• Understand CIA triad and security threats.
• Analyze access control models and cyber laws.

Unit I: Foundations of Security (6 Hours )

1. Security Fundamentals, Threats and Attacks and its types, Security Assurance.
2. CIA triad, Security threats (DoS, spoofing, replay).
3. Security policies, Access control (MAC, DAC, RBAC). Design Principle
4. OSI Security Architecture, Bell-LaPadula/Biba models.
5. Cybercrime categories, Digital forensics overview.

• Compare symmetric/asymmetric encryption techniques.
• Apply hashing and digital signatures.

Unit II: Cryptography Basics (8 Hours)

1. Introduction to Classical and Modern Cryptography, Feistel Cipher, SPN architecture
2. Symmetric encryption (DES, 3DES, AES),
3. Asymmetric encryption (RSA, Diffie-Hellman), OpenSSL commands for algorithms
4. Hash functions (MD5, SHA-2), Hash one-way functions, and avalanche effect, HMAC,
5. Digital Signatures (DSS vs RSA), Signing and Verification Process for Private/public key roles

• Design firewall and VPN architectures.
• Evaluate wireless security protocols.

Unit III: Network Security Mechanisms (6 Hours)

1. Module of Security (DMZ).
2. Firewalls (packet filtering, proxy, stateful), firewall rules.
3. IPSec, VPNs, Security Associations and key negotiation.
4. Overview of 802.11 Standards, Wireless security (WEP, WPA, WPA2).
5. Design a secure network with DMZ + VPN + wireless.

• Implement PKI and multifactor authentication.
• Critique password/biometric systems.

Unit IV : Authentication & Key Management (6 Hours)

1. Authentication Basics
2. Password systems, Authentication: strength, storage (salting & hashing), brute-force attacks,
3. Biometrics, Biometric Authentication: fingerprint, face, retina, voice, Multifactor authentication.
4. Key management and infrastructure, Kerberos, X.509 certificates, PKI.
5. Authentication protocols (CHAP, mutual/one-way).

• Configure SSL/TLS for secure communication.
• Mitigate web/database threats.

Unit V: Transport & Application Security (6 Hours)

1. SSL vs. TLS: protocol overview, SSL/TLS handshake, HTTPS, role of certificates and Cas
2. SSH, encryption, authentication, key-based login
3. Email security (PGP, S/MIME), Web threats.
4. Database security (access control, inference), sensitive data.
   1. Database Access Control: user roles, privileges, views
   2. Secure DB Configurations: disable remote access, enforce strong auth, audit logs

• Classify malware types and IDS techniques.
• Develop incident response strategies.

Unit VI: Malware & Intrusion Detection (4 Hours)

1. Malware Classification (type) & Containment, Viruses, worms, ransomware, sandboxing.
2. IDS
   1. IDS Overview: purpose, capabilities, and limitations
   2. Types( host based, neetwork , hybrid, agent)
3. Intrusion Prevention & Incident Response, Lifecycle, IPS (anomaly/misuse detection), response phases.

• Relate IT policies to college cyberbullying cases.
• Debate digital rights vs. privacy.

Unit VII: Cyber Laws & Ethics (7 Hours)

1. Cyber Law, IT Policy & Digital Rights
   1. Introduction to Cybercrime: categories (financial fraud, defamation, identity theft, hacking)
   2. Cyber Law Framework in Nepal: Electronic Transaction Act (ETA) 2063, IT Policy, cyber tribunal structure
   3. Digital Rights vs. National Security: privacy, surveillance, censorship
   4. International Cyber Standards: NIST, GDPR (brief), UN digital principles
2. Cyber Ethics & Legal Responsibilities
   1. Intellectual Property (IP): plagiarism, software piracy, copyright, patents, trademarks
   2. Cyberbullying and Harassment
   3. Data Privacy and Consent: handling student data, biometrics, tracking
   4. Professional Ethics in IT: ACM/IEEE codes of conduct, whistleblowing

• Assess Zero Trust and AI-driven security.
• Analyze cloud/blockchain case studies.

Unit VIII: Emerging Trends (5 Hours)

1. Zero Trust, Cloud Security Fundamentals: shared responsibility model, VM/container risks, multi-tenancy, Blockchain.
2. Case studies (real-world breaches),
   1. AI in Cybersecurity: threat detection, user behavior analytics, predictive analytics.
3. Digital Citizenship, Digital Footprint, Public and private Online Life.
4. Cloud security fundamentals

1

Unit 1

Kali Linux, Wireshark

Identify attacks that violate Confidentiality,

Integrity, Availability

2

Access Control Models &

Security Architecture

Unit 1

3

Python or Java

Understand block cipher construction

mechanisms

4

DES, 3DES & AES

Symmetric Encryption

Unit 2

OpenSSL, Python (pycryptodome)

Evaluate performance and security of symmetric encryption

algorithms

5

Unit 2

OpenSSL, Python

Generate RSA keys, encrypt/decrypt messages, simulate Diffie-Hellman key

exchange

Understand public-key encryption and secure key

sharing

6

OpenSSL, Python

Create MD5, SHA-2 hashes; implement digital signatures using

RSA and DSA

7

Packet filtering, DMZ setup, implement OpenVPN between 2

networks

Deploy firewall rules and VPN for secure

network access

8

Wireless Security

Protocol Evaluation

Capture WPA2 handshake, attempt

WEP cracking with wordlists

Analyze weaknesses in

wireless protocols

9

Authentication & PKI

Demonstration

Unit 4

Simulate Kerberos, create X.509 certs, discuss biometric and

multi-factor authentication

10

SSL/TLS, HTTPS &

Application Security

SSL/TLS handshake, setup HTTPS on server, explore SQL

injection with DVWA

Configure secure web and transport

protocols

11

Malware Analysis & Intrusion

Detection

Detect malware in sandbox, simulate anomaly detection with

Snort

12

Case Study: Cyber Laws, Ethics &

Emerging Trends

Units 7 &

8

Web, Docs, Zoom/Meet

Research and present a real-world breach (blockchain/cloud/AI),

debate privacy vs. security