• Introduction to Information Security
• Security Protocols and Basics of Cryptography
• LAN Security and Protection of Computing Resources
• OS security features and Security Policies
• Identity and Access Management
• IP Security and VPN
• Web Security and Email Security
• Wireless Security and Cloud Security
• Risk Management, Testing, and Assessments

• Algorithms and Information Processing
• Control Structures
• Boolean Logic and Numeric Data Types
• Strings, Text Files, Lists and Dictionaries
• Procedural Abstraction in Function Definitions
• Objects and Classes
• Networks and Client-Server Programming
• Graphics and Image Processing, GUI.
• Event and Event-Driven Programming

• Introduction to Operating Systems Security
• Secure operating systems, Security goals, Trust model, Threat model
• Trusted Operating Systems, Assurance in Trusted Operating Systems, Virtualization Techniques
• Access Control Fundamentals – Protection system – Lampson’s Access Matrix, Mandatory protection systems, Reference monitor
• Verifiable security goals – Information flow, Denning’s Lattice model, Bell-Lapadula model, Biba integrity model, Covert channels.
• Security in Ordinary OS – Unix, Windows, Linux, Solaris, Mobile OS
• Security Kernels – Secure Communications processor, Securing Commercial OS
• Secure Capability Systems – Physical Security and Network Security in Operating Systems
• Testing, Vulnerability Analysis, Patch Management

• Perimeter Concepts and TCP-IP Fundamentals
• Network Attacks and Perimeter Security
• Advanced Perimeter Protection
• Network-Based Intrusion Detection and Prevention (NIPS/NIDS)
• Email Content Security and Web Content Security.
• Endpoint Security Technologies
• Secure Network Access and Authentication
• VPN Technologies and Cryptography
• Layer 2 and Layer 3 Security Controls

• Fundamentals of Cloud Computing and Architectural Characteristics
• Security Design and Architecture for Cloud Computing
• Secure Isolation of Physical & Logical Infrastructure. Data Protection
• Access Control for Cloud, Monitoring, Auditing, and Management
• Introduction to Cloud Design Patterns
• Introduction to Identity Management in Cloud Computing
• Cloud Computing Security Design Patterns – I
• Cloud Computing Security Design Patterns – II
• Reporting. Policy, Compliance & Risk Management in Cloud Computing

• Introduction to principles of hacking and legal parameters
• Viruses, Trojans, Malwares, and OS Level Attacks and Counter Measures.
• Scanning, Sniffing, Social Engineering, Session Hijacking, and System Hacking.
• Footprinting, Enumeration, SQL Injection, and DOS Attacks
• Web Applications and Web Servers attacking methodology and Counter measures.
• IoT and Cloud Attacks and Defense Mechanisms
• Hacking Mobile and Wireless Networks and Counter measures.
• Firewall, IDS, and honeypot evasion techniques, evasion tools, and countermeasures
• Cryptology, Vulnerability Analysis, and Penetration Testing, Logging, and Audit.

• Penetration Test Planning, Techniques, and Scoping
• Information Gathering, scanning, and Analyzing Vulnerabilities
• Exploitation, Password Attacks and pivoting
• Traffic Analysis
• Domain Escalation and WebApps Attacks
• Database Penetration Testing
• Post- Exploitation Tasks
• Exploit developments
• Analyzing and Reporting Penetration Test Results

• Python for Offensive Testing, Python Environment
• Layer 2 Attacks
• TCP/IP Attacks
• Network Scanning and Sniffing with Python
• Wireless Pentesting.
• Foot Printing Web Server and Web Application
• DDoS Attacks, SQL and XSS Web Attacks, Client-Side Validation
• Advanced Scriptable Shell, Password Hacking
• Bypassing Perimeter, privilege escalation in windows

• Introduction to Malware Analysis and taxonomy
• Static Analysis Techniques
• Dynamic Analysis Techniques
• Reversing Malicious Code
• Malicious web and document files
• In-Depth Malware Analysis
• Examining Self-Defending Malware
• Advanced Reverse Engineering Techniques
• Binary Software Security and Software Forensics

• Introduction to IoT, Architecture, and Framework
• Platform and Integration, Connectivity
• Implementing IoT
• Remote Monitoring, Edge Computing, and Analytics
• IoT Vulnerabilities, Attacks, Risks and Counter measures
• BlockChain Introduction and Architecture
• Bitcoin, Ethereum, Hyper Ledger, and MultiChain
• Cryptonomics, Applications, and Exchanges.
• Blockchain Security. Vulnerabilities and Attacks, Risk Assessment and security mechanisms

• Fundamentals of Mobile Computing and Security.
• Introduction GSM Networks, UMTS Networks, LTE, and Security.
• Device Architecture and Application Interaction.
• The Stolen Device Threat and Mobile Malware.
• Mobile Data Storage and File System Architecture.
• Static Application Analysis.
• Dynamic Mobile Application Analysis and Manipulation.
• Mobile Penetration Testing.
• Emerging Trends in Mobile Security.

t

• Digital and Computer forensics fundamentals
• Overview of hardware, OS and file systems
• Data recovery, principles, and Validation
• Digital evidence controls
• Computer Forensic tools
• Memory Forensics and Volatility Framework
• Network Forensics and Mobile Forensics
• Reverse Engineering of Software Applications
• Computer Crimes, Legal issues, Laws and Acts

• Principles of Mobile Hacking and Digital Forensics
• Smartphone Overview, Fundamentals of Analysis, SQLite Introduction,
• Android Forensics Overview, and Android Backups
• Information gathering and exploitation processes
• Investigating Wireless Attacks
• Investigating Web Attacks
• Investigating Emails and Email Clients and crimes
• Android and iOS device forensics
• Software design and the boot process for smart devices
• Device Storage and Evidence Acquisition Techniques
• iOS Backups, Malware and Spyware Forensics, and Detecting Evidence Destruction
• Analyzing Advanced Mobile Attacks
• Understanding Mobile Hacking Techniques and Tools
• Open source tools, techniques, and best practices
• Report compilation, Evidence Analysis, and Report Writing

• Information Security Management Principles
• Information Risk
• Information Security Framework
• Procedural/People Security Controls
• Technical Security Controls
• Software Development and Lifecycle
• Physical and Environmental Security Controls
• Disaster Recovery and Business Continuity Management
• Role of Investigations and Forensics