Cyber Security Course 2025

1. Devanshu Shukla shares personal journey from engineering to cybersecurity.

2. Experience with hacking groups, government projects, DRDO, defense labs, and building AI-based solutions.

3. Insights into real tenders and large-scale cybersecurity implementations

1. Discussion on cyber threats, risk registers, forensic analysis, incident response, disaster recovery planning.

2. National-level cybersecurity priorities and skills needed for finance, defense, utilities, and e-governance sectors.

3. Top skills in demand for cybersecurity analysts based on real job market research

1. Introduction to Central Bank of India and Union Bank of India tender requirements.

2. Scope of work: Application audit, OWASP checks, VAPT, Data Center (DC/DRC) audits, ATM security audits.

3. Explanation of real cyberattacks on banks (phishing, malware injections, fraudulent transactions).

1. Defining the first hands-on project: AI-enabled fraud detection & threat prevention system for Union Bank of India.

2. Five-step audit methodology:

   1. Identify digital assets

   2. Map data flow points

   3. Define security zones

   4. Evaluate network security controls

   5. Maintain an information security register.

3. Homework: Install NMAP or ZenMap before next session

1. Recap of previous session and project (Union Bank of India Network Audit).

2. Understanding key stages of a bank network audit:

   • Identifying digital assets

   • Mapping data flow points

   • Defining security zones

   • Evaluating network security

   • Maintaining information security register

3. Real-world objective: Achieve zero blind spots in bank networks, minimize blast radius of attacks

1. Collecting data from:

   • Asset management tools

   • Active directories

   • Network inventories (routers, firewalls, IoT, ATM devices).

2. Tools to be used:

   • Nmap (network scanning)

   • Nessus (licensed vulnerability scanner)

   • Traceroute, Wireshark for flow mapping.

3. Setting up Intern Tracker account for live tasks and demonstrations

• Deploying a simulated Union Bank infrastructure on AWS:

  • Virtual Private Cloud (VPC)

  • Internet Gateway and NAT Gateway

  • Public and private routing tables

  • Security groups and subnet segmentation.

• Understanding role of the Bastion server.

• Overview of 4 key servers:

  • Branch Server

  • Payment Gateway

  • ATM Controller

  • Database Server.

Live demonstration:

• Using Nmap to scan networks and identify open ports.

• Detecting services and their software versions.

• Using SSH to access bastion server remotely.

• Attempting communication with ports via Ncat.

• Introduction to exploit databases for testing vulnerabilities

• Creating an Information Security Register:

  • Asset identification (IP addresses, services).

  • Risks identified (e.g., plain-text FTP communication, outdated software).

  • Recommendations (secure FTP, network segmentation).

• Packet capturing using TCP dump and Wireshark for analyzing data flows.

• Case study: World Bank server breach caused by insider threat and poor security monitoring.

• Real-world breach costing hundreds of crores.

• Recap of Union Bank network audit.

• Today's mission: Build AI-powered firewall.

• Firewalls explained (software, hardware, next-gen).

• Why traditional firewalls fail against modern attacks.

• How AI-powered firewalls detect and stop new threats.

• AWS cloud lab setup (5 bank servers + attacker machine).

• Nmap scan: Finding open ports.

• Hydra brute-force attack simulation.

• Logs exposing firewall weaknesses in real-time.

• Installing AI-powered defense system (Python, ML libraries).

• Writing anomaly detection rules with Isolation Forest.

• Auto-blocking malicious IPs in real-time.

• Writing brute force & SQL injection threat signatures.

• Static vs adaptive AI signatures.

• Industry relevance (₹80–100 Cr firewall tenders).

• How email fraud works in banking: spoofing, phishing, malware attachments, and social engineering.

• Training AI models using real transaction logs, phishing emails, and spam patterns for anomaly detection.

• Live demo of setting up a MailHog email server and simulating a fraud attack on Union Bank’s mail system.

• Building an AI-powered spam filter in Python to block phishing and malicious emails in real time.

• Real-world tender breakdown: ₹6.8 lakh project for cloud email security and how this lesson aligns with it.

• Career & business transformation: roles in SOC, DevSecOps, cloud security, and launching email security services.

• Step-by-step setup of MailHog to simulate a cloud-based email server in a controlled lab environment.

• Launching a live email attack: Using an external attacker to send phishing emails to the bank’s mail server.

• Analyzing server behavior with and without AI-based detection: what changes when defense is intelligent.

• Bypassing traditional defenses using tools like Hydra and Burp Suite to test login pages and brute-force attacks.

• Detecting threats in real-time using an Isolation Forest-based AI model for behavioral anomaly detection.

• Blocking malicious IPs automatically using Python scripting – turning raw logs into real-time protection.

• Step-by-step SIEM deployment for centralized log collection and security event monitoring.

• Designing a SOC dashboard to track live security incidents, threat patterns, and KPIs.

• Configuring real-time alerts for brute force attacks, phishing attempts, and policy violations.

• Analyzing and correlating security events across multiple data sources for rapid incident detection.

• Coordinating with stakeholders to share incident reports, escalation procedures, and compliance updates.

• Optimizing SOC performance by tuning alert rules, reducing false positives, and improving response times.

• Cross-country hacking demo—attacker in the US, victim in Germany.

• Using ncat to gain shell access and run commands like launching apps or browsing data.

• Exploiting the victim’s file system to manipulate files and directories.

• Evading detection by running exploits in sandboxed environments.

• Real-world scenarios of exploiting images or PDFs to gain system access.

• Strategies for quick mitigation once a breach is detected.

• Exploiting memory stack vulnerabilities via integer overflow in WhatsApp.

• Creating a malicious GIF that delivers a reverse shell to the attacker.

• Real-time attack demonstration between a US cloud server and an Android phone.

• Executing phone commands remotely, including dialing numbers and modifying files.

• Understanding the risks to unrooted Android devices through media-based exploits.

• Security awareness tips for detecting and mitigating mobile device breaches.

• Simulating a cyber breach to replicate real-world attack scenarios in a controlled environment.

• Capturing forensic logs from endpoints, servers, and network devices for evidence preservation.

• Root Cause Analysis (RCA) to identify the exact entry point and attack vector used by the intruder.

• Forensic analysis techniques using Linux tools and log parsing to reconstruct attacker activity.

• Correlating data across multiple sources to create a complete incident timeline and evidence chain.

• Reporting and mitigation planning to prevent recurrence and strengthen future defenses.

• Cyber-Incident SOP Development – Step-by-step creation of branch & data center-specific disaster recovery protocols.

• Tactical Security Operations – Coordinating with security teams for rapid containment during incidents.

• Network & Infrastructure Recovery – Restoring critical systems while minimizing downtime and data loss.

• Role-Based Response Plans – Assigning clear responsibilities for IT, security, and business continuity teams.

• Stakeholder Communication Framework – Keeping management, clients, and regulators informed in real-time.

• Post-Recovery Analysis – Evaluating response effectiveness and updating SOPs for continuous improvement.

• Secure Your Phone Like a Pro – Apply 35+ CIS Benchmark settings trusted by governments & Fortune 500 companies.

• Live Android Security Audit – Watch step-by-step as we find & fix hidden vulnerabilities in real time.

• Protect Against Hackers & Malware – Detect spyware, harmful apps, and block unauthorized access instantly.

• Enable Critical Safety Features – Use Find My Device, theft detection, SIM lock, and remote wipe to safeguard data.

• Shut Down Data Leaks – Disable risky defaults, control app permissions, and stop advertisers from tracking you.

• Hands-On Practice – Download the CIS checklist & apply settings directly on your own device.

• Learn the first principles of audit assistance — Evidence → Validation → Reporting — the foundation of professional IT audits.

• Discover how to transform raw, inconsistent logs into structured dashboards that reveal hidden security patterns.

• Use Voyant Tools to visualize logs through word maps, term frequency, correlations, and contextual insights.

• Apply Python, Pandas, Matplotlib, and WordCloud to automate log structuring and analysis.

• Integrate AI & Machine Learning (Neural Networks + Agglomerative Clustering) to detect unresolved bugs with up to 95% accuracy.

• Generate developer-ready bug reports (CSV) and hand them over seamlessly via GitHub for real-world resolution.