Cours Item Details

e No 5
(a) Title of the Course Intermediate Cyber Security -- for The IT professionals
(b) Course Coordinator Prof. Sandeep Shukla
Department of Computer Science & Engineering
Indian Institute of Technology Kanpur
(c) Duration (1-3 weeks) Two Weeks
(d) Eligibility Criteria (basic expected This course is for engineers who are working as IT
background) professionals or planning to work as IT professionals. The
students in this course should have done a basic cyber security
course, or must have acquired the basic knowledge of cyber
threats, threat vectors, firewalls, antivirus, intrusion detection
software, basic knowledge of linux/unix administration, basic
knowledge of network protocols and the Internet
infrastructure, basic web site development concepts, android
operating system, and mobile ecosystem etc. This course will
have some programming based exercises, and hence it will
best serve an IT professional or someone trained in IT.
(e) Tentative dates for the proposed event December 16 – December 29, 2019
(f) Objectives After completing this course a student should be able to:

● Discover software bugs that pose cyber security

threats, explain and recreate exploits of such
bugs in realizing a cyber attack on such software,
and explain how to fix the bugs to mitigate such
threats
● Discover cyber attack scenarios to web browsers,
and web servers, explain various possible
exploits, recreate cyber attacks on browsers, and
servers with existing bugs, and explain how to
mitigate such threats
● Discover and explain cyber security holes in
standard networking protocols, both in network
architecture, standard protocols (such as TCP/IP,
ARP, DNS, Ethernet, BGP etc), explain
mitigation methods and revisions of standards
based on cyber threats.
● Discover and explain mobile software bugs
posing cyber security threats, explain and
recreate exploits, and explain mitigation
techniques.
● Articulate the well known cyber attack incidents,
explain the attack scenarios, and explain
mitigation techniques
● Explain the difference between Systems Cyber
Security, Network Cyber Security, and
cryptography, crypto-protocols etc.
(g) Tentative list of topics to be covered Part 1: Software and System Security

 Control hijacking attacks – buffer overflow, integer

overflow, bypassing browser memory protection

 Sandboxing and Isolation

 Tools and techniques for writing robust application

software

 Security vulnerability detection tools, and techniques

– program analysis (static, concolic and dynamic
analysis)

 Privilege, access control, and Operating System

Security

 Exploitation techniques, and Fuzzing

 Network Security & Web Security

 Security Issues in TCP/IP – TCP, DNS, Routing

(Topics such as basic problems of security in
TCP/IP,, IPsec, BGP Security, DNS Cache poisoning
etc)

 Network Defense tools – Firewalls, Intrusion

Detection, Filtering

 DNSSec, NSec3, Distributed Firewalls, Intrusion

Detection tools

 Threat Models, Denial of Service Attacks, DOS-proof

network architecture

 Security architecture of World Wide Web, Security

Architecture of Web Servers, and Web Clients

 Web Application Security – Cross Site Scripting

Attacks, Cross Site Request Forgery, SQL Injection
Attacks

 Content Security Policies (CSP) in web

 Session Management and User Authentication,

Session Integrity

 Https, SSL/TLS

 Threat Modeling, Attack Surfaces, and other

comprehensive approaches to network design for
security