Course

Unit I

Fundamentals of Cybersecurity – Introduction to Cybersecurity: CIA triad – attacks – cybersecurity fundamentals such as Principle of Least Privilege, Security Principles and Models, Introduction to cryptographic algorithms, types.

Unit II

Practical Security Concepts with stress on Technologies used in Cybersecurity – Software Development and Application Security: OWASP Top 10 and CWE – Input Validation, Authentication – Authorization – Browser Security Principles – Same origin policy (SOP) – Database security principles – File Security principles – Directory traversal.

Unit III

Network Security: Network Threat Landscape, Types of Network Attacks and Sources. Security Standards; Regulatory Requirements; Security Assessment; Digital Forensics; Incident Response, Disaster Recovery and Business Continuity Management; Security Governance, Risk and Compliance; Identity and Access Management (IAM).

Course Objectives

• Develop a comprehensive understanding of cybersecurity fundamentals, including principles, models, and regulatory requirements, to establish a strong foundation in the field.
• Acquire practical knowledge and skills in identifying and mitigating vulnerabilities in software applications, networks, and systems, applying industry-standard practices and technologies.
• Understand the principles of security governance to be able to ensure compliance with industry best practices and legal requirements, and effectively manage security risks in organizations.

Course Outcomes

CO1: Understand the key concepts and principles of cybersecurity, including the CIA triad, attacks, and security fundamentals such as principle of least privilege and security models.

CO2: Develop practical skills in software development and application security, including input validation, authentication and authorization, browser, database, and file security principles.

CO3: Identify network security threats and apply appropriate security measures, incident response, disaster recovery, and business continuity plan to mitigate the impact of security breaches and ensure continuity of operations.

CO4: Understand the principles of security governance, risk and compliance (GRC), and identity and access management (IAM) to protect against unauthorized access to information systems.

CO-PO Mapping

Evaluation Pattern: 70:30

*CAL – Can be Lab Assessments, Projects, and Reports

**End Semester can be theory examination/ lab-based examination

Textbook(s)

William Stallings and Lawrie Brown. “Computer Security: Principles and Practice”. Fourth Edition, Pearson, 2019

William Stallings. “Network Security Essentials: Applications and Standards”. Pearson, 2017.

Bryan Sullivan and Vincent Liu. “Web Application Security: A Beginner’s Guide”. McGraw-Hill Education, 2011.

Reference(s)

John Sammons, “The Basics of Digital Forensics”, Elsevier Science, 2011.

Ross J. Anderson. “Security Engineering: A Guide to Building Dependable Distributed Systems”. Wiley, 2008.

Raef Meeuwisse. “Cybersecurity: The Beginner’s Guide”. John Wiley & Sons, Inc., 2017

P.W. Singer and Allan Friedman. “Cybersecurity and Cyberwar: What Everyone Needs to Know”. Oxford University Press, 2014.