Module 4 – Network and Web Security
Curriculum
64 Lessons
Introduction to Network Security
Lesson Objective: To introduce students to the foundational concepts of network security, including types of threats, the architecture of secure networks, and practical tools for traffic analysis. The goal is to build a clear understanding of risks, threat models, and protection mechanisms relevant to modern networks.
Theoretical Component
Common Attack Types
OSI Model Vulnerabilities
Core Security Mechanisms:
Practical Component: Wireshark — Network Traffic Analysis
Live Demonstration:
Student Assignment
Additional Notes
Firewalls
Lesson Objective: To understand the role and functionality of firewalls in network defense, examine types of firewalls, and learn how to configure and test basic firewall rules using virtual lab tools.
IDS/IPS Systems
What You’ll Learn: In this lesson, you will understand the core principles behind Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS). You’ll examine how these systems monitor, detect, and respond to malicious activity within a network, and practice using tools such as Snort or Suricata to simulate real-world detection scenarios.
VPNs and Encrypted Tunnels
What You’ll Learn: This lesson covers the fundamentals of Virtual Private Networks (VPNs) and encrypted tunnels. You will learn why secure remote access is vital, compare common VPN protocols, and create encrypted tunnels using OpenVPN or WireGuard.
OWASP Top 10 Overview
What You’ll Learn: In this lesson, students will be introduced to the OWASP Top 10 — a globally recognized list of the most critical security risks to web applications. You will understand how these vulnerabilities arise, how to identify them, and how to mitigate them effectively.
SQL Injections
What You’ll Learn: This lesson dives deep into SQL injection (SQLi) attacks — one of the most well-known and dangerous web vulnerabilities. You’ll explore how they work, see how they’re executed in practice, and learn how to prevent them through secure coding practices.
Cross-Site Scripting (XSS)
What You’ll Learn: In this lesson, students will explore Cross-Site Scripting (XSS), a common vulnerability that allows attackers to inject malicious scripts into web pages. You'll learn about different types of XSS, see how they can be exploited, and implement prevention techniques.
CSRF, IDOR, and Other Web Vulnerabilities
What You’ll Learn: This comprehensive lesson dives into advanced exploitation scenarios involving CSRF (Cross-Site Request Forgery), IDOR (Insecure Direct Object References), and lesser-known web application flaws. These vulnerabilities are critical for real-world penetration testers, security analysts, and developers aiming to secure sensitive resources and user data.