Introduction to Cybersecurity Course

Lesson 1 • Core Security Principles and Concepts

Introduces the CIA triad and foundational security properties. Provides the conceptual lens used throughout the entire course.

Lesson 2 • Security Frameworks and Standards

Surveys widely adopted security frameworks and compliance concepts. Students apply framework logic to structure security programs.

Lesson 3 • Threat Actors and Motivations

Profiles adversary categories from insiders to nation-states. Students can map attacker motivation to likely attack vectors.

Lesson 4 • Classifying Assets and Data

Teaches asset identification and data classification schemes. Enables students to prioritise protection efforts based on asset value.

Lesson 1 • Network Models and Protocols

Explains OSI and TCP/IP models and their security implications. Connects protocol behaviour to vulnerabilities explored in later chapters.

Lesson 2 • IP Addressing and Subnetting

Covers IPv4 and IPv6 addressing, subnetting, and routing basics. Students use this knowledge to design segmented, defensible networks.

Lesson 3 • Traffic Analysis and Packet Inspection

Introduces packet capture and protocol analysis techniques. Students detect anomalies and suspicious patterns in network traffic.

Lesson 4 • Network Devices and Topologies

Describes routers, switches, firewalls, and common topologies. Students identify where security controls are placed in a network.

Lesson 1 • Encryption in Transit and at Rest

Applies encryption protocols to data in motion and stored data. Students configure TLS, VPNs, and disk encryption for real environments.

Lesson 2 • Hashing, Integrity, and Digital Signatures

Covers integrity verification and non-repudiation through digital signatures. Students apply these controls to protect data authenticity.

Lesson 3 • Symmetric and Asymmetric Algorithms

Compares major algorithm families and their performance trade-offs. Students choose algorithms appropriate to confidentiality and integrity requirements.

Lesson 4 • Public Key Infrastructure

Explains certificate authorities, digital certificates, and trust chains. Students manage PKI components to enable secure communications.

Lesson 1 • Authentication Methods and Factors

Surveys password-based, token-based, and biometric authentication. Students evaluate factor strength and select methods for given risk levels.

Lesson 2 • Access Control Models

Compares DAC, MAC, RBAC, and ABAC models and their enforcement. Students apply the correct model to match organizational security requirements.

Lesson 3 • Federated Identity and Single Sign-On

Explains federation protocols and SSO architectures for cross-domain access. Students configure trust relationships between identity providers and services.

Lesson 4 • Identity Lifecycle Management

Covers provisioning, de-provisioning, and access reviews. Students prevent privilege creep and orphaned accounts through structured processes.

Lesson 1 • Network-Based Attacks

Covers denial-of-service, man-in-the-middle, and spoofing attacks. Students correlate network symptoms with specific attack techniques.

Lesson 2 • Web Application Attack Techniques

Introduces injection, XSS, and broken authentication vulnerabilities. Students recognise vulnerable code patterns and recommend remediation steps.

Lesson 3 • Password and Credential Attacks

Explains brute force, credential stuffing, and pass-the-hash techniques. Students implement controls that reduce credential attack success.

Lesson 4 • Malware Types and Behaviour

Classifies viruses, ransomware, rootkits, and spyware by behaviour. Students trace infection chains and identify appropriate containment responses.

Lesson 1 • Intrusion Detection and Prevention Systems

Covers signature-based and anomaly-based IDS/IPS operation. Students configure detection rules and evaluate alert fidelity to reduce false positives.

Lesson 2 • Security Metrics and KPIs

Defines meaningful security metrics and measurement methodologies. Students use data-driven metrics to communicate security posture to stakeholders.

Lesson 3 • Threat Intelligence Integration

Explains threat intelligence feeds, indicators, and their operational use. Students enrich detection workflows with external intelligence to improve accuracy.

Lesson 4 • Log Analysis and Threat Detection

Teaches structured log review across operating systems and applications. Students identify indicators of compromise hidden within high-volume log streams.

Lesson 1 • Penetration Testing Methodology

Introduces structured penetration testing phases from planning to reporting. Students follow an ethical, rules-of-engagement framework for authorised testing.

Lesson 2 • Vulnerability Assessment Fundamentals

Defines vulnerability scanning scope, methodology, and tool selection. Students plan and execute assessments aligned with organizational risk tolerance.

Lesson 3 • Exploitation and Post-Exploitation Basics

Covers controlled exploitation techniques used in authorised assessments. Students understand attacker techniques to better validate defensive controls.

Lesson 4 • Vulnerability Scoring and Prioritisation

Applies scoring systems to rank vulnerabilities by exploitability and impact. Students prioritise remediation queues based on business context and exposure.

Lesson 1 • Digital Forensics Fundamentals

Introduces forensic evidence collection, chain of custody, and analysis basics. Students preserve evidence integrity to support investigations and legal proceedings.

Lesson 2 • Incident Response Planning

Defines IR plan components, team roles, and communication protocols. Students build a plan that enables coordinated, rapid response to security events.

Lesson 3 • Post-Incident Review and Improvement

Guides structured lessons-learned sessions and control improvement cycles. Students translate incident findings into measurable security program enhancements.

Lesson 4 • Containment, Eradication, and Recovery

Applies short-term and long-term containment strategies followed by eradication. Students restore systems safely while preventing reinfection.