Advanced Certification in Cyber Security

Topics:

• OS Security Models – Windows and Linux
• OS Vulnerabilities & Patch Management
• OWASP Top 10 Web Vulnerabilities
• Exploiting SQL Injection, XSS, CSRF (Hands-on Labs)
• Web Server Security & Secure Headers
• Configuration Hardening Techniques
• Secure Coding Principles (Input Validation, Encoding, Sanitization)
• SSL/TLS Configuration and Certificate Management
• Ethical Website Hacking with Burp Suite
• AI in Secure Coding: GitHub Copilot vs ChatGPT for Secure Code Suggestions

Case Studies:

• Case 1: Equifax Data Breach – Apache Struts Vulnerability
• Case 2: Log4Shell (Log4j) Vulnerability
• Mini Project: Perform Security Assessment of a Localhost Web App

Topics:

• Introduction to Hacking & Pentesting Methodologies
• Kali Linux Essentials
• Scanning and Enumeration with Nmap
• Vulnerability Exploitation with Metasploit
• Password Cracking using John the Ripper & Hydra
• Sniffing with Wireshark
• Wireless Penetration Testing
• Reverse Engineering Basics using Ghidra
• Documentation and Report Writing
• AI in Pentesting: Generating automated pentest reports using AI

Case Studies:

• Case 1: Real-world Wi-Fi Hacking Demonstration in Hotels
• Case 2: Uber Hack – Social Engineering Entry Point
• Mini Project: Penetration Test on a Simulated Company Environment (DVWA, OWASP Juice Shop)

Topics:

• SOC Architecture & Operations
• Log Management with Syslog, Logstash
• SIEM Tools – Splunk, ELK Stack, IBM QRadar
• Threat Hunting & Detection Use Cases
• Incident Response Lifecycle
• MITRE ATT&CK Mapping
• Alert Tuning & Playbook Automation
• AI in SIEM: Anomaly Detection with ML Algorithms
• Reading and Presenting Cybersecurity Research Papers

Case Studies:

• Case 1: Target Breach via HVAC Vendor – Role of SOC Monitoring
• Case 2: SIEM False Positive Analysis & Alert Tuning
• Mini Project: Build a Splunk Dashboard to Detect Suspicious Behavior

Topics:

• Shared Responsibility Model in Cloud
• AWS Identity & Access Management (IAM)
• Azure Key Vaults and Security Center
• Secure SDLC Integration (SAST/DAST)
• DevSecOps Concepts & Toolchain
• CI/CD Pipeline Security (Jenkins, GitHub Actions)
• Mobile App Security Basics (Android & iOS)
• Threat Modeling (STRIDE/DREAD)
• AI in CI/CD Security: Automated Policy Checks using AI tools

Case Studies:

• Case 1: Capital One Breach – AWS Misconfiguration
• Case 2: SolarWinds Supply Chain Attack
• Mini Project: Secure a Sample CI/CD Pipeline + Implement DevSecOps Controls

Topics:

• GDPR, HIPAA, Indian Cyber Laws
• Risk Management: Identification, Analysis, Mitigation
• ISO 27001, NIST CSF Framework
• Digital Forensics Lifecycle
• Disk Imaging Tools: FTK Imager, Autopsy
• Evidence Collection & Chain of Custody
• Forensic Reporting Techniques
• AI in GRC: AI-generated Audit Logs, Risk Reports
• Cybersecurity Research Paper Presentations

Case Studies:

• Case 1: Facebook GDPR Violation – Risk Assessment Gap
• Case 2: Samsung Leak – Digital Forensics in Corporate Espionage
• Mini Project: Conduct a Mock Forensic Investigation on a Compromised USB Drive

Project 1: Phishing Awareness Simulation

• Objective: Design and launch a simulated phishing campaign within a virtual organization.
• Tools: GoPhish, ChatGPT (to create email content), SMTP server
• Outcome: Students analyze employee responses and design training content.

Project 2: Network Vulnerability Assessment

• Objective: Scan a given network and produce a detailed vulnerability report.
• Tools: Nmap, OpenVAS, Nessus (trial), Wireshark
• Outcome: Submit technical documentation with CVSS scoring and remediation steps.

Project 3: Secure Cloud Architecture Design

• Objective: Architect a secure AWS or Azure-based web application environment.
• Tools: AWS/Azure Free Tier, IAM policies, Security Groups
• Outcome: Students present network diagram, policy definitions, and a risk register.

Project 4: Mobile Application Pentesting

• Objective: Perform security testing on an Android APK using emulator and OWASP tools.
• Tools: MobSF, APKTool, Android Studio, Genymotion
• Outcome: Findings documented with screenshots and OWASP MASVS checklist.

Project 5: SIEM Use Case Development

• Objective: Create custom SIEM rules to detect brute-force, privilege escalation, and data exfiltration.
• Tools: Splunk or ELK Stack
• Outcome: Interactive dashboard, alert threshold tuning, and incident report submission.

Project 6: Digital Forensics Investigation

• Objective: Analyze a compromised machine image and identify root cause and artifacts.
• Tools: Autopsy, FTK Imager, Wireshark
• Outcome: Forensic report including timeline, tool logs, and screenshot evidence.

Capstone Project 1: Simulated SOC Operation

• Teams: Blue Team (Defenders), Red Team (Attackers)
• Scenario: Ongoing attacks like data exfiltration, phishing, lateral movement
• Deliverables: Live dashboards, log correlations, incident playbooks, attack chains

Capstone Project 2: Secure DevOps Pipeline with Monitoring

• Goal: Build an app, integrate security into CI/CD, implement alerts
• Tools: GitHub Actions, SonarQube, Trivy, Slack alerting, OWASP ZAP
• Outcome: Report with pipeline diagram, threat modeling, secure practices

Capstone Project 3: GRC & Audit Readiness Simulation

• Objective: Simulate a corporate compliance audit for ISO 27001 or GDPR
• Deliverables: Policy templates, risk matrix, audit logs, executive briefing