Fundamentals of cybersecuritySyllabus

Subject code

IF-2201y-EN

Credits

6

Student workload

120

Semester

Spring semester

Academic year

1

Subject type

Mandatory

Form of education

Full-time

Language of instruction

Azerbaijani

In-class hours

a) 30 hours – lectures; b) 15 hours – seminars; c) 15 hours – laboratory work

Out-of-class hours

a) 70 hours – Student Independent Work; b) 50 hours – Guided Independent Work

This course aims to develop fundamental theoretical knowledge and practical skills in the conceptual foundations, role, and significance of cybersecurity in the modern digital environment. the course introduces the concepts of cybersecurity and information security, their distinctive and interconnected characteristics, and the fundamental principles of protecting information systems, networks, and user data. various cyberattack vectors and threat actors, as well as the concepts of vulnerabilities, threats, and risks, are examined together with the stages of the cyberattack chain and the technical and organizational security measures applied at each stage. students are introduced to the fundamental methodologies of penetration testing, working in linux environments, open source intelligence (osint), network scanning, vulnerability identification and management, security assessment, and access control principles. the course also examines social engineering, ddos attacks and defense mechanisms, web application and wireless network security, privilege management, ethical and legal aspects of cybersecurity, and the opportunities and risks associated with generative artificial intelligence technologies. the course is designed to develop students' initial practical skills in vulnerability analysis, security testing, evaluation of security assessment results, and report preparation, as well as their systematic and analytical approach to cybersecurity challenges.

• lecture
• seminar
• laboratory work
• interactive discussion
• case study
• presentations

1. 1

   CLO 1: Demonstrate knowledge of the fundamental concepts and principles of cybersecurity.

2. 2

   CLO 2: Explain the importance of cybersecurity management and identify the organizational forms and methods used to ensure cybersecurity.

3. 3

   CLO 3: Explain the fundamental principles of cybersecurity and identify the main technical methods and tools used to protect information systems. demonstrate a general understanding of vulnerabilities, security gaps, threats, and risks, including their characteristics and basic management approaches.

4. 4

   CLO 4: Identify the functions of essential tools used in defensive and offensive cybersecurity activities.

5. 5

   CLO 5: Apply security management tools, controls, methods, and technologies to implement cybersecurity policies. demonstrate an understanding of the relevance, development, implementation, and enforcement of cybersecurity policies and the methods used to ensure their effectiveness.

6. 6

   CLO 6: Demonstrate knowledge of global, regional, and national cybersecurity regulations, standards, and best practices, and monitor their development and evolution.

1. 1.
   Fundamental concepts of cybersecurityLecture

   This topic introduces the fundamental concepts, objectives, and role of cybersecurity in the modern digital environment. the concepts of cybersecurity and information security, including their distinctive and interconnected characteristics, are examined. key concepts such as assets, threats, vulnerabilities, risks, attacks, and security incidents are explained. the CIA triad—confidentiality, integrity, and availability—as well as fundamental security principles such as authentication, authorization, and accountability are explored. the interconnected roles of people, processes, and technology in ensuring cybersecurity are also examined.

2. 2.
   Gnu/linux operating system. kali linuxLecture

   This topic introduces the fundamental concepts, architecture, and operating principles of the gnu/linux operating system. the linux kernel, file system, users and groups, access permissions, processes, and the main characteristics of the command-line interface are examined. basic linux commands, file and directory management, system information retrieval, and network configuration verification are discussed. the topic also introduces kali linux, its main features and applications in cybersecurity and security testing, as well as the general categories of security tools included in the distribution.

3. 3.
   Penetration testing methodologyLecture

   This topic examines the nature, objectives, and role of penetration testing in assessing the security of information systems. the main stages of penetration testing are discussed, including planning, defining the scope and rules of engagement, information gathering, scanning and vulnerability analysis, controlled exploitation, evaluation of results, and reporting. the characteristics and practical differences between black-box, white-box, and grey-box testing approaches are explained. the topic also covers major methodological approaches, legal and ethical requirements, documentation of test results, and principles for developing recommendations for vulnerability remediation.

4. 4.
   Reconnaissance and information gatheringLecture

   This topic examines the role and objectives of reconnaissance and information gathering in cybersecurity and penetration testing. passive and active information-gathering approaches used to obtain information about target systems, networks, and organizations are discussed. methods for collecting information from open sources (osint), including domains, IP addresses, DNS records, network infrastructure, and exposed services, are examined. the topic also covers the organization and analysis of collected information, its use in subsequent security assessment stages, and compliance with legal and ethical requirements during information-gathering activities.

5. 5.
   Vulnerability managementLecture

   This topic examines the identification, assessment, and management of security vulnerabilities in information systems. the causes and main types of vulnerabilities, as well as the risks they pose to systems, are discussed. the principles of vulnerability detection, validation, risk assessment, and prioritization are explained. mechanisms such as CVE and CVSS for vulnerability identification and assessment, analysis of automated scanning results, and identification of false positives are examined. the topic also covers vulnerability remediation, application of updates and security patches, selection of compensating controls, and verification of implemented remediation measures through retesting.

6. 6.
   System hacking methodologyLecture

   This topic examines the main stages and principles of system hacking methodology used in the security assessment of information systems. the analysis of information obtained about target systems and identified vulnerabilities, controlled acquisition of system access, and assessment of the obtained access level are discussed. risks associated with user accounts and credentials, weaknesses in authentication mechanisms, access acquisition, and privilege escalation are explained. the topic also examines the assessment of the security impact of obtained access, documentation of activities, and restoration of the system to its initial state after testing.

7. 7.
   Social engineering and the human factorLecture

   This topic introduces the concept of social engineering and the role of the human factor in cybersecurity. approaches that exploit human trust, behavioral characteristics, and psychological tendencies to obtain information or bypass security mechanisms are examined. the main characteristics of common social engineering techniques, including phishing, spear phishing, pretexting, and baiting, are explained. the topic also covers the identification of indicators of social engineering attacks, improvement of user security awareness, implementation of security policies, and key defensive measures for reducing human-related cybersecurity risks.

8. 8.
   Privilege escalation and access managementLecture

   This topic examines the assessment of obtained access levels, privilege escalation, and access control mechanisms in information systems. the concepts of horizontal and vertical privilege escalation, differences between user and administrator privileges, and risks arising from misconfigurations and security vulnerabilities are discussed. the role of user accounts, access rights, authentication, and authorization mechanisms in system security is explained. the topic also covers the principle of least privilege, restriction of access rights, protection of privileged accounts, and key security measures for preventing unauthorized access.

9. 9.
   Ddos attacks and defense mechanismsLecture

   This topic examines the nature, main characteristics, and impact of distributed denial-of-service (ddos) attacks on the availability of information systems. the differences between dos and ddos attacks, the role of botnet infrastructures, and the main characteristics of volumetric, protocol-based, and application-layer ddos attacks are discussed. principles for distinguishing malicious traffic from legitimate user traffic, identifying key indicators of ddos attacks, and assessing their impact are explained. the topic also examines major ddos defense mechanisms, including traffic filtering, rate limiting, firewalls, ids/ips systems, load balancing, and distributed protection mechanisms.

10. 10.
    Web application attacks. OWASP top 10Lecture

    This topic examines major security risks in web applications and common types of attacks targeting them. the architecture and attack surface of web applications, as well as security risks associated with data exchange between users, servers, databases, and other components, are discussed. major web application security risks identified within the OWASP top 10 framework, including access control, authentication, data protection, injection, insecure design, and security misconfiguration, are explained. the topic also covers the identification of web application vulnerabilities, assessment of their potential impact, and principles for mitigating associated risks through secure programming, input validation, proper configuration, and other defensive measures.

11. 11.
    Wireless network securityLecture

    This topic examines the main security characteristics of wireless networks, associated threats, and defense mechanisms. security risks arising from the characteristics of wireless communication environments, including unauthorized access, traffic interception, rogue access points, and communication disruption, are discussed. the main characteristics and differences between wep, wpa, wpa2, and wpa3 security mechanisms are explained. the topic also covers authentication, access control, and encryption mechanisms in wireless networks, secure configuration principles, and key defensive measures.

12. 12.
    Ethical and legal issues in cybersecurityLecture

    This topic examines the fundamental ethical principles and legal requirements that must be considered when conducting cybersecurity activities. the distinction between authorized and unauthorized access to information systems, professional responsibility, privacy, and personal data protection principles are discussed. the importance of conducting security testing only within predefined authorization and scope, protecting acquired information, and using it responsibly is explained. major legal approaches related to cybercrime, unauthorized access to or modification of data, interference with system operations, and other unlawful activities are examined. the topic also covers professional ethics for cybersecurity specialists, responsible vulnerability disclosure, and compliance with national and international legal frameworks.

13. 13.
    Generative artificial intelligence in cybersecurity: opportunities and risksLecture

    This topic examines the opportunities and security risks associated with the use of generative artificial intelligence technologies in cybersecurity. the fundamental operating principles of generative AI and the applications of large language models in cybersecurity are introduced. the use of generative AI for security data analysis, threat detection, incident response, vulnerability analysis, and automation of security processes is discussed. at the same time, risks associated with the malicious use of these technologies for social engineering, generation of deceptive content, and other harmful activities are examined. the topic also covers prompt injection, data leakage, unreliable outputs, model misuse, and privacy risks, together with principles for the secure and responsible use of generative AI systems.

1. Parasram, s. v., samm, a., boodoo, d., johansen, g., allen, l., heriyanto, t., & ali, s. (2018). kali linux 2018: assuring security by penetration testing (4th ed.). packt publishing. 518 p.
2. Chapple, m., & seidl, d. (2021). comptia security+ study guide: exam sy0-601. sybex. 672 p.
3. Whitman, m. e., & mattord, h. j. (2022). principles of information security (7th ed.). cengage learning. 562 p.
4. Əbdiyeva-əliyeva, g. (2022). kibertəhlükəsizliyin əsasları. baku. 208 p.