Subject Overview

An advanced postgraduate study of network security and modern cryptography, integrating mathematical foundations, secure architectures, protocols, operations, analytics, governance, managerial decision-making, emerging technologies and ethical practice.

Learning Goal

Enable learners to critically design, evaluate, implement and govern resilient network-security and cryptographic solutions; assess threats and trade-offs; use security analytics and AI responsibly; and lead security decisions aligned with business, regulatory and future technology requirements.

Syllabus

1. Network Security and Cryptography Foundations

Learning Objective: Establish security terminology, threat models, attack surfaces, trust boundaries, defense-in-depth, zero-trust principles, CIA and extended security properties, risk concepts, security controls and the evolution of network attacks.

Category: foundation

2. Mathematical Foundations of Cryptography

Learning Objective: Apply modular arithmetic, number theory, finite fields, probability, entropy, computational complexity, randomness and hardness assumptions to reason about cryptographic security.

Category: foundation

3. Symmetric Cryptography and Authenticated Encryption

Learning Objective: Evaluate block and stream ciphers, AES, modes of operation, message authentication codes, authenticated encryption, nonce management, key sizes, implementation risks and cryptanalytic attacks.

Category: core

4. Asymmetric Cryptography, Digital Signatures and Key Agreement

Learning Objective: Analyze RSA, Diffie–Hellman, elliptic-curve cryptography, digital signatures, hybrid encryption, forward secrecy, security assumptions and common implementation vulnerabilities.

Category: core

5. Hashing, Integrity and Cryptographic Protocol Design

Learning Objective: Examine cryptographic hash functions, password hashing, commitments, Merkle trees, secret sharing, secure randomness, protocol composition, formal security models and attack-resistant protocol design.

Category: core

6. Key Management, PKI and Digital Trust

Learning Objective: Design cryptographic key lifecycles, certificate and public-key infrastructures, trust models, hardware security modules, secrets management, rotation, revocation, recovery and enterprise cryptographic governance.

Category: application

7. Secure Network Protocols and Communications

Learning Objective: Critically assess TLS, IPsec, SSH, DNSSEC, email security, VPNs, wireless security, secure routing, identity federation and protocol downgrade, spoofing, replay and man-in-the-middle defenses.

Category: core

8. Secure Network Architecture and Zero Trust

Learning Objective: Architect segmentation, microsegmentation, firewalls, proxies, secure access service edge, software-defined networking, network access control, deception systems and zero-trust access for hybrid enterprises.

Category: application

9. Cloud, Virtualized, Container and API Security

Learning Objective: Secure cloud networks, multi-cloud connectivity, virtual infrastructure, containers, Kubernetes, service meshes, APIs and DevSecOps pipelines using shared-responsibility, policy-as-code and cloud-native controls.

Category: contemporary

10. Network Monitoring, Detection and Security Analytics

Learning Objective: Use logs, telemetry, packet and flow analysis, IDS/IPS, SIEM, behavioral analytics, threat intelligence and detection engineering to identify anomalies, measure control effectiveness and support evidence-based decisions.

Category: application

11. AI in Network Security and Adversarial Environments

Learning Objective: Evaluate machine-learning applications for detection and response, data quality, model drift, explainability, adversarial machine learning, AI-enabled attacks, privacy risks and responsible human oversight.

Category: contemporary

12. Incident Response, Forensics and Cyber Resilience

Learning Objective: Lead preparation, detection, containment, eradication and recovery; preserve network evidence; investigate intrusions and ransomware; coordinate crisis decisions; and design resilient, tested recovery strategies.

Category: strategic

13. Security Assessment, Cryptanalysis and Ethical Testing

Learning Objective: Conduct vulnerability assessment, secure configuration review, penetration testing, protocol analysis and controlled cryptanalysis while applying legal authorization, ethical boundaries, reporting standards and remediation prioritization.

Category: advanced

14. Governance, Risk, Compliance and Security Leadership

Learning Objective: Align network and cryptographic controls with enterprise risk, privacy, ethics, regulation and standards such as ISO 27001, NIST CSF and PCI DSS; develop metrics, investment cases, third-party oversight and executive decisions.

Category: strategic

15. Post-Quantum Cryptography and Future Secure Networks

Learning Objective: Assess quantum threats, post-quantum algorithms, crypto-agility, migration planning, confidential computing, privacy-enhancing technologies, blockchain applications, 5G/6G, IoT and autonomous network-defense trends.

Category: advanced