Cybersecurity Study Materials

Cyber threats landscape, types of attackers, vulnerabilities, and the CIA triad.

Symmetric (AES, DES), asymmetric (RSA), hashing (SHA, MD5), digital signatures, and PKI.

Firewalls, IDS/IPS, VPNs, SSL/TLS, packet analysis, and securing network infrastructure.

OWASP Top 10 — XSS, SQL injection, CSRF, broken authentication, and secure coding.

Penetration testing methodology, reconnaissance, scanning, exploitation, and reporting.

Viruses, worms, trojans, ransomware, spyware, adware — types, how they work, and prevention.

Evidence collection, chain of custody, disk forensics, memory forensics, and log analysis.

Phishing, spear phishing, vishing, pretexting, baiting, and defences against human attacks.

Authentication, MFA, SSO, OAuth 2.0, RBAC, and password management best practices.

Shared responsibility model, AWS/Azure security services, data encryption in cloud, and compliance.

IR lifecycle — preparation, identification, containment, eradication, recovery, and lessons learned.

CEH, CompTIA Security+, CISSP, OSCP — overview, importance, and how to prepare.