Cyber Security Expert Masters Program Training Course in Chennai

CompTIA Security+ (SY0-501)

• Introduction
• The CIA of Security
• Threat Actors
• What is Risk
• Managing Risk
• Using Guides for Risk Assessment
• Security Controls
• Interesting Security Controls
• Defense in Depth
• IT Security Governance
• Security Policies
• Frameworks
• Quantitative Risk Calculations
• Business Impact Analysis
• Organizing Data
• Security Training
• Third Party Agreements

• Cryptography Basics
• Cryptographic Methods
• Symmetric Cryptosystems
• Symmetric Block Modes
• RSA Cryptosystems
• Diffie-Hellman
• PGP GPG
• Hashing
• HMAC
• Steganography
• Certificates and Trust
• Public Key Infrastructure
• Cryptographic Attacks

• Identification
• Authorization Concepts
• Access Control List
• Password Security
• Linux File Permissions
• Windows File Permissions
• User Account Management
• AAA
• Authentication Methods
• Single Sign On

• OS Utilities
• OS Utilities ipconfig
• Network Scanners
• Protocol Analyzers
• SNMP
• Logs

• Denial of Service
• Host Threats
• Man in the Middle
• System Resiliency
• RAID
• NAS and SAN
• Physical Hardening
• RFI EMI and ESD
• Host Hardening
• Data and System Security
• Disk Encryption
• Hardware Firmware Security
• Secure OS Types
• Securing Peripherals
• Malware
• Analyzing Output
• IDS and IPS
• Automation Strategies
• Data Destruction

• LAN Review
• Network Topologies Review
• Network Zone Review
• Network Access Controls
• The Network Firewall
• Proxy Servers
• Honeypots
• Virtual Private Networks
• IPSec
• NIDS NIPS
• SIEM

• Wireless Review
• Living in Open Networks
• Vulnerabilities with Wireless Access Points
• Cracking WEP
• Cracking WPA
• Cracking WPS
• Wireless Hardening
• Wireless Access Points
• Virtualization Basics
• Virtual Security
• Containers
• IaaS
• PaaS
• SaaS
• Deployment Models
• Static Hosts
• Mobile Connectivity
• Deploying Mobile Devices
• Mobile Enforcement
• Mobile Device Management
• Physical Controls
• HVAC
• Fire Suppression

• Secure Applications and Protocols
• Network Models
• Know Your Protocols TCP IP
• Know Your Protocols Applications
• Transport Layer Security
• Internet Service Hardening
• Protecting Your Servers
• Secure Code Development
• Secure Deployment Concepts
• Code Quality and Testing

• Vulnerability Scanning Tools
• Vulnerability Scanning Assessment
• Social Engineering Principles
• Social Engineering Attacks
• Attacking Web Sites
• Attacking Applications
• Exploiting a Target
• Vulnerability Impact

• Incident Response
• Digital Forensics
• Contingency Planning
• Backups

Syllabus of Certified Ethical Hacking Training Course

• What is Hacking?
• What is Ethical Hacking?
• What is the difference between both
• What are the Learning Scope
• 5 Phases of Ethical Hacking

• Types of Footprinting
• Footprinting Tools and Countermeasures

• Enumeration Techniques
• Enumeration Countermeasures

• Network Scanning Technique
• Network Scanning Countermeasures

• System Hacking methodology
• Steganography
• Steganalysis Attacks
• Covering Tracks

• Installation of VM's in Windows and MAC
• Configuration of VM's and Installing OS
• Installing Software

• Installation of VM's in Windows and MAC
• Configuration of VM's and Installing OS
• Installing Software

• Introduction to Metasploit
• Working with Metasploit
• Windows Hacking and Advanced Techniques

• Scanning using Nmap Tool
• Advanced Commands and Techniques class="streight-line-text"

• Introduction
• Installation
• Configuring burp-suit with browsers
• Working with burp-suit

• What is Sniffing
• Packet Sniffing Techniques
• How to defend against Sniffing

• Types of Malwares
• Types of Trojans
• Trojan Analysis
• Trojan Countermeasures

• What is Virus and How it Works?
• Virus Analysis
• Computer Worms
• Malwares
• Analysis Procedure and Countermeasures

• What is Denial of Services (DoS)
• What is Distributed Denial of Services (DDoS)
• Types of Attacks
• DoS/DDoS Attack Techniques
• Botnets
• DDoS Attack Tools
• DoS/DDoS Countermeasures

• Session Hijacking Techniques
• Countermeasures

• Different Types of Webserver Attacks
• Attack Methodology and Countermeasures

• Different Types of Web Application Attacks
• Web Application
• Hacking Methodology and Countermeasures

• SQL Injection Attacks
• Injection Detection Tools

• Wireless Encryption
• Wireless Cracking Methodology
• Wireless Cracking Tools
• Wireless Security Tools

• Firewall
• Intrusion Detection System (IDS)
• Honeypot Evasion Techniques
• Evasion Tools
• Countermeasures

• Various Cloud Computing Concepts
• Cloud Computing Threats
• Cloud Computing Attacks
• Security Techniques and Tools

• Different Types of Cryptography Ciphers
• Public Key Infrastructure (PKI)
• Cryptography Attacks
• Cryptanalysis Tools

• What is Social Engineering
• Phishing Emails
• Types of Social Engineering Attacks
• Advanced Techniques
• Countermeasures

Syllabus of CISM Certification Training Course

Module 1: Information Security Governance

• 1.Establish and maintain an information security strategy, and align the strategy with corporate governance
• 2.Establish and maintain an information security governance framework
• 3.Establish and maintain information security policies
• 4.Develop a business case
• 5.Identify internal and external influences to the organization
• 6.Obtain management commitment
• 7.Define roles and responsibilities
• 8.Establish, monitor, evaluate, and report metrics

Module 2: Information Risk Management and Compliance

• 1.Establish a process for information asset classification and ownership
• 2.Identify legal, regulatory, organizational, and other applicable requirements
• 3.Ensure that risk assessments, vulnerability assessments, and threat analyses are conducted periodically
• 4.Determine appropriate risk treatment options
• 5.Evaluate information security controls
• 6.Identify the gap between current and desired risk levels
• 7.Integrate information risk management into business and IT processes
• 8.Monitor existing risk
• 9.Report noncompliance and other changes in information risk

Module 3: Information Security Program Development and Management

• 1.Establish and maintain the information security program
• 2.Ensure alignment between the information security program and other business functions
• 3.Identify, acquire, manage, and define requirements for internal and external resources
• 4.Establish and maintain information security architectures
• 5.Establish, communicate, and maintain organizational information security standards, procedures, and guidelines
• 6.Establish and maintain a program for information security awareness and training
• 7.Integrate information security requirements into organizational processes
• 8.Integrate information security requirements into contracts and activities of third parties
• 9.Establish, monitor, and periodically report program management and operational metrics

Module 4: Information Security Incident Management

• 1.Establish and maintain an organizational definition of, and severity hierarchy for, information security incidents
• 2.Establish and maintain an incident response plan
• 3.Develop and implement processes to ensure the timely identification of information security incidents
• 4.Establish and maintain processes to investigate and document information security incidents
• 5.Establish and maintain incident escalation and notification processes
• 6.Organize, train, and equip teams to effectively respond to information security incidents
• 7.Test and review the incident response plan periodically
• 8.Establish and maintain communication plans and processes
• 9.Conduct post-incident reviews
• 10.Establish and maintain integration among the incident response plan, disaster recovery plan, and business continuity plan

Syllabus of CISSP Certification Online Training Course

Module 1: Security and Risk Management:

• 1. Confidentiality, Integrity, and Availability Concepts
• 2. Security Governance Principles
• 3. Compliance
• 4. Legal and Regulatory Issues
• 5. Professional Ethics
• 6. Security Policies, Standards, Procedures, and Guidelines

Module 2: Asset Security:

• 1. Information and Asset Classification
• 2. Ownership
• 3. Protect Privacy
• 4. Appropriate Retention
• 5. Data Security Controls
• 6. Handling Requirements

Module 3: Security Architecture and Engineering:

• 1. Engineering Processes using Secure Design Principles
• 2. Security Models Fundamental Concepts
• 3. Security Evaluation Models
• 4. Security Capabilities of Information Systems
• 5. Security Architectures, Designs, and Solution Elements Vulnerabilities
• 6. Web-based Systems Vulnerabilities
• 7. Mobile Systems Vulnerabilities
• 8. Embedded Devices and Cyber-Physical Systems Vulnerabilities
• 9. Cryptography
• 10. Site and Facility Design Secure Principles
• 11. Physical Security

Module 4: Communication and Network Security:

• 1. Secure Network Architecture Design
• 2. Secure Network Components
• 3. Secure Communication Channels
• 4. Network Attacks

Module 5: Identity and Access Management (IAM):

• 1. Physical and Logical Assets Control
• 2. Identification and Authentication of People and Devices
• 3. Identity as a Service
• 4. Third-party Identity Services
• 5. Access Control Attacks
• 6. Identity and Access Provisioning Lifecycle

Module 6: Security Assessment and Testing:

• 1. Assessment and Test Strategies
• 2. Security Process Data
• 3. Security Control Testing
• 4. Test Outputs
• 5. Security Architectures Vulnerabilities

Module 7: Security Operations:

• 1. Investigations Support and Requirements
• 2. Logging and Monitoring Activities
• 3. Provisioning of Resources
• 4. Foundational Security Operations Concepts
• 5. Resource Protection Techniques
• 6. Incident Management
• 7. Preventative Measures
• 8. Patch and Vulnerability Management
• 9. Change Management Processes
• 10. Recovery Strategies
• 11. Disaster Recovery Processes and Plans
• 12. Business Continuity Planning and Exercises
• 13. Physical Security
• 14. Personnel Safety Concerns

Module 8: Software Development Security:

• 1. Security in the Software Development Lifecycle
• 2. Development Environment Security Controls
• 3. Software Security Effectiveness
• 4. Acquired Software Security Impact