|
Week - 1 |
Introduction to network security; security concepts and the CIA triad (confidentiality, integrity, availability); types of attacks, security services and mechanisms; the X.800 security architecture and threat modeling. |
|
Week - 2 |
Symmetric encryption and message confidentiality; block ciphers, DES and AES; modes of operation (ECB, CBC, CTR); authenticated encryption (AEAD). |
|
Week - 3 |
Data integrity and message authentication; hash functions, MAC and HMAC; public-key cryptography, RSA and Diffie-Hellman key exchange; digital signatures and non-repudiation. |
|
Week - 4 |
Key distribution and user authentication; Kerberos; X.509 certificates and public-key infrastructure (PKI); multi-factor authentication, single sign-on (SSO) and passkeys. |
|
Week - 5 |
Network access control and cloud security; 802.1X/EAP; cloud service models and the shared responsibility model; the Zero Trust approach. |
|
Week - 6 |
Transport-level security; the TLS/HTTPS handshake, cipher suites and forward secrecy; TLS 1.3 improvements; SSH. |
|
Week - 7 |
Web application security; the OWASP Top 10; SQL injection, XSS and CSRF; real-world cases (Log4Shell, SolarWinds). |
|
Week - 8 |
Wireless network security; WEP, WPA2 and WPA3; the 4-way handshake; attacks (KRACK, evil twin). |
|
Week - 9 |
Electronic mail security; PGP and S/MIME; sender authentication (SPF, DKIM, DMARC); phishing and business email compromise (BEC). |
|
Week - 10 |
IP security and VPNs; IPsec (AH and ESP), tunnel mode and IKE; virtual private networks (VPN); zero-trust network access (ZTNA). |
|
Week - 11 |
Malicious software; viruses and worms; ransomware; botnets (Mirai) and distributed denial-of-service (DDoS) attacks. |
|
Week - 12 |
Intruders and intrusion detection systems (IDS); signature- and anomaly-based detection; the base-rate fallacy; honeypots, SIEM and SOC. |
|
Week - 13 |
Firewalls; packet-filtering, stateful, proxy and next-generation firewalls (NGFW); DMZ design; web application firewall (WAF). |
|
Week - 14 |
Artificial intelligence and security (capstone); adversarial machine learning; prompt injection; deepfakes; privacy-preserving machine learning (PPML). |