Cyber Security and Ethical Hacking
Semester VII · BCA 401 · 3 credits
0 / 7
chapters done
-
The syllabus asks for
- Vocabulary
- The CIA triad and beyond
- Defence in depth and principles
- Threat modelling
- Rating and ranking risk
- CVSS v3.1: scoring a known vulnerability
- Seeing the ideas: real hardware, the triad, STRIDE and the risk matrix
- Summary and exercises
-
The syllabus asks for
- Layers and what each reveals
- The TCP header (RFC 793)
- Handshake and sequence arithmetic
- Classifying flag combinations
- Service inventory
- Governance of discovery
- Seeing the ideas: perimeter hardware, the TCP header, the handshake and the flag byte
- Summary and exercises
-
The syllabus asks for
- Authentication factors
- Entropy of a secret
- Work factors and key derivation
- Access control models
- Practical guidance
- Seeing the ideas: factors in hardware, entropy bars and access models
- Summary and exercises
-
The syllabus asks for
- Secure development lifecycle
- Validate input, encode output
- Parameterised queries
- Content Security Policy
- Cookies, sessions and CSRF
- Further hardening
- Seeing the ideas: the secure lifecycle, safe queries, cookie flags and the validate-encode pipeline
- Summary and exercises
-
The syllabus asks for
- Architecture of a defended network
- DNS and DNSSEC
- Wi-Fi security: WPA2 and WPA3
- Rate limiting with a token bucket
- First-match ACLs and shadowing
- Operating the controls
- Seeing the ideas: network hardware, zones, the DNSSEC chain, Wi-Fi keys and the token bucket
- Summary and exercises
-
The syllabus asks for
- Detection systems
- The confusion matrix
- The base-rate fallacy
- Incident response lifecycle
- Digital forensics
- Seeing the ideas: forensic hardware, sensor placement, the confusion matrix, the incident cycle and the custody chain
- Summary and exercises
-
The syllabus asks for
- Audits, assessments and tests
- The audit process
- Quantifying risk
- Penetration testing: rules of engagement
- Nepal's legal framework
- Seeing the ideas: places under audit, the audit cycle, ALE, the test with its ROE gate and the penalty chart
- Summary and exercises
No chapter matches. Try another word.
The paper
TU assessment: 60% final examination set by the university, 40% internal (assignments, lab work, attendance). Confirm the split in your college's notice.
Where the hours go
Teaching hours are the board's guide to how much of the paper each part carries.
- Unit 4 · Secure Application Engineering8 h
- Unit 3 · Authentication, Entropy, Key Derivation and Access Control Models7 h
- Unit 1 · Foundations, the CIA Triad, Threat Modelling and CVSS Scoring6 h
- Unit 2 · Network Protocol Analysis, TCP Flag Math and Asset Discovery Governance6 h
- Unit 5 · Network Defence Architecture, DNSSEC, Wi-Fi Keys, Rate Limiting and ACLs6 h
- Unit 6 · Intrusion Detection, Alert Statistics, Incident Response and Digital Forensics6 h
- Unit 7 · Security Audits, Penetration Testing Rules of Engagement and Nepal Cyber Law6 h