Course

Syllabus

Security Concepts: Confidentiality, Integrity, and Availability (CIA), Confusion vs Diffusion, Stream vs Block ciphers, Private-Key vs Public Key Cryptography, Cryptanalysis. Pseudorandom functions, Feistal Networks and Non Feistal Networks, Key Exchange, Public Key Encryption systems. Hash Functions, Message Digest, Signing and Verification, AES, DES, X509 certificates, SSL, TLS, HTTPS, Open SSL, SSH, Elliptic Curve Cryptography.

Authentication and Authorization: Identity and Access Management, Factors, Multi-factor, Kerberos, Role based Access Control. Operating System Security: Windows and Linux, SELinux, ACL and Active Directory. Protection System, Authorization, Security Analysis and Vulnerabilities, Security issues related to Internet, Intranet, Cloud Computing, Embedded System, Mobile System, Internet of Things and Wireless Networks.

Database Security: Securing different types of data, Database security, Data sanitization, Attacks on Data, SQL Injection, Buffer-flow, Privacy of Data. Implementing Cryptographic schemes on datasets.

Tools: Wireshark, Snort, NPM, Open VAS, Burp Suite, Nessus, Wazuh, Suricata.

Pre-Requisite(s): None

Course Type: Lab

Course Objectives

• Knowledge in encryption and decryption using private and public key cryptography, digital signatures, cryptographic hash functions.
• Understand and apply authentication and authorization mechanisms to protect OS and database.
• Understand the threats and vulnerabilities and need for securing resources and exercising privacy preservation.

Course Outcomes

CO-PO Mapping

Evaluation Pattern: 70/30

Note: Continuous assessment may include quizzes, tutorials, laboratory assessments, case studies, assignments, and other course-related evaluation components. The Mid-Term examination may be conducted as a two-hour written examination or a two-hour laboratory-integrated examination, as applicable. The End-Semester assessment may be conducted either as a two-hour written examination, a laboratory-integrated examination, or as a project presentation and evaluation, provided the project-based assessment is approved by the Department.

1. Cryptography and Network Security: Principles and Practice, William Stallings, 8th ed., Pearson, 2023.
2. Mastering Python for Networking and Security, José Manuel Ortega, Packt Publishing, 2018.
3. Database and Application Security: A Practitioner’s Guide, R. Sarma Danturthi, Addison-Wesley Professional, 1st ed., 2024.
4. Cryptography and Security, T. R. Padmanabhan, C. K. Shyamala, and N. Harini, 1st ed., Wiley India, 2011.
5. Computer Security: Art and Science, Matt Bishop, 2nd ed., Addison-Wesley, 2012.