Specialization Certification in Cyber Security

You will learn about the basic principles of confidentiality, integrity availability concepts policies, procedures, guidelines, standards administrative measures and technical measures, people, process, and technology.

150+ Hours of Learning | Specialization Certificate | Virtual Lab | Project Works

Limited no. of seats available | Delivery Mode: Recorded Lectures

Enroll and Pay Now Get in Touch

For any query related to our course kindly mail at prutor.ai@gmail.com or WhatsApp on 8953463074

Skills you will gain

Ethical
Hacking
Control
Hijacking
Attacks
Buffer Overflow
Bypassing
Software Testing
Memory Protection
SQL Injection
Network Security
Cryptography and Cryptanalysis
Data Structure

About this Specialization

This Specialization builds on the success of the specialization course in Cyber Security and will introduce fundamental concepts underlying the construction of secure systems, from the hardware to the software to the human-computer interface, with the use of cryptography to secure interactions. These concepts are illustrated with examples drawn from modern practice and augmented with hands-on exercises involving relevant tools and techniques.

How the Specialization Works

Take Courses

Prutor.ai Specialization is a series of courses that help you master a skill. To begin, enroll in the Specialization directly, or review its courses and choose the one you'd like to start with. When you subscribe to a course that is part of a Specialization, you’re automatically subscribed to the full Specialization. Visit your learner dashboard to track your course enrollments and your progress.

Hands-on Project

Every Specialization includes a hands-on project. You'll need to successfully finish the project(s) to complete the Specialization and earn your certificate. If the Specialization includes a separate course for the hands-on project, you'll need to finish each of the other courses before you can start it.

Earn a Certificate

When you finish every course and complete the hands-on project, you'll earn a Certificate that you can share with prospective employers and your professional network.

Course Fee 30,000 + 18% GST

Enroll and Pay Now

Program Syllabus in this Specialization

Fundamentals of Information Security

Topics to be covered

Module 1 - Part 1 - Definition of Information Security
- Introduction, reference books, learning objectives and what will we cover in module-1?
- What is the reality of IS and how do we define information security?
- What is the the history of information security (and what lessons can we learn from it)?
- What is today's environment from IS perspective?
Module 1 - Part 2 - Information Security Terminologies
- What is Information Security?
- What are we securing ourselves from 6 case studies?
- What is an information asset and what can i do with the information?
- What is the value of information (or it's critical characteristics)?
Module 1 - Part 3 - Goals of Information Security
- What is Information Security?contd...
- What are the goals of information security and what is CIA?
- Why do we need information security (IS) and what are the three roles in IS?
- What are the components of an information system and how do we secure them?
- What is good IT security and how do we balance security and access?
- What are the "7is for 5"
Module 1 - Part 4 - Implementation Issues of the Goals of Information Security - I
- What are the goals of information security and what are definitions of CIA?
- What is confidentiality and what are threats to it?
- What is integrity and what are the two basic principles of integrity?
Module - 1 - Part 5 - Implementation Issues of the Goals of Information Security - II
- How is rotation of duties useful and which systems require high integrity?
- What are some examples of threats to integrity?
- What is the need for IS control and how do we define controls?
- How do we define availability and what is denial of service?
Module 1 - Part 6 - Control Mechanisms for Information Security - I
- What are Internal Controls and why is costs benefit consideration important?
- Why do we need General Controls (GC) and what are the types of GC?
- Why do we need Segregation of information security duties within the systems function?
- What are the various duties within the Systems Function?
Module 1 - Part 7 - Access Control - Administrative and Technical
- Why do we need Access control (Physical control)?
- What are technical control or Logical control?
- What is identification and authentication and why access control is important?
- Why is Access Control Important and what is the problem with passwords / options for authentication?
- How are Passwords useful?
Module 1 - Part 8 - Passwords - Are they secure? - I
- What is the problem with passwords and how can passwords be cracked?
- How can "Brute Forcers" and port knocking DDoS the Users?
- What are the shadow password files and what are the password encryption algorithms?
- What are LAN Manager Password Hashes and what is the Syskey utility?
Module 1 - Part 9 - Passwords - Are they secure? - II
- Why are passwords insecure, What is the problem with Default Device Passwords?
- Why are passwords insecure, Why and how do people disclose their passwords and what are the solutions which help solve it?
- Why are passwords insecure, How can Passwords be Sniffed and how can it be prevented?
Module 1 - Part 10 - Passwords - Are they secure? - III
- Why are passwords insecure, How frequently should passwords be changed and why?
- Why are passwords insecure, What is the problem with initial Passwords and password reset mechanisms?
- Why are passwords insecure, The solution - Two factor authentication.
Module 1 - Part 11 - Multi factor Authentication - Challenges
- What is Two Factor Authentication and what are the challenges associated with it?
Module 1 - Part 12 - Application Level Control and Information Security Planning
- What are the security controls that can be applied at an application level (at input, processing and output)?
- What are the 3 important plans for Information Security? (Security Plan, Backup and Recovery Plan and Disaster Recovery Plan)
Module 1 - Part 13 - Information Security - Policy, Standard and Practice
- What are the 3 important information security documents and what is the difference between them? (IS Policies, IS Standards & IS Practices)
- How can we develop a security policy from scratch?
Module 1 - Part 14 - Policies governing Issues, Roles and Responsibilities
- What are the roles and Responsibilities in a security policy?
- What will be inside a Policy Document? (SPP, ISSP and SSP)
Module 1 - Part 15 - Managing changes in Information Security Policies
- How do we handle changes to Information security Policy and what is clean desk policy?
- What is security analysis?
- What is security SDLC, IS Blueprints and some sample policies?
Module 1 - Part 16 - Spheres of Information Security
- What is another way of looking at the administrative controls and technical controls?
- What is the overall Framework for management, operational and technical controls?
- How does Defense in Depth and Security Perimeter help with security standards? and what are their key components?
- What is SETA and why is it required?
- What are the challenges and practical issues in implementing Information Security and why should we implement IS?
Module 2 - Part 01 - Protecting your Personal Computer - I
- Why do we need to protect our personal computer?
- Why IS is the backbone of an organization and what are the current technology challenges in securing a computer?
- What are the latest attack trends to compromise a computer and what is identity theft (Challenge 1)?
Module 2 - Part 02 - Protecting your Personal Computer - II
- What is malicious software and can we look at some statistical data around malware (Challenge 2)?
- What are the current malware trends (spyware, keyloogers, rootkits, mobile malware and combined attack mechanisms)?
- What are the Latest Trends in Patch Management and issues related with it?
- Why are patches important (a look at the statistics) how are vulnerabilities exploited and what is ransomware?
Module 2 - Part 03 - Protecting your Personal Computer - III
- What is Distributed Denial of Service (DDoS)?
- Best Practices to Help Protect Your Digital Assets
- What is Anti-Virus and antii Spyware Software and why is updating windows and other applications important?
- What are Personal Firewalls and what are the wireless security and other security best practices?
- What is The Need for Information Security Professionals?
Module 2 - Part 04 - Cloud Computing (Basic Definitions) - I
- What is cloud computing and how can we define it?
- What is the Architecture of cloud computing?
- What are the Essential Characteristics of cloud computing (cloud architecture 1/3)
- What are the Cloud Service Models (IaaS, PaaS and Saas) (cloud architecture 2/3)?
Module 2 - Part 05 - Cloud Computing (Deployment) - II
- What are the cloud deployment models (Public, Private and Hybrid)? (cloud architecture 3/3)
- What are the Business and Technical Benefits of Cloud Computing?
- What are the Opportunities that the end consumer gets in Cloud Computing?
Module 2 - Part 06 - Cloud Computing (Security Issues) - III
- What are the Security Issues in Cloud Computing (on OnPremise, On Premise hosted, IaaS, PaaS and Saas)?
- Why are Companies still afraid to use clouds (what does the data say)?
- What are the causes of Problems Associated with Cloud Computing?
Module 2 - Part 07 - Cloud Computing (Trust and Risk) - IV
- Can we look at loss of control, trust and multi-tenancy in the cloud in more detail?
- What are the multi-tenancy Issues in the Cloud?
- What is the Taxonomy of Fear (CIA)?
Module 2 - Part 08 - Cloud Computing (Security and Privacy Issues) - V
- What is cloud security and privacy?
- What is a threat model and its issues?
- What is attacker capability and its challenges?
- What is infrastructure security and the network level?
Module 2 - Part 09 - Cloud Computing (Security and Privacy Issues) - VI
- What is the host level and host level security ?
- Can we look at a case study: Amazon's EC2 infrastructure?
- What is local host security?
- What is the application level and what is the data lifecycle?
Module 2 - Part 10 - Cloud Computing (Application and Data level security) - VII
- What is the data lifecycle?
- What is data security and storage?
- Why IAM?
- What is privacy? What are the key privacy concerns and storage?
- What is destruction and auditing, monitoring and risk management?
Module 2 - Part 11 - Cloud Computing (Summary) - VIII
- What happens when there is a privacy breach and who is responsible for protecting privacy?
- What are the possible solutions and security issues in the cloud(Part III)?
- What is third - Party cloud computing and what are the known issues and new vulnerabilities and attacks?
- How can we minimize lOSs of control?
Module 2 - Part 12 - Standard I
- What are the different approaches to information security?
- What is COBIT ?
- Why do we need a framework? and who really needs a framework?
- What are the basics of COBIT? what are its enterprise benefits and stakeholder value?
- What is the COBIT 5 framework and what are its principles?
Module 2 - Part 13 - Standard II
- What are COBIT 5 enablers?
- What is governance and management (in COBIT)?
- Is COBIT: one complete business framework for the governance of enterprise it (GEIT) and how is it implemented?
- What is ISO 27001?
- Can we look at a high level view of ISO 27001 and features?
- What are the changes in ISO 27001: 2005 to 2013?
Module 2 - Part 14 - Standard III
- What is the information technology act, 2000 and amendment 2008 to it?
- What is cyber law and some important definitions?
- What are chapter XI - offences cyber crime related important sections?
Module 3 - Part 1
- What is a vulnerability ans where do they come from?
- What is a threat, what are threat sources and categories of threat and example?
- What is the relationship between risk, threats and vulnerabilities?
- What are digital threats, and their definition? what are computer viruses and other "malicious programs?
Module 3 - Part 2
- What exactly is a virus? and what isn't a virus - common assumptions?
- What are the beginnings, design factors and life cycle of viruses?
- Viruses - what's with the names? what is the taxonomy of malicious programs and what are virus phases?
- What are the various types of viruses, are there any "Good" types of viruses?
- What are the characteristics of viruses and their classification by infection targets?
Module 3 - Part 3
- What are macro viruses, file (parasitic) viruses, file infectors, cluster viruses?
- What are various types of viruses (Companion/Spawn Viruses, Source Code / VbScript / VBS Viruses) and what are the generations of virus detection softwares?
Module 3 - Part 4
- What are various antivirus technologies and packages?
- What is a WORM?
- Can we look at the history of WORMs?
- Can we look at the history of WORMs?
- What are internet WORMs and what are the components of WORMs?
Module 3 - Part 5
- What is a command interface, intelligence database and what is a unix WORMs and a trojan?
- What are trojan horses, backdoors and logic bombs?
- What is a bizarre code, UNIX backdoors and boot Kit, what is the cost of malware?
- What are phishing, form phishing, clickjacking and scareware, and tapping your cell phone and conclusion?
Module 3 - Part 6
- What is a BCP (Business Continuity Plan)?
- What is business impact analysis (BIA) / event damage classification and disasters and impact / recovery time?
- Can we look at the definitions and classification of services?
- How do you determine the criticality of business processes and what are rpoand rto and bia summary, disruption vs. Recovery cOSts and conclusion?
- What is RAID / data mirroring?
Module 3 - Part 7
- What are high availability solutions and network diasaster recovery?
- What is cloud computing? what are the different cloud deployment models and the major areas of security concerns?
- What are the alternative recovery strategies?
- What is business continuity process (BCP) and data storage protection?
- What is disaster recovery testing and what are the contents of DRP (Disaster Recovery Plan)?
Module 3 - Part 8
- What are the major concerns for a BCP/DR plan and what are the different disaster recovery responsibilities?
- What is bcp documents and business continuity overview?
- How is MTBF = MTTF + MTTR and what is disaster recovery test execution?
- What are the disaster recovery test types, testing objectives, testing procedures, test stages and gap analysis?
- How can we insure and audit BCP?
Module 3 - Part 9
- Can we look at some questions related to security?
- What is the incident management and its definitions?
- What are goals and benefits of incident management and incident life clycle?
- How is I+U=P?
Module 4 - Part 1
- Can we look at an introduction to network security and cryptography, and how can we protect information?
- What is symmetric key cryptography, how do we manage its keys, and what is public key cryptography and its issues?
Module 4 - Part 2
- What are strengths of public key cryptography?
- What is public key issue?
Module 4 - Part 3
- What is a network and what are its types?
- What are the benefits of a network and risks of network computing?
- What is communication media and what are its types?
- How are networks categorized?
- What hardwares and softwares are used for networking?
- What is a firewall and what are the important network characterstics for security?
Module 4 - Part 4
- What are implications of protocol type and the various threats to network?
- An example: SYNflood and normal syn behavior?
- General network denial of service attacks and distributed denial of service attacks and why are these attacks made and what are the different methods of attacks?
- How do you defend these attacks what are the different complicating factors?
- What are the various basic defense approaches and traffic control mechanisms?
- What is source address filtering?
- What are other forms of filtering and realistic limits on filtering?
Module 4 - Part 5
- What are rate limits and padding? what is routing control?
- What are firewalls and perimeter defense, and what are the weaknesses of perimeter defense models and defense in depth?
- What are the basics of firewalls and what is a fundamental problem with firewalls and filtering based on ports and firewalls and transparency and conclusion?
Module 4 - Part 6
- Introduction to penetration testing
- What does a malicious hacker do and what is the perspective of an adversary?
- What are the different types of attacks and their examples?
- What are the techniques and methods of security testing?
- What is penetration testing?
Module 4 - Part 7
- Why do you need penetration testing (PT)?
- What are the legal aspects of (PT)?
- What is vulnerability assessment and what is the difference between vulnerability assessment and penetration test?
- What are the limitations of of vulnerability assessment?
- What are the different types of tests and their examples?
- What is the process of penetration testing?
- What are the different types of penetration tests and when testing is necessary?
Module 4 - Part 8
- What are the common and popular tools used for penetration testing?
- What are data center audits?
Module 4 - Part 9
- What is application software?
- How can we check transaction validation and process controls?
- What are data file control procedures and database security?
- What are security breaches and some of the largest database breaches?
- What are three goals of database security and can we look at an example?
- What are common database threats and how can we implement database security?
- Can we look at an example breach and dbms security?
Module 4 - Part 10
- What are DBMS security guidelines and can we look at an example (Row Level Access)?
- What is application security and security Breach TJ Maxx?
- What are database vulnerabilities and database auditing?
- What is SAP security and desktop security?
Module 5 - Part 1
- Can we look at an introduction to computer security?
- What is a computer and its resources?
- What is motherboard and what are the different layers in computation?
- What is an operating system and kernel?
- Is OS a program, what are the functions of an OS?
- What are the different categories of an operating system and their examples?
- What is windows security architecture, and what are its components (Security Reference Monitor (SRM) and Local Security Authority (LSA)?
Module 5 - Part 2
- What is domain and windows login example?
- What are windows privileges, Access Control List (ACL) and its example?
- What are integrity control and six integrity levels?
- What is MIC: integrity control and user account control?
- What are UAC consent UI : type 1, type 2, type 3, and what is biba model?
- What is the linux security model?
Module 5 - Part 3
- What are set gidand directories, kernel spaceand user space?
- What are mandatory access controls?
- Can we evaluate : windows vs. linux design, windows design decisions and linux design flaws/poor design decisions?
- What are windows vulnerabilities and linux vulnerabilities?
- Can we look at the means of evaluating metrics and example: Microsoft Security Bulletin MSO8-067-critical?
- Can we evalute : windows vs. linux vulnerabilities, what are the CERT: query results for keywords "microsoft" and "linux"?
Module 5 - Part 4
- What is system Hardening?
- What are windows defenses, account defenses, network defenses and browser defenses?
- What is cryptographic services and what is linux system Hardening?
- What are OS-level security tools and techniques?
- What is OS installation and patch management?
Module 5 - Part 5
- What are network access controls?
- How can we use iptables for "local firewall"?
- What are antivirus software, user management and password aging?
- What is root delegation and logging?
- What is application security (Hardening) [ Sub topics - running as unprivileged User/Group, running in "Chroot" jail, modularity, encryption, logging]?
Module 5 - Part 6
- What are the OS security capabilities: linux vs. windows?
- What are security baselines (Disabling Nonessential Systems, Viewing Services, Disabling Nonessential Systems and Hardening Operating Systems)?
Module 5 - Part 7
- How do we apply updates and secure the file system?
- What is Hardening application, servers and updates?
- What are firmware updates?
- What is network configuration and configuring packet filtering?
- What are cold boot attacks?
Module 6 - Part 1
- Can we look at introduction of Web Application security?
- What are websiites and Web Applications?
- What is Web Application - breach the perimeter?
- What is HTTP and HTTP request - GET?
Module 6 - Part 2
- What is HTTP request-POST and GET vs. POST securityand what are Web Application vulnerabilities and why do they occur?
- What are the categories of Web Application vulnerabilities and areas where they occur?
- What are the categories of Web Application vulnerabilities ?
Module 6 - Part 3
- How to secure a Web Application?
- What are examples of phishing attacks?
- What are some whaling and its examples?
- Why Web Application security is a high priority and website attackers by country (Incapsula,2012)?
- What are the top 5 internet security threats (RSA, 2012)?
- What is Advanced Persistent Threat (ATP), Stuxnet (2009-2011) and big data company threat example?
Module 6 - Part 4
- Can we look at an overview of OWASP and some OWASP projects?
- What are OWASP top 10 and top 10 risk rating methodology Iand II?
- What is CWE/SANS and can we compare OWASP vs. CWE/SANS?
- In Ex-A6/2007 - what information is leaked here? and possible information harvest?
- How to handle a failed login attempt? And how can we protect it?
Module 6 - Part 5
- What is A1: injection - injection and some simple authentication query?
- What is A2: broken authentication and session management?
Module 6 - Part 6
- What are the guidelines for strong passwords and password strength advisers with examples?
- What is two-factor-authentication?
- What is A3: cross-site scripting(XSS)?
- What is A4: insecure direct object reference and protection?
- What is A5: security misconfiguration, typical impact and protection?
Module 6 - Part 7
- What is A6: sensitive data exposure?
- What is A7: missing function level action control and A8: Cross Site Request Forgery (CSRF)?
- What is A9: using known vulnerable components?
- What is A10: unvalidated redirects and forwards?
- What is secure SDLC (Secure Software Development Life Cycle)?
Module 6 - Part 8
- What are some of reference books, CDs/DVDs, links and important points for further reading?

Information Security - II

1. Information Security-01
  - Introduction (Open Video)
  - How the computer architecture has evolved?
2. Information Security-02
  - What is the effect of ignorance in security?
  - Why there is an ignorance and why is Security an Issue?
  - What is the security in Operating Systems?
3. Information Security-03
  - What is a function call?
  - What is a Stack and how it is used for function calls?
4. Information Security-04
  - What is a Stack Frame and what is the Buffer Overflow Vulnerability?
  - What is Stack Smashing?
5. Information Security-05
  - What is the concept of Virtual Machine Based Rootkits (VMBRs)?
  - How to get a VMBR installed and what it can do?
  - Why Security is very challenging?
  - Doubt Clearing Session
6. Information Security-06
  - How architecture and security are related?
  - What is Security from the point of view of Hardware?
  - What is Memory Isolation and Code Privilege?
  - Doubts clearing session
7. Information Security-07
  - What is Computer Organization and Structured Computer Organization?
  - What is the concept of Memory Management?
  - What is Ease of Programming?
  - What is Process Mobility?
8. Information Security-08
  - How CISC and RISC differ from each other?
  - What are the different Intel General Purpose Registers, 64-Bit and 128-Bit Registers?
  - What are the different Intel Segment Registers?
  - Why Multiple Segments are needed and what is Multiprocess Context Switching?
  - What are the different Control Registers?
9. Information Security-09
  - What are Extended Flags (EFLAGS) and what are the various flag registers?
  - What are Extended Flags (EFLAGS) and what are the various flag registers (Continued)?
10. Information Security-10
  - How x86 processor works?
  - What is Protected Mode?
  - What is a Limit?
  - What are privilege Levels?
  - What protections can be achieved due to the privilege levels?
11. Information Security-11
  - How to implement protection and what are the different types of Descriptor Tables?
  - What is the structure of a Descriptor?
  - How to update Segment Registers?
12. Information Security-12
  - What are Descriptor Tables and what is the structure of a Selector?
  - What is the Interprocess protection?
  - What are some of the architectural issues?
  - What caution is needed?
13. Information Security-13
  - What is the concept of Virtual Memory?
  - What are the Paging fundamentals?
  - What is Paging Technique (Single Translation)?
  - What is Paging Technique (Multiple Transaction)?
  - What would be an entry in page directory and page table?
14. Information Security-14
  - What is Task Switching?
  - What is a Task State Segment?
  - What is Task Switching Process?
  - How to handle interrupts?
  - How to handle interrupts (Continued)?
15. Information Security-15
  - What is a Segment Descriptor?
  - What are the types of Segment Descriptors?
16. Information Security-16
  - What are Descriptor Tables and where are they located?
  - What are Segment Selectors and how to load them into segment registers?
  - What is Local Descriptor Table?
17. Information Security-17
  - What are Privilege Levels and what is Privilege Protection?
  - What is Type 1 Privilege Checking and what are I/O Instructions?
  - What is Type 2 and Type 3 Privilege Checking?
18. Information Security-18
  - How to change Privilege Level and what are Conforming Code Segments?
  - What is Call Gate Descriptor?
  - How to call Higher Privileged code?
19. Information Security-19
  - Review of Segmentation and Privilege Levels (Part-1)
  - Review of Segmentation and Privilege Levels (Part-2)
  - Review of Segmentation and Privilege Levels (Part-3)
20. Information Security-20
  - How to Invoke virtual box (Part-1)
  - How to Invoke virtual box (Part-2)
21. Information Security-21
  - Programming assignment related to Segmentation (Part-1)
  - Programming assignment related to Segmentation (Part-2)
  - Programming assignment related to Segmentation (Part-3)
22. Information Security-22
  - Programming assignment related to Segmentation (Part-4)
  - Programming assignment related to Segmentation (Part-5)
  - Programming assignment related to Segmentation (Part-6)
  - Programming assignment related to Segmentation (Part-5)
23. Information Security-23
  - What are Interrupts and their importance?
  - How interrupts differ from exceptions and what are the different types of interrupts and exceptions?
  - What are the security implications of interrupts and what are the different IDT Descriptors?
  - What are the protection mechanisms on Intel x86, what are the types of Control Transfer and error codes for Exception handlers?
24. Information Security-24
  - Demonstration of Programming assignment related to Interrupt service routines (Part-1)
  - Demonstration of Programming assignment related to Interrupt service routines (Part-2)
25. Information Security-25
  - Demonstration of Programming assignment related to Interrupt service routines (Part-3)
26. Information Security-26
  - What is the concept of Paging (Part-1)?
  - What is the concept of Paging (Part-2)?
27. Information Security-27
  - Programming assignment related to Paging (Part-1)
  - Programming assignment related to Paging (Part-2)
  - Programming assignment related to Paging (Part-3)
28. Information Security-28
  - Programming assignment related to Paging (Part-4)
  - Programming assignment related to Paging (Part-5)
29. Information Security-29
  - What is a Task and Task Management and why it is important in Information Security?
  - What information a Task should have and what is Task Switch Management?
  - What is the Task Switching Method 1?
  - What is the Task Switching Method 2?
  - What are the different types of Task Switching and how Task Switch happens?
30. Information Security-30
  - Programming assignment related to Task Switching (Part-1)
  - Programming assignment related to Task Switching (Part-2)
  - Programming assignment related to Task Switching (Part-3)
31. Information Security-31
  - Programming assignment related to Task Switching (Part-4)
  - Programming assignment related to Task Switching (Part-5)
  - Programming assignment related to Task Switching (Part-6)
32. Information Security-32
  - Programming assignment related to Task Switching (Part-7)
  - Programming assignment related to Task Switching (Part-8)
  - Programming assignment related to Task Switching (Part-9)
33. Information Security-33
  - Programming assignment related to Task Switching (Part-10)
  - Programming assignment related to Task Switching (Part-11)
  - Programming assignment related to Task Switching (Part-12)
34. Information Security-34
  - What are the basic Cryptographic Principles?
  - What is Symmetric Key Cryptography and Public Key Cryptography?
35. Information Security-35
  - What are Public Key Encryption Algorithms and what is Authentication?
  - What are Hash Functions?
  - What are Digital Signatures and message digests, How message digests are related to digital signatures?
  - What are the different Hash Function algorithms and Public Key Certificates?
36. Information Security-36
  - What are the iMX6 Chip Security components?
  - What are TrustZone Security Extensions?
  - What is SNVS, CAAM and CSU?
  - What is TrustZone WatchDog feature, IMX6 Boot Sequence and USB Boot Flow?
  - Why IMX6 Trust Architecture is required and what are its features?
37. Information Security-37
  - What is High Assurance Boot (HAB) in IMX6?
  - What are the HAB Enablement Tools and what is Manufacturing tool ?
  - What is Freescale Reference CST and security configuration of?
38. Information Security-38
  - Case Study based on designing and developing a secure tablet device based on iMX6
39. Information Security-39
  - What is the 7 Layer OSI Model and how processing takes place at each layer?
  - What is Packet processing and Frame processing?
  - What are Switches and Routers and what is Network Security?
40. Information Security-40
  - How routers have evolved and what is their architecture (Part-1)?
  - How routers have evolved and what is their architecture (Part-2)?
41. Information Security-41
  - How does the Network Processor Architecture look like?
  - What are the security aspects of Network Processors (Part-1)?
  - What are the security aspects of Network Processors (Part-2)?
42. Information Security_ Final Quiz

Cryptography and Network Security

Topics to be covered

Introduction
- Why do we need to study cryptography?
- What is the communication game?
- What is the protocols concept and what are the properties of function f(x)-1 and f(x-2)?
- What is the assumed protocol?
- What is the problem arising with the new concept?
- What is coin flipping over the telephone?
- Can we look at security analysis and an example?
- How can we get the function f(x)?
- How can we calculate the success probability?
- What is a planning strategy?
- What is the probability of cheating case 1 and 2?
- How can we calculate success probability experimentally?
- What is the magic function?
Overview of Modern Cryptography
- What are the three goals of modern cryptography?
- What are the confidentiality, integrity, availability and mechanism?
- What are cryptographic attacks?
- What is the objective of cryptanalysis?
- What is the non-cryptanalytic attack and confidentiality threat?
- What are the threat to integrity 1, 2 and 3 and the threat of availability?
- What are active and passive attacks?
- What are the security services?
- What is the security mechanism?
- What are the digital signature and authentication and more on security mechanism?
- What is the relationship between service and mechanism?
- What are cryptographic algorithms and what are steganography / modern techniques?
Introduction to Number Theory
- What are congruences and their properties?
- What are equivalence and residue class of modulo m and examples of class 1 class and 2?
- What is the theorem on equivalence and residue?
- Can we look at an example on the given theorem?
- What are the field theory (semigroups) and field theory (implication)?
- What is monoid and example on neutral elements?
- What are the residue class ring and unit group?
- What are zero divisors?
- What are Field and Euler's Totient Function and properties of Φ and an important result?
- What is Fermat's Little Theorem?
Probability and Information Theory
- What is the importance of Probability and cipher uncertainty?
- What are Semantic Security and the notions of security and computational security?
- What are probability definitions (statistical and classical)?
- What is the probability distribution of random variables and what is Uniform and Binomial distribution?
- Law of large numbers 1.
- What is the law of large numbers 2?
- What are the Birthday paradox problem, actual problem and computing problem 1 and 2?
- What is an application of the paradox problem?
- What is Floyd's cycle-finding algorithm?
- How can we measure information and entropy?
Classical Cryptosystems
- Definitions behind cipher designs 1 and 2.
- What is Kerchoffs Principle and what is Cryptographic Communication?
- What are Classical Cryptography and simple substitution?
- What are the properties required for encryption and what is substitution cipher?
- What are the affine cipher and its inverse?
- What are the generalized affine cipher and an example of it?
- What are some Important Results 1 and 2?
- What are monoalphabetic, polyalphabetic and vigenere ciphers?
- What are hill ciphers and permutation ciphers?
Cryptanalysis of Classical Ciphers
- What are Kerckhoff's principle and the models of cryptanalysis 1 and 2?
- What is the statistical analysis?
- What is cryptanalysis of a monoalphabetic, affine and vigenere cipher?
- What is the Kasiski test?
- What is an index of coincidence 1?
- What is an index of coincidence 2?
- What is the mutual index of coincidence?
- What is computing mutual index?
- Can we look at two examples of vignere cipher?
- What is cryptoanalysis of hill cipher?
Shannons Theory
- What are Shannon's theory and unconditional security?
- What are a prior and a posteriori probabilities?
- What is perfect secrecy 1 and 2?
- What are an example on perfect secrecy 1 and 2 and generalization of example?
- Can we look at an example on shift cipher with perfect secrecy and its mathematical formulation?
- What is the theorem on perfect secrecy?
- What are cryptographic properties 1 and 2?
Shannons Theory (Contd...1)
- What is the one-time pad, unconditionally secured scheme and practical problems?
- Can we revisit entropy?
- What is Huffman encoding with an example?
- Can we look at more results on entropy?
- What is the proof of the theorem 1 and 2?
- Can we compare perfect cipher with ideal cipher?
- What is unicity, brute force attack, spurious keys, an entropy of plain text and redundancy?
Shannons Theory (Contd...2)
- What is protection against brute force?
- What are spurious keys, second-order approximation and redundancy?
- What is the lower bound of equivocation of the key?
- What are the possible keys?
- What is the lower bound of the spurious key?
- What is unicity distance and unicity distance for substitution ciphers?
- Can we look at an example on endomorphic cipher?
- What is the proof of commutative ciphers?
- What are idempotent ciphers and what are the conclusions drawn?
- What is the concept of rounds?
Symmetric Key Ciphers
- What is symmetric key setting and types of symmetric key ciphers?
- What are full-size key ciphers?
- What are permutation ciphers and partial-size key ciphers 1 and 2?
- What are the components of modern block ciphers?
- What are diffusion (P) boxes, S box and other components?
- What are the properties of EXOR?
- What is the diffusion and confusion data flow diagram?
- What are the practical ciphers (Feistel cipher)?
- What is Feistel permutation?
Block Cipher Standards (DES)
- What are data encryption standards and DES numerology?
- What are initial permutations and DES expansion table?
- What is S box table with decimal values and what are the properties of S box?
- What is DES subkey?
- Some important points about DES and an exercise.
- What are the weak keys?
- What is sample round key generation and multiple DES?
- What is meet in the middle attack and security of 2DES?
Block Cipher Standards (AES)
- What are the finite fields and complex fields?
- What is a polynomial over a field?
- What are the operations on a polynomial?
- Can we look at an addition example?
- What is multiplication operation, irreducible polynomial and an example of multiplication?
- What is the concept of a generator( Fernets Little theorem)?
- What is the proof of the theorem?
- What is the AES and Rijndael algorithm?
- What is the difference between Rijndael and AES?
- What are the AES Sbox and AES Sbox Affine mapping?
- What are the mix columns?
Block Cipher Standards (AES) (Contd.)
- What is the AES key schedule?
- What is the key expansion?
- What is the key scheduling algorithm?
- What is the round constant?
- when nk>6 and an example on different key sizes
- What is the algorithm of encryption process?
- What is the inverse cipher (description)?
- What is the algorithm of the decryption process?
- How can we push a linear transformation using an XOR, steps for a two-round variant and implementation on modern processors?
- How can we make AES computation fast, some further reading and an exercise?
- What happens when the number of rounds of cipher is fixed?
Linear Cryptanalysis
- What is the cipher transformation?
- What is the definition and algorithm of SPN ciphers?
- Can we look at an example of Gpig cipher and modification of SPN structure and key scheduling of the cipher?
- What is the linear cryptanalysis?
- What is piling up Lemma and generalized Lemma?
- What is the linear approximation of the S box and S box in terms of random variables?
- What is representing the approximations?
- What is the linear approximation table?
- What is the linear attack explanation 1 and 2 and what is the attack?
Differential Cryptanalysis
- What are the key points of Differential Cryptanalysis?
- Can we have a recap of Gpig example?
- What is the informal working of the attack and obtaining differential characteristics fo the S box?
- What is the delta set and an example set?
- What is a non-uniform output distribution of XOR's of an S box and difference distribution table and propagation ratio?
- What is the differential trail?
- Can we look at an example of the differential trail?
- How can we obtain differential for 3 rounds and a real attack?
- How can we have an immunity against DC, an exercise and further reading?
Few other Cryptanalytic Techniques
- What are common cryptanalytic techniques and a cap of differential cryptanalysis?
- What is Boomerang attack?
- Can we look at an example of Boomerang attack?
- What is the M layer?
- Can we look at the differential analysis of Phi function 1?
- Can we look at the differential analysis of Phi function 2?
- How can we obtain full round characteristics and the actual attack?
- How can we find the k1 key and other keys?
- What are the square attack on 4 round AES and the invariance of the active attack?
Overview of S-Box Design Principles
- What is S Box?
- What is a boolean function?
- Can we look at explanation to boolean functions and scalar product of sequences?
- What is non-linearity 1 and 2?
- Can we look at the compact representation of linear functions?
- What are the effect of input transformation and strict avalanche criteria?
- strict avalanche criteria?
- What is boolean function satisfying SAC?
- Can we look at an example of a boolean function satisfying SAC?
- What are Bent function and its example?
- How can we create a balanced non-linear function?
Modes of Operation of Block Ciphers
- What is the need for modes of block ciphers and what is electronic code book?
- What are the properties of modes?
- How can the ciphertext be stolen 1?
- How can the ciphertext be stolen 2?
- What is cipher block chaining?
- What are IV based attacks?
- What is error propagation in the case of CBC, its disadvantages and certain points?
- What is the output feedback mode and counter mode?
- How do modern-day modes function and what are tweakable modes?
- What is a watermark attack?
Stream Ciphers
- Can we compare block with stream ciphers and what is the one-time pad?
- What are synchronous stream ciphers?
- What are the properties of synchronous stream ciphers and its model?
- What are self-synchronization stream ciphers and their properties?
- What is feedback shift register and linear feedback shift register?
- Can we look at an example of LFSR and periodicity of its sequences?
- How can we reconstruct the LFSR (an example)?
Stream Ciphers (Contd...1)
- Some basic concepts related to Stream Ciphers and what is the LFSR structure?
- How can we generate a sequence and theorem of LFSR?
- What is the proof for the theorem 1 and 2?
- What is linear complexity and considering another lemma?
- What is Berlekamp Masseys algorithm?
- What is the discrepancy and how can it be corrected?
- How can we prove the induction hypothesis?
- What is the recursive construction of polynomial?
- Can we look at an example?
Stream Ciphers (Contd...2)
- What are non-linear feedback shift registers?
- What are de Bruijn sequence and an example of de Bruijn generator?
- How can we convert LFSR to a de Bruijn FSR and what are stream ciphers based on LFSR?
- What are non-linear combination generator and an example using Geffe generator?
- What are the correlation attacks?
- What is correlation immunity?
- What is the summation generator, clock controlled generator and shrinking generator and what are modern stream ciphers?
Pseudorandomness
- What is the usefulness of Pseudorandomness in cryptography and what is random bit generator?
- What are a pseudorandom bit generator and random tests?
- What are the polynomial statistical test and next bit test and the universality of the next bit test?
- What are random bit test and de-skewing?
- What is FIPS pseudo-random bit generator?
- What are the five basic tests?
- What is the normal distribution and chi-square distribution?
- What is hypothesis testing?
- What is the RSA bit PRBG and Blum Blum Shub Generator?
Cryptographic Hash Functions
- What is data integrity, applications of the hash function and what is a keyed hash function?
- What is a definition of cryptographic hash function and how do we define a preimage problem?
- What are the collision problem and the random oracle model?
- What is an example of the non-ideal hash function?
- What is independence theorem and what is the algorithm in the random oracle model?
- What is the algorithm of find-preimage and find the second preimage?
- What is algorithm find collision and comparison of security criteria?
- What is the first reduction?
- What is the second reduction?
Cryptographic Hash Functions (Contd...1)
- What is the proof on the assumption 1?
- What is the proof on the assumption 2?
- Can we look at the construction of iterated hash function?
- What are optimal output construction and a typical preprocessing step?
- What is Merkel damaged construction?
- What is the algorithm?
- What is the proof of collision resistance?
- What is the proof of collision resistance (assuming different cases)?
- Can we conclude considering the t=1 case?
- What are the different theorems applicable?
Cryptographic Hash Functions (Contd...2)
- What is the iterated hash function and ideal hash function?
- What are the commitment scheme and its pitfalls?
- Can we look at MAC construction example?
- What is the attack and how can we forge MAC?
- What is Joux's attack?
- What are multi collisions 1 and 2?
- What is the multi-collision attack and can we look at a demo on meaningful collisions?
- What is the problem with meaningful collisions and weaker collisions?
Cryptography and Network Security - Final Quiz

Computer System Security

Topics to be covered

- Computer System Security Introduction
- Introduction
- Interview with Prof.Sandeep Shukla CSE IIT kanpur
- What is computer security and what to learn?
- Learning objectives
- Sample Attacks
- The Marketplace for vulnerabilities
- Error 404 Hacking digital India part 1 chase
- Computer System Security Module 01
- Control Hijacking
- More Control Hijacking attacks integer overflow
- More Control Hijacking attacks format string vulnerabilities
- Defense against Control Hijacking - Platform Defenses
- Defense against Control Hijacking - Run-time Defenses
- Advanced Control Hijacking attacks
- Computer System Security Module 02
- Confidentiality Policies
- Confinement Principle
- Detour Unix user IDs process IDs and privileges
- More on confinement techniques
- System call interposition
- Error 404 digital Hacking in India part 2 chase
- Computer System Security Module 03
- VM based isolation
- Confinement principle
- Software fault isolation
- Rootkits
- Intrusion Detection Systems
- Computer System Security Module 04
- Secure architecture principles isolation and leas
- Access Control Concepts
- Are you sure you have never been hacked, Sandeep Shukla
- Unix and windows access control summary
- Other issues in access control
- Introduction to browser isolation
- Computer System Security Module 05
- Web security landscape
- Web security definitions goals and threat models
- HTTP content rendering
- Browser isolation
- Security interface
- Cookies frames and frame busting
- Computer System Security Module 06
- Major web server threats
- Cross site request forgery
- Cross site scripting
- Defenses and protections against XSS
- Finding vulnerabilities
- Secure development
- Computer System Security Module 07
- Basic cryptography
- Public key cryptography
- RSA public key crypto
- Digital signature Hash functions
- Public key distribution
- Real world protocols
- Basic terminologies
- Email security certificates
- Transport Layer security TLS
- IP security
- DNS security
- Computer System Security Module 08
- Internet infrastructure
- Basic security problems
- Routing security
- DNS revisited
- Summary of weaknesses of internet security
- Link layer connectivity and TCP IP connectivity
- Packet filtering firewall
- Intrusion detection
- Concluding remarks
- Computer System Security - Final-Quiz