– Network Basics and OSI Model
– TCP/IP Protocol Suite
– IP Addressing (IPv4 & IPv6)
– Network Devices (Router, Switch, Firewall)
– Networking Protocols and Services (DNS, DHCP, HTTP, FTP, SMTP, SSH)
– Network Security Principles (Firewalls, VPN, IDS/IPS)
– VLANs and Subnetting
– Wireless Networking Basics
– Network Traffic Analysis (Wireshark)
– Network Troubleshooting and Monitoring

– CIA Triad: Confidentiality, Integrity, Availability
– Security Threats and Vulnerabilities
– Authentication and Authorization
– Cryptography Basics
– Malware and Types
– Security Policies and Procedures
– Security Controls (Administrative, Technical, Physical)
– Risk Management Basics
– Compliance Frameworks (ISO 27001, NIST)

– CIA Triad: Confidentiality, Integrity, Availability
– Security Threats and Vulnerabilities
– Authentication and Authorization
– Cryptography Basics
– Malware and Types
– Security Policies and Procedures
– Security Controls (Administrative, Technical, Physical)
– Risk Management Basics
– Compliance Frameworks (ISO 27001, NIST)

Introduction to SOC and Roles
– SIEM Tools and Usage
– Log Analysis and Monitoring
– Incident Detection and Response
– Threat Intelligence and Threat Hunting
– Security Use Case Development
– Common Attack Vectors
– MITRE ATT&CK Framework
– Ticketing Systems and Case Management
– Reporting and Documentation

-Overview of IoT Architecture
– IoT Protocols and Devices
– Threats and Vulnerabilities in IoT
– IoT Device Hardening
– Secure Communication in IoT
– Firmware Analysis
– Privacy Concerns in IoT
– Standards and Guidelines for IoT Security
– Case Studies of IoT Attacks

– Operational Technology (OT)/Industrial Control Systems (ICS)
– Introduction to OT and ICS
– ICS Components and – —- Architectures (SCADA, PLC, RTU)
– Differences Between IT and OT Security
– ICS Vulnerabilities and Threats
– Network Segmentation in OT
– Security Best Practices for ICS
– Incident Response in OT Environments
– Standards (NERC CIP, ISA/IEC 62443)
– ICS Risk Assessment

-Fundamentals of Digital Forensics
– Types of Digital Evidence
– Forensic Imaging and Chain of Custody
– File Systems and Data Recovery
– Memory and Network Forensics
– Email and Mobile Forensics
– Forensics Tools (e.g., Autopsy, FTK, EnCase)
– Reporting and Legal Aspects
– Incident Response and Investigation Process

-Governance and Information Security Management
– Risk Assessment and Mitigation
– Compliance Requirements (HIPAA, GDPR, PCI-DSS, etc.)
– Security Frameworks (COBIT, NIST, ISO)
– Policy Development and Implementation
– Internal and External Audits
– Vendor Risk Management
– Business Continuity Planning (BCP) & Disaster Recovery (DR)

– Cloud Infrastructure Security & Application Security
– Cloud Infrastructure Security
– Cloud Service Models (IaaS, PaaS, SaaS)
– Shared Responsibility Model
– Identity and Access Management in Cloud
– Cloud Network Security
– Secure Cloud Configuration
– Cloud Security Tools and Monitoring
– Cloud Compliance Standards (CSA, FedRAMP)
– Application Security
– Software Development Life Cycle (SDLC) and Security
– OWASP Top 10 Vulnerabilities
– Secure Coding Practices
– Static and Dynamic Application Security Testing (SAST/DAST)
– Threat Modeling
– DevSecOps and CI/CD Integration
– Application Hardening and Patch Management

Project-Based Learning Modules
1. Design Automated Operating Detector on the Network
Topics Covered: Networking, Linux Fundamentals, Ethical Hacking
Key Concepts: TCP/IP fingerprinting, OS detection, network reconnaissance
2. Build Port Scanner
Topics Covered: Networking, Ethical Hacking
Key Concepts: Port scanning, TCP/UDP probing, network service enumeration
3. Automated Browser/System Credential Dumper Hardware (USB/IOT)
Topics Covered: IoT Security, Cyber Forensics
Key Concepts: HID device attacks, credential dumping, offline data harvesting
4. Keylogger
Topics Covered: Ethical Hacking, Cyber Forensics
Key Concepts: Keystroke logging, malware evasion, surveillance software
5. Passwordless Authentication Model
Topics Covered: Cloud Security, Application Security
Key Concepts: Identity verification, biometric/authenticator-based login, security UX
6. Identification of Pseudo WiFi Networks
Topics Covered: IoT Security, Networking, Ethical Hacking
Key Concepts: Rogue access points, Evil Twin detection, WiFi spoofing
7. Malicious User Detection Using Honeyword/IP Tracking
Topics Covered: SOC, Cyber Forensics
Key Concepts: Traffic analysis, honeypot deployment, anomaly detection
8. Fake Profile Analysis on Social Media Platforms
Topics Covered: GRC, Application Security
Key Concepts: Bot detection, digital footprint analysis, OSINT tools
9. Digital Watermarking for Data Security
Topics Covered: Information Security, Application Security
Key Concepts: Intellectual property protection, digital signatures, anti-tampering
10. Detection of Phishing Emails/Websites Using ML/AI
Topics Covered: Cloud Infrastructure Security, Application Security
Key Concepts: Email filtering, URL analysis, supervised ML (Random Forest, Decision Trees)
11. Spoofing and Sniffing Attack Simulation with Social Engineering
Topics Covered: Ethical Hacking, Networking
Key Concepts: MITM attacks, spoofing techniques, employee targeting
12. Social Engineering Attack Simulation
Topics Covered: Ethical Hacking, GRC
Key Concepts: Phishing simulations, reconnaissance, human vulnerability exploitation
13. Hosting Web Applications on the Cloud and Securing Them
Topics Covered: Cloud Infrastructure Security, Application Security
Key Concepts: Cloud app hardening, encryption, threat modeling
14. Getting Private Invitation to Testing Programs from Companies
Topics Covered: Ethical Hacking, Social Engineering, Information Security
Key Concepts: Insider threat simulations, deception techniques, security awareness