| Introduction to cybersecurity | - Core Concepts: Assets, threats, adversaries, and security measures; the CIA triad (confidentiality, integrity, availability); and the AAA model (authentication, authorization, accountability).
- Design Concepts: Overview of the ten fundamental security concepts and the defense-in-depth model for layered protection.
- Control Types: Explanation of managerial, operational, and technical controls in securing systems.
- Access Management: Access control models including identification, authentication, authorization; and access types (role-based, rule-based, attribute-based, group-based); Windows and Linux permissions.
|
| Computers, Networks, and Internet Fundamentals | - Computer Architecture: Introduction to memory and storage devices, CPU, communication devices, operating systems, and the kernel.
- TCP/IP Networking: TCP/IP model and common networking protocols.
- Network Infrastructure: Essential design elements, such as hubs, repeaters, bridges, switches, routers, and firewalls.
- Protocols and Addressing: Ethernet, IPv4/IPv6 addressing, and MAC addresses.
|
| Networking and Internet Protocols | - Network Types and Structures: Overview of LAN, MAN, and WAN; subnetting, CIDR, VLANs, and DMZ configurations.
- Port and Socket Management: Explanation of inbound and outbound ports, and socket communication concepts.
- Essential Network Protocols: ARP, NAT, ICMP, TCP, UDP, IP, and DHCP, with their roles in communication and addressing.
- Domain Name System (DNS): Structure and function of DNS.
|
| Network Security and Threats | - Layer 2 Attacks: MAC spoofing, MAC flooding, and ARP spoofing.
- Layer 3 and 4 Attacks: Packet sniffing and IP spoofing at the network layer, and TCP sequence prediction, blind injection, and session hijacking at the transport layer.
- Layer 7 Attacks: DNS pharming, phishing, and DNS cache poisoning.
- Denial-of-Service (DoS) Attacks: Ping floods, smurf and fraggle attacks, SYN flood, fork bombs, and distributed and pulsing DoS attacks.
|
| Network Perimeter Security | - Network Protection Tools: Stateful, stateless, and next-generation firewall (NGFW).
- Proxy Services: Proxy servers, anonymizing proxies, and proxy firewalls.
- Secure Network Zones: Use of demilitarized zones (DMZs) for isolating external-facing services from internal networks.
- Threat Detection and Prevention: Introduction to VPNs for secure communication, and IDS/IPS for identifying and preventing intrusions.
|
| System Security | - Software Exploits: Buffer overflows, zero-day attacks, and rootkits.
- Malicious Code: Computer viruses (program, macro, boot sector, encrypted, polymorphic, metamorphic), worms, and Trojan horses.
- Internal Threats: Insider attacks, including logic bombs and backdoors, and defenses.
- Stealth and Privacy Threats: Botnets for large-scale attacks and privacy-invasive software, including adware and spyware.
|
| Introduction to Cryptography | - Cryptographic Foundations: Introduction to classical encryption methods and diffusion and confusion (Claude Shannon).
- Symmetric Cryptosystems: Ideal block cipher, Feistel network, DES, 3DES, and AES.
- Public-Key Cryptography: Overview of RSA algorithm and Diffie-Hellman key exchange for secure communication.
- Hash Functions: Security properties, common applications, and examples, inclduing the Secure Hash Algorithm (SHA).
|
| Internet Security | - Web Technologies: Fundamentals of the World Wide Web, including HTTP/HTTPS protocols, HTML structure, dynamic content generation, session management, and cookies.
- Client-Side Attacks: Session hijacking, phishing, privacy violations, and cross-site scripting (XSS), along with associated defenses.
- Server-Side Attacks: SQL Injection (SQLi), Local File Inclusion (LFI), Remote File Inclusion (RFI), with corresponding mitigation strategies.
|
| Application Security | - Database Security: Relational databases, SQL access controls (grant and revoke), two-phase commit protocol, and defenses against inference attacks.
- Email Security: SMTP and email encryption and authentication methods.
|
