Syllabus
Introduction – Overview of computer networks, network security, and Application layer. Overview of HTTP, FTP, SMTP, and DNS, and socket programming. Hijacking, spoofing, and DoS attacks. Firewalls, Intrusion Detection Systems (IDS), and Intrusion Prevention Systems (IPS). Digital Forensics. Transport layer and UDP, TCP. UDP flooding, TCP spoofing, TCP connection hijacking, TCP SYN flood. Cryptography and System Hardening: Public key infrastructure (PKI), symmetric and asymmetric cryptography, key management systems, ECC and AES integration for CPS security. Secure boot, firmware signing, and Over-The-Air (OTA) update mechanisms for edge and embedded devices. Network layer – Addressing schemes (IPv4 and IPv6), Routing algorithms, Routing protocols in the Internet (OSPF, RIP, and BGP), BGP security, ICMP, NAT, IPSec, and IPSec Authentication. Header, Encapsulating Security Header and Payload, IPSec Key Exchange, and VPNs. Link layer – Introduction and services, Link layer addressing, Multiple Access Protocols, Ethernet, ARP, Attacks against, and vulnerabilities in ARP. Secure Software Development Life Cycle (SSDLC). Industrial Communication Protocols and Security Considerations: DNP3 (with Secure Authentication), Modbus (with Modbus Secure/TLS), IEC 61850 (with IEC 62351 extensions), and OPC-UA. Role-Based Access Control (RBAC) in Automation Systems. ISA/IEC 62443 Standard Compliance. Control System Security: ISA/IEC 62443, IEEE C37.240, and NIST SP 800-82 standards. Application of machine learning models for threat detection and behaviour profiling in electrical networks.