JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Course Objective:

This course is aimed to generate interest and awareness in cyber security field, which is important in the world of information security due to the wide variety of computer crimes that take place in cyber space. The course deals with various types of attacks framed by an attacker, and the security which need to be implemented at various levels along with latest trends in cyber security.

UNIT - I

Cyber Security Basics – Sphere, Terminology, Vulnerability in the Cyber Structure and Infrastructure, Cyber threats and Weaponry, Cyber Defense, Cyber Attack Detection and Prevention, Information Security Testing, Cyber Security Investigation/assessment, Cyber-Deterrence.

UNIT - II

Cyber Crimes and Cyber Laws – Introduction, IT laws & Cyber Crimes – Internet, Hacking, Password Cracking, Viruses, Virus Attacks, Pornography, Software Privacy, Intellectual Property, Legal System of Information Technology, Social Engineering, Phishing, Denial of Service attack, Malicious Code, Mail Bombs, Worms, Logic Bombs, Botnet, Trojan, Bug Exploits.

UNIT - III

End point Security: Desktop and Laptop Security, Cell Phone and PDA Security, Bluetooth Security, Patch and Vulnerability Management, Password Management, Security for Full Virtualization Technologies, Media Sanitization, Security Radio Frequency Identification (RFID) Systems. Network Security: Intrusion Detection & Prevention Systems, Firewalls and Firewall Policy, Computer Security Log Management, Enterprise Tele work and Remote Access Security, Securing WiMAX Wireless Communication. Web Security: Server Security, Web authentication, SSL and SET, Securing Public Web Servers, Secure Deployment of IPv6, Secure Domain name System (DNS) Deployment, SSL VPNs, Unified Threat Management (UTM).;

UNIT - IV

Application Security: Active Content and Mobile Code, E-commerce Security, Email Security (PGP, S/MIME), Web Security, Web Application Security, OWASP; Data Security: Data Management, Database Security, Data Encryption, Data Leakage Prevention (DLP), Data Destruction; Software Security: Software Flaws, Malware, Software based Attacks; Insecurity in Software: SRE, Software Tamper Resistance, DRM, Software Development. Operating System Security: Security Functions, Software Updates and Patches, OS Integrity Checks, Account management, Antivirus Software, Security in Ordinary Operating Systems, Design of Secure OS, OS hardening, Configuring the OS for security, Security kernels, Secure Virtual machine Systems, Trusted Operating System, NGSCB.

UNIT - V

Recent Trends in Cyber Security – Zero – day Malware, Trojan Wars, New Ways to Monetize Non- Financial Data, Fraud-as-a-service, Out-of-band Methods forcing Cybercriminals to Innovate, The Rise of Hactivism, Attacks in mobile devices, social media and cloud computing; Insider threats, Increased regulatory security, Cyber-Terrorism, Cyber –War and Cyber-Peace. Topological Vulnerability Analysis, Cyber Situational Awareness, Secure Composition of Systems, Autonomic Recovery, Secure Data Centers, Cloud Computing Security, Privacy in location-Based Applications.

TEXT BOOKS:

• 1. Cyber Security, Edward Amoroso, kindle Edition, 2007
• 2. Cyber Security ,Understanding Cyber crimes, Computer Forensics and Legal Perspectives, Sunita Belapure and Nina Godbole, Wiley India Pvt Ltd. 2011

REFERENCES:

• 1. Computer Security, Dirter Gollmann, John Wiley & Sons Publication, 2011
• 2. Cyber Security Essentials, James Graham, Richard Howrad, Ryan Olson, CRC Press, 2011