CCMAS Course Search

Principles of applied information security management. Cybersecurity challenges. Cybersecurity risks, challenges and the path forward. Recognising risks. Overview of decision and risk analysis techniques. Mitigating risks and vulnerabilities. Effective use of assessments for cybersecurity risk mitigation. Mitigating cybersecurity risk with the cloud. Proactive measures mitigate critical cybersecurity challenges. Critical corporate and military cybersecurity risks. Evolving challenges in cyber risk management. The social implication of information technology to national development, cyber-attacks, control, distribution and safety of information. Economic and geopolitical factors that have made African countries vulnerable to cyber-attacks and the steps that can be taken to address this. Governance and security policy. Threat and vulnerability management. Incident management, risk assessment and risk management frameworks. Information leakage, crisis management and business continuity. Legal and compliance, security awareness and security implementation considerations. ISO 27000 series and the Plan-Do-Check-Act model. Assessment of threats and vulnerabilities. Incident response, forensics and investigations. Dealing with classified/sensitive data. Legal and regulatory drivers and issues. Certification. Common criteria, security education and training. Practical considerations when implementing the frameworks to address current and future threats. Lab work: Practical approach to cyber hygiene. Practice cybersecurity risk mitigation in the cloud and how to use proactive measures to mitigate the learned challenges. Work on applying the decision and risk analysis techniques. Master how to mitigate risks and vulnerabilities.

Dark web, deep web, clear net. Tor Onion, Silk Road. How to get on the dark web. Users of dark and deep web. Invisible Web Search Engines. Privacy and anonymity as core values of the darknet. Decentralisation on the dark web. Accessing the Deep web and the Dark web through the TOR browser. Web security. Cryptocurrencies. Overview on Dark Web and Deep Web. The Hidden side/area of the web. Deep/Dark Web Anonymity, TOR, Hidden services, TAILS, Web Security, Cryptocurrencies. Crypto Trading and Cryptomining. Cryptocurrencies, Anonymity & Security. How to install a VPN, and adequate browsers like Chrome, Opera, or Firefox with tracking technologies. How Does the Dark Web Work? Reasons for Accessing the Dark Web. Security issues of Dark and Deep web. How to use the Tor over VPN method - Session logs storage. Encryption of traffic. Protection against malicious Tor exit nodes. How to use Tor over VPN - bypass blocked Tor nodes, ISP visibility in accessing onion content, susceptible to end-to-end timing attacks. Tor alternatives such as I2P, Matrix.org, Orbot, Globus Secure Browser, Comodo Ice Dragon and FreeNet. Cons and Pros of Tor. Use of virtual machine software. Navigating the Dark Web. The Hidden Wiki as Wikipedia’s evil twin. Search engines such as DuckDuckGo, Torch, the triple-W Virtual Library, Uncensored Hidden Wiki, and ParaZite. Commercial services. Email clients. Darknet version of social media and instant messaging - Zuckerberg’s Facebook, BlackBook, Torbook, Campfire, MadIRC Chat Server. Safety on the dark web. Inside the dark and deep web. The Best Sites and Services on the Dark Web. Deep web radio. Benefits of Deep and Dark web. Cyber Threats and Dangers on the Deep/DarkWeb. How to fight hackers underground. Dark web and Deep web monitoring. Lab work: Install your VPN. Practice how to access the Deep web and the Dark web with enhanced security. Investigate advanced and famous websites located on the Deep and Dark Web. Practically learn how to anonymously access the darknet and TOR hidden services (onion services), and how to enter the dark web while staying safe. Try to visit the best sites and buy an educational resource.

Statistical data. Types, sources and methods of collection. Presentation of data. Tables chart and graph. Errors and approximations. Frequency and cumulative distributions. Measures of location, partition, dispersion, skewness and Kurtosis. Rates, ratios and index numbers.

Introduction to digital forensics, digital evidence, and increasing awareness of digital evidence. Challenging aspects of digital evidence. Best practices in securing, processing, acquiring, examining and reporting on digital evidence. Cyber trail and challenging aspects of the cyber trail. Brief history of computer crime and cybercrime investigation. Cyber auditing. Evolution of investigative tools. Language of computer crime investigation. The role of computers in crime, technology and law, jurisdiction, pornography and obscenity, child pornography, privacy, copyrights and the “theft” of digital intellectual property. The investigative process and investigative reconstruction, with digital evidence. Examine techniques and tools used by computer forensics investigations such as acquisition, preservation, recovery, and analysis of evidence obtained from portable and stationary computer storage devices, personal digital assistants (PDAs), and cell phones. Current technologies and methods as well as leading edge techniques with practical based exercises/projects and research opportunities. Lab work: Practical exercises on how to make use of various techniques and tools for computer forensics investigations and cyber trail during cybercrime investigations. Practice cyber auditing skills. Work on applying the best practices in securing, processing, acquiring, examining and reporting on digital evidence with current technologies and methods in forensics investigation.

Elementary set theory, subsets, union, intersection, complements, venn diagrams. Real numbers; integers, rational and irrational numbers, mathematical induction, real sequences and series, theory of quadratic equations, binomial theorem. Complex numbers; algebra of complex numbers; the Argand diagram. De-Moivre’s theorem, nth roots of unity. Circular measure, trigonometric functions of angles of any magnitude, addition and factor formulae.

Function of a real variable, graphs, limits and idea of continuity. The derivative, as the limit of rate of change. Techniques of differentiation. Extreme curve sketching; Integration as an inverse of differentiation. Methods of integration, Definite integrals. Application to areas, volumes.

Concept of Entrepreneurship (Entrepreneurship, Intrapreneurship/Corporate Entrepreneurship,). Theories, Rationale and relevance of Entrepreneurship (Schumpeterian and other perspectives, Risk-Taking, Necessity and opportunity-based entrepreneurship and Creative destruction). Characteristics of Entrepreneurs (Opportunity seeker, Risk taker, Natural and Nurtured, Problem solver and change agent, Innovator and creative thinker). Entrepreneurial thinking (Critical thinking, Reflective Thinking, and Creative thinking). Innovation (Concept of innovation, Dimensions of innovation, Change and innovation, Knowledge and innovation). Enterprise formation, partnership and networking (Basics of Business Plan, Forms of business ownership, Business registration and forming alliances and joint ventures). Contemporary Entrepreneurship Issues (Knowledge, Skills and Technology, Intellectual property, Virtual office, Networking). Entrepreneurship in Nigeria (Biography of inspirational Entrepreneurs, Youth and women entrepreneurship, Entrepreneurship support institutions, Youth enterprise networks and Environmental and cultural barriers to entrepreneurship). Basic principles of e-commerce.

Introduction to ethical hacking, attacks, threats, hackers, measures and countermeasures. Overview of ethical hacker strategies. Focus on how perimeter defences work, how intruders escalate privileges and methods of security systems. Intrusion detection, policy creation, social engineering. Techniques and technologies for understanding the operation of malicious software and attacks. Threats and defence mechanisms. Attack phases. Secure network infrastructure. DDoS attacks, buffer overflows and virus creation. Network Infrastructure Attacks, Hacking Methodology, Developing ethical hacking plans. Footprinting and reconnaissance. Scanning Networks. Enumeration and system hacking. Malware threats. Sniffing. Social engineering. Physical security. Password vulnerabilities - cracking passwords. Denial of Service. Session hijacking. Hacking web servers. Hacking web applications. sql injection, hacking wireless networks. Hacking mobile platforms. Evading IDS, Firewalls, and Honeypots. Explores techniques and technologies for understanding the operation of malicious software and attacks. Techniques for detection, identification and prevention. Reverse engineering of code and network exploits as a method for understanding and development of countermeasures. Lab work: Practice the ethical hacker strategies and methods. Work on a sample perimeter defences and identify how intruders escalate privileges and methods of security systems. Practical exercises on the techniques and technologies of malicious software and attacks. Learn how to perform system hacking, mobile platform hacking, crack password, remove introduced vulnerabilities and evade IDs, firewalls, and honeypots. Apply reverse engineering of code and network exploits as a method for understanding and development of countermeasures. Utilise foot printing and reconnaissance, and scanning networks.

An independent or group investigation of appropriate cybersecurity related problems carried out under the supervision of a lecturer. The student must submit a written proposal to the supervisor to review. The proposal should give a brief outline of the project with the statement of problem, aim, objectives, scope, significance, research gap, proposed research methodology, estimated schedule of completion, and resources needed. A formal written report is essential and an oral presentation may also be required. Topics from emerging trends such as applications in artificial intelligence, steganography, quantum computing, big data, cloud security, ethical hacking, cyber hunting, internet security, penetration testing, network intrusion and prevention, threat management, cybersecurity risk mitigation in the cloud, biometrics, digital image processing, Blockchain, quantum computing, edge computing, Internet of Things, 5G security, etc.

This is a continuation of CYB 497. This includes the research methodology, analysis of data using statistical tools, performance evaluation, standard documentation of the project, referencing style, programming of the prototype/simulation model, plagiarism and grammarly check, and PowerPoint presentation skill. The formal written report made up of chapters four and five approved by the supervisor will be submitted to the Department for final grading. An oral presentation is required.