policy on Android/iOS using open tools
- Review AWS Shared Responsibility Model with hands-on IAM access policy testing
- Use AWS GuardDuty to detect cloud threats in a sandbox account
- Explore CSPM tools like AWS Config and assess misconfigurations
Module 5: Network Monitoring, Logging & Incident Response
Network visibility: Net Flow, sFlow, SIEM platforms (Splunk, ELK, Graylog), Security Orchestration Automation & Response (SOAR), Threat intelligence platforms (MISP, IBM X-
Force),Incident response lifecycle & playbooks, MITRE ATT&CK mapping, Tools: ELK Stack, Splunk, Security Onion, Graylog
Practicals:
- Capture and analyze NetFlow/sFlow traffic using nProbe or Wireshark
- Set up ELK Stack and visualize basic network log patterns
- Use Splunk to ingest logs and create alerts based on abnormal behavior
- Simulate a SOAR workflow using Splunk SOAR or TheHive-Cortex
- Create a basic incident response playbook based on MITRE ATT&CK tactics
- Ingest threat intel feeds into MISP and generate correlation indicators
Module 6: Modern Security Architectures & Case Studies
SASE (Secure Access Service Edge),Secure SD-WAN,XDR (Extended Detection and Response),IoT & OT network security,Blockchain in network security (identity, tamper- resistance),Case studies: Solar Winds, Colonial Pipeline, Log4Shell, MOVEit,Tools: Palo Alto Prisma Access, Cisco Umbrella, Trend Micro XDR
Practicals:
- Deploy SASE model using Cisco Umbrella or Prisma Access demo
- Implement secure SD-WAN simulation using Fortinet/FortiGate demo portal
- Explore XDR alerts and response actions using Trend Micro XDR free trial
- Simulate an IoT security attack (Mirai botnet) in a test lab
- Evaluate blockchain-based identity validation using Hyperledger Indy or similar
- Present a timeline and threat map of real attacks: SolarWinds, Log4Shell, using open source incident trackers
PROJECTS :
- Design of a Hybrid Encryption Framework using AES and RSA with OpenSSL
- TLS 3 Traffic Analysis and Certificate Validation System
- WireGuard-Based Secure VPN Infrastructure for Remote Teams
- Digital Signature and Certificate Management System Using GnuPG
- Threat Intelligence Dashboard for Emerging 2025 Cyber Threats
- Simulation of MITM and DDoS Attacks with Detection Using Wireshark & TCPDump
- Policy-Based Network Defense System Using ISO 27001 & NIST Guidelines
- Cyber Attack Lifecycle Modeling Using MITRE ATT&CK and Cyber Kill Chain
- Intrusion Detection and Prevention System Using Snort, Suricata, and Zeek
- Next-Gen Firewall Policy Engine with Application-Aware Rules (using pfSense/OPNsense)
- Secure DNS and Email Infrastructure (DNSSEC, SPF, DKIM, DMARC) for a Simulated Enterprise
- Design and Implementation of a Web Application Firewall for OWASP Top 10
- WPA3 Enterprise Wi-Fi Security with 1X and RADIUS Integration
- Cloud Threat Detection System Using AWS GuardDuty and Config Rules
- Endpoint Threat Detection Simulation using Microsoft Defender and CrowdStrike
- Cloud Security Monitoring using CSPM and CNAPP Tools on AWS
- Zero Trust Network Access Architecture with MFA and Conditional Policies
- SSO Integration for Web Applications Using OAuth 0 and OpenID Connect (Keycloak
+ Okta)
- Role-Based IAM System with Least Privilege Enforcement on AWS
- Network Access Control System using Cisco ISE or FreeRADIUS
- Security Incident Monitoring Dashboard using ELK Stack and Graylog
- SOAR-based Automated Incident Response Playbook using Splunk SOAR or TheHive
- Threat Intelligence Aggregator with MISP and ATT&CK Mapping
- Real-Time Network Anomaly Detection Using Flow Analytics and Custom Alerts
- Simulation of a Secure SD-WAN Architecture with Threat Defense Policies
- SASE Implementation and Traffic Inspection using Cisco Umbrella or Prisma Access
- Blockchain-based Identity Management for Secure Network Access
- Forensic Analysis and Threat Reconstruction of the SolarWinds or Log4Shell Attack
- XDR-based Cross-Layer Threat Detection Platform using Trend Micro XDR
- IoT/OT Network Security Framework with Anomaly Detection Capabilities
Core Books & Textbooks:
- “Network Security Essentials: Applications and Standards”
Author: William Stallings
Covers: Core concepts of cryptography, secure protocols, firewalls, VPNs, and intrusion detection.
- “Computer Security: Principles and Practice”
Authors: William Stallings & Lawrie Brown
Covers: End-to-end concepts of secure communication, access control, and policy-based security models.
- “Cryptography and Network Security”
Author: William Stallings
Covers: Detailed cryptographic algorithms (AES, RSA, ECC), PKI, hashing, and digital signatures.
- “Network Security with pfSense”
Author: David Zientara
Covers: Firewalling, IDS/IPS, NAT, VPNs with pfSense platform.
- “The Web Application Hacker’s Handbook”
Authors: Dafydd Stuttard & Marcus Pinto
Covers: Real-world WAF bypasses, SQL injection
COURSE-05
Traffic Engineering in Computer Networks (56 Hours)
Course Code | Course Title | Credits | Type (T+P+Pj) |
Traffic Engineering in Computer Networks | 3 | 1+2+0 |
Prerequisites: Computer Networks, Network Protocols, Basic Probability/Statistics Course Objectives:
- Understand traffic behavior and modeling in computer
- Learn the principles and techniques of traffic
- Explore QoS (Quality of Service), MPLS, SDN, and traffic optimization
- Design and simulate traffic-aware
Course Outcome
CO1 Understand traffic behavior, types, metrics, and basic models in computer networks.
CO2 Analyze and apply QoS techniques and traffic engineering mechanisms like MPLS and constraint-based routing.
CO3 Design and simulate SDN-based traffic-aware networks using real-time path computation and dynamic routing.
CO4 Perform traffic analysis, optimization, and simulation using modern tools such as NS- 3, Mininet, and Wireshark.
CO-PO-PSO Mapping Matrix
CO \ PO/PSO | PO1 | PO2 | PO3 | PO4 | PO5 | PO6–PO10 | PO11 | PO12 | PSO1 | PSO2 |
CO1 | 3 | 2 | 1 | – | – | – | – | 2 | 2 | 1 |
CO2 | 3 | 3 | 3 | 2 | 2 | – | – | – | 3 | 2 |
CO3 | 2 | 2 | 3 | 2 | 3 | – | – | 2 | 3 | 3 |
CO4 | 2 | 3 | 3 | 2 | 3 | – | 1 | 2 | 3 | 3 |
Module 1: Introduction to Traffic Engineering
Need for traffic engineering,Goals and benefits,Types of network traffic (data, voice, video),Performance metrics: throughput, delay, jitter, packet loss,Review of network topologies and protocols
Practicals:
- Analyze and compare data, voice, and video traffic using iPerf and Wireshark.
- Measure network performance metrics such as throughput, delay, jitter, and packet loss.
- Simulate basic network topologies (star, mesh, client-server) using NS-3 or GNS3 to observe traffic behavior.
Module 2: Traffic Models and Characterization
Deterministic and stochastic traffic models,Poisson, Pareto, Markov models,Self-similarity and long-range dependence,Measurement tools and techniques
Practicals:
- Model traffic using Poisson and Pareto distributions in NS-3 and Python (NumPy + Matplotlib).
- Analyze self-similarity and long-range dependence using trace data from D-ITG or R.
- Visualize traffic burstiness and packet arrival patterns to understand real-world traffic
Module 3: Quality of Service (QoS) and Resource Management
QoS parameters and architecture,QoS in IP networks: IntServ and DiffServ
,Admission control, scheduling, traffic shaping and policing,Weighted Fair Queuing (WFQ), Token Bucket, Leaky Bucket
Practicals :
- Simulate Token Bucket and Leaky Bucket algorithms using NS-3.
- Configure IntServ and DiffServ QoS architectures in GNS3 or Mininet, and evaluate effects on VoIP and HTTP traffic.
- Implement and compare traffic scheduling algorithms such as FIFO and Weighted Fair Queuing (WFQ).
Module 4: MPLS and Traffic Engineering
MPLS architecture and components,Label Switched Paths (LSPs),Constraint-Based Routing (CBR),RSVP-TE and CR-LDP,Traffic engineering with MPLS
Practicals:
- Set up MPLS routing with Label Switched Paths (LSPs) using GNS3 or Cisco Packet Tracer.
- Implement Constraint-Based Routing (CBR) using RSVP-TE or CR-LDP in NS-3 or
Mininet.
- Monitor label forwarding and analyze path selection based on bandwidth and delay
Module 5: Software-Defined Networking (SDN) and TE
Introduction to SDN,OpenFlow and controller-based TE,Path computation algorithms (Dijkstra, CSPF),Load balancing and dynamic rerouting
Practicals :
- Design an SDN network using Mininet and program flow control using OpenFlow with
POX/RYU controllers.
- Implement Dijkstra and CSPF algorithms in Python for traffic path
- Simulate dynamic rerouting and load balancing by adjusting network conditions in real
Module 6: Traffic Analysis, Optimization & Simulation Tools
Network calculus,Optimization techniques (linear, convex)Simulation tools: NS-3, Mininet, GNS3,Real-world case studies: ISP backbones, data centers
Practicals:
- Capture and analyze live traffic using Wireshark, NetFlow, and sFlow.
- Use Python (CVXPY or PuLP) to formulate and solve traffic optimization problems (e.g., delay minimization).
- Design and simulate a complete traffic-engineered network (e.g., ISP/campus) using NS- 3, Mininet, and SDN/MPLS integration in a mini-project.
Assessment Methods:
- Midterm and Final Exam
- Network simulation lab assignments
- Case study report or mini-project
- Quizzes and tutorials
Suggested Tools & Labs:
- Simulation tools: NS-3, OMNeT++, Mininet, GNS3
- Traffic generators: iPerf, D-ITG, Ostinato
- Analysis tools: Wireshark, NetFlow, sFlow Recommended Textbooks & References:
- Traffic Engineering with MPLS – Eric Osborne & Ajay Simha
- Quality of Service in IP Networks – Srinivas Vegesna
- Computer Networks – Andrew Tanenbaum, David Wetherall
- Research papers from IEEE/ACM on traffic engineering & SDN
Capstone Project (84 Hours)
Course Code | Course Title | Credits | Type (T+P+Pj) |
CUCN1126 | Capstone Project | 4 | 0+0+4 |
Course Description:
The major project is a capstone course that allows students to apply the knowledge and skills they have acquired throughout the program to a comprehensive project. This project involves identifying a research question, conducting a thorough analysis, and presenting the findings in both written and oral formats.
Course Objectives:
- Develop advanced research and analytical
- Apply theoretical knowledge to real-world
- Demonstrate proficiency in project planning, execution, and
Course Outcomes (COs):
- CO1: Summarize and integrate knowledge from various sources to define a research (Knowledge)
- CO2: Apply appropriate research methods and analytical tools to collect and analyze data. (Application)
- CO3: Evaluate and interpret research findings to draw meaningful (Analysis)
- CO4: Develop a comprehensive project report that demonstrates innovation and critical thinking. (Synthesis)
- CO5: Present project outcomes effectively through written reports and oral (Evaluation)
Module-wise Breakdown:
Module 1: Project Proposal (12 hours)
- Topics: Identifying a Research Topic; Defining Objectives and Scope; Project Planning and
Module 2: Literature Review and Methodology (12 hours)
- Topics: Comprehensive Literature Survey; Selecting Appropriate Research
Module 3: Data Collection and Analysis (12 hours)
- Topics: Data Collection Techniques; Data Cleaning and Preprocessing; Analytical Methods and Tools.
Module 4: Implementation (12 hours)
- Topics: Developing Models/Systems; Experimentation and
Module 5: Results and Discussion (12 hours)
- Topics: Analyzing Results; Discussing Findings and
Module 6: Report Writing (12 hours)
- Topics: Structuring the Final Report; Writing and
Module 7: Presentation (12 hours)
- Topics: Preparing for the Oral Presentation; Presenting Findings to an
Textbooks and References:
CO-PO-PSO Mapping:
CO/PO/PSO | PO1 | PO2 | PO3 | PO4 | PO5 | PO6 | PO7 | PO8 | PO9 | PO10 | PO11 | PO12 | PSO1 | PSO2 | PSO3 |
CO1 | 3 | 3 | 3 | 2 | 3 | – | – | – | 2 | 3 | 2 | 2 | 3 | 3 | 3 |
CO2 | 3 | 2 | 3 | 3 | 3 | – | – | – | 2 | 3 | 2 | 2 | 3 | 3 | 3 |
CO3 | 3 | 2 | 3 | 3 | 3 | – | – | – | 2 | 2 | 2 | 2 | 3 | 3 | 3 |
CO4 | 3 | 2 | 3 | 3 | 3 | – | – | – | 3 | 2 | 2 | 2 | 3 | 3 | 3 |
CO5 | 3 | 2 | 3 | 3 | 3 | – | – | – | 3 | 3 | 3 | 3 | 3 | 3 | 3 |
Session Plan for the Entire Domain:
COURSE -01
MODULE-01 (Session :01-04)
- Overview & Types of Networks
Reference: https://www.youtube.com/watch?v=UdxiqHt-DCg - Network Topologies & Basic Devices
Reference: https://www.youtube.com/watch?v=uHYSXkQ69OA - OSI Model
Reference: https://www.youtube.com/watch?v=GkdLeeBosbM
TCP/IP Model
Reference: https://www.youtube.com/watch?v=MtY1bYA1CGw
- Data Transmission Basics
Reference: https://www.youtube.com/watch?v=z3f6RqGk4Uc
Material : (Session :01-04)
https://in.docworkspace.com/d/sIJyD4cWdAvfn48IG?sa=601.1037
MODULE-02 (Session :05- 10)
- Physical Layer & Media
Reference: https://www.youtube.com/watch?v=Cdgqd9xsJUE - Error Detection – CRC
Reference: https://www.youtube.com/watch?v=Q9G-oEYnAgE - Stop and Wait ARQ
Reference: https://www.youtube.com/watch?v=PU2bZDJk5Jc - Go-Back-N ARQ
Reference: https://www.youtube.com/watch?v=7Eo4Kd3gkA0 - CSMA/CD & Ethernet MAC
Reference: https://www.youtube.com/watch?v=8wptjECeGA8 - ARP & RARP
Reference: https://www.youtube.com/watch?v=9b4vpnKZxig
Material : (Session :05-10)
https://in.docworkspace.com/d/sIEqD4cWdArDp48IG?sa=601.1037
MODULE-03 (Session :11 -14)
- IPv4 Addressing & Subnetting
Reference: https://www.youtube.com/watch?v=k3XvM-rpCFo - IPv6 / CIDR / VLSM
Reference: https://www.youtube.com/watch?v=z7Al3P8ShM8 - Routing Algorithms (RIP, OSPF, DV vs LS)
Reference: https://www.youtube.com/watch?v=1KGC7Tp6HGo - NAT & PAT
Reference: https://www.youtube.com/watch?v=VHYgmaEU-lg
ICMP (Ping/Traceroute)
Reference: https://www.youtube.com/watch?v=x91Hq3D1uAQ
MODULE-04 (Session :15- 22)
- Packet Tracer – Topology Build Demo
Reference: https://www.youtube.com/watch?v=ty0HMs48U1k - TCP vs UDP
Reference: https://www.youtube.com/watch?v=KY_Bqp2xDVc - Flow vs Congestion Control
Reference: https://www.youtube.com/watch?v=UnsSzTaN7vQ - TCP 3-Way Handshake
Reference: https://www.youtube.com/watch?v=WqV0TRTvvqA - TCP Data Transfer Mechanics
Reference: https://www.youtube.com/watch?v=cpiBFWQQuXI - UDP Header & Services
Reference: https://www.youtube.com/watch?v=eRIbNKBHFK4 - Socket Programming (TCP)
Reference: https://www.youtube.com/watch?v=3QiPPX-KeSc - Socket Programming (UDP)
Reference: https://www.youtube.com/watch?v=RrywtW7nn2w
MODULE-05 (Session :23 – 24 )
- DNS Basics
Reference: https://www.youtube.com/watch?v=mpQZVYPuDGU
DHCP
Reference: https://www.youtube.com/watch?v=Ae2CEb3d6hc
HTTP
Reference: https://www.youtube.com/watch?v=qcALGDn0zpk
FTP
Reference: https://www.youtube.com/watch?v=JK4c4gW3Glk
- SMTP
Reference: https://www.youtube.com/watch?v=jq5eMiyXAS4
POP3
Reference: https://www.youtube.com/watch?v=RC2fIhxilyE
MODULE-06 (Session :25-30)
- Packet Sniffing (Wireshark)
Reference: https://www.youtube.com/watch?v=qTaOZrDnMzQ - DNS Cache Poisoning Demo
Reference: https://www.youtube.com/watch?v=2QijB5GtNE4 - VPN Basics
Reference: https://www.youtube.com/watch?v=R-JUOpCgTZc
IDS / IPS
Reference: https://www.youtube.com/watch?v=NLLN4ynrono
- Intro to Cryptography (Full Course Playlist)
Reference: https://www.youtube.com/watch?v=2aHkqB2-46k&list=PL0E8468A8C94DD494 - AES (Symmetric Encryption)
Reference: https://www.youtube.com/watch?v=O4xNJsjtN6E
SHA256 (Hashing)
Reference: https://www.youtube.com/watch?v=f9EbD6iY9zI
- Course Wrap-up / Revision Playlist
Reference: https://www.youtube.com/playlist?list=PLXj4XH7LcRfCKbi7Najz8EIr1JymxoFBW