Subject Syllabus
CSIT-604 (A) - Cryptography and Network Security
CSIT · Semester 6
Course Modules
Learn topic-wise with Hyper AI and revise using mapped PYQs.
Introduction to network security, computer security and cyber securitySecurity terminologies and principlesSecurity threatsTypes of attacks: operating system, application level, shrink wrap code and misconfiguration attacksIntroduction to intrusion and terminologiesIntrusion Detection System (IDS) and types of intrusion detection systemsSystem Integrity Verifiers (SIVS)Indication of intrusion: system, file system and network indicationsIntrusion detection toolsPost attack IDS measures and evading IDS systemsPenetration testing and categories of security assessmentsVulnerability assessment and types of penetration testingRisk management
Classical cryptographic techniquesEncryption and decryptionCode breaking methodologies and cryptanalysisCryptography attacks and brute-force attackUse of cryptographyPublic key cryptography and principles of public key cryptosystemsCryptographic algorithms: RSA, DES, RC4, RC5, RC6 and BlowfishKey managementDiffie-Hellman key exchangeElliptic curve cryptography
One-way hash functionsSHA (Secure Hash Algorithm)Authentication requirements and authentication functionsKerberosMessage authentication codesMessage digest functions and MD5SSL (Secure Sockets Layer)SSH (Secure Shell)Disk encryptionGovernment Access to Keys (GAK)Digital signature: analysis, components, method, applications and standardSignature generation/verificationECDSA and ElGamal signature schemeDigital certificates
Trojans and backdoors: overt and covert channels, working and typesViruses and worms: characteristics, working, infection phase and attack phaseSniffers: definition, spoofing, sniffing, vulnerable protocols and typesPhishing methods, process and attack typesWeb application security: secured authentication, secured session management, cross-site scripting and SQL injectionDenial-of-service attacks and types including Smurf, buffer overflow, ping of death, teardrop, SYN attack and SYN floodingDDoS attackSession hijacking, spoofing vs hijacking and TCP/IP hijackingCAPTCHA protection
IP securityWeb securityFirewalls: types, operation, design principles and trusted systemsComputer forensics: need, objectives, stages and steps of forensic investigationIncident handlingHacking and classes of hacker: black hats, grey hats, white hats and suicide hackersFootprintingScanning types: port, network and vulnerabilityE-mail spidersOverview of system hacking cycle