Introduction to Cyber Security

Unit 1 – Introduction to Cyber Security and Cyber Attacks/Defences

• The importance of cyber security
• Threats to cyber security
• Active attacks
• Common types of attacks
• Injection attacks
• DoS
• Malware, or malicious software
• Spoofing
• Man-in-the-middle
• Operating systems attacks
• Network attacks
• A layered approach to defence mechanisms
• Physical security
• Software and operating system security
• Network security

Unit 2 – Vulnerability Assessment

• The concept of vulnerability assessment
• Assessing vulnerabilities
• Security posture
• Performing a vulnerability assessment
• Identifying assets and classifying them
• Threats and risk assessment
• Baseline reporting
• Penetration testing
• Techniques
• Penetration testing vs vulnerability assessment

Unit 3 – Securing the Facilities and Networks

• Securing a data centre
• Securing the network
• Hardware – modem/router level
• Changing router settings
• Software pc and device level
• Preventative steps
• advanced setting to secure your devices

Unit 4 – Securing Your Online Digital Footprint

• Digital footprints
• Social media
• Web browsing history and online shopping
• Devices used
• The importance of managing a digital footprint
• Protecting the user’s reputation
• Deciding where and how personal information is shared
• Preserving freedoms
• Preventing financial losses
• How to manage a digital footprint
• Understand the privacy risks of online identities
• Developing better online habits
• Investigate default settings for online tools and services
• Using privacy-enhancing tools

Unit 5 – Internet Security and Digital Certificates

• Digital certificates
• Digital signatures
• DRM (digital rights management)
• IRM (information rights management
• Electronic books and magazines
• IRM/EDRM
• Generating a digital certificate
• Exchanging a digital certificate
• Verifying a digital certificate
• Web browsing (SSL certificates)
• SSL/TLS handshake
• Security issues
• Secure web browsing using https

Unit 6 – Wireless Network Vulnerabilities, Attacks and Security

• Types of wireless data networks
• NFC and bluetooth networks attacks
• NFC Networks Attacks
• Bluetooth Networks Attacks
• WLAN (Wireless LAN) attacks
• Introduction to network “blurred edges”
• Wireless data replay attacks
• Wireless DOS (Denial Of Service) attacks
• Rogue Access Point
• Attacks on Home WLANs – War Driving and War Chalking
• Wireless security vulnerability and solutions
• IEEE Wireless Security Vulnerabilities

Unit 7 – Firewalls, IDS and IPS

• Cyber threats’
• Packet filtering firewall
• Application/proxy firewall
• Hybrid firewall
• Firewall limitations
• Formats of firewalls
• Hardware-based and software-based firewalls
• UTM appliance
• Intrusion detection systems
• Network intrusion detection systems (NIDS)
• Host-based intrusion detection systems (HIDS)
• Intrusion prevention systems
• Detection methodologies
• Anomaly based IDPS
• Signature-based IDPS

Unit 8 – Cryptography

• What is cryptography?
• Definition, terminology and characteristics
• Common cipher attacks
• Cryptographic algorithms
• Symmetric encryption
• Asymmetric encryption
• Discovering keys
• Hash algorithms

Unit 9 – Access Control and Authentication

• What is access control?
• Definition and terminology
• Access control models
• Implementing access control
• Group policies
• What is authentication and authorisation?
• Securing and protecting passwords
• Multi factor authentication

Unit 10 – Cyber attack Disaster Recovery Strategies

• Response plans
• Using specialists and experts
• 5 phases – after a cyber-attack has occurred
• Cyber Attack Recovery Planning and Preparation
• Backup procedures
• Monitoring and logging of events
• Containment of attack
• Assessing Damage/Loss Caused
• Recovery procedures
• Authorities and Tracking Down Attackers
• Data and Security Policies

Unit 11 – Ongoing Security Management

• Managing security events
• Events monitoring
• Centralized vs distributed data collection
• Being organised
• Understanding the workplace
• Security and decision making
• Division of responsibilities
• Time management
• Networking
• Procedures
• Products and services
• The law