Domain Track Title :COMPUTER NETWORK

Track Total Credits ( T-P-P) :(9-7-6)

Courses Division( list all divisions):

Basket – V: Computer Network (CN) Total Credit:22
Area Code Course Credit Structure
CUDM2508 Computer Networks 4 2+2+0
CUCS2046 Advanced Hacking Techniques 4 2+2+0
Network Security and Threat Intelligence 4 2+1+1
Network Engineering with Junos ,Cisco , and 5G Readiness  

4

 

2+1+1

Traffic Engineering in Computer Networks 3 1+2+1
CUCN1126 Capstone Project 3 0+0+3

Domain Track Objectives:

  • Foundation in Computer Networks – Covering protocols, architectures (OSI/TCP-IP), IP addressing, routing, switching, transport, and application layer protocols.

  • Advanced Network Security & Threat Intelligence – Focusing on cyber threats, cryptography, VPNs, IDS/IPS, Zero Trust models, and cloud security practices.

  • Hands-on with Network Engineering Tools – Cisco (IOS), Junos OS (CLI), GNS3, Packet Tracer, Wireshark, and SIEM platforms.

  • Mastery of Ethical Hacking Techniques – Including penetration testing, exploitation, and defense mechanisms.

  • Traffic Engineering and Optimization – Applying QoS, MPLS, SDN-based routing strategies, and real-time network performance analysis.

  • Capstone Project for Industry Readiness – Integrating multi-disciplinary skills into solving complex, real-world networking problems.

Domain Track Learning Outcomes:

  • Understand and Design Computer Networks

  • Analyze and Secure Networks against Cyber Threats

  • Configure, Manage, and Troubleshoot Network Devices

  • Apply Cryptography and Security Policies in Networks

  • Optimize Network Performance using Traffic Engineering

  • Implement Modern Network Architectures (SASE, XDR)

  • Execute and Present Comprehensive Network Projects

  • Use Industry Tools for Network Monitoring and Incident Response

Domain Syllabus:

COURSE-01

COMPUTER NETWORKS (60 Hours)

 

Course Code Course Title Credits Type (T+P+Pj)
CUDM-2508 COMPUTER NETWORKS 4 2+2+0

 

Course Description:

To provide a solid understanding of how computer networks operate and how they can be secured. This course builds foundational knowledge required for understanding threats, vulnerabilities, and network defense mechanisms in cyber security. The curriculum includes 30 hours of theory and 30 practical experiments to reinforce the theoretical concepts.

Course Objectives:

  1. The course on Computer Networks aims to provide students with a comprehensive understanding of the fundamental principles, architectures, and protocols that enable communication over digital networks.
  2. The objective is to introduce learners to the layered structure of network models, particularly the OSI and TCP/IP models, and to explore the functionalities of each layer, including physical transmission, data link control, network routing, transport services, and application
  3. The course also focuses on key concepts such as IP addressing, error detection and correction, switching techniques, congestion control, and network security.
  4. By the end of the course, students will be equipped with the theoretical foundation and practical skills necessary to design, implement, analyze, and troubleshoot modern computer networks, preparing them for advanced studies and careers in networking and communication technologies.

Course Outcomes (COs):

  1. CO1: Explain the basic concepts of computer networks, network models (OSI and TCP/IP), and the roles of different layers in data communication. (Understand)
  2. CO2: Analyze data transmission methods, including switching techniques, transmission media, and error detection and correction mechanisms. (Analyze)
  3. CO3: Illustrate the functionalities of network layer protocols such as IP addressing, routing algorithms, and sub netting techniques. (Apply)
  4. CO4: Compare various transport layer protocols like TCP and UDP and describe flow control and congestion control mechanisms. (Analyze)
  5. CO5: Demonstrate knowledge of application layer protocols such as HTTP, DNS, SMTP, and FTP and their role in network services. (Apply)
  6. CO6: Evaluate network security concepts including cryptographic algorithms, authentication, and firewall configurations. (Evaluate)

Course Syllabus:

Module 1: Introduction to Computer Networks (5 Hours) Theory :

  • Overview of Computer Network, Types of Networks, Network Topologies, Network Devices,
  • ISO/OSI Model, TCP/IP Model, Basics of Data

Practical:

Experiment 1.1: Study of Network Devices and Topologies

Experiment 1.2: Simulation of OSI and TCP/IP Layers Using Packet Tracer Experiment 1.3: Demonstration of Data Transmission Using Encoding Techniques

Module 2: Physical & Data Link Layer ( 5 Hours) Theory:

  • MAC and Logical Link Control, Ethernet and IEEE 802 standards,
  • ARP and RARP, Error Detection & Correction: CRC, Checksum,
  • Framing Techniques and flow

Practical:

Experiment 2.1: Simulation of ARP and RARP Protocols

Experiment 2.2: Implement Error Detection Using CRC and Checksum

Experiment 2.3: Study and Simulate Framing Techniques and Flow Control

 

Module 3: Network Layer & IP Addressing (10 Hours) Theory:

  • IP Addressing (IPv4 and IPv6), Subnetting, Supernetting, & CIDR, IP Routing (static vs Dynamic)
  • Routing Algorithms, Routing Protocols, NAT, PAT, ICMP (Ping & Traceroute)

 

Practical:

Experiment 3.1: Subnetting and IP Address Planning (IPV4 & IPV6) Experiment 3.2: Configure Static and Dynamic IP Routing

Experiment 3.3: NAT, PAT, and ICMP Testing (Ping & Traceroute)

 

Module 4: Transport Layer (7 Hours) Theory:

  • TCP and UDP, Port numbers, Flow control
  • Congestion control, Packet sniffing & TCP Session Hijacking (Wireshark).

Practical:

Experiment 4.1: Study and Comparison of TCP and UDP Protocols using Socket Programming Experiment 4.2: Demonstration of Flow Control and Congestion Control using Simulation Tool (NS2/NS3 or Cisco Packet Tracer)

Experiment 4.3: Packet Sniffing and TCP Session Analysis using Wireshark

Module 5: Application Layer ( 10 Hours)

 Theory:

  • DNS, DHCP, HTTP/HTTPS, FTP, SMTP, POP3,
  • DNS Poisoning, HTTP Vulnerabilities, Email Protocols and Spoofing

Practical:

Experiment 5.1: Analyzing Network Protocols using Wireshark

Experiment 5.2: Demonstration of DNS Poisoning Attack (In a Simulated Environment)

Experiment 5.3: Email Spoofing Demonstration

Module 6: Network Security Basics (10 Hours) Theory:

  • Sniffing, Spoofing, MITM, DOS/DDOS, IDS/IPS,
  • VPN and Secure Tunneling, Wireless Network

Practical:

Experiment 6.1: Packet Sniffing and Spoofing using Wireshark and Scapy Experiment 6.2: MITM Attack and Detection with Ettercap and IDS Experiment 6.3: Setup and Configuration of a VPN with Secure Tunneling

 

Module 7: Introduction to Cryptography (10 hours) Theory:

  • History of Cryptography, CIA, Types of cryptography, Encryption Techniques,
  • Symmetric key Cryptography, Asymmetric Key Cryptography, Hashing
  • PRACTICAL
  • Experiment 7.1: Implement Caesar Cipher and Vigenère Cipher (Classical Encryption Techniques)

Experiment 7.2: Implement Symmetric Key Encryption using AES Algorithm

Experiment 7.3: Implement a Hashing Algorithm using SHA-256

 

Recommended Books:

  1. Computer Networking: A Top-Down Approach by Kurose & Ross
  2. Data Communications and Networking by Behrouz Forouzan
  3. Cisco Networking Academy materials (NetAcad)
  4. Cryptography and Network Security by William Stallings
  5. Applied Cryptography by Bruce Schneier

 

Online Resources:

  1. Online Labs: TryHackMe – Network Fundamentals Path, [HackTheBox Academy]
  2. Online Labs: CrypTool, OverTheWire: Cryptography challenges

 

 

CO-PO-PSO Mapping:

 

CO/PO/PSO PO 1 PO 2 PO 3 PO 4 PO 5 PO 6 PO 7 PO 8 PO 9 PO1 0 PO1 1 PO1 2 PSO 1 PSO 2 PSO 3
CO1 3 3 3 2 3 2 2 2 2 3 3 3
CO2 3 2 3 3 3 2 2 2 2 3 3 3
CO3 3 2 3 3 3 2 2 2 2 3 3 3
CO4 3 2 3 3 3 3 3 2 2 3 3 3
CO5 3 2 3 3 3 3 3 3 3 3 3 3

 

 

COURSE -02

Advanced Hacking Techniques (56 Hours)

Course Code Course Title Credits Type (T+P+Pj)
CUCS2046 Advanced Hacking Techniques 4 2+2+0

 Course Description:

The “Advanced Hacking Techniques” course is designed to provide students with an in-depth understanding of the methodologies and tools used by ethical hackers to identify and exploit vulnerabilities in modern computing systems. The course covers advanced topics in penetration testing, including network, web, and application-level attacks, as well as exploitation techniques used against operating systems and mobile platforms. Students will learn about the latest hacking tools, frameworks, and strategies employed by cybercriminals, along with the corresponding defensive measures.

Course Objective:

  1. Gain expertise in sophisticated penetration testing techniques, identifying and exploiting complex vulnerabilities in various systems and networks.
  2. Implement and bypass advanced security mechanisms, conducting thorough security assessments to fortify organizational defenses.
  3. Adapt to evolving cyber security threats and trends, continuously updating skills with the latest hacking tools and techniques

 

Course Outcomes (COs):

  1. CO1: Understand the concepts of cyber security and Ethical hacking and their
  2. CO2: Analyze the Zero day vulnerabilities and DOS and DDOS attacks and their
  3. CO3: Evaluate and Install Kali Linux and its commands, Deep web and surface web v/s Dark
  4. CO4: Analyze Website attacks, penetration testing, Top 10 OWASP tools, SQL

 

Syllabus:

Module 1: Cyber Security and Ethical Hacking Stages: Laws and Standards. (8 Hours) Theory:

Definition of Cyber Security, Essential Terminologies, OSI Reference Model, TCP/IP Model, Types of Cyber Attacks, Threat categories, Attack vectors, Risk assessment, CIA Triad, Ethical Hacking Essentials, Stages of Hacking, Types of Hackers, Cyber Laws and Standards.

Practice:

 Experiment 1.1: Explore the cyber security and their essential terminologies

  Experiment 1.2: Analyze Cyber attacks and Risk Assessment.

   Experiment 1.3: Understand the ethical hacking and stages of hacking.

   Experiment 1.4: Study and evaluate the types of Hackers its laws and standards

Module 2: Network basics, Vulnerabilities, DOS attack Evolution. (10 Hours) Theory:

Networking Basics, TCP and UDP, Important Port Numbers, Network Mapping, Vulnerability analysis, Zero-day Vulnerabilities Nessus, Nikto, Lynis, Searchsploit, Metasploit framework, Android Hacking, Malware tools, Denial of Service, DoS Evolution, Types of DoS, Symptoms of DoS, DDOS (Distributed Denial of Service), Hammer, Dos attack Prevention.

Practice:

  1. Experiment 1: Study the importance of Network basics.
  2. Experiment 2: Understand the importance of TCP and UDP and different port numbers.
  3. Experiment 3: Analyze Zero-day Vulnerabilities and its importance.
  4. Experiment 4: Know the different tools such as Nessus, Nikto, Lynis, Searchsploit
  5. Experiment 5: Evaluate Metasploit Framework, Android Hacking, Malware Tools
  6. Experiment 6: Implement DOS attack and DDOS attack and its prevention.

Module 3: Kali linux and its commands, Different types of Browsers and webs. (15 Hours) Theory:

Kali Linux Installation, Basic Overview with Kali Linux, Basic Linux commands, Directory commands, File commands. File access commands, Tor Browser, Dark Web, Deep Web, Surface web v/s Dark web. IP address, Types of IP address, MAC address, Types of MAC address, Hijacking, Clickjacking, Session hijacking, URL hijacking, Proxy Server, Spoofing, Password Guessing, Server Password Hacking.

 

Practice:

  1. Experiment 1: Install kali linux and know its commands.
  2. Experiment 2: Explore Tor Browser, Dark web, Deep web
  3. Experiment 3: Understand the Difference between Surface web v/s Dark web.
  4. Experiment 4: Implement Session Hijacking and URL Hijacking and clickjacking.
  5. Experiment 5: Evaluate Proxy Server, password Guessing and Spoofing.

Module 4: Top 10 OWASP Tools and HIDS/HIPS, Penetration Testing. (15 Hours) Theory:

Types of Website attacks, website penetration testing, web application analysis, Burpsuite, OWASP TOP 10, OWASP-ZAP, CROSS-SITE SCRIPTING, BEEF FRAMEWORK, SQL

INJECTION, SQLMAP, Sniffing, Network Penetration Testing. HIDS/HIPS, Antivirus.

Practice:

  1. Experiment 1: Understand Website attacks and website penetration testing.
  2. Experiment 2: Implement Burpsuite tool.
  3. Experiment 3: Evaluate TOP 10 OWASP Tools and penetration testing.
  4. Experiment 4: Explore Cross-site scripting and BEEF Framework.

  1. Experiment 5: Analyse SQL injection, SQLMAP, Sniffing, HIDS/HIPS, and Antivirus.

 

Module: Advanced Cryptography and Steganography.(10 Hours) Theory:

Cryptography Attacks, Advanced Cryptanalysis techniques, exploiting weakness in cryptographic protocols, Steganography Techniques, Methods for hiding information in digital media, Detection and analysis of steganographic methods.

 

Practice:

  1. Experiment 1: Understand the advanced cryptanalysis techniques.
  2. Experiment 2: Analyse the weakness in cryptographic protocols.
  3. Experiment 3: Explore quantum cryptography and its challenges.
  4. Experiment 4: Implement the methods to hide information in digital media.
  5. Experiment 5: Evaluate and analysis of steganographic methods.

Project (26 hours) References:

  1. “Hacking: The Art of Exploitation” by Jon Erickson.
  2. “Metasploit: The Penetration Tester’s Guide “by David Kennedy, Jim O’Gorman, Devon Kearns, and Mati Aharoni.
  3. “CEH v11: Certified Ethical Hacker Study Guide” by Ric Messier.
  4. “Penetration Testing: A Hands-On Introduction to Hacking” by Georgia Weidman.

 

COURSE-03

Network Engineering with Junos ,Cisco , and 5G Readiness (56 Hours)

Course Code Course Title Credits Type (T+P+Pj)
NEW CODE Network Engineering with Junos ,Cisco , and 5G

Readiness

4 2+1+1

Course Objectives (COs)

  1. Understand the architecture and configuration of Cisco and Junos-based network
  2. Demonstrate skills in configuring routing and switching features in enterprise
  3. Analyze and implement network security policies including ACLs, NAT, VPNs, and firewall
  4. Explore advanced networking technologies including SDN, NFV, and 5G core
  5. Develop troubleshooting skills and operational monitoring for both Cisco and Junos
  6. Design and simulate scalable and secure networks using modern tools and Course Outcomes (COs)

Course Outcome 

 CO1       Configure and manage basic to advanced Cisco networking features including VLANs, ACLs, NAT, and routing protocols.

CO2        Operate and troubleshoot Juniper devices using Junos CLI and J-Web interface.

CO3       Apply subnetting, supernetting, and routing techniques to optimize IP addressing and network performance.

CO4       Design and enforce network security policies using firewalls, VPNs, and logical segmentation.

CO5       Understand and implement key concepts of SDN, NFV, and 5G technologies in a simulated environment.

CO6       Build integrated projects simulating real-world network infrastructure, performance testing, and failover analysis.

 

³ CO-PO Mapping Matrix

CO \

PO

PO1 PO2 PO3 PO4 PO5 PO6 PO7 PO8 PO9 PO10 PO11 PO12
CO1 3 3 2 2 2 1 1 1 2 2 2 2
CO2 3 2 3 2 2 1 1 1 2 2 2 2
CO3 3 3 2 2 2 1 1 1 2 2 2 2
CO4 2 3 3 3 3 2 2 2 3 2 3 3
CO5 3 3 2 2 3 2 1 1 3 3 3 2
CO6 3 3 3 3 3 2 2 2 3 3 3 3

Module:1 Cisco Configurations

 

Cisco Device Details : Introduction to routers, switches, IOS, Navigating CLI: user exec, privileged exec, and global config modes ,IOS file system and basic commandsInterface configuration (IPv4/IPv6),Saving & backing up configurations, VLANs and Trunking , Static routing ,Dynamic Routing Protocols , Switching Concepts ,Access Control and NAT: Standard & Extended ACLs,NAT (Static, Dynamic, PAT),DHCP configuration, Troubleshooting and Final Lab .

 

PRACTICALS :

 

  1. What are the key differences between user EXEC, privileged EXEC, and global config mode?
  2. How does Inter-VLAN Routing work and what is Router-on-a-Stick?
  3. Explain the difference between RIP, OSPF, and EIGRP
  4. What is EtherChannel and how does it improve redundancy?
  5. Describe the configuration steps for setting up NAT (Static, Dynamic, PAT).

 

Module:2 Junos OS Fundamentals, User Interfaces , . Configuration &. Operational Monitoring and Maintenance

Software architecture, Control and forwarding planes, Routing Engine and Packet Forwarding Engine, Transit and exception traffic processing, Global Knowledge ,Junos CLI functionality and modes,CLI navigation and help features, Filtering output,Active vs. candidate configurations,Modifying, managing, and saving configuration files ,J-Web interface basics

,Factory-default state and initial configuration,User accounts and authentication methods,Interface types and properties ,Show and monitor commands,Interface statistics and errors,Network tools (ping, traceroute, telnet, SSH),Junos OS installation and upgrades,Powering on and shutting down devices,Root password recovery.

 

PRACTICALS :

 

  1. What is the difference between active and candidate configuration in Junos OS?
  2. Explain the roles of Routing Engine and Packet Forwarding Engine in Junos
  3. How do you configure a rescue configuration and what is its purpose?
  4. Which commands are used to monitor interface errors and statistics?
  5. What is the process for recovering a lost root password in Junos OS?

 

Module :3 Subnetting and Supernetting in Modern Network Routing and Switching

Switching Details :Role of switches in LANs ,MAC Address Table ,Switching methods: Store-

and-forward, cut-through ,Collision domains vs broadcast domains , VLANs and Trunking, Spanning Tree Protocol (STP), Routing Details :Routing vs Switching,Types of routing: Static vs Dynamic,Routing table and path selection, Administrative Distance & Metric, Dynamic Routing Protocols),Routing protocol comparison .

 

PRACTICALS :

 

  1. What is the function of the MAC address table in a switch?
  2. How does the Spanning Tree Protocol prevent switching loops?
  3. What are collision domains and how are they different from broadcast domains?
  4. Compare the administrative distances of RIP, OSPF, and
  5. What happens during OSPF neighbor formation?

 

Module:4 Security Policies and Zones: configuration and troubleshooting:Advanced Threat Protection (ATP) ,IPSec VPNs: configuration and monitoring,High Availability: chassis clustering

,Security Director: centralized management,Logical Systems and Tenant Systems . PRACTICALS :

  1. What is the purpose of configuring security zones in a firewall?
  2. How do you configure a site-to-site IPSec VPN and what parameters are essential?
  3. What is Chassis Clustering and how does it ensure high availability?
  4. What is the function of Junos Security Director?
  5. How do tenant systems improve network segmentation in multi-tenant environments?

 

 

 

Module:5 SDN,NFV,5G

Software-Defined Networking (SDN)Network Function Virtualization (NFV) 5G and Beyond

 

PRACTICALS :

 

  1. What is the main difference between traditional networking and SDN?
  2. How does NFV help in deploying network functions like firewalls and routers?
  3. Explain the basic architecture of a 5G Core
  4. What are OpenFlow rules and how are they used in SDN?
  5. What is the purpose of Service Function Chaining in NFV/SDN environments?

 

PROJECTS :

  • Cisco-Based Full Network Topology with VLANs and Routing
  • Dynamic Routing with EIGRP and OSPF Failover Simulation
  • Redundancy Testing Using STP and EtherChannel
  • Advanced Cisco ACL and NAT Security Policy Framework
  • Campus Network with DHCP, VLANs, and Static Routing
  • Automated Junos Device Configuration and Backup System
  • Junos-Based Network Health Monitoring Dashboard
  • Interactive Junos CLI Simulation and Training Tool
  • Secure Junos Root Password Recovery Automation
  • Junos OS Upgrade and Rollback Pipeline with Logging
  • Cisco-Based Full Network Topology with VLANs and Routing
  • Dynamic Routing with EIGRP and OSPF Failover Simulation
  • Redundancy Testing Using STP and EtherChannel
  • Advanced Cisco ACL and NAT Security Policy Framework
  • Campus Network with DHCP, VLANs, and Static Routing
  • OSPF EIGRP Protocol Performance Analysis
  • VLAN Trunking and Loop Prevention Using STP
  • Routing Table Visualizer Using GNS3 and Python
  • Layered Network Design with ACLs and Redundant Links
  • Event-Based Routing Protocol Switch Using Python
  • High Availability IPSec VPN with Chassis Clustering
  • Zone-Based Security Policy Architecture for Enterprise
  • Tenant-Aware Logical Network Segmentation Framework
  • Simulated Attack Detection Using Advanced Threat Protection
  • Firewall Policy Automation via Juniper Security Director
  • Dynamic Traffic Routing Using SDN Controller
  • NFV-Based Virtual Firewall Deployment and Testing
  • End-to-End 5G Core Simulation with Open5GS
  • OpenFlow-Based SDN Traffic Optimization Platform
  • Multi-Vendor NFV Lab Environment with KVM/QEMU General Reference Books (Applicable Across All Modules):
    • “Computer Networking: A Top-Down Approach” by James Kurose & Keith Ross
    • “Data and Computer Communications” by William Stallings
    • Cisco Networking Academy Series – Official Cisco Courseware
    • Juniper Networks Day One Series – Available Free atnet

 

 

 

 

 

 

COURSE-04

 

Network Security and Threat Intelligence (56 Hours)

Course Code Course Title Credits Type

(T+P+Pj)

 

CUCN1122 Network Security and Threat Intelligence 4 2+1+1

 

Course Objectives (COBJ)

  • Understand and implement secure network communication using protocols, firewalls, IDS/IPS, and email security mechanisms.
  • Apply cryptographic principles to ensure confidentiality, integrity, authentication, andsecure VPN communication.
  • Implement identity, access management, and Zero Trust architecture in modern enterprise
  • Deploy endpoint, wireless, and cloud security techniques using industry tools and
  • Monitor networks using logging, SIEMs, and threat intelligence platforms to respond to security incidents.
  • Analyze and apply modern security architectures (SASE, XDR, SD-WAN) and evaluate real- world threat case studies.

Course Outcomes (CO)

CO

No.

Course Outcome Description

 

CO1      Configure and secure protocols, firewalls, IDS/IPS, and web/email systems for enterprise-grade protection.

CO2      Use cryptographic tools and VPNs to secure data and communication over untrusted networks.

CO3      Implement AAA, IAM, MFA, and Zero Trust models using tools like Keycloak, Okta, and Azure AD.

CO4      Apply endpoint, wireless, and cloud security principles using EDR, MDM, GuardDuty, and CSPM tools.

CO5      Analyze logs, detect anomalies using SIEMs, and build SOAR-driven incident response workflows.

CO6      Evaluate and simulate modern network architectures and threat scenarios with tools like Cisco Umbrella, XDR.

 

 

 

 

 

 

CO \ PO

 

PO1

 

PO2

 

PO3

 

PO4

 

PO5

 

PO6

 

PO7

 

PO8

 

PO9

 

PO10

 

PO11

 

PO12

CO1:            Secure protocols, firewalls,  

3

 

2

 

3

 

2

 

3

 

1

 

 

1

 

2

 

2

 

2

 

3

 

IDS/IPS, email systems
CO2:

Cryptographic tools,     VPN communication

 

3

 

3

 

2

 

2

 

3

 

1

 

 

2

 

2

 

2

 

2

 

3

CO3:    IAM,

MFA,    SSO,

Zero Trust

 

3

 

3

 

3

 

2

 

3

 

2

 

 

2

 

3

 

2

 

2

 

3

CO4:

Endpoint, Wireless, Cloud Security

 

3

 

3

 

3

 

2

 

3

 

2

 

 

1

 

3

 

2

 

2

 

3

CO5: Logging, SIEM, Incident Response, SOAR  

2

 

3

 

3

 

3

 

3

 

3

 

 

3

 

3

 

3

 

3

 

3

CO6: Modern architectures (SASE, XDR),

Case Studies

 

3

 

3

 

3

 

3

 

3

 

2

 

1

 

2

 

3

 

3

 

3

 

3

 

Module 1: Network Security Protocols & Devices

Secure Protocols: SSH, SFTP, HTTPS, SNMPv3, DNSSEC, Firewalls: Stateful, UTM, NGFW (Palo Alto, Fortinet), IDS/IPS: Signature vs Anomaly-based (Snort, Suricata, Zeek),Web Application Firewalls (WAFs),Email Security: SPF, DKIM, DMARC,Tools: Snort, Suricata, pfSense, Zeek

 

Practicals:

 

  1. Secure a file transfer using SSH and SFTP
  2. Configure SNMPv3 and test secure monitoring
  3. Enable DNSSEC on a DNS server and validate with DNS query tools
  4. Deploy and test Snort or Suricata for intrusion detection
  5. Configure firewall rules using pfSense for specific traffic
  6. Set up SPF, DKIM, and DMARC for a test email domain
  7. Simulate WAF functionality to block SQL Injection or XSS

 

 

 

Module 2 : Cryptography and Secure Communication

Symmetric vs Asymmetric Encryption (AES, RSA, ECC), Hashing (SHA-2, SHA-3, HMAC), Digital Signatures & Certificates (PKI, X.509), TLS 1.3 & HTTPS internals, VPN Technologies: IPsec, SSL VPN, Wire Guard, Tools: OpenSSL, GnuPG, WireGuard

Practicals:

 

  1. Encrypt and decrypt messages using AES and RSA with OpenSSL
  2. Generate digital signatures and verify using GnuPG
  3. Create and analyze a self-signed 509 digital certificate
  4. Capture and decode TLS 3 handshake using Wireshark
  5. Set up and test an IPsec tunnel between two hosts
  6. Deploy and test a WireGuard VPN with client/server setup

 

Module 3: Identity, Access, and Zero Trust

Authentication & Authorization: AAA, RADIUS, TACACS+, MFA, SSO, OAuth 2.0, OpenID Connect, Identity & Access Management (IAM), Zero Trust Architecture (ZTA), Network Access Control (NAC), Tools: Okta, Key cloak, Cisco ISE, Azure AD

 

Practicals:

 

  1. Configure AAA using RADIUS or TACACS+ with a simulated router
  2. Implement Multi-Factor Authentication (MFA) with Google Authenticator
  3. Deploy OAuth 0 + OpenID Connect using Keycloak and test SSO
  4. Create IAM policies on AWS or Azure and test least privilege access
  5. Simulate Zero Trust Architecture access control using Cisco ISE or Azure AD Conditional Access
  6. Integrate Okta with a sample web application for identity federation Module 4: Endpoint, Wireless & Cloud Security

Endpoint Detection & Response (EDR), secure wireless protocols: WPA3, 802.1X, Mobile device

management (MDM), Cloud security basics: Shared Responsibility Model, CSPM (Cloud Security Posture Management), CNAPP, Cloud provider tools: AWS Guard Duty, Azure Defender, Tools: CrowdStrike Falcon, Microsoft Defender, and AWS Config

 

Practicals:

 

  1. Simulate endpoint detection using Microsoft Defender or CrowdStrike trial
  2. Configure WPA3 wireless security with 1X authentication
  3. Set up Mobile Device Management (MDM) policy on Android/iOS using open tools
  4. Review AWS Shared Responsibility Model with hands-on IAM access policy testing
  5. Use AWS GuardDuty to detect cloud threats in a sandbox account
  6. Explore CSPM tools like AWS Config and assess misconfigurations

 

Module 5: Network Monitoring, Logging & Incident Response

Network visibility: Net Flow, sFlow, SIEM platforms (Splunk, ELK, Graylog), Security Orchestration Automation & Response (SOAR), Threat intelligence platforms (MISP, IBM X-

Force),Incident response lifecycle & playbooks, MITRE ATT&CK mapping, Tools: ELK Stack, Splunk, Security Onion, Graylog

 

Practicals:

 

  1. Capture and analyze NetFlow/sFlow traffic using nProbe or Wireshark
  2. Set up ELK Stack and visualize basic network log patterns
  3. Use Splunk to ingest logs and create alerts based on abnormal behavior
  4. Simulate a SOAR workflow using Splunk SOAR or TheHive-Cortex
  5. Create a basic incident response playbook based on MITRE ATT&CK tactics
  6. Ingest threat intel feeds into MISP and generate correlation indicators

 

Module 6: Modern Security Architectures & Case Studies

SASE (Secure Access Service Edge),Secure SD-WAN,XDR (Extended Detection and Response),IoT & OT network security,Blockchain in network security (identity, tamper- resistance),Case studies: Solar Winds, Colonial Pipeline, Log4Shell, MOVEit,Tools: Palo Alto Prisma Access, Cisco Umbrella, Trend Micro XDR

 

Practicals:

 

  1. Deploy SASE model using Cisco Umbrella or Prisma Access demo
  2. Implement secure SD-WAN simulation using Fortinet/FortiGate demo portal
  3. Explore XDR alerts and response actions using Trend Micro XDR free trial
  4. Simulate an IoT security attack (Mirai botnet) in a test lab
  5. Evaluate blockchain-based identity validation using Hyperledger Indy or similar
  6. Present a timeline and threat map of real attacks: SolarWinds, Log4Shell, using open source incident trackers

 

PROJECTS :

 

  1. Design of a Hybrid Encryption Framework using AES and RSA with OpenSSL
  2. TLS 3 Traffic Analysis and Certificate Validation System
  3. WireGuard-Based Secure VPN Infrastructure for Remote Teams
  4. Digital Signature and Certificate Management System Using GnuPG
  5. Threat Intelligence Dashboard for Emerging 2025 Cyber Threats
  6. Simulation of MITM and DDoS Attacks with Detection Using Wireshark & TCPDump
  7. Policy-Based Network Defense System Using ISO 27001 & NIST Guidelines
  8. Cyber Attack Lifecycle Modeling Using MITRE ATT&CK and Cyber Kill Chain
  9. Intrusion Detection and Prevention System Using Snort, Suricata, and Zeek
  10. Next-Gen Firewall Policy Engine with Application-Aware Rules (using pfSense/OPNsense)
  11. Secure DNS and Email Infrastructure (DNSSEC, SPF, DKIM, DMARC) for a Simulated Enterprise
  12. Design and Implementation of a Web Application Firewall for OWASP Top 10

  1. WPA3 Enterprise Wi-Fi Security with 1X and RADIUS Integration
  2. Cloud Threat Detection System Using AWS GuardDuty and Config Rules
  3. Endpoint Threat Detection Simulation using Microsoft Defender and CrowdStrike
  4. Cloud Security Monitoring using CSPM and CNAPP Tools on AWS
  5. Zero Trust Network Access Architecture with MFA and Conditional Policies
  6. SSO Integration for Web Applications Using OAuth 0 and OpenID Connect (Keycloak

+ Okta)

  1. Role-Based IAM System with Least Privilege Enforcement on AWS
  2. Network Access Control System using Cisco ISE or FreeRADIUS
  3. Security Incident Monitoring Dashboard using ELK Stack and Graylog
  4. SOAR-based Automated Incident Response Playbook using Splunk SOAR or TheHive
  5. Threat Intelligence Aggregator with MISP and ATT&CK Mapping
  6. Real-Time Network Anomaly Detection Using Flow Analytics and Custom Alerts
  7. Simulation of a Secure SD-WAN Architecture with Threat Defense Policies
  8. SASE Implementation and Traffic Inspection using Cisco Umbrella or Prisma Access
  9. Blockchain-based Identity Management for Secure Network Access
  10. Forensic Analysis and Threat Reconstruction of the SolarWinds or Log4Shell Attack
  11. XDR-based Cross-Layer Threat Detection Platform using Trend Micro XDR
  12. IoT/OT Network Security Framework with Anomaly Detection Capabilities

 

 

Core Books & Textbooks:

 

  • “Network Security Essentials: Applications and Standards”

Author: William Stallings

Covers: Core concepts of cryptography, secure protocols, firewalls, VPNs, and intrusion detection.

 

  • “Computer Security: Principles and Practice”

Authors: William Stallings & Lawrie Brown

Covers: End-to-end concepts of secure communication, access control, and policy-based security models.

 

  • “Cryptography and Network Security”

Author: William Stallings

Covers: Detailed cryptographic algorithms (AES, RSA, ECC), PKI, hashing, and digital signatures.

 

  • “Network Security with pfSense”

Author: David Zientara

Covers: Firewalling, IDS/IPS, NAT, VPNs with pfSense platform.

  • “The Web Application Hacker’s Handbook”

Authors: Dafydd Stuttard & Marcus Pinto

Covers: Real-world WAF bypasses, SQL injection

COURSE-05

Traffic Engineering in Computer Networks (56 Hours)

Course Code Course Title Credits Type (T+P+Pj)
Traffic Engineering in Computer Networks 3 1+2+0

 

 

Prerequisites: Computer Networks, Network Protocols, Basic Probability/Statistics Course Objectives:

  • Understand traffic behavior and modeling in computer
  • Learn the principles and techniques of traffic
  • Explore QoS (Quality of Service), MPLS, SDN, and traffic optimization
  • Design and simulate traffic-aware

 

Course Outcome

 

CO1        Understand traffic behavior, types, metrics, and basic models in computer networks.

CO2       Analyze and apply QoS techniques and traffic engineering mechanisms like MPLS and constraint-based routing.

CO3       Design and simulate SDN-based traffic-aware networks using real-time path computation and dynamic routing.

CO4       Perform traffic analysis, optimization, and simulation using modern tools such as NS- 3, Mininet, and Wireshark.

 

 

 

 

CO-PO-PSO Mapping Matrix

 

CO \ PO/PSO PO1 PO2 PO3 PO4 PO5 PO6–PO10 PO11 PO12 PSO1 PSO2
CO1 3 2 1 2 2 1
CO2 3 3 3 2 2 3 2
CO3 2 2 3 2 3 2 3 3
CO4 2 3 3 2 3 1 2 3 3

Module 1: Introduction to Traffic Engineering

 

Need for traffic engineering,Goals and benefits,Types of network traffic (data, voice, video),Performance metrics: throughput, delay, jitter, packet loss,Review of network topologies and protocols

 

Practicals:

 

  • Analyze and compare data, voice, and video traffic using iPerf and Wireshark.
  • Measure network performance metrics such as throughput, delay, jitter, and packet loss.
  • Simulate basic network topologies (star, mesh, client-server) using NS-3 or GNS3 to observe traffic behavior.

 

Module 2: Traffic Models and Characterization

 

Deterministic and stochastic traffic models,Poisson, Pareto, Markov models,Self-similarity and long-range dependence,Measurement tools and techniques

Practicals:

 

  • Model traffic using Poisson and Pareto distributions in NS-3 and Python (NumPy + Matplotlib).
  • Analyze self-similarity and long-range dependence using trace data from D-ITG or R.
  • Visualize traffic burstiness and packet arrival patterns to understand real-world traffic

 

Module 3: Quality of Service (QoS) and Resource Management

 

QoS parameters and architecture,QoS in IP networks: IntServ and DiffServ

 

,Admission control, scheduling, traffic shaping and policing,Weighted Fair Queuing (WFQ), Token Bucket, Leaky Bucket

 

Practicals :

 

  • Simulate Token Bucket and Leaky Bucket algorithms using NS-3.
  • Configure IntServ and DiffServ QoS architectures in GNS3 or Mininet, and evaluate effects on VoIP and HTTP traffic.
  • Implement and compare traffic scheduling algorithms such as FIFO and Weighted Fair Queuing (WFQ).

Module 4: MPLS and Traffic Engineering

 

MPLS architecture and components,Label Switched Paths (LSPs),Constraint-Based Routing (CBR),RSVP-TE and CR-LDP,Traffic engineering with MPLS

 

Practicals:

 

  • Set up MPLS routing with Label Switched Paths (LSPs) using GNS3 or Cisco Packet Tracer.
  • Implement Constraint-Based Routing (CBR) using RSVP-TE or CR-LDP in NS-3 or

Mininet.

  • Monitor label forwarding and analyze path selection based on bandwidth and delay

 

Module 5: Software-Defined Networking (SDN) and TE

 

Introduction to SDN,OpenFlow and controller-based TE,Path computation algorithms (Dijkstra, CSPF),Load balancing and dynamic rerouting

 

Practicals :

 

  • Design an SDN network using Mininet and program flow control using OpenFlow with

POX/RYU controllers.

  • Implement Dijkstra and CSPF algorithms in Python for traffic path
  • Simulate dynamic rerouting and load balancing by adjusting network conditions in real

 

Module 6: Traffic Analysis, Optimization & Simulation Tools

 

Network calculus,Optimization techniques (linear, convex)Simulation tools: NS-3, Mininet, GNS3,Real-world case studies: ISP backbones, data centers

 

Practicals:

 

  • Capture and analyze live traffic using Wireshark, NetFlow, and sFlow.
  • Use Python (CVXPY or PuLP) to formulate and solve traffic optimization problems (e.g., delay minimization).
  • Design and simulate a complete traffic-engineered network (e.g., ISP/campus) using NS- 3, Mininet, and SDN/MPLS integration in a mini-project.

 

Assessment Methods:

 

  • Midterm and Final Exam
  • Network simulation lab assignments
  • Case study report or mini-project
  • Quizzes and tutorials

Suggested Tools & Labs:

 

  1. Simulation tools: NS-3, OMNeT++, Mininet, GNS3
  2. Traffic generators: iPerf, D-ITG, Ostinato
  • Analysis tools: Wireshark, NetFlow, sFlow Recommended Textbooks & References:
    1. Traffic Engineering with MPLS – Eric Osborne & Ajay Simha
    2. Quality of Service in IP Networks – Srinivas Vegesna
  • Computer Networks – Andrew Tanenbaum, David Wetherall
  1. Research papers from IEEE/ACM on traffic engineering & SDN

Capstone Project (84 Hours)

Course Code Course Title Credits Type (T+P+Pj)
CUCN1126 Capstone Project 4 0+0+4

 

Course Description:

The major project is a capstone course that allows students to apply the knowledge and skills they have acquired throughout the program to a comprehensive project. This project involves identifying a research question, conducting a thorough analysis, and presenting the findings in both written and oral formats.

 

Course Objectives:

  1. Develop advanced research and analytical
  2. Apply theoretical knowledge to real-world
  3. Demonstrate proficiency in project planning, execution, and

 

Course Outcomes (COs):

  1. CO1: Summarize and integrate knowledge from various sources to define a research (Knowledge)
  2. CO2: Apply appropriate research methods and analytical tools to collect and analyze data. (Application)
  3. CO3: Evaluate and interpret research findings to draw meaningful (Analysis)
  4. CO4: Develop a comprehensive project report that demonstrates innovation and critical thinking. (Synthesis)
  5. CO5: Present project outcomes effectively through written reports and oral (Evaluation)

 

Module-wise Breakdown:

 

Module 1: Project Proposal (12 hours)

  • Topics: Identifying a Research Topic; Defining Objectives and Scope; Project Planning and

 

Module 2: Literature Review and Methodology (12 hours)

  • Topics: Comprehensive Literature Survey; Selecting Appropriate Research

 

Module 3: Data Collection and Analysis (12 hours)

  • Topics: Data Collection Techniques; Data Cleaning and Preprocessing; Analytical Methods and Tools.

Module 4: Implementation (12 hours)

  • Topics: Developing Models/Systems; Experimentation and

 

Module 5: Results and Discussion (12 hours)

  • Topics: Analyzing Results; Discussing Findings and

 

Module 6: Report Writing (12 hours)

  • Topics: Structuring the Final Report; Writing and

 

Module 7: Presentation (12 hours)

  • Topics: Preparing for the Oral Presentation; Presenting Findings to an

 

Textbooks and References:

 

 

CO-PO-PSO Mapping:

CO/PO/PSO PO1 PO2 PO3 PO4 PO5 PO6 PO7 PO8 PO9 PO10 PO11 PO12 PSO1 PSO2 PSO3
CO1 3 3 3 2 3 2 3 2 2 3 3 3
CO2 3 2 3 3 3 2 3 2 2 3 3 3
CO3 3 2 3 3 3 2 2 2 2 3 3 3
CO4 3 2 3 3 3 3 2 2 2 3 3 3
CO5 3 2 3 3 3 3 3 3 3 3 3 3

 

 

 

Session Plan for the Entire Domain:

COURSE -01  

MODULE-01 (Session :01-04)

  1. Overview & Types of Networks
    Reference: https://www.youtube.com/watch?v=UdxiqHt-DCg
  2. Network Topologies & Basic Devices
    Reference: https://www.youtube.com/watch?v=uHYSXkQ69OA
  3. OSI Model
    Reference: https://www.youtube.com/watch?v=GkdLeeBosbM

TCP/IP Model
Reference: https://www.youtube.com/watch?v=MtY1bYA1CGw

  1. Data Transmission Basics
    Reference: https://www.youtube.com/watch?v=z3f6RqGk4Uc

 

Material : (Session :01-04)

https://in.docworkspace.com/d/sIJyD4cWdAvfn48IG?sa=601.1037

 

MODULE-02 (Session :05- 10)

  1. Physical Layer & Media
    Reference: https://www.youtube.com/watch?v=Cdgqd9xsJUE
  2. Error Detection – CRC
    Reference: https://www.youtube.com/watch?v=Q9G-oEYnAgE
  3. Stop and Wait ARQ
    Reference: https://www.youtube.com/watch?v=PU2bZDJk5Jc
  4. Go-Back-N ARQ
    Reference: https://www.youtube.com/watch?v=7Eo4Kd3gkA0
  5. CSMA/CD & Ethernet MAC
    Reference: https://www.youtube.com/watch?v=8wptjECeGA8
  6. ARP & RARP
    Reference: https://www.youtube.com/watch?v=9b4vpnKZxig

Material : (Session :05-10)

https://in.docworkspace.com/d/sIEqD4cWdArDp48IG?sa=601.1037

 

 

MODULE-03 (Session :11 -14)  

  1. IPv4 Addressing & Subnetting
    Reference: https://www.youtube.com/watch?v=k3XvM-rpCFo
  2. IPv6 / CIDR / VLSM
    Reference: https://www.youtube.com/watch?v=z7Al3P8ShM8
  3. Routing Algorithms (RIP, OSPF, DV vs LS)
    Reference: https://www.youtube.com/watch?v=1KGC7Tp6HGo
  4. NAT & PAT
    Reference: https://www.youtube.com/watch?v=VHYgmaEU-lg

ICMP (Ping/Traceroute)
Reference: https://www.youtube.com/watch?v=x91Hq3D1uAQ

 

MODULE-04 (Session :15- 22)

  1. Packet Tracer – Topology Build Demo
    Reference: https://www.youtube.com/watch?v=ty0HMs48U1k
  2. TCP vs UDP
    Reference: https://www.youtube.com/watch?v=KY_Bqp2xDVc
  3. Flow vs Congestion Control
    Reference: https://www.youtube.com/watch?v=UnsSzTaN7vQ
  4. TCP 3-Way Handshake
    Reference: https://www.youtube.com/watch?v=WqV0TRTvvqA
  5. TCP Data Transfer Mechanics
    Reference: https://www.youtube.com/watch?v=cpiBFWQQuXI
  6. UDP Header & Services
    Reference: https://www.youtube.com/watch?v=eRIbNKBHFK4
  7. Socket Programming (TCP)
    Reference: https://www.youtube.com/watch?v=3QiPPX-KeSc
  8. Socket Programming (UDP)
    Reference: https://www.youtube.com/watch?v=RrywtW7nn2w

MODULE-05 (Session :23 – 24 )

  1. DNS Basics
    Reference: https://www.youtube.com/watch?v=mpQZVYPuDGU

DHCP
Reference: https://www.youtube.com/watch?v=Ae2CEb3d6hc

HTTP
Reference: https://www.youtube.com/watch?v=qcALGDn0zpk

FTP
Reference: https://www.youtube.com/watch?v=JK4c4gW3Glk

  1. SMTP
    Reference: https://www.youtube.com/watch?v=jq5eMiyXAS4

POP3
Reference: https://www.youtube.com/watch?v=RC2fIhxilyE

 

MODULE-06 (Session :25-30)

  1. Packet Sniffing (Wireshark)
    Reference: https://www.youtube.com/watch?v=qTaOZrDnMzQ
  2. DNS Cache Poisoning Demo
    Reference: https://www.youtube.com/watch?v=2QijB5GtNE4
  3. VPN Basics
    Reference: https://www.youtube.com/watch?v=R-JUOpCgTZc

IDS / IPS
Reference: https://www.youtube.com/watch?v=NLLN4ynrono

  1. Intro to Cryptography (Full Course Playlist)
    Reference: https://www.youtube.com/watch?v=2aHkqB2-46k&list=PL0E8468A8C94DD494
  2. AES (Symmetric Encryption)
    Reference: https://www.youtube.com/watch?v=O4xNJsjtN6E

SHA256 (Hashing)
Reference: https://www.youtube.com/watch?v=f9EbD6iY9zI

  1. Course Wrap-up / Revision Playlist
    Reference: https://www.youtube.com/playlist?list=PLXj4XH7LcRfCKbi7Najz8EIr1JymxoFBW

List of Projects/ papers/jobs/products to be done in domain: