Ladoke Akintola University of Technology, Ogbomosho
Faculty of Computing and Informatics
Department of Cyber Security Science
BSc Cyber Security Science
100 Level Harmattan
Course Code
Course Title
GST 111
MTH 101
Communication In English
Elementary Mathematics I
Introduction to Computing
Science
General Physics I
General Physics Practical I
Descriptive Statistics
Fundamentals of Computing and
Cyber security
Principles of Web development I
Introduction to Library
Total Units
COS 101
PHY 101
PHY 107
STA 111
LAUTECHCYB 101
LAUTECHCYB 103
LAUTECHLIB 101
100 LEVEL RAIN
Course Code
GST 112
MTH 102
COS 102
PHY 102
PHY 108
LAUTECHCYB 104
LAUTECHCYB 102
LAUTECH COS 104
Course Title
Nigerian Peoples and Culture
Elementary Mathematics II
Problem Solving
General Physics II
General Physics Practical II
Principles of Web Development II
Cyber Human Factor
Introduction To Computing and
Informatics
Total Units
1
Unit(s)
Status
LH
PH
2
2
C
C
C
15
30
30
45
C
C
C
C
30
0
45
30
0
45
0
0
2
1
18
C
C
30
15
0
0
Unit(s)
Status
LH
PH
2
2
3
2
1
3
3
C
C
C
C
C
C
C
C
30
30
30
30
0
30
30
30
0
0
45
0
45
45
0
0
3
2
1
3
2
2
18
45
200 level Harmattan
Course Code
ENT 211
COS 201
CYB 201
CYB 203
CYB 209
LAUTECHCYB 205
LAUTECHCYB 207
LAUTECHCYB 213
Courses Title
Entrepreneurship and Innovation
Computer Programming 1
Introduction to Cyber security and
Strategy
Cybercrime, Law and
Countermeasures
Introduction to Software
Engineering
System Security
Information Security Policy
Artificial Intelligence in Cyber
security
Total
Unit(s)
2
3
2
Status
C
C
C
LH
15
30
30
PH
45
45
0
2
C
30
0
2
C
30
0
3
2
2
C
C
C
45
30
30
0
0
0
18
200LEVEL RAIN
Course Code
GST 212
INS 204
COS 202
CYB 299
LAUTECHCYB 202
LAUTECHCYB 204
LAUTECHCYB 206
Courses Title
Philosophy, Logic and Human
Existence
Systems Analysis and Design
Computer Programming II
SIWES 1
Operating System in Cyber
Context
Introduction to Block chain
Technology
Computer Communication and
Networks
Total
Unit(s)
2
Status
C
LH
30
PH
0
3
3
3
2
C
C
C
C
30
30
0
15
45
0
135
45
2
C
30
0
3
C
30
45
18
2
300 level Harmattan
Course Code
CYB 301
CYB 303
CYB 305
CSC 309
LAUTECHCYB 307
LAUTECHCYB 311
LAUTECHCYB 313
LAUTECHCYB 315
300LEVEL RAIN
Course Code
GST 312
ENT 312
CYB 302
CYB 304
CYB 322
CYB 399
LAUTECHCYB 306
LAUTECHCYB 308
LAUTECHCYB 310
Courses Title
Cryptography Techniques,
Algorithms and Applications
Cyber security Risk Analysis,
Challenges and Mitigation
Digital Forensics and
Investigation Methods
Artificial Intelligence
System and Network
Administration
Unit(s)
2
Status
C
LH
15
PH
45
2
C
30
0
2
C
15
45
2
3
C
C
15
30
45
45
Enterprise and Perimeter
Security
Simulation and Modeling
3
C
30
45
2
C
30
0
Linux Operating System,
Administration and Security
2
C
15
45
Total
18
Unit(s)
2
2
2
2
Status
C
C
C
C
LH
30
15
15
15
PH
0
45
45
45
2
C
15
45
3
2
1
2
18
C
C
C
C
0
30
15
30
135
0
0
0
Courses Title
Peace and Conflict Resolution
Venture Creation
Biometrics Security
Information and Big Data
Security
Cyber security Innovation and
New Technologies
SIWES II
Software Defined Networks
Cyber security Management
Principles of Cyber Forensic
Total
3
400 level Harmattan
Course Code
CYB 401
Courses Title
Systems Vulnerability
Assessment and Testing
Unit(s)
2
Status
C
LH
15
PH
45
CYB 403
Cyber Threat Intelligence and
Cyber Conflict
2
C
30
0
CYB 405
Ethical Hacking and Reverse
Engineering
2
C
15
45
CYB 497
Final Year Project 1
3
C
0
135
COS 409
Research Methodology and
Technical Writing
3
C
45
0
LAUTECHCYB 411
Incidence Response and
Reporting
2
C
30
0
LAUTECHCYB 413
Information Management and
Control
2
C
30
0
Unit(s)
2
Status
E
LH
15
PH
45
2
E
30
0
Current Trends in Cyber
Security
2
E
30
0
Total
18
Elective course At least 2units course
Course Code
Courses Title
Introduction to Malware
LAUTECHCYB 415
Analysis and Cyber security
Threats
LAUTECHCYB 417
Computer organization and
Architecture
LAUTECHCYB 419
4
400 level
Course Code
CYB 402
Courses Title
Steganography -Access Methods
and Data Testing
Unit(s)
2
Status
C
LH
15
PH
45
CYB 404
Cloud Computing Security
2
C
30
0
CYB 406
Deep and Dark Web Security
2
C
15
45
CYB 498
Final Year Project II
3
C
0
135
LAUTECHCYB 408
Cyber Security for Mobile Devices
2
C
30
0
LAUTECHCYB 410
Security Strategy for Web
Application and Social Networks
2
C
30
0
LAUTECHCYB 412
LAUTECHCYB 414
Secure Software Development
Cyber Physical System Security
2
2
C
C
30
30
0
0
Unit(s)
1
Status
E
LH
15
PH
0
Elective course At least 1units course
Course Code
Courses Title
LAUTECHCYB 416
Intrusion Detection Techniques
LAUTECHCYB 418
Law of Digital Evidence
1
E
15
0
LAUTECHCYB 420
Application Security
Total
1
18
E
15
0
Total = 144 Units
C Compulsory
E Elective
5
DESCRIPTION OF COURSES
GST 111: Communication in English (2 units C: LH 30)
Learning Outcomes
At the end of this course, students should be able to:
1. identify possible sound patterns in English Language;
2. list notable language skills;
3. classify word-formation processes;
4. construct simple and fairly complex sentences in English;
5. apply logical and critical reasoning skills for meaningful presentations;
6. demonstrate an appreciable level of the art of public speaking and listening; and
7. write simple and technical reports.
Course Contents: Sound patterns in English Language (vowels and consonants, phonetics, and
phonology). English word classes (lexical and grammatical words, definitions, forms, functions,
usages, collocations). Sentence in English (types: structural and functional, simple, and
complex). Grammar and Usage (tense, mood, modality and concord, aspects of language use in
everyday life). Logical and Critical Thinking and Reasoning Methods (Logic and Syllogism,
Inductive and Deductive Argument and Reasoning Methods, Analogy, Generalisation and
Explanations). Ethical considerations, Copyright Rules, and Infringements. Writing Activities:
(Pre-writing, Writing, Post writing, Editing and Proofreading; Brainstorming, outlining,
Paragraphing, Types of writing, Summary, Essays, Letter, Curriculum Vitae, Report writing,
Note making etc. Mechanics of writing). Comprehension Strategies: (Reading and types of
Reading, Comprehension Skills, 3RsQ). Information and Communication Technology in modern
Language Learning. Language skills for effective communication. Major word formation
processes. Writing and reading comprehension strategies. Logical and critical reasoning for
meaningful presentations. Art of public speaking and listening. Report writing.
MTH 101: Elementary Mathematics I (Algebra and Trigonometry)
(2 Units C: LH 30)
Learning Outcomes
At the end of the course, students should be able to:
1. understand the basic definition of Set, Subset, Union, Intersection, Complements, and use
of Venn diagrams;
2. solve quadratic equations;
3. solve trigonometric functions;
4. understand various types of numbers; and
5. solve some problems using the Binomial theorem.
Course Contents: Elementary set theory, subsets, union, intersection, complements, Venn
diagrams. Real numbers, integers, rational and irrational numbers. Mathematical induction, real
sequences and series. Theory of quadratic equations. Binomial theorem. Complex numbers.
Algebra of complex numbers. The Argand diagram. De-Moivre’s theorem, nth roots of unity.
Circular measure, trigonometric functions of angles of any magnitude, addition and factor
formulae.
6
COS 101: Introduction to Computing Sciences (3 Units C: LH 30; PH 45)
Learning Outcomes
At the end of the course, students should be able to:
1. explain basic components of computers and other computing devices;
2. describe the various applications of computers;
3. explain information processing and its roles in the society;
4. describe the Internet, its various applications and its impact;
5. explain the different areas of the computing discipline and its specializations; and
6. demonstrate practical skills on using computers and the internet.
Course Contents: Brief history of computing. Description of the basic components of a
computer/computing device. Input/Output devices and peripherals. Hardware, software and
human ware. Diverse and growing computer/digital applications. Information processing and its
roles in society. The Internet, its applications and its impact on the world today. The different
areas/programs of the computing discipline. The job specializations for computing professionals.
The future of computing.
Lab Work: Practical demonstration of the basic parts of a computer. Illustration of different
operating systems of different computing devices including desktops, laptops, tablets, smart
boards and smart phones. Demonstration of commonly used applications such as word
processors, spreadsheets, presentation software and graphics. Illustration of input and output
devices including printers, scanners, projectors and smartboards. Practical demonstration of the
Internet and its various applications. Illustration of browsers and search engines. How to access
online resources.
PHY 101: General Physics I (Mechanics) (2 Units C: LH 30)
Learning Outcomes
At the end of the course, students should be able to:
1. identify and deduce the physical quantities and their units;
2. differentiate between vectors and scalars;
3. describe and evaluate motion of systems on the basis of the fundamental laws of
mechanics;
4. apply Newton’s laws to describe and solve simple problems of motion;
5. evaluate work, energy, velocity, momentum, acceleration, and torque of moving or
rotating objects;
6. explain and apply the principles of conservation of energy, linear and angular momentum;
7. describe the laws governing motion under gravity; and
8. explain motion under gravity and quantitatively determine behaviour of objects moving
under gravity.
Courses Contents: Space and time. Units and dimension, Vectors and Scalars. Differentiation of
vectors: displacement, velocity and acceleration. Kinematics. Newton laws of motion (Inertial
frames, Impulse, force and action at a distance, momentum conservation). Relative motion.
Application of Newtonian mechanics. Equations of motion. Conservation principles in physics.
7
Conservative forces. Conservation of linear momentum. Kinetic energy and work. Potential
energy. System of particles. Centre of mass. Rotational motion: Torque, vector product, moment,
rotation of coordinate axes and angular momentum. Polar coordinates. Conservation of angular
momentum. Circular motion. Moments of inertia. gyroscopes and precession. Gravitation:
Newton’s Law of Gravitation. Kepler’s Laws of Planetary Motion. Gravitational Potential
Energy. Escape velocity. Satellites motion and orbits.
PHY 107: General Practical Physics I (1 Unit C: PH 45)
Learning Outcomes
At the end of the course, students should be able to:
1. conduct measurements of some physical quantities;
2. make observations of events, collect and tabulate data;
3. identify and evaluate some common experimental errors;
4. plot and analyse graphs; and
5. draw conclusions from numerical and graphical analysis of data
Course Contents: This introductory course emphasizes quantitative measurements, the
treatment of measurement errors and graphical analysis. A variety of experimental techniques
should be employed. The experiments include studies of meters, the oscilloscope, mechanical
systems, electrical and mechanical resonant systems, light, heat, viscosity etc., covered in PHY
101 and PHY 102. However, emphasis should be placed on the basic physical techniques for
observation, measurements, data collection, analysis and deduction.
STA 111: Descriptive Statistics (3 Units C: LH 45)
Learning Outcomes
At the end of the course, students should be able to:
1. explain the basic concepts of descriptive statistics.
2. present data in graphs and charts.
3. differentiate between measures of location, dispersion and partition.
4. describe the basic concepts of Skewness and Kurtosis as well as their utility
function in a given data set.
5. differentiate rates from ratio and how they are use.
6. compute the different types of index number from a given data set and interpret
the output.
Course content
Statistical data. Types, sources and methods of collection. Presentation of data. Tables chart and
graph. Errors and approximations. Frequency and cumulative distributions. Measures of location,
partition, dispersion, skewness and Kurtosis. Rates, ratios and index numbers.
8
LAUTECH-LIB 101: Use of Library (1 Unit: Elective: LH 15)
Senate-approved relevance
The Library is an indispensable constituent of an academic institution. Basically, the library
functions to complement the teaching, learning, and research activities of such academic
community, through the provision of various library resources with the aim of improving its
academic activities. Understanding the "why" of the library is essential to exploiting resources in
both print and non-print forms. The course is designed as a pathway to enhance the optimum use
of the academic library for acquiring quality knowledge using contemporary Information and
Communication Technologies (ICTs). This is in tandem with LAUTECH’s vision and mission
of producing graduates who are able to understand when they need information; why they need
information; where to get information; and how to get information, especially with the use of
technology to achieve excellence.
Overview
The Use of Library as a course is a vital approach to the use of library resources and services
in the university. This highlights the importance of preparing students in enhancing optimum
use of the library for quality knowledge acquisition and development of the total person.
Library 101 is designed to expose students to vital principles, techniques and methods on how to
improve their academic activities. This could be made possible by creating and developing
students’ appetite for reading, love for the library as the best place to get relevant information,
acquaint them with various divisions, facilities, educational resources, ICT gadgets and services
provided therein, and grow students to know how to navigate the library to get the information
required.
The importance of the course lies in meeting the needs of achieving sustainable development
goals (SDGs) numbers 1 and 4 in the areas of poverty reduction and quality education,
respectively. The objectives of the course, learning outcomes, and contents are provided to
address this need.
Objectives
The objectives of the course are to:
1. define the concept ‘library’, its functions, objectives and organizational structure
2. explain the library rules and regulations
3. discuss library resources and types, care of books and other library materials
4. discuss information literacy, information sources and guide to information resources’ use
5. explain organization of library materials
6. describe types and functions of library catalogue
7. explain copyright and ethical issues.
8. discuss reference sources and qualities of a good reference sources.
9. discuss good reading habit/study skills.
10. explain the meaning and scope of library in knowledge acquisition
11. explain how to harness the library resources using e-resources to cope with challenges
arising from their studies.
12. show the students the major divisions of the library and elucidate the processes of how
library materials are organized and services rendered.
13. teach the students the information resources search skills, independent learning skills,
information retrieval skills, study habit skills and independent study skills.
9
The learning outcomes
On completion of the course, students should be able to:
1. describe at least three functions and two objectives of the library
2. state at least ten library rules and regulations
3. identify at least five categories of library resources and four types of libraries
4. explain at least four information sources and three guide to information resources’ use
5. describe at least seven ways of organizing library materials
6. identify at least eight types and four functions of library catalogues
7. state at least eight copyright laws and ethical issues
8. state at least five different types of references sources
9. identify at least seven types of good reading habit/study skills
10. describe at least seven sources of knowledge acquisition in the library
11. identify at least seven e-library resources useful in coping with academic challenges
12. state at least the five major divisions of the library and elucidate on the three processes
of library materials organization.
13. explain at least ten information resources search skills needed for independent study
Course contents
Introduction to library. Definition of basic concepts and history of the library. Types of libraries
and their organization. Information sources in the library. Types of print and non-prints
materials. Primary sources of information, secondary sources and tertiary sources. Serial and
serial publications. Library cataloguing and classification. The use and relevance of catalogue;
Online Public Access Catalogue; Information and Communication Technology and computer
systems and components. Electronic resources. Merits and demerits of ICT. Copyright and
ethical issues. Definition of information and concept of information literacy. Relevance of
information. Fair use and copyright. Bibliographic citations and referencing styles, Reference
citation in research works. Digital Object Identifier. Meaning of APA and journal referencing
style. Definition of plagiarism, Implications of plagiarism and anti-plagiarism mechanisms.
Tour of the different units of the library. Library orientation.User education through workshops
and seminars.
LAUTECHCYB 103 Principles of Web Development I
(2 Unit Compulsory, LH=30)
Senate Approved relevance
The principles of web development hold profound relevance in cybersecurity by forming the
foundation for creating resilient and secure online environments. Adhering to secure coding
practices, input validation, and proper authentication mechanisms ensures robust defense against
common cyber threats like SQL injection and crosssite scripting (XSS). Following principles of
data encryption and secure communication protocols bolsters confidentiality and integrity in web
transactions, mitigating the risk of data breaches. Additionally, by implementing principles of
least privilege and secure session management, web developers contribute to effective access
controls, thwarting unauthorized access. In the dynamic cybersecurity landscape. This is in line
with LAUTECH vision and mission of not just producing graduates, but graduates that is
versatile with relevant skill sets that can keep abreast of the Nigerian Information Technology
10
challenges in order to fortifying digital assets, fostering user trust, and ensuring that web
applications withstand the ever-evolving spectrum of cyber threats.
Overview
In the context of cybersecurity, principles of web development serve as the cornerstone for
creating resilient and secure online platforms. Emphasizing secure coding practices, robust
authentication mechanisms, and encryption protocols is paramount to thwarting cyber threats.
Adhering to principles of input validation and proper session management mitigates common
vulnerabilities, reducing the risk of attacks such as SQL injection and cross site scripting. By
incorporating cybersecurity principles into the development lifecycle, web developers contribute
to the creation of web applications with enhanced resistance against data breaches, unauthorized
access, and other evolving cyber threats. In essence, a strong foundation in the principles of web
development is imperative for building and maintaining cybersecure digital ecosystems.
Objectives
1.
Develop and integrate strong authentication mechanisms to ensure secure access to web
applications, protecting against unauthorized entry.
2.
Apply encryption protocols to safeguard sensitive data, ensuring its confidentiality and
integrity during transmission and storage.
3.
Utilize secure communication protocols, such as HTTPS, to protect against eavesdropping
and man in the middle attacks.
4.
Follow secure coding practices to minimize vulnerabilities and reduce the risk of common
web-based attacks, including SQL injection and cross site scripting.
5.
Enforce rigorous input validation to prevent injection attacks and ensure that user input
does not compromise the integrity and security of the application.
6.
Implement access controls and authorization mechanisms to enforce the principle of least
privilege, restricting users' access based on their roles and responsibilities.
7.
Establish monitoring mechanisms and incident response procedures to detect and respond
promptly to any security incidents, mitigating potential threats and vulnerabilities.
Learning outcomes
At the end of the course, students should be able to:
1. Demonstrate the fundamental principles of web development within the context of
cybersecurity
2. Demonstrate designing, developing, and securing web applications.
3. Apply the integration of security measures into the web development lifecycle.
4. Demonstrate the basic understanding of computer networks and cybersecurity
fundamentals
5. Demonstrate the understanding of front end and back end development
Course content
11
Understand Web Architecture and Components: Explore the architecture of the World Wide
Web, Understand the roles of web servers, browsers, and clients, Examine the client-server
model in web development. Introduction to Web Development and Security: Overview of web
development lifecycle. Basics of HTML, CSS, and JavaScript; Introduction to web security
concepts and challenges. Front end development, Responsive Web Design and User Experience
(UX): Principles of responsive design, MobileFirst development, Improving user experience
through effective design.
LAUTECHCYB 101 Foundations of Computing and Cyber security
LH=30)
(2Unit
Compulsory,
Senate Approved Relevance
The relevance of foundation of computing and cybersecurity is pivotal, recognizing that
individuals play a critical role in safeguarding digital assets. Computing Fundamentals provides
a comprehensive overview of computing concepts, including hardware, software, networking,
and data structures, to establish a solid foundational understanding of how computers function.
Understanding Cryptography and Encryption delves into the fundamental principles of
cryptography, encryption techniques, and their application in securing data transmission and
storage within computing environments. Network Security explores the principles of network
security, including firewalls, intrusion detection systems, and secure protocols, to comprehend
the protection of information during data exchange.
Overview
The course "Foundations of Computing and Cybersecurity" serves as an introductory exploration
into the fundamental principles and concepts underlying both computing and cybersecurity
domains. This course provides students with a comprehensive understanding of the core
elements of computing systems, their functionality, and the critical relationship between
computing and cybersecurity. Through theoretical frameworks and practical applications,
students will delve into the essential components of computing infrastructure and the
fundamental strategies and techniques employed to secure these systems against cyber threats.
Objectives
1. Introduce Computing Fundamentals: Provide a comprehensive overview of computing
concepts, including hardware, software, networking, and data structures, to establish a solid
foundational understanding of how computers function.
2. Explore Cybersecurity Principles: Examine the principles, methodologies, and best practices
in cybersecurity, addressing threats, vulnerabilities, and risk management strategies essential for
safeguarding computing systems.
3. Understand Cryptography and Encryption: Delve into the fundamental principles of
cryptography, encryption techniques, and their application in securing data transmission and
storage within computing environments.
12
4. Discuss Network Security: Explore the principles of network security, including firewalls,
intrusion detection systems, and secure protocols, to comprehend the protection of information
during data exchange.
5. Study Threat Landscape Analysis: Analyze the evolving threat landscape, including malware,
social engineering, and other cyber threats, to understand the tactics employed by adversaries
and methods for mitigation.
6. Examine Secure Software Development: Investigate secure software development
methodologies and practices, emphasizing the integration of security measures throughout the
software development life cycle.
7. Evaluate Compliance and Legal Aspects: Understand legal and compliance requirements in
cybersecurity, including privacy regulations, standards, and ethical considerations in securing
computing systems.
8. Engage in Hands-On Exercises: Offer practical exercises, simulations, and lab sessions to
apply theoretical knowledge, reinforce learning, and develop essential skills in securing
computing systems.
9. Foster Critical Thinking and Problem-Solving: Encourage analytical thinking and problemsolving skills through case studies, discussions, and real-world scenarios in the context of
computing and cybersecurity.
10. Promote Ethical Responsibility: Emphasize ethical considerations and professional
responsibilities in handling sensitive information, promoting integrity and accountability in the
field of cybersecurity.
Learning outcomes
On completion of the course, students should be able to:
1. Explain the three (3) basic principles of the information security CIA triad.
2. Describe at least five (5) common cyber-attacks.
3. List and explain four (4) prominent reasons for the commission of cyber crimes/attacks.
4. Itemize at least five (5) of the basic skills needed to be successful in the world of cyber
security.
5. List and explain at least ten (10) cyber security terminologies.
6. Discuss the five (5) categories of hackers.
7. Differentiate between the terms authentication and authorization.
8. Discuss any six (6) security testing techniques.
9. Define incident response and explain five (5) basic steps needed to address security
incidents.
10. Explain four (4) categories of risks and three (3) approaches to risk management.
11. Describe any three (3) disaster recovery techniques.
Course Contents
Basic concepts: cyber security, confidentiality, integrity, availability, authentication, access
control, non-repudiation and fault-tolerant methodologies for implementing security. Security
13
policies, best current practices, testing security, and incident response. Risk management,
disaster recovery and access control. Basic cryptography and software application vulnerabilities.
Evolution of cyber-attacks.
GST 112- Nigerian Peoples and Culture (2 units C: LH 30)
Learning Outcomes
At the end of the course, students should be able to:
1. analyse the historical foundation of the Nigerian culture and arts in pre-colonial times;
2. list and identify the major linguistic groups in Nigeria;
3. explain the gradual evolution of Nigeria as a political unit;
4. analyse the concepts of Trade, Economic and Self-reliance status of the Nigerian peoples
towards national development;
5. enumerate the challenges of the Nigerian State towards Nation building;
6. analyse the role of the Judiciary in upholding people’s fundamental rights;
7. identify acceptable norms and values of the major ethnic groups in Nigeria; and
8. list and suggest possible solutions to identifiable Nigerian environmental, moral and value
problems.
Course Contents: Nigerian history, culture and art up to 1800 (Yoruba, Hausa and Igbo peoples
and culture; peoples and culture of the ethnic minority groups). Nigeria under colonial rule
(advent of colonial rule in Nigeria; Colonial administration of Nigeria). Evolution of Nigeria as a
political unit (amalgamation of Nigeria in 1914; formation of political parties in Nigeria;
Nationalist movement and struggle for independence). Nigeria and challenges of nation building
(military intervention in Nigerian politics; Nigerian Civil War). Concept of trade and economics
of self-reliance (indigenous trade and market system; indigenous apprenticeship system among
Nigeria people; trade, skill acquisition and self-reliance). Social justices and national
development (law definition and classification. Judiciary and fundamental rights. Individual,
norms and values (basic Nigeria norms and values, patterns of citizenship acquisition; citizenship
and civic responsibilities; indigenous languages, usage and development; negative attitudes and
conducts. Cultism, kidnapping and other related social vices). Re-orientation, moral and national
values (The 3R’s – Reconstruction, Rehabilitation and Re-orientation; Re-orientation Strategies:
Operation Feed the Nation (OFN), Green Revolution, Austerity Measures, War Against
Indiscipline (WAI), War Against Indiscipline and Corruption(WAIC), Mass Mobilization for
Self-Reliance, Social Justice and Economic Recovery (MAMSER), National Orientation Agency
(NOA). Current socio-political and cultural developments in Nigeria.
MTH 102: Elementary Mathematics II (Calculus) (2 Units C: LH 30)
Learning Outcomes
At the end of the course, students should be able to:
1. understand types of rules in Differentiation and Integration;
2. understand the meaning of Function of a real variable, graphs, limits and continuity; and
14
3. solve some applications of definite integrals in areas and volumes
Course Contents: Function of a real variable, graphs, limits and idea of continuity. The
derivative, as limit of rate of change. Techniques of differentiation. Extreme curve sketching;
Integration as an inverse of differentiation. Methods of integration, Definite integrals.
Application to areas, volumes.
COS 102: Problem Solving (3 Units C: LH 30)
Learning Outcomes
At the end of this course, students should be able to:
1. explain problem solving processes;
2. demonstrate problem solving skills;
3. describe the concept of algorithms development and properties of algorithms;
4. discuss the solution techniques of solving problem;
5. solve computer problems using algorithms, flowcharts, pseudocode; etc.; and
6. solve problems using programming language using C, PYTHON, etc.
Course Contents:
Introduction to the core concepts of computing. Problems and problem-solving. The
identification of problems and types of problems (routine problems and non-routine problems).
Method of solving computing problems (introduction to algorithms and heuristics). Solvable and
unsolvable problems. Solution techniques of solving problems (abstraction, analogy,
brainstorming, trial and error, hypothesis testing, reduction, literal thinking, means end analysis,
method of focal object, morphological analysis, research, root cause analysis.
PHY 102: General Physics II (Electricity & Magnetism) (2 Units C: LH 30)
Learning Outcomes
At the end of the course, students should be able to:
1. describe the electric field and potential, and related concepts, for stationary charges;
2. calculate electrostatic properties of simple charge distributions using Coulomb’s law,
Gauss’s law, and electric potential;
3. describe and determine the magnetic field for steady and moving charges;
4. determine the magnetic properties of simple current distributions using Biot-Savart and
Ampere’s law;
5. describe electromagnetic induction and related concepts and make calculations using
Faraday and Lenz’s laws;
6. explain the basic physical of Maxwell’s equations in integral form;
7. evaluate DC circuits to determine the electrical parameters;
8. determine the characteristics of ac voltages and currents in resistors, capacitors, and
Inductors.
Course Contents: Forces in nature. Electrostatics; electric charge and its properties, methods of
charging. Coulomb’s law and superposition. electric field and potential. Gauss’s law.
Capacitance. Electric dipoles. Energy in electric fields. Conductors and insulators, current,
voltage and resistance. Ohm’s law and analysis of DC circuits. Magnetic fields. Lorentz force.
15
Biot-Savart and Ampère’s laws. magnetic dipoles. Dielectrics. Energy in magnetic fields.
Electromotive force. Electromagnetic induction. Self and mutual inductances. Faraday and
Lenz’s laws. Step up and step-down transformers: Maxwell's equations. Electromagnetic
oscillations and waves. AC voltages and currents applied to inductors, capacitors, resistance, and
combinations.
PHY 108: General Practical Physics II (1 Unit C: PH 45)
Learning Outcomes
At the end of the course, students should be able to:
1. conduct measurements of some physical quantities;
2. make observations of events, collect and tabulate data;
3. identify and evaluate some common experimental errors;
4. plot and analyse graphs;
5. draw conclusions from numerical and graphical analysis of data; and
6. prepare and present practical reports.
Course Contents: This practical course is a continuation of PHY 107 and is intended to be
taught during the second semester of the 100 level to cover the practical aspect of the theoretical
courses that have been covered with emphasis on quantitative measurements. The treatment of
measurement errors, and graphical analysis. However, emphasis should be placed on the basic
physical techniques for observation, measurements, data collection, analysis and deduction.
LAUTECHCYB 104 Principles of Web Development II
PH 45)
(3 Unit Compulsory, LH=30
Senate Approved relevance
The principles of web development hold profound relevance in cybersecurity by forming the
foundation for creating resilient and secure online environments. Adhering to secure coding
practices, input validation, and proper authentication mechanisms ensures robust defense against
common cyber threats like SQL injection and cross site scripting (XSS). Following principles of
data encryption and secure communication protocols bolsters confidentiality and integrity in web
transactions, mitigating the risk of data breaches. Additionally, by implementing principles of
least privilege and secure session management, web developers contribute to effective access
controls, thwarting unauthorized access. In the dynamic cybersecurity landscape, the principles
of web development play a pivotal role in fortifying digital assets, fostering user trust, and
ensuring that web applications withstand the ever-evolving spectrum of cyber threats.
Overview
In the context of cybersecurity, principles of web development serve as the cornerstone for
creating resilient and secure online platforms. Emphasizing secure coding practices, robust
authentication mechanisms, and encryption protocols is paramount to thwarting cyber threats.
Adhering to principles of input validation and proper session management mitigates common
vulnerabilities, reducing the risk of attacks such as SQL injection and cross site scripting. By
16
incorporating cybersecurity principles into the development lifecycle, web developers contribute
to the creation of web applications with enhanced resistance against data breaches, unauthorized
access, and other evolving cyber threats. In essence, a strong foundation in the principles of web
development is imperative for building and maintaining cybersecure digital ecosystems.
Objectives
1.
Develop and integrate strong authentication mechanisms to ensure secure access to web
applications, protecting against unauthorized entry.
2.
Apply encryption protocols to safeguard sensitive data, ensuring its confidentiality and
integrity during transmission and storage.
3.
Utilize secure communication protocols, such as HTTPS, to protect against eavesdropping
and man in the middle attacks.
4.
Follow secure coding practices to minimize vulnerabilities and reduce the risk of common
web based attacks, including SQL injection and cross site scripting.
5.
Enforce rigorous input validation to prevent injection attacks and ensure that user input
does not compromise the integrity and security of the application.
6.
Implement access controls and authorization mechanisms to enforce the principle of least
privilege, restricting users' access based on their roles and responsibilities.
7.
Establish monitoring mechanisms and incident response procedures to detect and respond
promptly to any security incidents, mitigating potential threats and vulnerabilities.
Learning outcomes
At the end of the course, students should be able to:
1. Demonstrate the fundamental principles of web development within the context of
cybersecurity
2. Demonstrate designing, developing, and securing web applications.
3. Apply the integration of security measures into the web development lifecycle.
4. Demonstrate the basic understanding of computer networks and cybersecurity
fundamentals
5. Demonstrate the understanding of front end and back end development
Course outline
Back End Development with Server-Side Scripting: Introduction to server-side scripting
languages (Node.js, PHP), Biding dynamic web pages with server-side scripting, connecting to
17
databases and handling user input. Web Security Fundamentals: Common web vulnerabilities
(SQL injection, Cross Site Scripting); importance of secure coding practices; Web Application
firewalls and intrusion detection systems.
Authentication and Authorization in Web
Applications: user authentication methods, role-based access control, best practices for securing
user accounts and sensitive data. Web Application Security Testing: Introduction to security
testing tools (e.g. OWASP ZAP, Burp Suite), conducting security assessments and penetration
testing, reporting and remediation of security vulnerabilities
LAUTECHCYB 102 Cyber Human Factor
LH=30)
(3 Unit Compulsory,
Senate Approved relevance
The relevance of the human factor in cybersecurity is pivotal, recognizing that individuals play a
critical role in safeguarding digital assets. Cybersecurity education and awareness empower users
to recognize and respond to potential threats, reducing the likelihood of falling victim to social
engineering attacks. Human centric security policies foster a culture of vigilance, encouraging
employees to adopt secure practices in their day today activities. Moreover, understanding
human behavior helps in designing effective authentication mechanisms and access controls,
aligning security measures with users' cognitive processes. Human factors contribute to incident
response and recovery, as well trained individuals enhance the organization's resilience in the
face of cyber threats. Ultimately, recognizing and addressing the human factor is essential for
creating a robust cybersecurity posture that goes beyond technological solutions, encompassing
the human elements crucial for a comprehensive defense against evolving cyber risks.
Overview
The field of cyber human factors explores the intricate interplay between human behavior and
cybersecurity. Recognizing that human actions significantly impact digital security, this
discipline delves into user awareness, training, and the psychology behind cyber threats.
Understanding how individuals interact with technology is crucial for designing effective
security measures, including authentication protocols and access controls. Human factors
research informs strategies to mitigate social engineering attacks, fostering a cyber resilient
culture. In essence, cyber human factors bridge the gap between technology and human behavior,
emphasizing the importance of people in building a robust defense against cyber threats.
Objectives
1. Increase awareness among individuals about common cyber threats, attack vectors, and best
practices to foster a security conscious culture.
2. Develop and implement targeted cybersecurity training programs to equip individuals with
the knowledge and skills necessary to identify and respond to cyber threats.
3. Educate individuals on social engineering tactics and strategies to reduce the likelihood of
falling victim to manipulation, phishing, and other forms of social engineering.
18
4. Incorporate humancentric design principles into cybersecurity measures, ensuring that
security protocols, authentication mechanisms, and access controls align with users' cognitive
processes.
5. Encourage secure behavior by promoting the adoption of best practices, such as regular
password updates, adherence to security policies, and reporting of suspicious activities.
6. Develop strategies to mitigate insider threats by understanding and addressing the motivations
and potential vulnerabilities of individuals within the organization.
7. Enhance the human element of incident response plans, ensuring that individuals are well
prepared to promptly and effectively respond to and recover from cybersecurity incidents.
Learning Outcomes
At the end of this course, Students should be able to;
1. Demonstrate how human actions, decisions, and perceptions impact the security of
information systems.
2. Apply understanding and incorporating human behavior, cognition, and psychology into
the cybersecurity landscape .
3. Explain motivations and behaviors of threat actors
4. Describe the psychology of cyber threats
5. Develop programs to educate users about cybersecurity.
tolerance
Course contents
Introduction to Cyber human factors. Psychological aspects of Cybersecurity: Cognitive biases
and their impact on decision making, Human factors in risk perception and risk, psychological
vulnerabilities exploited in cyberattacks. Social engineering and manipulation: types of social
engineering attacks, understanding the psychology behind social engineering. Insider threats and
privilege misuse: identifying and mitigating insider threats, Behavioural indicators of potential
insider threats, role of organizational culture in preventing privilege misuse. User awareness and
training: developing effective cybersecurity awareness programs, Strategies for educating users
about cyber threats, Measurement and evaluation of user awareness programs. Humancentric
design principles: incorporating human factors into system and software design, usability and
security tradeoff, designing interfaces for secure and user-friendly experiences. Organizational
culture and cybersecurity: influence of organizational culture on cybersecurity practices,
fostering a security aware culture, leadership role in shaping cybersecurity culture. Human
computer interaction (HCI) in cybersecurity: HCI principles and their relevance to cybersecurity,
usability challenges in security interfaces, designing secure systems with a focus on user
experience. Ethical and legal implication: ethical considerations in studying and applying cyber
human factors, legal aspects related to human centric cybersecurity practices, balancing security
and privacy concerns. Future trends and emerging trends.
LAUTECH-COS-104
LH=30)
Introduction to Computing and informatics
19
(2Unit
Compulsory,
Senate Approved Relevance
Introduction to computing and informatics is highly relevant as it forms the cornerstone for
navigating the digital landscape. It equips individuals with essential skills, including digital
literacy, problem-solving, and critical thinking, vital for success in today's technology-driven
world. This foundational knowledge lays the groundwork for pursuing diverse careers in fields
such as software development, data science, and cybersecurity. Additionally, it fosters
innovation by instilling a creative mindset and the ability to apply technology to address realworld challenges. The course emphasizes ethical considerations, promoting responsible use of
technology and awareness of cybersecurity principles. Given the rapid evolution of technology,
an introduction to computing and informatics ensures adaptability and continuous learning,
preparing individuals to thrive in a dynamic and ever-changing professional landscape. Overall,
the relevance lies in empowering individuals with the skills and knowledge needed to contribute
meaningfully to a digitally connected and technology-dependent society.
Overview
"Introduction to Computing and Informatics" provides a fundamental exploration of key
concepts in digital technology. It covers basic computer literacy, programming fundamentals,
and information systems, offering a comprehensive overview of the field. This introductory
course equips individuals with essential skills in problem-solving, critical thinking, and data
analysis, preparing them for diverse roles in the technology-driven job market. Emphasis on
ethical considerations and responsible use of technology ensures a well-rounded understanding.
With a focus on adaptability and continuous learning, this course serves as a stepping stone for
individuals to navigate and contribute effectively in our dynamic and evolving digital world.
Objectives
1. Digital Literacy: Develop basic proficiency in using computers and understanding
fundamental digital concepts, ensuring individuals can navigate and interact with technology
effectively.
2. Programming Fundamentals: Introduce the foundational principles of programming, enabling
learners to write and understand basic code and algorithms.
3. Problem-Solving Skills: Cultivate problem-solving abilities by applying computing concepts
to analyze and solve simple to moderately complex problems.
4. Information Systems Understanding: Provide insights into information systems, including
databases and data management, to equip individuals with a basic understanding of organizing
and retrieving data.
5. Critical Thinking in Technology: Foster critical thinking skills specific to technology,
encouraging learners to evaluate and analyze the implications of various digital solutions and
approaches.
6. Ethical Considerations: Emphasize ethical considerations in computing, promoting responsible
and ethical behavior in the use of technology and data.
20
7. Preparation for Advanced Studies: Lay the groundwork for further exploration of advanced
computing concepts and specialized areas, paving the way for more in-depth studies in computer
science or related fields.
Learning outcomes
On completion of the course, students should be able to:
1. Demonstrate proficiency in using computers, including basic operations and navigating
various software applications.
2. Acquire foundational programming skills, including the ability to write simple code,
understand basic algorithms, and solve problems using programming logic.
3. Apply computational thinking to analyze and solve problems, demonstrating the ability to
break down complex issues into manageable components.
4. Understand the basics of information systems, including databases, data storage, and retrieval,
enabling effective organization and manipulation of data.
5. Develop effective communication skills in digital environments, including collaborative tools,
email, and other communication platforms.
6. Apply critical thinking skills to evaluate and analyze technology solutions, considering their
implications and appropriateness for specific contexts.
7. Demonstrate an understanding of ethical considerations in computing, recognizing the
importance of responsible and ethical behavior in the use of technology.
8. Exhibit adaptability in learning new technologies and methodologies, recognizing the dynamic
nature of the field and the need for continuous learning.
9. Lay the groundwork for further education and exploration of advanced computing concepts,
providing a solid foundation for more specialized studies in computer science or related fields.
Course Contents
Fundamentals of Computing: overview of computing, history and evolution of computers, basics
of computer hardware and software. Programming Fundamentals: fundamentals of Algorithms
and problem solving, introduction to a programing language, basic programming constructs,
overview of operating systems and their functions. Data and Information: data representation and
storage, file systems and databases, data security and privacy. Networking and the Internet:
basics of cybersecurity and data protection, basics of networking, internet protocols and services.
Software Development Lifecycle: software development methodologies, project management in
software development, quality assurance and testing. Informatics and Society: ethical and social
implications of computing, privacy concerns, social impact of technology, developing analytical
and problem-solving skills in the context of computing. Emerging trends in computing: Artificial
intelligence and machine learning, Internet of Things (IoT), future of computing.
ENT 211: Entrepreneurship and Innovation (2 Units C: LH 15; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. explain the concepts and theories of entrepreneurship, intrapreneurship, opportunity
seeking, new value creation, and risk taking;
2. state the characteristics of an entrepreneur;
3. analyse the importance of micro and small businesses in wealth creation, employment,
21
and financial independence;
4. engage in entrepreneurial thinking;
5. identify key elements in innovation;
6. describe stages in enterprise formation, partnership and networking including business
planning
Course Contents
Concept of Entrepreneurship (Entrepreneurship, Intrapreneurship/Corporate Entrepreneurship,).
Theories, Rationale and relevance of Entrepreneurship (Schumpeterian and other perspectives,
Risk-Taking, Necessity and opportunity-based entrepreneurship and Creative destruction).
Characteristics of Entrepreneurs (Opportunity seeker, Risk taker, Natural and Nurtured, Problem
solver and change agent, Innovator and creative thinker). Entrepreneurial thinking (Critical
thinking, Reflective Thinking, and Creative thinking). Innovation (Concept of innovation,
Dimensions of innovation, Change and innovation, Knowledge and innovation). Enterprise
formation, partnership and networking (Basics of Business Plan, Forms of business ownership,
Business registration and forming alliances and joint ventures). Contemporary Entrepreneurship
Issues (Knowledge, Skills and Technology, Intellectual property, Virtual office, Networking).
Entrepreneurship in Nigeria (Biography of inspirational Entrepreneurs, Youth and women
entrepreneurship, Entrepreneurship support institutions, Youth enterprise networks and
Environmental and cultural barriers to entrepreneurship). Basic principles of e-commerce
COS 201: Computer Programming I (3 Units C: LH 30; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. explain the principles of good programming and structured programming concepts;
2. explain the programming constructs, syntax and semantics of a higher-level language;
3. describe the chosen programming language variables, types, expressions, statements and
assignment; simple input and output;
4. describe the programme control structures, functions and parameter passing, and
structured decomposition; and
5. develop simple programmes in the taught programming language as well as debug and
test them.
Course Contents
Essentials of computer programming. Types of programming: Functional programming;
Declarative programming; Logic programming; object-oriented programming. Scripting
languages; structured programming principles. Basic data types, variables, expressions,
assignment statements, and operators. Basic object-oriented concepts: abstraction; objects;
classes; methods; parameter passing; encapsulation. Class hierarchies and programme
organization using packages/namespaces. Use of API – use of iterators/enumerators, List, Stack,
Queue from API. Searching; sorting; Recursive algorithms. Event-driven programming: eventhandling methods; event propagation; exception handling. Introduction to Strings and string
processing. Simple I/O; control structures; Arrays. Simple recursive algorithms; inheritance;
polymorphism.
Lab work: Programming assignments; design and implementation of simple algorithms, e.g.,
average, standard deviation, searching and sorting. Developing and tracing simple recursive
algorithms. Inheritance and polymorphism.
22
CYB 201: Introduction to Cybersecurity and Strategy (2 Units C: LH 30)
Learning Outcomes
At the end of this course, students should be able to:
1. explain cybersecurity concepts, its methods, elements, and terminologies of cybersecurity,
security, threat, attack, defense, and operations;
2. describe common cyber-attacks and threats, cybersecurity issues, challenges and
proffered solutions, and build an enhanced view of main actors of cyberspace and cyber
operations;
3. apply the techniques for identifying, detecting, and defending against cybersecurity
threats, attacks and protecting information assets;
4. explain the impact of cybersecurity on civil and military institutions, privacy, business and
government applications;
5. identify the methods and motives of cybersecurity incident perpetrators, and the
countermeasures employed by organizations and agencies to prevent and detect those
incidences and software application vulnerabilities; and
6. state the ethical obligations of security professionals, evaluate cybersecurity and national
security strategies to the typologies of cyber-attacks that require policy tools and domestic
response, and define the cybersecurity requirements and strategies evolving in the face
of big risk.
Course Contents
Basic concepts: cyber, security, confidentiality, integrity, availability, authentication, access
control, non-repudiation and fault-tolerant methodologies for implementing security. Security
policies, best current practices, testing security, and incident response. Risk management,
disaster recovery and access control. Basic cryptography and software application vulnerabilities.
Evolution of cyber-attacks. Operating system protection mechanisms, intrusion detection
systems, basic formal models of security, cryptography, steganography, network and distributed
system security, denial of service (and other) attack strategies, worms, viruses, transfer of
funds/value across networks, electronic voting, secure applications. Cybersecurity policy and
guidelines. Government regulation of information technology. Main actors of cyberspace and
cyber operations. Impact of cybersecurity on civil and military institutions, privacy, business and
government applications; examination of the dimensions of networks, protocols, operating
systems, and associated applications. Methods and motives of cybersecurity incident
perpetrators, and the countermeasures employed by organizations and agencies to prevent and
detect those incidences. Ethical obligations of security professionals. Trends and development in
cybersecurity. Software application vulnerabilities. Evolution of cybersecurity and national
security strategies, requirements to the typologies of cyber-attacks that require policy tools and
domestic response. Cybersecurity strategies evolving in the face of big risk. Role of standards
and frameworks.
CYB 203: Cybercrime, Law and Countermeasures (2 Units C: LH 30)
Learning Outcomes
At the end of this course, students should be able to:
1. discuss cybercrimes, including computer crimes, internet fraud, e-commerce, and threats
23
to the national infrastructure;
2. review the policies, legal issues, investigative techniques and strategies, implications for
investigation and enforcement on a global scale;
3. analyse the cyber law of Nigeria and some other countries with the penalties attached to
each of the cyber laws;
4. describe cyber law application at the international and national levels with examples from
Africa, European, North American, South American and Asian countries;
5. compare the cyber law framework and countermeasures in Nigeria with other countries;
and
6. state the challenges and opportunities for enforcement of cyber law in Nigeria.
Course Contents
General introduction on cybercrime. Definition of cybercrime. Types and categories of
cybercrime and threats to the national critical infrastructure. Investigation process and procedure
for cybercrime. Strategies of cybercrime perpetrators. Possible ways of curbing/preventing them.
Technical aspects of computer cybercrime investigations, threats, and types of attacks and
defenses used by terrorists and criminals. Successful use of online social networks for
cybercrime investigation. Concepts, trends, and methods in computer and network forensics
investigations. Skills and knowledge in digital evidence collection and evaluation. Policies, legal
issues, international jurisdiction, and privacy issues. Introduction to cyber law and
countermeasures. Studies in cyber law application at the international and national levels with
examples from European, North American, South American and Asian Countries. The cyber law
framework in Nigeria. Challenges and opportunities for cyber law and countermeasure
enforcement in Nigeria.
CYB 209: Introduction to Software Engineering (2 units; C) (LH 30)
Learning Outcomes
At the end of this course, students should be able to:
1. describe the concept of the software life cycle;
2. explain the phases of requirements analysis, design, development, testing and
maintenance in a typical software life cycle;
3. differentiate amongst the various software development models;
4. utilise UML for object oriented analysis and design;
5. describe different design architectures;
6. explain the various tasks involved in software project management; and
7. describe the basic legal issues related to Software Engineering.
Course Contents
Software Engineering concepts and principles. Design, development and testing of software
systems. Software processes: software lifecycle and process models. Process assessment models.
Software process metrics. Life cycle of software system. Software requirements and
specifications. Software design. Software architecture. Software metrics. Software quality and
testing. Software architecture. Software validation. Software evolution: software maintenance;
characteristics of maintainable software; re-engineering; legacy systems; software reuse.
Software Engineering and its place as a computing discipline. Software project management:
team management; project scheduling; software measurement and estimation techniques; risk
24
analysis; software quality assurance; software configuration management. Software Engineering
and law.
LAUTECHCYB 205 System Security (3 Units Compulsory: LH 30)
Senate approved relevance
It is important to ensure training of competent and highly skilled Cyber Security graduates with
necessary proficiency and expertise in the domain of Cyber Security Science. The relevance of
this is to furnish students with ample intelligence and proficiency to upshot professional
approach to system and network security. This is in line with LAUTECH vision and mission of
not just producing graduates but graduates with necessary expertise that can address security
issues in the rapidly changing technology and in the growing ecosystem of online networks in
order to identify, analyse and prevent vulnerabilities, threats, crimes and network related
challenges in the hardware, software and peripheral devices in the computer system thereby
protect organisation’s assets from irreparable loss
Overview
Advances in computer technology create a multitude of possibilities that never existed before.
Such possibilities present IT professionals with myriad temptations in terms of applications and
information infrastructure security problems. This course aimed at providing adequate
knowledge on the protection of computer systems and networks from attack by malicious actors
that may result in unauthorized information disclosure, theft of, or damage to hardware,
software, or data, as well as from the disruption or misdirection of the services they provide. The
course will identify fundamental issues in computer network and cyberspace infrastructures,
computer systems and their security and study approaches for addressing the issues. This will
help the students to better understand emerging network technologies.
Objectives
The objectives of the course are to:
1. state the the categories of security controls;
2. explain computer system security approaches;
3. identify different types of data security controls;
4. explain the concepts security architecture and its components;
5. describe secure design principles and service operations;
6. explain secure coding and bonus secure coding practices;
7. explain threat modelling, vulnerabilities and attacks;
8. describe the concepts of Incident response;
9. explain network security fundamentals; and
10. describe layered security and attack mitigation;
Learning outcomes
On completion of the course, students should be able to:
25
1. explain Network Security Fundamentals;
2. describe layered security and attack mitigation;
3. explain Information Security Protocols and Best Practices;
4. explain the Categories of Security Controls;
5. describe Computer System Security Approaches;
6. identify and explain different types of Data Security Controls;
7. explain the concepts Security Architecture and its components;
8. describe Secure Design Principles and Service Operations;
9. discuss Secure Coding and Bonus Secure Coding Practices;
10. describe Threat Modelling,Vulnerabilities and attacks; and
11. explain Incident response;
Course Contents
Networks and the Internet: Introduction Network Basics: The Physical Connection (Local
Networks), Data Transmission; How the Internet Works; Cyberspace Infrastructure;
Enterprise Security; Information Security Protocols and Best Practices; Security and
Privacy in Online Social Networks; Security in Mobile Systems; Security in the Cloud;
Security and Compliance; Security Principles; Account Security; Cryptography:
Encryption and decryption; File System Security security controls in the z/TPF
system(ZOVFS, ZPVFS); Risk Management; Introduction to ssecurity Testing Types;
Secure design and secure coding principles and practices, and methods including; Least
privilege, threat modeling and static analysis. Common Vulnerabilities such as buffer
overruns, integer overflows, injection attacks, cross site scripting and weak error
handling; Different types of Injection attack; Poor/Improper Error Handling; Operating
System Protection Mechanisms((i) Access Control (ii) Trusted Computing (iii) Operating
System Hardening.); Account Security:Password Policy, Account Lockout Policy,
Kerberos Policy; Password Aging; Key Loggers, Port Scanning
LAUTECHCYB 207 : Information Security Policy (2 Units Compulsory: LH 30)
Senate approved relevance
It is important to ensure training of competent and highly skilled Cyber Security graduates with
necessary proficiency and expertise in the domain of Cyber Security Science. The relevance of
this is to furnish students with ample intelligence and proficiency to upshot professional
approach to system and network security. This is in line with LAUTECH vision and mission of
not just producing graduates but graduates with necessary expertise to develop an effective
security policy to protect organisation’s assets from irreparable loss.
Overview
The information security policy describes how information security has to be developed in an
organization, for which purpose and with which resources and structures. A security policy
describes information security objectives and strategies of an organization. The basic purpose of
a security policy is to protect people and information, set the rules for expected behaviors by
users, define and authorize the consequences of violation. This course will teach student the
fundamental concepts of Security policy which serve as the backbone of any mature information
security program. Students will learn basics of information security in both management aspect
and technical aspect and how they can fully support and participate in the development,
26
distribution, and enforcement of information security policies as IT professionals to protect print,
electronic, or any other form of confidential, private and sensitive information or data from
unauthorized access, use, misuse, disclosure, destruction, modification, or disruption.
Objectives
The objectives of the course are to:
1. explain how to review their own organization’s information security policies for
currency and applicability;
2. describe students to Information Security Policy and its types;
3. explain Information Security Risk Management;
4. identify different Information Security Policy Frameworks and their usage;
5. describe Information Security and Data Protection Laws;
6. explain Data Privacy and Protection under the Nigerian Law;
7. describe the Legal Framework of Data Privacy and Protection Laws in Nigeria: The
Constitution, The Nigeria Data Protection Regulation (NDPR) 2019, The NCC
Consumer Code of Practice Regulation 2007, The NCC Registration of Telephone
Subscribers Regulation 2011, The Freedom of Information Act 2011 e.t.c;
8. describe Freedom of Expression and the Media; and
9. identify what constitute Hate Speech on the Internet.
10. explain how Hate Speech can cause Ethno Religions Intolerance; and
11. describe Intellectual Property: Intellectual Property Protections(Copyright, Patent and
Trademark).
Learning outcomes
On completion of the course, students should be able to:
1. review their own organization’s information security policies;
for currency and applicability;
2. describe Information Security Policy and its types;
3. explain Information Security Risk Management;
4. develop an Information Security Policy using a named framework;
5. describe Information Security and Data Protection Laws;
6. explain Data Privacy and Protection under the Nigerian Law;
7. explain Legal Framework of Data Privacy and Protection Laws in Nigeria e.g
Nigeria Constitution, The Nigeria Data Protection Regulation (NDPR) 2019 e.t.c;
8. describe Freedom of Expression and the Media;
9. explain what constitute Hate Speech on the Internet;
10. describe how Hate Speech can cause Ethno Religions Intolerance; and
11. explain Intellectual Property: Intellectual Property Protections(Copyright, Patent
and Trademark).
Course Contents
Information Security Policy Basics: Information Classification; Types of Information
Security; Common Information Security Risks; Information Security Technologies;
Information Security Policy; Three types of Security Policies; Information Security Risk
Management; Information Security Policy Framework: FISMA, ISO 27001:2013, COBIT
Framework e.t.c; Information Authorization and Assurance ; Warranties, Integrity
Statements and Liabilities ; Information Security and Data Protection Laws; Data Privacy
and Protection under the Nigerian Law; The Legal Framework of Data Privacy and
27
Protection Laws in Nigeria: The Constitution, The Nigeria Data Protection Regulation
(NDPR) 2019, The NCC Consumer Code of Practice Regulation 2007, The NCC
Registration of Telephone Subscribers Regulation 2011, The Freedom of Information Act
2011 e.t.c.; Freedom of Expression and the Media; Hate Speech on the Internet: Hate
Speech and the 1999 Constitution; Hate Speech and Ethno Religions Intolerance;
Information Systems Ethics;
Intellectual Property:
Intellectual Property
Protections(Copyright, Patent and Trademark); Children’s Online Privacy Protection Act;
Content Security Policy (CSP); Content Security Policy for Mitigating Threats; Data
Protection Impact Assessment
LAUTECHCYB 213: Artificial Intelligence in Cybersecurity (2 Units Compulsory: LH
30 PH 45)
Senate approval relevance
The relevance of artificial intelligence (AI) in cybersecurity is profound, revolutionizing the
defence against evolving cyber threats. AI algorithms enable swift and adaptive threat detection
by analysing vast datasets, identifying patterns, and predicting anomalies in real-time. Machine
learning models enhance the accuracy of malware detection, providing a proactive shield against
sophisticated attacks. AI driven tools automate routine tasks, allowing cybersecurity
professionals to focus on complex analyses and strategic decision making. Behavioural analytics
powered by AI scrutinizes user activity, detecting anomalous behaviour indicative of potential
breaches. Moreover, AI enhances incident response by providing rapid insights, aiding in swift
containment and mitigation of cyber incidents. As cyber threats become more sophisticated, the
integration of AI strengthens cybersecurity measures, offering a dynamic and intelligent defence
that evolves with the everchanging threat landscape.
Overview
Artificial intelligence (AI) is a transformative force in cybersecurity, revolutionizing how
organizations defend against cyber threats. AI algorithms analyse vast datasets in real-time,
enabling proactive threat detection and rapid response to emerging risks. Machine learning
enhances malware detection accuracy, providing a robust defence against sophisticated attacks.
Automated AI driven tools streamline routine tasks, allowing cybersecurity professionals to
focus on strategic analysis and decision making. Behavioral analytics powered by AI detects
anomalous user activities, enhancing the identification of potential security breaches.
Additionally, AI augments incident response by providing timely insights, facilitating swift
containment and mitigation of cyber incidents. The integration of AI in cybersecurity is essential
for building adaptive, intelligent defenc that evolve to meet the dynamic challenges of the ever
evolving threat landscape.
Objectives:
1. Implement AI for proactive threat detection.
2. Enhance malware detection accuracy using machine learning.
28
3. Automate routine cybersecurity tasks through AIdriven tools.
4. Apply behavioral analytics for anomaly detection.
5. Optimize incident response using AIgenerated insights.
6. Integrate threat intelligence into AIdriven cybersecurity measures.
7. Implement adaptive defense strategies against evolving cyber threats.
Learning Outcomes:
1. Proficiency in leveraging AI for real-time threat detection.
2. Expertise in analyzing and interpreting malware behaviors using AI.
3. Competence in implementing AI-driven automation for cybersecurity tasks.
4. Application of behavioral analytics for the detection of anomalous activities.
5. Swift incident response using insights generated by AI.
6. Integration of threat intelligence into AI-enhanced cybersecurity measures.
7. Implementation of adaptive defense strategies using AI.
8. Optimization of overall security posture through AI-driven tools.
9. Evaluation and selection of AI solutions for specific cybersecurity challenges.
10. Commitment to continuous learning in the field of AI-enhanced cybersecurity.
Course Outline
Introduction to Artificial Intelligence in Cybersecurity: Overview of Artificial Intelligence,
Definition and Types of AI, Evolution of AI in Cybersecurity, Importance of AI in
Cybersecurity, Current Cybersecurity Challenges, Role of AI in Addressing Cybersecurity
Challenges. Fundamentals of Machine Learning for Cybersecurity: Introduction to Machine
Learning, Basic Concepts and Terminology, Types of Machine Learning Algorithms,
Applications of Machine Learning in Cybersecurity (Intrusion Detection Systems, Malware
Detection, Predictive Analysis) Natural Language Processing (NLP) in Cybersecurity: Overview
of Natural Language Processing, Key NLP Concepts, NLP Applications in Cybersecurity,
Leveraging NLP for Threat Intelligence (Text Analysis and Information Extraction, Sentiment
Analysis in Security), Anomaly Detection and Behavioral Analytics: Understanding Anomalies
in Cybersecurity, Types of Anomalies, Challenges in Anomaly Detection. Behavioral Analytics
with AI (User Behavior Analysis, Network Behavior Analysis). AI-Based Cybersecurity Tools
and Technologies: Overview of AI-Driven Cybersecurity Solutions, Endpoint Protection,
Security Information and Event Management (SIEM) with AI, Challenges in Implementing AI in
Cybersecurity. Ethical and Legal Considerations: Ethical Use of AI in Cybersecurity, Bias and
Fairness, Privacy Concerns. Legal and Regulatory Landscape: Compliance with Data Protection
Laws, Accountability and Responsibility. Future Trends in AI and Cybersecurity: Emerging
Technologies (Quantum Computing and its Implications, AI-driven Threat Hunting) Future
Challenges and Opportunities, Continuous Learning in the AI-Cybersecurity Landscape,
Collaboration and Information Sharing.
GST 212: Philosophy, Logic and Human Existence (2 Units C: LH 30)
29
Learning Outcomes
At the end of this course, students should be able to
1. know the basic features of philosophy as an academic discipline;
2. identify the main branches of philosophy & the centrality of logic in philosophical
discourse;
3. know the elementary rules of reasoning;
4. distinguish between valid and invalid arguments;
5. think critically and assess arguments in texts, conversations and day-to-day
discussions;
6. critically asses the rationality or otherwise of human conduct under different existential
conditions;
7. develop the capacity to extrapolate and deploy expertise in logic to other areas of
knowledge, and
8. guide his or her actions, using the knowledge and expertise acquired in philosophy
and logic.
Course Contents: Scope of philosophy; notions, meanings, branches and problems of
philosophy. Logic as an indispensable tool of philosophy. Elements of syllogism, symbolic
logic— the first nine rules of inference. Informal fallacies, laws of thought, nature of arguments.
Valid and invalid arguments, logic of form and logic of content — deduction, induction and
inferences. Creative and critical thinking. Impact of philosophy on human existence. Philosophy
and politics, philosophy and human conduct, philosophy and religion, philosophy and human
values, philosophy and character molding, etc.
INS 204: Systems Analysis and Design (3 Units C: LH 30; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. describe system requirements gathering techniques;
2. explain data modelling technique (entity relationship modelling);
3. explain process modelling technique (data flow diagram);
4. describe system architectural design;
5. describe process and database design; and
6. explain user interface design.
Course Contents
Structured approach to analysis and design of information systems for businesses. Software
development life cycle. Structured top-down and bottom-up design. Dataflow diagramming.
Entity relationship modelling. Computer aided software engineering. Input and output,
prototyping design and validation. File and database design. Design of user interfaces.
Comparison of structured and object-oriented design.
Lab work: Practical exercises on software development life cycle (SDLC) activities with
different case studies. Use of different information systems case studies to apply the knowledge
of structured top-down and bottom –up design, dataflow diagram and entity relationship models.
COS 202: Computer Programming II (3 Units C: LH 30; PH 45)
30
Learning Outcomes
At the end of this course, students should be able to:
1. demonstrate the principles of good programming and structured programming concepts;
2. demonstrate string processing, internal searching, sorting, and recursion;
3. demonstrate the basic use of OOP concepts: classes, objects, inheritance, polymorphism,
data abstraction;
4. apply the tools for developing, compiling, interpreting and debugging programmes; and
5. demonstrate the use of syntax and data objects, operators. Central flow constructs,
objects and classes programming, Arrays, methods, Exceptions, Applets and the Abstract,
OLE, Persistence, Window Toolkit
Course Contents
Review and coverage of advanced object-oriented programming - polymorphism, abstract
classes and interfaces. Class hierarchies and programme organisation using
packages/namespaces. Use of API – use of iterators/enumerators. List. Stack. Queue from API.
Searching. Sorting. Recursive algorithms. Event-driven programming: event-handling methods;
event propagation; exception handling. Applications in Graphical User Interface (GUI)
programming.
Lab work: Programming assignments leading to extensive practice in problem-solving and
programme development with emphasis on object-orientation. Solving basic problems using
static and dynamic data structures. Solving various searching and sorting algorithms using
iterative and recursive approaches. GUI programming.
CYB 298: SIWES I (3 Units C: PH 135)
Learning Outcomes
At the end of this training, students should be able to:
1. assess their knowledge of cybersecurity, its application, preventive measures and defense
of the cyber environment;
2. explain how a typical cybersecurity unit/department of an organization operates;
3. describe the various assignments carried out and the skills acquired during the SIWES
period; and
4. submit a comprehensive report on the knowledge acquired and the experience gained
during the exercise.
Course Contents
Students are attached to private and public organizati for a period of three months during the
second year session long break with a view to making them acquire practical experience and to
the extent possible, develop skills in all areas of Cybersecurity. Students are supervised during
the training period and shall be expected to keep records designed for the purpose of monitoring
their performance. They are also expected to submit a report on the experience gained and
defend their reports.
LAUTECHCYB 202: Operating System in Cyber Context (2 Units Compulsory: LH 30)
Senate approved relevance
31
Training of competent and highly skilled Cyber Security graduates with necessary proficiency
and expertise in the domain of Cyber Security Science is paramount. The relevance of this is to
furnish students with adequate intelligence and proficiency to upshot professional approach to
operating system design and security in cyber security context. This is in line with LAUTECH
vision and mission of not just producing graduates but graduates with necessary expertise that
can keep abreast of the nation’s Information technology challenges in order to identify, analyse
and prevent vulnerabilities, threats, crimes and other related challenges in the hardware, software
and peripheral devices in the computer system thereby protect organisation’s assets from
irreparable loss
Overview
The main purpose of this course is to provide the necessary information on the basic
concepts of operating system design in management and protection of computer system,
system resources and connected devices against vulnerabilities and cyberattacks. It makes
available the steps and tools that will enable you to make proper and accurate decision
about operating systems whenever the need arises. Being the control center of the
computer, its role in the overall security of the system is paramount in terms of
maintenance of system integrity, availability, and confidentiality. The security within a
computer system can be divided into various layers such as maintaining the physical
security of the system, the security of the information the system holds, and the security
of the network in which it operates. In all of these areas, the operating system plays a
vital role in keeping the security. This course will also outline the principles of how an
operating system is constructed, how it works, and its critical role in cyber security. It
will provide students with a solid understanding of how a modern operating system
satisfies its requirements in the cyber context.
Objectives
The objectives of the course are to:
1. explain different types, different models and different components of operating
system;
2. describe Operating System as a resource manager (process, processor, memory and
I/O management);
3. explain different types of schedulers and scheduling policies;
4. describe the concepts of process models and thread model;
5. explain different challenges of concurrent and cooperation processes (such as Race
condition, Deadlock, Starvation etc.) and their solution;
6. describe different synchronization mechanisms;
7. explain different memory management schemes;
8. identify and explain different file allocation techniques, protection and security
mechanisms;
9. explain modern operating system protection mechanisms; and
10. describe different Account security policies in operating system.
Learning outcomes
On completion of the course, students should be able to:
1. explain different types, different models and components of operating system;
32
2. explain to Operating System as a resource manager (process, processor;
memory and I/O management);
3. describe different types of schedulers and scheduling policies;
4. explain the concepts of process models and thread models;
5. describe different challenges of concurrent and cooperation processes;
(such as Race condition, Deadlock, starvation etc.) and their solutions;
6. explain interprocess communication and synchronization mechanisms;
7. explain different memory management schemes;
8. describe different file allocation techniques, protection and security mechanisms;
9. explain operating system protection mechanisms;
10. explain different Account security policies in operating system; and
11. describe Windows Operating System and its Features.
Course Contents
Overview of operating system: Types of operating system, Operating system models;
Operating System Design Principles; Processor management: Process and process control
block, Scheduling policies and Threads; System calls and System call in operating
system; Concurrency and Synchronization: inter process communication types: Shared
memory System and Message passing System, Synchronization mechanisms Disabling
interrupts, Semaphore, Monitor; Deadlock modelling and Starvation, Memory
Management: Static and dynamic memory partitioning; Virtual memory and
segmentation, Replacement Policies; Working sets, Trashing and Caching; File
Management: File Access Methods, Directory Structure, Types of file systems; Disk
Space Allocation Methods (Contiguous Allocation, Extents, Linked Allocation,
Clustering, File Allocation Table, Indexed Allocation, Linked Indexed Allocation,
Multilevel Indexed Allocation and Inode); Device Management; Types of Interrupt and
Interrupt Handler; Operating System Protection Mechanisms ((i) Access Control (ii)
Trusted Computing (iii) Operating System Hardening.); Account Security(Password
Policy, Account Lockout Policy, Kerberos Policy); Password Aging, Key Loggers, Port
Scanning; General Overview of Windows Operating System
LAUTECHCYB 204: Introduction to Blockchain Technology
30
2 Units Compulsory: LH
Senate approved relevance
It is important to build a highly skilled Cyber Security graduates with required skills and mastery
in the area of Cyber Security Specializations. Relevance of this course is to trained students on
the use of blockchain technology which offers a different path toward greater security, one that is
less traveled and not nearly as hospitable to cybercriminals. This is in line with LAUTECH
vision and mission of not just producing graduates, but graduates that is versatile with relevant
skill sets that can keep abreast of the Nigerian Information Technology challenges in order to
reduces vulnerabilities like illegal data tampering, provides strong encryption, and more
effectively verifies data ownership and integrity, to secure communication, authenticate
devices, validate configuration changes, and discover confidential devices in an internet of
things (IoT) ecosystem. Blockchain technology produces a structure of data with inherent
security qualities. It's based on principles of cryptography, decentralization and consensus, which
ensure trust in transactions.
33
Overview
Cybersecurity is the practice of protecting systems and networks from digital attacks which
aim to access, change or destroy digital information either to extort money or sensitive data.
With the increasing reliance on technology and data, it becomes very important to reinforce
security measures to protect digital data and transactions. Blockchain is a shared,
decentralized, and digital ledger that records transactions in the form of blocks. This ledger
helps to store information transparently due to its property of immutability and access to
allowed members only.
Blockchain offers a different path toward greater security, one that is less traveled and not
nearly as hospitable to cybercriminals. This approach reduces vulnerabilities, provides strong
encryption, and more effectively verifies data ownership and integrity. It can even eliminate
the need for some passwords, which are frequently described as the weakest link in
cybersecurity. The distributed ledger can utilize public key infrastructure to secure
communication, authenticate devices, validate configuration changes, and discover
confidential devices in an internet of things (IoT) ecosystem. Through encryption and digital
signatures, a blockchain system can shield connected thermostats, smart doorbells, security
cameras, and other vulnerable edge devices.
Objectives
The objectives of the course are to:
1. Examine the role of blockchain in cybersecurity;
2. describe the blockchain features;
3. explain possible blockchain use cases for cybersecurity;
4. describe various applications of blockchain in cybersecurity;
5. examine the pros and cons of using blockchain in cybersecurity;
6. examine cyber threat landscape and security challenges;
7. Introduce students to blockchain and Ethereum;
8. describe blockchain for businesses; and
9. examine blockchain based security platform.
Learning outcomes
On completion of the course, students should be able to:
1. Define blockchain and cybersecurity;
2. Identify cyber threat landscape and security challenges;
3. Explain how blockchain works;
4. Describe Hyperledger blockchain for businesses;
5. Examine blockchain on the CIA security triad;
6. Deploying PKIBased Identity with Blockchain PKI;
7. Identify blockchain based DNS Security Platform;
8. Define DDoS Attack, type of DDoS attacks and challenges with current DDoS solutions;
10. Explain role of blockchain in cybersecurity and future of cybersecurity with blockchain; and
11. State two factor authentication with blockchain.
34
Course Contents
Fundamentals of Blockchain technology and application in cybersecurity, Cyber threat landscape
and security challenges, Introduction to blockchain and Ethereum, Hyperledger blockchain for
businesses. Blockchain on the CIA security Triad, PKIBased Identity Deployment with
Blockchain PKI. Two factor authentication with Blockchain, Blockchain based DNS security
platform. Blockchain based DDoS Protection Deployment, Facts
about
Blockchain
and
Cybersecurity. Basic Cryptographic primitives used in Blockchain – Secure, Collison resistant
hash functions, digital signature, public key cryptosystems, zero knowledge proof systems. Basic
Distributed System concepts – distributed consensus and atomic broadcast, Byzantine fault
tolerant consensus methods. Basic Blockchain (Blockchain 1.0) – concepts germane to Bitcoin
and contemporary proof of work based consensus mechanisms, operations of Bitcoin blockchain,
cryptocurrency as application of blockchain technology. Blockchain 2.0 – Blockchains with
smart contracts and Turing complete blockchain scripting – issues of correctness and
verifiability, Ethereum platform and its smart contract mechanism. Blockchain 3.0 – Plug and
play mechanisms for consensus and smart contract evaluation engines, Hyperledger fabric
platform. Beyond Cryptocurrency – applications of blockchain in cyber security, integrity of
information, EGovernance and other contract enforcement mechanisms, Limitations of
blockchain as a technology, and myths vs. reality of blockchain technology, Research directions
in Blockchain technology.
LAUTECHCYB 206: System and Network Administration (3 Units Compulsory: LH 30,
PH 45)
Senate approved relevance
Training of high quality graduates who are skilled and knowledgeable in the management of an
organization’s technological infrastructure as well as provide a comfortable environment for its
Information Technology (I.T) users is in agreement with LAUTECH’s mission to advance
technology in meeting needs of the society. Relevance is seen in Cyber Security Science
graduates from LAUTECH with ability to efficiently organize, install, and support an
organization’s computer systems, including local area networks (LANs), wide area networks
(WANs), network segments, intranets, and other data communication systems to keep abreast of
the Nigerian I.T. challenges in an ethical and professional way.
Overview
System and network administration is concerned with the operational management of human–
computer systems that addresses both the technology of computer systems and the users of the
technology on an equal basis. It is about putting together a network of computers (workstations,
PCs and supercomputers), getting them running and then keeping them running in spite of the
activities of users who tend to cause the systems to fail. Through this course, students gain an
understanding of the design principles and implementation issues for the deployment of network
servers based on Windows and Unix operating systems. Techniques and skills for system
administration are developed through a comprehensive sequence of laboratory activities in
combination with lectures and design tasks.
35
Objectives
The objectives of the course are to:
1. Describe the duties of system and network administrators;
2. Explain the challenges of system and network administration;
3. State the Meta principles of system administration;
4. Explain the components of the humancomputer system;
5. Describe basic network topologies with advantages and disadvantages of each type;
6. State the features that distinguishes LAN from WAN;
7. Describe the technologies used in implementing a WAN;
8. Comparative analysis of common operating systems;
9. Explain network management methods and tools;
10. Explain the principles of security;
11. Carry out handson configuration and workstation personalization; and
12. Conduct practical exercises on Operating System installation.
Learning outcomes
On completion of the course, students should be able to:
1. Describe seven (7) duties each of system and network administrators;
2. Explain at least five (5) of the challenges of system and network administration;
3. State the three (3) Meta principles of system administration;
4. Explain the three (3) major components of the humancomputer system;
5. Describe at least four (4) network topologies with advantages and disadvantages of each;
6. State three (3) features that distinguishes a LAN from a WAN;
7. Describe at least two (2) technologies used in implementing WAN;
8. Comparative analysis of two popular operating systems (Windows and Unix) featuring
initial installation, configuration, startup and shutdown processes;
9. Explain at least two (2) network management methods and tools;
10. Explain the four (4) principles of security;
11. Carry out handson configuration and workstation personalization; and
12. Conduct practical exercises on installation of the Windows and Unix Operating Systems.
Course Contents
Meaning and definition of system and network administration. Duties of a system and network
administrator. Goals and challenges of system and network administration. Meta principles of
system administration. Components of humancomputer system. Issues in user management.
Network topologies with advantages and disadvantages of each type. Distinctions between LAN
and WAN. Technologies used in implementing WAN. Operating systems: types and functions.
Compare Unix and Windows operating systems. The role of policy in a networked community.
Configuration and Personalization of Workstations. Network Management Administration.
Simple Network Management Protocol (SNMP) model, tools and limitations. Remote Network
Monitoring (RMON) management model. Operational principles of security including security
implementation, analysis, recovery plan and authentication methods.
CYB 301: Cryptography Techniques, Algorithms and Applications (2 Units C: LH 15; PH
45)
36
Learning Outcomes
At the end of this course, students should be able to:
1. define cryptography means, simple cryptosystems, symmetric and asymmetric
cryptography, symmetric cryptosystems and asymmetric cryptosystems;
2. differentiate key management and encryption algorithms, types of cryptography and
cryptographic techniques;
3. practice cryptanalysis of cipher and how to use protocols, hashing, digital signatures, and
certificates;
4. examine the certificate authorities, policies, procedures, and methods for the proper use
of cryptography in secure systems;
5. identify public-key cryptography and discrete algorithms, cryptography and its
mathematical background, and understand hash functions, data integrity, authentication,
algorithmic number theory, primality testing and true primality testing; and
6. discuss factoring integers, RSA, security of RSA encryption, security of RSA key generation,
discrete logarithm cryptographic schemes.
Course Contents
Introduction to cryptography, symmetric and asymmetric cryptography, key management, and
encryption algorithms. Introduction to simple cryptosystems. Cryptanalysis. Stream ciphers,
Block ciphers and Feistel ciphers. Multiple encryption. Hash functions. Data integrity,
authentication, and perfect secrecy. Public-key cryptography and discrete algorithms-ELGamal
cryptography. Algorithms for the discrete logarithm problem. Algorithmic number theory.
Probabilistic primality testing. Security of ELGamal and RSA Encryption, and RSA Key
Generation. Discrete logarithm cryptographic schemes. Conventional and public-key
cryptography. Selected cryptosystems, including Data Encryption Standard (DES) and
RivestShamir-Adleman (RSA) algorithm. AES encryption algorithm, a symmetric 128-bit block
data encryption technique. PKI, SSL, and VPN. Digital signatures, pseudo-random number
generation, cryptographic protocols and cryptanalytic techniques. Use of protocols, hashing and
certificates and certificate authorities. Policies, procedures, and methods for the proper use of
cryptography in secure systems. Applications of cryptography to signal.
Lab work: Practical exercise on writing cryptography algorithms. Work on cryptographic
techniques. Practice cryptanalysis of cipher and how to use protocols. Understand hash functions
and learn how to hash, produce secured digital signatures and certificates. Learn the procedures
and methods for the proper use of cryptography in secure systems. Practice primality testing.
Practical assignments on ELGamal, DES and RSA encryption security, generation of RSA key
and discrete logarithm cryptographic schemes.
CYB 303: Cybersecurity Risks Analysis, Challenges and Mitigation (2 Units C; LH 30)
Learning Outcomes
At the end of this course, students should be able to:
1. describe the cybersecurity risks, how to avoid/prevent them and state the cybersecurity
challenges and the path forward;
2. apply the decision and risk analysis techniques, and devise how to mitigate risks and
vulnerabilities;
3. develop the effective use of assessments for cybersecurity risk mitigation in the cloud and
how to use proactive measures to mitigate critical cybersecurity challenges;
4. analyse the implications of information technology to national development, cyber-attacks,
37
control, distribution and safety of information with a review of the economic and
geopolitical factors that have made African countries vulnerable to cyber-attacks;
5. review what information security means and the principles of applied information security
management, and examine the governance and security policy, threat and vulnerability
management, risk assessment and management frameworks, information leakage, crisis
management and legal security implementation considerations;
6. explore ISO 27000 series and the Plan-Do-Check-Act model, and assess threats and
vulnerabilities, incident response, forensics and investigations; and
7. describe how to deal with classified/sensitive data, legal and regulatory drivers and
practical considerations when implementing the frameworks to address current and future
threats.
Course Contents
Principles of applied information security management. Cybersecurity challenges. Cybersecurity
risks, challenges and the path forward. Recognising risks. Overview of decision and risk analysis
techniques. Mitigating risks and vulnerabilities. Effective use of assessments for cybersecurity
risk mitigation. Mitigating cybersecurity risk with the cloud. Proactive measures mitigate critical
cybersecurity challenges. Critical corporate and military cybersecurity risks. Evolving challenges
in cyber risk management. The social implication of information technology to national
development, cyber-attacks, control, distribution and safety of information. Economic and
geopolitical factors that have made African countries vulnerable to cyber-attacks and the steps
that can be taken to address this. Governance and security policy. Threat and vulnerability
management. Incident management, risk assessment and risk management frameworks.
Information leakage, crisis management and business continuity. Legal and compliance, security
awareness and security implementation considerations. ISO 27000 series and the Plan-DoCheck-Act model. Assessment of threats and vulnerabilities. Incident response, forensics and
investigations. Dealing with classified/sensitive data. Legal and regulatory drivers and issues.
Certification. Common criteria, security education and training. Practical considerations when
implementing the frameworks to address current and future threats.
Lab work: Practical approach to cyber hygiene. Practice cybersecurity risk mitigation in the
cloud and how to use proactive measures to mitigate the learned challenges. Work on applying
the decision and risk analysis techniques. Master how to mitigate risks and vulnerabilities.
CYB 305: Digital Forensics and Investigation Methods (2 Units C: LH 15; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. develop basic knowledge on digital forensic and digital evidence;
2. establish awareness of digital evidence challenges aspects of digital evidence;
3. appraise the cyber trail and its challenges;
4. review the evolution of investigative tools and the language of computer crime
investigation;
5. identify the role of computers in crime, technology and law;
6. examine techniques and tools used by computer forensics investigations; and
7. apply best practices in securing, processing, acquiring, examining, and reporting on digital
evidence with current technologies and methods in forensics investigation
Course Contents
38
Introduction to digital forensics, digital evidence, and increasing awareness of digital evidence.
Challenging aspects of digital evidence. Best practices in securing, processing, acquiring,
examining and reporting on digital evidence. Cyber trail and challenging aspects of the cyber
trail. Brief history of computer crime and cybercrime investigation. Cyber auditing. Evolution of
investigative tools. Language of computer crime investigation. The role of computers in crime,
technology and law, jurisdiction, pornography and obscenity, child pornography, privacy,
copyrights and the “theft” of digital intellectual property. The investigative process and
investigative reconstruction, with digital evidence. Examine techniques and tools used by
computer forensics investigations such as acquisition, preservation, recovery, and analysis of
evidence obtained from portable and stationary computer storage devices, personal digital
assistants (PDAs), and cell phones. Current technologies and methods as well as leading edge
techniques with practical based exercises/projects and research opportunities.
Lab work: Practical exercises on how to make use of various techniques and tools for computer
forensics investigations and cyber trail during cybercrime investigations. Practice cyber auditing
skills. Work on applying the best practices in securing, processing, acquiring, examining and
reporting on digital evidence with current technologies and methods in forensics investigation.
CSC 309: Artificial Intelligence (2Units C: LH 15; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. explain Artificial Intelligence (AI) fundamentals, concepts, goals, types, techniques,
branches, applications, AI technology and tools;
2. discuss intelligent agents, their performance, examples, faculties, environment and
architectures, and determine the characteristics of a given problem that an intelligent
system must solve;
3. describe the Turing test and the “Chinese Room” thought experiment, and differentiate
between the concepts of optimal reasoning/behaviour and human-like
reasoning/behaviour;
4. describe the role of heuristics and the trade-offs among completeness, optimality, time
complexity, and space complexity;
5. analyse the types of search and their applications in AI and describe the problem of
combinatorial explosion of search space and its consequences;
6. demonstrate knowledge representation, semantic network and frames along with their
applicable uses;
7. practice Natural Language Processing, translate a natural language (e.g., English)
sentence into a predicate logic statement, convert a logic statement into clause form,
apply resolution to a set of logic statements to answer a query; and
8. analyse programming languages for AI and expert systems technology, and employ
application domains of AI.
Course Contents
Overview of Artificial Intelligence. History of AI. Goals of AI. AI Technique. Types of AI.
Branches and applications of AI. Advantages and Disadvantages. Introduction to Intelligent
Agents. Agent Performance, Examples of Agents, Agent Faculties, Rationality, Agent
Environment. Agent Architectures. Search. General Classes of AI Search Algorithm Problems.
Problem Solving by Search. Types of AI Search Techniques and Strategies. Introduction to the
39
types of problems and techniques in AI. Problem-Solving methods. Major structures used in AI
programmes. Knowledge Representation. KR and Reasoning Challenges. KR Languages.
Knowledge representation techniques such as predicate logic, non-monotonic logic, and
probabilistic reasoning. Semantic Network - types of relationships, semantic network
inheritance, types and components. Introduction to Frames. Natural Language Processing (NLP).
Introduction to natural language understanding and various syntactic and semantic structures.
Introduction to Expert Systems - characteristics, components, types, requirements, technology,
development. Programming Languages for AI. Introduction to computer image recognition.
Lab work: Group practical in (i) Turing test practical - Students can act out their own version of
the Turing test (iii) Facial recognition practical to aid in teaching students how machine learning
works with students simulating a facial recognition algorithm. Practical applications of NLP in
groups – (i) Question Answering focuses on building systems that automatically answer the
questions asked by humans in a natural language (ii) Spam detection application for detecting
unwanted e-mails getting to a user's inbox (iii) Sentiment analysis/opinion mining should be used
on the web to analyse the attitude, behaviour, and emotional state of the sender, implemented
through a combination of NLP and statistics (iv) Practical exercise of machine translation used to
translate text or speech from one natural language to another natural language such as the Google
Translator (v) Developing a model to provide word processor software for the spelling correction
(vi) Developing a model for speech recognition
LAUTECHCYB 307: Computer Communication and Networks (3 Units Compulsory: LH
30, PH 45)
Senate approved relevance
Training of proficient and highly skilled graduates with requisite skills and expertise in the
domain of Cyber Security Science cannot be overemphasized. The relevance of this is to equip
students with requisite knowledge and assist them to gain mastery in order to effect professional
approach in the design, configuration, analysis and evaluation of computer and communication
networks. This is in line with LAUTECH’s vision and mission of not just producing graduates
but graduates with relevant skills that can keep abreast of the Nigerian information technology
challenges.
Overview
The Internet and computer networks are now ubiquitous, and a growing number of activities
strongly depend on the correct operation of the underlying network. Networks, both fixed and
mobile, are a key part of the computing environment, and many computing applications that are
used today would not be possible without networks. This dependency on the underlying network
is likely to increase in the future.
This course will develop students’ understanding of core networks and communications
concepts, including their application in the dominant suite of protocols comprising Ethernet,
Internet Protocol (IP), Transmission Control Protocol (TCP), and User Datagram Protocol
(UDP). Also, students will be exposed to the practical realization of devices to operate these
protocols and the cyber consequences of the configuration and organization of the devices
amongst others.
40
Objectives
The objectives of the course are to:
1.
2.
3.
4.
5.
6.
7.
8.
9.
Describe characteristics of an effective data communication;
List and explain the main components of a data communication system;
Describe the OSI reference model and its seven (7) layers;
Explain various transmission impairments and their effects in a network;
Explain the various metrics that characterize the performance of a network;
Describe the features that distinguishes a virtual LAN from a physical LAN;
Identify different network devices and state their respective functions;
List and explain the protocols that constitute the application layer;
Analyze the requirements for a given organizational structure and select the most
appropriate networking architecture and technologies; and
10. Conduct practical exercises on how to configure a Local Area Network.
Learning outcomes
On completion of the course, students should be able to:
1. Describe four (4) characteristics of an effective data communication;
2. List and explain the five (5) main components of a data communication system;
3. Describe the OSI reference model and its seven (7) layers;
4. Explain at least five (5) transmission impairments;
5. Explain at least four (4) metrics that characterize the performance of a network;
6. Describe two (2) features that distinguishes a virtual LAN from a physical LAN;
7. Identify at least five (5) network devices and state their respective functions;
8. List and explain four (4) main application layer protocols;
9. Analyze the requirements for a given organizational structure and select the most;
appropriate networking architecture and technologies; and
10. Conduct practical exercises on how to configure a Local Area Network.
Course Contents
Basic concepts of networking. Network topologies. The concept of layered architecture
modelling including OSI and the TCP/IP protocol suite. Client server communications.
Physical layer functionalities including signaling, modulation, multiplexing, line coding and
synchronization. Transmission media. Network performance measures. Data vs signaling
rates, channel bandwidth and capacity. Link layer functionalities including frame
synchronization. Circuit, packet and virtual circuit switching technologies. Local area
network technologies including Ethernet, token rings. Multiple access schemes such as
CSMA/CD, CSMA/CA and token passing. Switched vs shared ethernets. Internetworking
devices including repeaters, bridges, switches, routers and gateways. Network layer protocols
including IP, ARP and ICMP. IP addressing schemes, sub netting, internet routing including
protocols such as RIP, OSPF and BGP. Transport layer protocols including UDP and TCP.
Application layer protocols such as HTTP, FTP, DNS, SMTP and TELNET.
LAUTECHCYB 311: Enterprise and Perimeter Security (3 Units Compulsory:
PH 45)
41
LH 30
Senate approved relevance
Training of proficient and highly skilled Cyber Security graduates with requisite expertise in the
field of Cyber Security Science is very germane. The relevance is to equip students with skills
and essential knowledge of basic technologies of defense/protection of the perimeter of an
information system which is a mandatory element of any organization's information security and
computing infrastructure. This is in conformity to LAUTECH’s vision and mission of producing
graduates with relevant skill sets that are able to design, deploy and maintain a realworld security
perimeter for robust and all-round defense to keep abreast of the information technology
challenges.
Overview
The Enterprise Network Perimeter establishes the boundary between the internal network and
external networks such as the internet. Perimeter security refers to routers, firewalls, and
intrusion detection systems which control network access from outside sources.
Students will examine network based attacks whether originating from the Internet or the local
LAN, and learn about ways to protect detect, and defend the enterprise network from such
attacks. The course will cover perimeter security (Firewalls, Intrusion Detection System,
Intrusion Prevention System, Virtual Private Network, proxy servers) enterprise security
policies, as well as securing devices on largescale distributed networks.
Objectives
The objectives of the course are to:
1. Describe different Network based attacks and their corresponding defense mechanism;
2. Explain the essentials of network perimeter security;
3. Identify and explain various types of intrusion detection systems (IDS);
4. Describe the elements of an effective security policy;
5. Describe how a typical request from an internal client to an external server would be
handled by a transparent proxy firewall;
6. List and explain the roles of Network IDS in a perimeter defense;
7. Describe the various measures through which user access can be controlled;
8. Identify and explain the major challenges that face host defense components as a unified
product category; and
9. Describe the requirements for a successful Intrusion Prevention System.
Learning outcomes
On completion of the course, students should be able to:
1. Describe at least ten (10) Networkbased attacks and their corresponding defense
mechanism;
2. Explain at least six (6) essentials of network perimeter security;
3. Identify and Explain three (3) types of intrusion detection systems;
4. Describe at least seven (7) elements of an effective security policy;
5. Describe the 6step process detailing how a typical request from an internal client to an
external server would be handled by a transparent proxy firewall;
42
6. List and explain at least five (5) roles of Network IDS in a perimeter defense;
7. Describe at least four (4) measures through which user access can be controlled;
8. Identify and explain two major challenges that face host defense components as a unified
product category; and
9. Describe at least five (5) requirements for a successful Intrusion Prevention System.
Course Contents
Introduction to Enterprise and Perimeter Security: Definition of Enterprise and Perimeter
Security, types of Enterprise Networks, Security challenges facing Enterprise Networks,
Significance of Enterprise Network Security, Common Security Threats and Attack Vendors,
Overview of Security Policies and Compliance Frameworks. Network Security Protocols and
Encryption: Network Security Protocols, Network Security Standards, Advantages of Network
Security Protocols and Standards, InDepth Exploration of Network Security Protocols and
Standards, Encryption Mechanisms, Authentication Mechanisms, Implementing Encryption and
Authentication Mechanisms, Secure Communication Protocols and Virtual Private Networks
(VPNs). Perimeter Defense Technologies: Firewalls, Intrusion Detection and Intrusion
Prevention Systems, Application Layer Security and Content Filtering,
Perimeter
Security
Devices, Configuring and Managing Perimeter Security Devices. Secure network Design and
Segmentation: Network Segmentation and Isolation, Strategies for Network Segmentation and
Isolation, Demilitarized Zone, designing a Demilitarized Zone (DMZ), Defense InDepth Security
Measures, Implementing Defense InDepth Security Measures. Access Control and
Authentication: Definition of Access control and Authentication, Role Based Access Control and
Permission, Multi Factor Authentication and Biometrics, Identity and Access Management
Solutions. Threat Detection and Incident Response: Security Incidents, Techniques for
Identifying Security Incidents, Techniques for Analyzing Security Incidents, Incident Response
and Recovery Planning, Security Information and Event Management, Utilizing Security
Information and event Management Solutions. Network based attacks. Threat mitigation
strategies. Perimeter security (Firewalls, IDS, IPS, VPN, proxy servers). Perimeter protection
components. Firewalls, types, configuration, advantages and disadvantages. Authentication and
authorization. Enterprise security policies. Network Intrusion Detection: the need, types and
benefits. The role of routers as perimeter devices. VPN basics, methodologies, advantages and
disadvantages. Packet filtering, effective uses of packet filtering devices. Internet Protocol
Security (IPSec). Virtual Private Networks (VPNs) and devices.
Lab work: Hands on experiments and demonstrate their understanding of subject matter via
writing and presentations. Remote access technologies. Fundamentals of secure perimeter
design. Design elements for enterprise and perimeter security.
LAUTECHCYB 313: Simulation and Modelling
2 Units Compulsory: LH 30)
Senate approved relevance
Simulation and Modeling in cybersecurity are indispensable for preparing against evolving
threats and fortifying digital defences. The relevance lies in the ability to replicate intricate cyber
scenarios, allowing security professionals to simulate attacks, assess vulnerabilities, and test
defence mechanisms in a controlled environment. This proactive approach aids in identifying
potential weaknesses, refining incident response strategies, and enhancing overall cyber
resilience. Simulation enables the emulation of diverse cyber threats, from malware outbreaks to
sophisticated hacking techniques, offering a platform to train cybersecurity teams and assess
their readiness. Additionally, modeling cyber threats helps in predicting and understanding the
behavior of malicious actors, contributing to more effective threat intelligence and risk
43
management. In the rapidly changing landscape of cybersecurity, the use of simulation and
modeling is instrumental in staying ahead of adversaries, fostering innovation in defensive
strategies, and ensuring the robustness of digital infrastructure. This is in line with LAUTECH
vision and mission of not just producing graduates, but graduates that is versatile with relevant
skill sets that can keep abreast of the Nigerian Information Technology challenges in order to use
the basic concepts of computation through modeling and simulation that are increasingly being
used by architects, planners, and engineers to shorten design cycles, innovate new products, and
evaluate designs and simulate the impacts of alternative approaches.
Overview
Simulation and modeling in cybersecurity offer a proactive and controlled environment to
emulate diverse cyber threats, allowing organizations to identify vulnerabilities, test defense
mechanisms, and optimize incident response strategies. These tools enable realistic training for
cybersecurity professionals, fostering skill development and preparedness for evolving attack
tactics. By predicting and analyzing potential threats, simulation contributes to enhanced threat
intelligence, empowering organizations to stay ahead of cyber adversaries. The iterative nature of
modeling promotes innovation in defensive strategies, ensuring continuous improvement in
cybersecurity approaches. Ultimately, simulation and modeling play a pivotal role in quantifying
and managing cyber risks, assuring cyber resilience, and fortifying digital defenses in the face of
an everevolving threat landscape.
Objectives
The objectives of the course are to:
1.
Simulate Cyber Attacks by design simulations to replicate various cyber attacks,
providing a controlled environment for testing and analysis.
2.
Utilize modeling to identify and assess vulnerabilities within systems and networks,
enabling proactive mitigation.
3.
Implement simulations to test the effectiveness of defense mechanisms such as firewalls,
intrusion detection systems, and antivirus solutions.
4.
Develop and refine incident response strategies through simulated cyber attack scenarios,
improving the organization's overall readiness.
5.
Use simulation to train cybersecurity professionals, allowing them to gain hands on
experience and enhance their skills in a risk free environment.
6.
Utilize modeling to predict and analyze the behavior of cyber threats, contributing to the
development of robust threat intelligence.
7.
Foster innovation in defensive strategies by iteratively refining approaches based on
lessons learned from simulated scenarios.
8. Apply simulation to quantify the potential impact of cyber threats, aiding in comprehensive
risk management.
9. Use simulation and modeling to anticipate and prepare for evolving cyber attack tactics and
techniques employed by adversaries.
10. Implement simulation and modeling to assess, enhance, and validate the organization's
cybersecurity posture, ensuring cyber resilience in the face of dynamic threats.
44
Learning Outcomes:
On completion of the course, students should be able to:
1. Demonstrate Cyber Attack Simulation:
2. Identify Vulnerabilities:
3. Evaluate Defense Mechanisms:
4. Implement Incident Response Strategies:
5. Apply Hands On Cybersecurity Skills:
6. Utilize Threat Intelligence:
7. Innovate Defensive Approaches:
8. Quantify and Mitigate Risks:
9. Adapt to Evolving Tactics:
10. Ensure Cyber Resilience:
Course Outline
Introduction to Simulation and Modeling in Cyber Security, Understanding the role of simulation
and modeling in cybersecurity, Overview of common simulation tools and platforms. Cyber
Attack Simulation, Designing and executing simulations to replicate common cyber-attacks,
Analyzing simulated attack vectors and methodologies. Vulnerability Assessment, Identifying
and assessing vulnerabilities within simulated systems, Utilizing modeling for proactive
vulnerability management. Testing Defense Mechanisms, implementing simulations to test the
effectiveness of defense mechanisms, Evaluating strengths and weaknesses of firewalls, intrusion
detection systems, and antivirus solutions. Incident Response Optimization, Developing and
refining incident response strategies through simulated scenarios, Real-world application of
incident response best practices. Threat Intelligence Development, utilizing modeling to predict
and analyze the behavior of cyber threats, incorporating threat intelligence into cybersecurity
decision making. Innovating Defensive Strategies, Fostering innovation in defensive strategies
through iterative modeling, Adapting approaches based on lessons learned from simulated
scenarios. Risk Management through Simulation, quantifying cyber risks through simulation
outcomes, implementing mitigation strategies for identified risks. Adapting to Evolving Tactics,
Anticipating and adapting to evolving cyber-attack tactics through simulation and modeling,
Staying ahead of emerging threats, Ensuring Cyber Resilience, Assessing, enhancing, and
validating cybersecurity posture through simulation, Strategies for achieving and maintaining
cyber resilience. Participants will engage in hands on projects throughout the course, applying
simulation and modeling techniques to real world cybersecurity scenarios. These projects will
reinforce theoretical concepts and provide practical experience in designing and implementing
cyber simulations.
LAUTECHCYB 315 : Linux Operating System, Administration and Security (2 Units
Compulsory: LH 15: PH: 45)
Senate approved relevance
Training competent and highly skilled Cyber Security graduates with necessary proficiency and
expertise in the domain of Cyber Security Science is paramount. The relevance of this is to
furnish students with ample intelligence and proficiency to upshot professional approach to
45
learning Linux Operating system for growth of ethical hacking for information security and
security of computer systems and network infrastructures. This is in line with LAUTECH vision
and mission of not just producing graduates but graduates with necessary expertise that can
address security issues in the rapidly changing technology and in the growing ecosystem of
online networks in order to identify, analyse and prevent vulnerabilities, threats, crimes and
network related challenges in the hardware, software and peripheral devices in the computer
system thereby protect organisation’s assets from irreparable loss
Overview
Linux is a popularly used technology throughout the IT industry, and it is used as an alternative
to more common platforms because of its security, low cost, and scalability. The Linux OS is
used to power a larger variety of servers, including email and web servers. Additionally, it is
often favored by software developers as the platform they code on. Linux is transparent, and that
means you can learn to manipulate it in ways that are not possible with most operating Systems.
In addition (and undoubtedly for the reason just mentioned), most cyber security tools are written
to run on Linux and it is more secure than other operating systems due to its smaller attack
surface and lower vulnerability to viruses and malware. Hence the goal of this course is to
provide students with necessary concepts and skills in Linux as cyber security professionals.
Objectives
The objectives of the course are to:
1. explain the theory of Linux design and operation;
2. identify and explain the reasons for Linux operating system popularity;
3. list major components of Linux, Linux distributions types and the steps for installing;
Linux;
4. explain files and directories management, file permissions and file compression utilities;
5. explain the concepts of Linux groups and Network Based User Account;
6. describe Account Security Policy in Linux;
7. explain how to use Kali Linux to perform security probes on systems;
8. describe how to create a security policy for user accounts;
9. explain how to configure syslog to create custom log entries;
Learning outcomes
On completion of the course, students should be able to:
1. describe the various parts of Linux and identify the major components that make up the
Linux operating system;
2. identify the steps for installing Linux;
3. explain Linux files and directories management, File Permissions;
4. use Linux command line to complete a series of tasks;
5. demonstrate navigation between directories to access and manipulate files;
6. compare and contrast Linux differentiation between desktops and servers;
7. demonstrate the creation of multiple partitions allowing a computer to "dual boot";
8. use a common scripting language in Linux to perform various cyber security network
scanning techniques;
9. describe the concept of Linux account groups and Network Based User Accounts;
10. formulate Account Security Policy for Linux Operating system;
11. explain how to use Kali Linux to perform security probes on systems;
46
Course Contents
Overview of the Linux System and Linux Operations Review; Linux System Installation;
Linux System Operations, Linux command line syntax and features; Logins and
Accounts; Linux commands, utilities, text editing, shell programming and text processing
utilities; System services and Run levels– System, Date and Time Management; File
systems and File system Maintenance Overview: File Management (the Linux File
system Command Execution: the ‘pwd’ command, the ‘cd’ command e.t.c); File
Permissions issues; Linux resources, libraries and troubleshooting; Event Logging
(Syslog), Job Scheduling, System Backup and Restore; Developing an Account Security
Policy; Using Kali Linux to perform security probes on systems; Process and Log
Administration; Configuring syslog to create custom log entries; Advanced Shell
Features, Kernel Configuration and Installation; Linux Boot loaders, Rescue of a Failed
System; Networking, Network Configuration, Network Services Remote Administration
with SSH and SCP, BIND (Berkeley Internet Name Domain); Mail Server Apache Web
Server, System Security, Troubleshooting and Tuning, Advanced Scripting with Perl.
GST 312: Peace and Conflict Resolution (2 Units C: LH 30)
Learning Outcomes
At the end of the course, students should be able to:
1. analyse the concepts of peace, conflict, and security;
2. list major forms, types, and root causes of conflict and violence;
3. differentiate between conflict and terrorism;
4. enumerate security and peace building strategies; and
5. describe roles of international organisations, media, and traditional institutions in peace
Building.
Course Contents
Concepts of Peace, Conflict, and Security in a multi-ethnic nation. Types and Theories of
Conflicts: Ethnic, Religious, Economic, Geo-political Conflicts; Structural Conflict Theory,
Realist Theory of Conflict, Frustration-Aggression Conflict Theory. Root causes of Conflict and
Violence in Africa: Indigene and settlers Phenomenon; Boundaries/border disputes; Political
disputes; Ethnic disputes and rivalries; Economic Inequalities; Social disputes; Nationalist
Movements and Agitations; Selected Conflict Case Studies – Tiv-Jukun; Zango Kataf,
Chieftaincy, and Land disputes, etc. Peace Building, Management of Conflicts and Security:
Peace & Human Development. Approaches to Peace & Conflict Management --- (Religious,
Government, Community Leaders, etc.). Elements of Peace Studies and Conflict Resolution:
Conflict dynamics assessment Scales: Constructive & Destructive. Justice and Legal framework:
Concepts of Social Justice; The Nigeria Legal System. Insurgency and Terrorism. Peace
Mediation and Peace Keeping. Peace & Security Council (International, National, and Local
levels) Agents of Conflict resolution – Conventions, Treaties Community Policing: Evolution
and Imperatives. Alternative Dispute Resolution, ADR. a) Dialogue b). Arbitration, c).
Negotiation d). Collaboration, etc. Roles of International Organisations in Conflict Resolution.
(a). The United Nations, UN, and its Conflict Resolution Organs. (b). The African Union &
Peace Security Council (c). ECOWAS in Peace Keeping. Media and Traditional Institutions in
Peace Building. Managing Post-Conflict Situations/Crisis: Refugees. Internally Displaced
Persons, IDPs. The role of NGOs in Post-Conflict Situations/Crisis.
ENT 312: Venture Creation (2 Units C: LH 15; PH 45)
47
Learning Outcomes
At the end of this course, students, through case study and practical approaches, should be able
to:
1. describe the key steps in venture creation;
2. spot opportunities in problems and in high potential sectors regardless of geographical
location;
3. state how original products, ideas, and concepts are developed;
4. develop business concepts for further incubation or pitching for funding;
5. identify key sources of entrepreneurial finance;
6. implement the requirements for establishing and managing micro and small enterprises;
7. conduct entrepreneurial marketing and e-commerce;
8. apply a wide variety of emerging technological solutions to entrepreneurship; and
9. appreciate why ventures fail due to lack of planning and poor implementation.
Course Contents
Opportunity Identification (Sources of business opportunities in Nigeria, Environmental
scanning, Demand and supply gap/unmet needs/market gaps/market research, Unutilised
resources, Social and climate conditions, and technology adoption gap). New business
development (business planning, market research). Entrepreneurial finance (venture capital,
equity finance, microfinance, personal savings, small business investment organisations, and
business plan competition). Entrepreneurial marketing and e-commerce (Principles of marketing,
customer acquisition & retention, B2B, C2C and B2C models of e-commerce, first mover
advantage, e-commerce business models and successful e-commerce companies,). Small
business management/family business: Leadership & Management, basic bookkeeping, nature of
family business and family business growth model. Negotiation and business communication
(Strategy and tactics of negotiation/bargaining, traditional and modern business communication
methods). Opportunity discovery demonstrations (business idea generation presentations,
business idea contest, brainstorming sessions, idea pitching). Technological solutions (the
concept of market/customer solution, customer solution, and emerging technologies, business
applications of new technologies- Artificial Intelligence (AI), Virtual/Mixed Reality (VR),
Internet of Things (IoT), Blockchain, Cloud Computing, renewable energy, etc. digital business
and e-commerce strategies).
CYB 302: Biometrics Security (2 Units C: LH 15; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. discuss biometric algorithms and data analysis along with digital image/signal processing;
2. apply automated biometric identification: hands-fingers, palms and hands; heads-face,
voice and eyes and other biometrics;
3. develop methods of obtaining biometric data and matching basics;
4. practice biometric authentication, enrolment, matching performance, setting a threshold.
biometric authentication, matching data, ground truth, calculating errors rates and graphs;
5. create storage of biometric data elements, quality, upgrades, data security and integrity;
6. analyse privacy issues, security strength, recognition rates and other aspects of biometrics,
passwords and smart cards; and
7. explore applications of biometrics and future trends.
48
Course Contents
Introduction to biometrics and digital image processing. Matlab in biometric image/signal
processing. Biometric algorithms and systems with emphasis on face, fingerprint, eyes (iris),
speech (voice). Automated biometric identification multimodal biometrics. Biometric data: raw
data, template data, and data methods. Biometric matching basics: biometric authentication,
enrolment, correct user, and incorrect user. Match threshold and matching performance. Setting a
threshold. Biometric authentication: matching data, ground truth, calculating errors rates and
graphs. Biometric data: Storage of biometric data elements, transactions, errors and quality
upgrades. Data security and integrity. Privacy issues and other aspects of biometrics.
Applications of biometrics and future trends. Challenging issues: security strength and
recognition rates. Alternatives of passwords and smart cards.
Lab work: Practical exercise on biometric capture, image processing, matching threshold and
performance. Learn the practical aspect of automated biometric identification of multimodal,
authentication and calculation of error rates. Work on biometric algorithms, privacy and security
of stored biometric data.
CYB 304: Information and Big Data Security (2 Units C: LH 15; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. describe information security, big data, big data characteristics, techniques, tools and
technologies, operational and analytical big data;
2. explore information and big data security, challenges, requirements, and the lifecycle
security management;
3. identify the basic policies on information and big data security methodologies;
4. apply knowledge of information and big data security risk management, security;
5. policies, security in the systems-engineering process and big data handling techniques;
6. examine big data skills, adoption, platform, components and governance, and how to use
the cloud for big data;
7. analyse how big data is driving organisational change, and essential analytical tools and
techniques used in developing big data solutions; and
8. apply machine learning techniques, analyse big data recommendations, and cloud-based
big data analysis.
Course Contents
Introduction to big data. Small data vs. big data. What is big data? The evolution of data/big
data. Big data characteristics-3Vs/6Vs. Unique features of big data. Importance of big data? Why
does big data matter? Sources of big data. Formats of data. Applications of big data. Use caseissues and solutions. Big data technology. Big data as an opportunity. Example of big data. Big
data statistics. Business intelligence vs. big data vs. data mining. Big data handling and
techniques. Using the cloud for big data. Big data challenges/problems. How businesses are
utilizing big data. Big data technologies. Operational and analytical big data. Big data skills. Big
data adoption. Big data analysis in practice. Case study session, preparation of case study report
and presentation. The big data platform and key aspects. Governance for big data. Big data
components. Big data driven organizational change and essential analytical tools and techniques.
Develop big data solutions. System and management view of information and big data security.
Requirements for information and big data security. Systems-design process and lifecycle
security management of information systems. Basic policies on information security and
49
methodologies. Information-security risk management, security policies, security in the systemsengineering process. Laws related to information security and management of operational
systems. Apply machine learning techniques and other big data programming languages.
Analyse big data recommendations. Cloud-based big data analysis.
Lab work: Practice on data acquisition and how to initiate discovery on raw data using
discovery systems. Learn Big Data analytics skills. Practical procedure for the crafting of an
enterprise-scale cost-efficient Big Data and machine learning solution to uncover insights and
value from data. Use the practical exercises to bridge the gap between the theoretical world of
technology with the practical ground reality of building corporate Big Data and data science
platforms. Hands-on exposure to Hadoop and Spark (or any of the BD tools), build machine
learning dashboards using R and R Shiny, create web-based apps using NoSQL databases.
Practical assignment of information and BD security.
CYB 322: Cybersecurity Innovation and Entrepreneurship (2 Units C: LH 15; PH 45)
Learning Outcomes
At the end of the course, the students should be able to:
1. explain business models;
2. identify some entrepreneurial opportunities available in Cybersecurity;
3. describe business plan and business startup process;
4. explain business feasibility and strategy;
5. explain marketing strategies; and
6. discuss business ethics and legal issues.
Course Contents
Fundamental concepts of innovation, and business ideas in general. Product development.
Business leadership. Digital marketing. Entrepreneurial opportunities in Cybersecurity. Legal
issues and business ethics. New venture creation process. Business feasibility planning. Market
research. Business strategy. Business models and business plans. Technical presentations. Report
on a successful entrepreneurial outfit.
CYB 398: SIWES II (3 Units C: PH 135)
Learning Outcomes
At the end of this training, students should be able to:
1. explain how a typical cybersecurity firm operates;
2. describe the various assignments carried out and the skills acquired during the SIWES
period; and
3. submit a comprehensive report on the knowledge acquired and the experience gained
during the exercise.
Course Contents
Students are attached to private and public organizations for a period of three months during the
third year session-long break with a view to making them acquire additional practical experience
in all areas of Cybersecurity over and above what is gained in CYB 299. Students are supervised
during the training period and shall be expected to keep records designed for the purpose of
50
monitoring their performance. They are also expected to submit a report on the experience
gained and defend their reports.
LAUTECHCYB 306: Software Defined Networks (2 Units Compulsory: LH 30)
Senate approved relevance
Training of high-quality graduates who are skilled and knowledgeable in the design,
implementation and deployment of secure software-based networks resonates with LAUTECH’s
mission to apply technology driven knowledge to positively impact on the global environment.
Relevance is seen in Cyber Security Scientists from LAUTECH being equipped with software
defined networking concepts and techniques to overcome the ever-increasing network
management burden created by our interconnected world.
Overview
The rapid rise in internet traffic and services introduced a tremendous amount of pressure on
telecommunication network providers. The rate of progress in network technologies has been
recognized as slow to keep up with the emerging data demands. Both industry and academia
have been working on new solutions for networking technologies, which can provide long terms
scalability and extensibility. Software Defined Networking (SDN) is a new framework, which is
believed to be the answer to the above need. SDN has already made an impact in data centers
and enterprise networks and it is seen as a key technology to improve performance and
extensibility both at core and access side of networking technologies. Consequently, there is a
significant demand from the industry for network specialists with SDN skills.
This course introduces students to major concepts in SDN and programming SDN applications.
It is designed to present to students a clear picture of how SDNs allow more efficient
provisioning of new services and applications, realizes cost savings, reduces configuration time
and errors and enhances security.
Objectives
The objectives of the course are to:
Explain the need/reasons for software designed networks;
Distinguish between software designed networking and traditional networking;
Explain the basic traditional networking concepts;
Describe the features of the SDN architecture;
Describe the functions and planes/layers of the SDN architecture;
Explain fundamental traits by which SDNs are characterized;
Identify and describe the SDN programming interfaces responsible for the
communication between the controller and the two other layers;
8. Explain the various SDN deployment models; and
9. State the real life domains that demonstrate the applicability of SDN.
10. Conduct practical exercises that simulate and implement Software Defined Networking
applications; and
11. Explain how security is ensured/conserved using the SDN paradigm.
1.
2.
3.
4.
5.
6.
7.
51
Learning outcomes
On completion of the course, students should be able to:
1. explain five (5) major reasons responsible for the emergence of SDN;
2. distinguish the relationship between SDN and traditional networking by stating the three (3)
enablers of the former;
3. explain six (6) network topology types and the seven (7) layers of the OSI reference model;
4. describe at least five (5) features of the SDN architecture;
5. describe the three (3) major planes/layers of an SDN and their respective functions;
6. explain at least four (4) fundamental traits by which SDNs are characterized;
7. identify and describe the two (2) SDN programming interfaces responsible for the
communication between the controller and the two other layers;
8. explain the four (4) types of software defined network deployment models;
9. state at least three (3) areas that demonstrate the applicability of SDN in networking
domains;
10. conduct practical exercises that simulate and implement Software Defined Networking
applications using Mininet Emulation Environment; and
11. Explain at least two (2) usecase scenarios of how security is ensured/conserved using the
SDN paradigm.
Course Contents
History and evolution of Software Defined Networks. Definition of Software Defined
Networks. The need for a new network architecture. Overview of traditional networking. Basic
architecture of SDNs with features and components. The SDN Application. The SDN
Controller and Switches. The SDN Datapath. The SDN Control to Data Plane Interface
(CDPI). The SDN North Bound Interfaces (NBI). Fundamental characteristics of SDNs. SDN
Languages and Tools. SDN Deployment Models. Application Areas of SDN. Hands on with
Mininet Emulation Environment. Relating Software Defined Networks to Network Function
Virtualization (NFV). Security using SDN paradigms. The Future of SDNs.
LAUTECHCYB 308 Cyber Security Management
1 Units Compulsory: LH 15 )
Senate Approved Relevance
Training of proficient and highly skilled graduates with requisite skills and expertise in the
domain of Cyber Security Science cannot be overemphasized. Understanding Cybersecurity
Governance explores the roles, responsibilities, and structures involved in cybersecurity
governance within organizations, emphasizing the establishment of policies, procedures, and
frameworks to ensure effective cybersecurity management. Cybersecurity Strategy Development
learns to formulate comprehensive cybersecurity strategies aligned with organizational
objectives, encompassing threat intelligence, prevention, detection, and response mechanisms.
Examine various cybersecurity compliance standards, laws, and regulations to ensure adherence
and develop strategies for maintaining compliance within the organization.
Overview:
52
The course "Cybersecurity Management" provides an in-depth exploration of the strategies,
principles, and methodologies essential for effectively managing cybersecurity within
organizations. This course is designed to equip students with the knowledge and skills necessary
to develop, implement, and oversee comprehensive cybersecurity frameworks, policies, and
practices. Students will gain insights into the management aspects of cybersecurity, including
risk assessment, governance, compliance, incident response, and resource allocation to
effectively protect organizational assets from cyber threats.
Objectives:
1. Understanding Cybersecurity Governance: Explore the roles, responsibilities, and structures
involved in cybersecurity governance within organizations, emphasizing the establishment of
policies, procedures, and frameworks to ensure effective cybersecurity management.
2. Risk Assessment and Management: Analyze methodologies for identifying, assessing, and
prioritizing cybersecurity risks, and develop strategies for managing and mitigating these risks in
alignment with organizational goals.
3. Compliance and Regulatory Frameworks: Examine various cybersecurity compliance
standards, laws, and regulations to ensure adherence and develop strategies for maintaining
compliance within the organization.
4. Security Operations and Incident Response: Study incident response planning, procedures, and
best practices to effectively detect, respond to, and recover from cybersecurity incidents,
minimizing their impact on organizational operations.
5. Cybersecurity Strategy Development: Learn to formulate comprehensive cybersecurity
strategies aligned with organizational objectives, encompassing threat intelligence, prevention,
detection, and response mechanisms.
6. Resource Allocation and Budgeting: Understand the process of resource allocation and
budgeting for cybersecurity initiatives, considering the allocation of personnel, technology, and
financial resources effectively.
7. Security Awareness and Training: Explore methods to foster a culture of cybersecurity
awareness and provide training programs to educate employees about cybersecurity best
practices and threats.
8. Vendor and Third-Party Risk Management: Evaluate strategies for assessing and managing
cybersecurity risks associated with third-party vendors and supply chains, ensuring a secure
ecosystem.
9. Performance Metrics and Evaluation: Develop methodologies for measuring and evaluating
the effectiveness of cybersecurity programs, utilizing key performance indicators (KPIs) and
metrics to drive continuous improvement.
Learning Outcome
On completion of the course, students should be able to understand:
53
1. Foundational Cybersecurity Knowledge
2. Risk Assessment and Management for Cybersecurity:
3. Security Policy Development and Implementation:
4. Incident Response and Handling:
5. Network Security:
6. Compliance and Legal Aspects:
7. Security Technologies and Tools:
8. Professional Communication and Ethics:
Course Outline
Introduction to Cybersecurity Management: Defining cybersecurity management, Overview of
cybersecurity frameworks and standards, The role of cybersecurity in organizational strategy.
Cybersecurity Governance: Governance frameworks (e.g., COBIT, NIST), Establishing
cybersecurity policies and procedures, Board-level involvement in cybersecurity. Risk
Management in Cybersecurity: Identifying and assessing cybersecurity risks, Risk mitigation
strategies, Incident response planning and execution. Compliance and Legal Considerations:
Understanding legal and regulatory requirements, Compliance frameworks (e.g., GDPR,
HIPAA), Cybersecurity and intellectual property laws. Security Architecture and Design: Design
principles for secure systems, Secure network and system architectures, Integration of security
into the development lifecycle. Cybersecurity Operations: Security monitoring and incident
detection, Security incident response and recovery, Security operations center (SOC)
management. Security Metrics and Performance Measurement: Developing and using
cybersecurity metrics, Performance measurement in cybersecurity, Continuous improvement in
cybersecurity operations. Security Awareness and Training for Employees: Importance of
employee awareness in cybersecurity, Designing and implementing effective training programs,
Evaluating the success of security awareness initiatives. Vendor and Third-Party Risk
Management: Assessing and managing risks from third-party vendors, Security considerations in
outsourcing, Contractual and legal aspects of vendor management. Cybersecurity Leadership and
Communication: Effective communication in cybersecurity management, Leadership skills for
cybersecurity professionals, Interacting with stakeholders at various organizational levels.
LAUTECHCYB 310: Principles of Cyber Forensic
2 Units Compulsory: LH 30 PH 45)
Senate Approved Relevance
This course is crucial for individuals entering the field of cybersecurity and law enforcement,
providing essential skills in investigating cybercrimes. Understanding the principles of computer
forensics is paramount in gathering, analyzing, and preserving digital evidence, ensuring a
systematic and legal approach to cybercrime investigations.
54
Overview
This course delves into the foundational principles of computer forensics, covering techniques
for evidence identification, collection, analysis, and reporting. Participants will gain handson
experience with forensic tools, legal considerations, and ethical practices, preparing them for a
role in investigating cyber incidents and crimes.
Objectives
1. Develop proficiency in evidence identification and collection.
2. Acquire skills in forensic imaging and data preservation.
3. Understand the legal and ethical considerations in computer forensics.
4. Master the use of forensic tools for data analysis and recovery.
5. Apply techniques for network and mobile device forensics.
6. Develop expertise in forensic reporting and documentation.
7. Stay current with emerging trends and challenges in computer forensics.
Learning outcomes
At the end of this course, Students should be able to;
1. Demonstrate in-depth exploration of the principles and practices of cyber forensics.
2. Explain methodologies and techniques for investigating, analyzing, and preserving digital
evidence.
3. Explain network forensic, mobile forensic, malware forensic, incident response forensic.
4. Demonstrate the understanding of the digital forensic investigation
5. State the importance of digital evidence in cybersecurity investigation.
6. Skills in preparing comprehensive forensic reports and documentation.
7. Indepth knowledge of emerging trends and challenges in computer forensics.
8. Critical thinking in analyzing complex cyber incidents.
9. Effective communication of forensic findings in legal contexts.
10. Continuous learning and adaptation to evolving forensic methodologies.
Course content
Introduction to Cyber Forensics. Definition and scope of cyber forensics. Importance of digital
evidence in cybersecurity investigations. Overview of legal and ethical considerations in cyber
forensics. Chain of custody and preservation of digital evidence. Legal admissibility and
standards in digital forensics. File Systems and Data Recovery. Techniques for data recovery and
reconstruction. Tools for analyzing file system artifacts. Network Forensics. Memory Forensics.
Mobile Device Forensics.
CYB 401: Systems Vulnerability Assessment and Testing (2 Units C: LH 15; PH 45)
55
Learning Outcomes
At the end of this course, students should be able to:
1. define systems vulnerability, assessment methods and the testing methods using
techniques to effectively identify and mitigate risks to the security of a company’s
infrastructure;
2. describe penetration testing methodologies, practice test planning and scheduling;
3. assess information gathering, password cracking penetration testing and security analysis;
4. examine the social engineering penetration testing and security analysis, internal and
external penetration testing and security analysis, router penetration testing and security
analysis, and effectively report and document results;
5. evaluate operating systems fingerprinting and remote network mapping, software and
operational vulnerabilities, how to overcome these vulnerabilities; and
6. execute attack surface analysis, fuzz testing, patch management, and security auditing.
Course Contents
Definition of systems vulnerability. Methods and the testing methods using different techniques.
Mitigation of risks and how to enhance the security of a company’s infrastructure. Penetration
testing methodologies, test planning and scheduling. Information gathering. Password cracking.
Penetration testing and security analysis. Social engineering, Internal and external penetration
testing. Router penetration testing, security analysis, reporting and documentation. Operating
systems fingerprinting. Remote network mapping. Software and operational vulnerabilities.
Attack surface analysis. Fuzz testing. Patch management. Security auditing.
Lab work: Practical exercise on systems vulnerability, assessment methods and the testing
methods using techniques to effectively identify and mitigate risks to the security of a company’s
infrastructure. Perform penetration testing using various methodologies, along with the test
planning and scheduling. Work on password cracking and social engineering penetration testing
and security analysis. Identify software and operational vulnerabilities in a given environment
and how to overcome these vulnerabilities. Execute attack surface analysis, fuzz testing, patch
management, and perform security auditing.
CYB 403: Cyber Threat Intelligence and Cyber Conflict (2 Units C: LH 30)
Learning Outcomes
At the end of this course, students should be able to:
1. employ the techniques for detecting, responding to and defeating organised cybercrimes
and cyberwar activities;
2. analyse successful and unsuccessful advanced persistent threats and malware campaigns,
divergent national and international policies for combating cyber terrorism, and terrorist
tactics worldwide;
3. describe cyber threat intelligence and its role with the knowledge of the expectation of
organisations and analysts, and the indicators of compromise;
4. discuss the cyber tactical threat intelligence, the kill chain, intrusion analysis, indicator
lifecycle, cyber operational threat intelligence and strategic threat intelligence;
5. assess and learn the need for information sharing and peers, models and methods for
managing cyber intelligence, and master campaigns and threat actors;
6. evaluate the role and skills of a cyber threat intelligence analyst and the threat modelling;
and
7. identify the evolution of counterterrorism and cyber conflict.
56
Course Contents
Techniques for detecting, responding to and defeating organized cybercrimes and cyberwar
activities. Analyzing successful and unsuccessful advanced persistent threats and malware
campaigns. Analyze divergent national and international policies for combating cyber terrorism
and terrorist tactics worldwide. Understanding Cyber threat intelligence - defining threats,
Understanding risk, Cyber threat intelligence and its rule, Expectations of organisations and
analysts, and indicators of compromise. Tactical threat intelligence. Role of a tactical threat
intelligence analyst, expected skills and tradecraft. The Kill Chain and Intrusion Analysis.
Indicator lifecycle. Introduction to operational threat intelligence - Role of an operational threat
intelligence analyst, Need for information sharing and peers. Models and methods for managing
intelligence, campaigns and threat actors. Introduction to strategic threat Intelligence - role of a
strategic threat intelligence analyst. Threat modelling, Organizational change and security
posturing. Event recording and incident sharing. Evolution of counterterrorism and cyber
conflict.
CYB 405: Ethical Hacking and Reverse Engineering (2 Units C: LH 15; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. describe the concept of ethical hacking, attacks, threats, hackers, measures and
countermeasures;
2. differentiate between attacks and threats and examine the ethical hacker strategies and
understand their methods;
3. review how perimeter defenses work, how intruders escalate privileges and methods of
security systems, intrusion detection, policy creation, and social engineering;
4. explores techniques and technologies for understanding the operation of malicious
software and attacks, and learn system hacking, malware threats, sniffing, social
engineering, physical security, and password vulnerabilities - cracking passwords;
5. plan reverse engineering of code and network exploits as a method for understanding and
development of countermeasures;
6. develop attack phases, secure network infrastructure hacking methodology, ethical
hacking plans, foot printing and reconnaissance, and scanning networks; and
7. discuss denial of service, session hijacking, hacking web servers, hacking web applications,
SQL injection, hacking wireless networks, hacking mobile platforms, and how to evade
IDs, firewalls, and honeypots
Course Contents
Introduction to ethical hacking, attacks, threats, hackers, measures and countermeasures.
Overview of ethical hacker strategies. Focus on how perimeter defences work, how intruders
escalate privileges and methods of security systems. Intrusion detection, policy creation, social
engineering. Techniques and technologies for understanding the operation of malicious software
and attacks. Threats and defence mechanisms. Attack phases. Secure network infrastructure.
DDoS attacks, buffer overflows and virus creation. Network Infrastructure Attacks, Hacking
Methodology, Developing ethical hacking plans. Foot printing and reconnaissance. Scanning
Networks. Enumeration and system hacking. Malware threats. Sniffing. Social engineering.
Physical security. Password vulnerabilities - cracking passwords. Denial of Service. Session
57
hijacking. Hacking web servers. Hacking web applications. sql injection, hacking wireless
networks. Hacking mobile platforms. Evading IDS, Firewalls, and Honeypots. Explores
techniques and technologies for understanding the operation of malicious software and attacks.
Techniques for detection, identification and prevention. Reverse engineering of code and
network exploits as a method for understanding and development of countermeasures.
Lab work: Practice the ethical hacker strategies and methods. Work on a sample perimeter
defense and identify how intruders escalate privileges and methods of security systems. Practical
exercises on the techniques and technologies of malicious software and attacks. Learn how to
perform system hacking, mobile platform hacking, crack password, remove introduced
vulnerabilities and evade IDs, firewalls, and honeypots. Apply reverse engineering of code and
network exploits as a method for understanding and development of countermeasures. Utilise
foot printing and reconnaissance, and scanning networks.
CYB 497: Final Year Project I (3 Units C: PH 135)
Learning Outcomes
At the end of this course, students should be able to:
1. identify a researchable project topic in cybersecurity, work on the introductory aspect,
under the guidance of the supervisor;
2. review relevant recent literature pertinent to identified problem statement and establish
the research gap;
3. acknowledge and reference sources of information used in the research report;
4. conceptualise and design a research methodology to address an identified problem;
5. determine tools for analysing data collected based on research objectives;
6. write a coherent proposal on the research project to be conducted; and
7. orally present the written project proposal.
Course Contents
An independent or group investigation of appropriate cybersecurity related problems carried out
under the supervision of a lecturer. The student must submit a written proposal to the supervisor
to review. The proposal should give a brief outline of the project with the statement of problem,
aim, objectives, scope, significance, research gap, proposed research methodology, estimated
schedule of completion, and resources needed. A formal written report is essential and an oral
presentation may also be required.
Topics from emerging trends such as applications in artificial intelligence, steganography,
quantum computing, big data, cloud security, ethical hacking, cyber hunting, internet security,
penetration testing, network intrusion and prevention, threat management, cybersecurity risk
mitigation in the cloud, biometrics, digital image processing, Blockchain, quantum computing,
edge computing, Internet of Things, 5G security, etc.
COS 409: Research Methodology and Technical Report Writing (3 Units C: LH 45)
Learning Outcomes
At the end of this course, students should be able to:
58
1. explain research, types, approaches and significance of research;
2. discuss statement of problem, research methods, methodology, research process, criteria
and strategy for good research;
3. discuss scientific investigation, problem formulation, and technique of the research
problem;
4. discuss the guidelines for constructing questionnaire/schedule, guidelines for successful
interviewing, research proposal and research plan; and
5. explain types of reports, technical report writing, procedures and guidelines
Course Contents
Foundations of Research. Types of Research. Research Approaches. Significance of Research.
Research Methods versus Methodology. Research Process. Criteria and Strategy for Good
Research. Problems Encountered by Researchers in Nigeria. Principles of Scientific Research.
Scientific investigation. Problem formulation. Definition and technique of the Research Problem.
Selection of Appropriate Method for Data Collection- Primary Data and Secondary Data.
Guidelines for Constructing Questionnaire/Schedule. Guidelines for Successful Interviewing.
Difference between Survey and Experiment. Eloping Research Proposal and Research Plan.
Formulation of working hypothesis and Testing. Literature review. Procedure for reviewing
related relevant studies and referencing cited works. Types of Reports. Technical Report
Writing. Layout and mechanics of writing a Research Report. Standard Techniques for Research
Documentation. Sampling Design. Different Types of Sample Designs. Steps in Sampling
Design. Criteria of Selecting a Sampling Procedure. Methods of analysis. Processing and
Analysis of Data Elements/Types of Analysis. Interpretation and Presentation of results. How to
prepare References and Bibliography.
LAUTECHCYB 411: Cyber Incident Response and Reporting (2 Units Compulsory: LH
30)
Senate approved relevance
Training of proficient and highly skilled Cyber Security graduates with requisite skills and
expertise in the domain of Cyber Security Science is very germane. The relevance of this is to
equip students with requisite knowledge, and skills to effect professional approach to cyber
security threats and incidents. This is in line with LAUTECH vision and mission of not just
producing graduates but graduates with relevant skill sets that can keep abreast of the Nigerian
Information technology challenges in order to gather, analyse, and present evidence of any cyber
security solutions in organisation in an ethical professional way.
Overview
Incident response is an organized approach to addressing and managing the aftermath of a
security breach or cyberattack, also known as an IT incident, computer incident or security
incident. The main purpose is to handle the situation in a way that limits damage and reduces
recovery time and costs. In a situation of incident of cyberattacks or threats this is the first
technical approach to prevent and mitigate the action as well as having a formal report of the
incidence.
59
Incident response is about making and having a prior plan before it is necessary. Rather than
being an IT centric process, it is an overall business function that helps ensure an organization
can make quick decisions with reliable information. Not only are technical staff from the IT and
security departments involved, so too are representatives from other core aspects of the business.
Objectives
The objectives of the course are to:
1. state the principles of incidence response in cyberattacks;
2. explain the essential elements of incident response plan;
3. explain the theory behind the incident response;
4. explain and Create an incident response plan with practical approaches;
5. explain the types and various features of Incidence Response Techniques;
6. describe operational techniques of Incident response and how to implement a
communication plan;
7. describe the phases of incident Response Plans;
8. conduct analysis and investigation of real life cases of incident response;
9. describe the functions of Incident Response team;
10. explain the various types of Incidence Response and Reporting;
11. describe operational maintenance and control techniques in cyber attacks; and
12. describe cyber incident reporting templates and their applications.
Learning outcomes
On completion of the course, students should be able to:
1. state three major principles of incidence response in cyberattacks;
2. explain the essential seven elements of incident response plan;
3. explain three different theories behind the incident response;
4. create incident response plan with practical approaches with real life situations;
5. explain five types and various features of Incidence Response Techniques;
6. describe operational techniques of Incident response and how to implement a
communication plan;
7. describe the seven phases of incident Response Plans;
8. conduct analysis and investigation of three real life cases of incident response;
9. describe the five functions of Incident Response team;
10. explain four types of Incidence Response and Reporting;
11. describe types of operational maintenance and control techniques in cyberattacks; and
12. Describe four types of cyber incident reporting templates and their applications.
Course Contents
Definition of Incident Response. Essential elements of Incident Response. Incident response
planning: preparation, organization. Building and running a CSIRT. Operational issues,
hiring and training of personnel. Incident response: prevention, detection notification,
reaction, recovery, maintenance. Types of incidence Response and Reporting. Different
Templates of Reporting. Advanced computer network defence. Vulnerability and threat
management. Threat intelligence and situational awareness. Tools and processes.
Frameworks, (ATT&CK, Cyber Kill Chain, etc.), Threat hunting. Information sharing.
Cybercrimes and Investigations Planning and running incident response team exercises.
Incident management Incident management key components. Different incident handling
workflow ( ENISA, NIST, SANS, etc) and current improvements, processes. Procedures,
Standard operating procedure. Incident handling process step by step. Incident categories,
60
triage. Hands on exercise related to triage. Hands on scenario based training. Incident
Response Practice
LAUTECHCYB 413: Information Management and Control
PH 45)
(3 Units C: LH 30;
Senate approved Relevance
We live in the age of information and Information systems (IS) play a vital role in today's
organizations, hence, information is considered a valuable asset. Rapidly changing information
technology (IT) is increasing the complexity of information management. Intensity of recent
concerns about the confidentiality, privacy, validity, and accuracy of the data stored have been
heightened. As a result there is a growing need for both IS users and IS professionals to be aware of
issues concerning information management and control and to develop appropriate practical skills in
this area. However, this course is developed to produce Secured Information managers that
maintains the integrity and validity of data. Which consecutively matches up with the mission and
objective of LAUTECH, which is Excellence, Integrity and Service.
Overview of the course
Information Management is the collection, storage, management and maintenance of data and other
types of information. It involves the gathering, dissemination, archiving and destruction of
information in all its forms. Cyber security has to be embedded within information management.
Hence, information management focuses on the level of control an organization has over the
information it produces which requires building dedicated information management systems
designed to help organizations use its resources to support business and activity processes. As a
basis, this Course Information management is primarily concerned with the capture, digitisation,
representation, organisation, transformation, and presentation of information algorithms for efficient
and effective access and updating of stored information, data modelling and abstraction and and
physical file storage techniques.
Objectives
The objectives of the Course are to:
1. Identify information requirements in Specific Organisations;
2. Explain Key parts of Information Management;
3. Identify information sources;
4. Describe collection and classification methods;
5. Analyze Information dissemination methods;
6. Analyse the Principles of effective Information Management;
7. List the Benefits of Information Management;
8. Identify and Enumerate the current Information management Trends and associated new
Technology in the 24th Century;
9. Analyse compliances of Information to standard Regulatory; and
10. List and Suggest possible Information management challenges
61
1.
2.
3.
4.
Learning Outcomes
At the end of this Course, the student must be able to:
Identify 10 information requirements in Specific Organisations;
Explain the 5 Key parts of Information Management;
Identify 7 information sources;
Describe 6 collection and classification methods;
5. Analyze 5 Information dissemination methods;
6. Analyse the 10 Principles of effective Information Management;
7. List 10 Benefits of Information Management;
8. Identify and Enumerate 10 current Information management Trends and associated new
Technology in the 24th Century;
9. Analyse 7 compliances of Information to standard Regulatory; and
10. List and Suggest 10 most recent possible Information management challenges.
Course Contents
Introduction to Information Management and Control; Information versus Data, Information
Elements, Information Resources, Information Life Cycle; Information management concepts,
Difference between Information Management and Data Management, Information Management
Life Cycle; Information management and its role in the Organization; Current Trends in
Information management; Database Systems, Data modeling, Relational Databases, Data
mining, access Control. Factors Influencing Information Management and Control; Types of
Information Systems Controls; Risk Assessment; Information governance and Security Policy;
The Role of Auditing in the Control Process, Security, Control and Reporting; New IT
Initiatives in Information Management
LAUTECHCYB 415:
Units Elective: LH 30
Introduction to Malware Analysis and Cybersecurity Threats
2
Senate approved relevance
Introduction to Malware Analysis and Cybersecurity Threats is paramount in the digital age,
providing a crucial understanding of evolving cyber threats. Malware analysis equips
professionals to dissect and comprehend malicious software, enabling effective countermeasures.
In a landscape rife with sophisticated cyber threats, this knowledge becomes indispensable for
identifying, mitigating, and preventing attacks. This is in line with LAUTECH vision and
mission of not just producing graduates, but graduates that is versatile with relevant skill sets that
can keep abreast of the Nigerian Information Technology challenges in order to fortifying
systems against a myriad of threats, from ransomware to advanced persistent threats. Through
this introduction, professionals gain insights into the techniques used by attackers, fostering a
proactive approach to cybersecurity. As cyber threats continue to evolve, the ability to analyze
and combat malware becomes a cornerstone for safeguarding sensitive data, ensuring the
resilience of digital infrastructures, and staying ahead of the everchanging threat landscape.
Overview:
62
This course introduces students to the fundamentals of malware, cyber threats, and attacker
techniques prevalent in today's digital landscape. It covers the basics of malware analysis,
common attack vectors, and essential cybersecurity practices necessary to mitigate threats.
Objectives:
The objectives of the course are to:
1.
Define Malware Types
2.
Understand Malware Lifecycle:
3.
Explore Cybersecurity Threat Landscape:
4.
Learn Malware Analysis Techniques:
5.
Identify Common Attack Vectors:
6.
Study Behavioral Analysis:
7.
Implement Incident Response Procedures:
8.
Explore Cyber Threat Intelligence:
9.
Analyze Cryptographic Techniques:
10.
Evaluate AntiMalware Solutions:
Learning Outcomes:
On Completion of the course, students should be able to
1.
Demonstrate Malware Identification:
2.
Apply Static Analysis Techniques:
3.
Execute Dynamic Malware Analysis:
4.
Recognize Indicators of Compromise (IoCs):
5.
Develop Incident Handling Skills:
6.
Understand Threat Intelligence Integration:
7.
Evaluate Security Posture:
8.
Implement Defensive Measures:
9.
Utilize Cryptanalysis Techniques:
10.
Enhance Cybersecurity Awareness:
Course contents:
Introduction to Cybersecurity and Malware, Introduction to malware: types,
characteristics, and evolution, Ethics in cybersecurity and responsible use of
cybersecurity knowledge, differentiating between viruses, worms, trojans, ransomware,
and spyware, Understanding how malware infects systems and propagates, Behavioral
analysis of malware: payloads, triggers, and persistence mechanisms. Malware Analysis
Techniques, Overview of low level programming languages: machine code, assembly
language, and high level languages, Basic architecture: registers, memory, instructions,
and addressing modes, Assembly language syntax and basic programming constructs,
Static analysis: file inspection, hash computation, and signature based detection,
Dynamic analysis: sandboxing, virtual environments, and behavior monitoring, Tools
used in malware analysis: IDA Pro, Ghidra, Wireshark, and Virus Total. Common Attack
Vectors and Exploitation Techniques, Social engineering attacks: phishing, spear
phishing, and pretexting, Exploiting software vulnerabilities: zero-day exploits and
exploit kits, Web based attacks: SQL injection, cross site scripting (XSS), and man in the
middle (MitM) attacks. Malware Delivery and Execution, understanding delivery
methods: email attachments, drive by downloads, and malicious websites, Techniques
used for malware execution and evasion: obfuscation, encryption, and polymorphism,
Mitigation strategies against malware delivery and execution. Defense Mechanisms and
63
Cybersecurity Best Practices, Antivirus software and intrusion detection systems (IDS),
Network segmentation, firewalls, and access controls, Patch management and keeping
systems updated. Practical Labs and Hands-on Exercises| Malware analysis simulations
using real-world samples (in controlled environments), Security tool demonstrations and
practical exercises, Red team vs. blue team scenarios for practical understanding.
LAUTECHCYB 417: Computer organization and Architecture
30)
(2 Units Electives: LH
Senate Approved relevance
Computer organization and architecture are crucial in designing efficient and reliable computing
systems. The organization defines how hardware components interact to execute instructions,
optimizing performance. Architecture focuses on the high-level structure, ensuring compatibility
and scalability of software. Understanding these principles is vital for developing advanced
processors, memory systems, and input/output devices. Efficient organization enhances speed
and resource utilization, while architecture influences system design and software development.
Both fields are integral for creating powerful and sustainable computing systems, impacting
everything from personal devices to supercomputers, advancing technology's capabilities.
Overview
Computer organization involves designing the physical components of a computer system and
their interconnections to execute instructions efficiently. Architecture focuses on the conceptual
structure, emphasizing instruction sets and how hardware components interact with software. It
encompasses processor design, memory hierarchy, and input/output systems. Computer
organization and architecture jointly determine system performance, influencing factors like
speed, power consumption, and scalability. Understanding these principles is crucial for
developing optimized computing systems, from microcontrollers to supercomputers.
Objectives
1. Enhance the speed and efficiency of computer systems by designing effective hardware
components and optimizing their interactions.
2. Efficiently use computing resources, such as processor, memory, and input/output devices, to
maximize overall system performance.
3. Design systems that can easily accommodate growth in terms of processing power, memory
capacity, and overall capabilities.
4. Ensure compatibility between hardware and software components by defining standard
instruction sets and system architectures.
5. Design robust systems that minimize errors, faults, and failures, providing a stable and
dependable computing environment.
6. Balance performance requirements with cost considerations, aiming for efficient solutions that
meet specified computing needs within budget constraints.
7. Address security concerns by implementing hardware features and architectural measures to
safeguard data, prevent unauthorized access, and protect against potential threats.
Learning Outcome
On Completion of the course, students should be able to
1. Understanding Basic Concepts:
2. Processor Design and Microarchitecture:
3. Memory Systems:
4. Input/Output Systems:
64
5. Computer Arithmetic and Logic Design:
6. Parallel and Pipelined Processing:
7. Computer System Performance Evaluation:
Course Contents
Fundamental building blocks, logic expressive immunization, sum of product forms. Register
transfer notation, Physical considerations. Data representation, and number bases, Fixed and
Floating point systems, representation memory systems organization and architecture. Memory
system, general; characteristics of memory operation. (Technology-magnetic recording semiconductor memory, coupled devices, magnetic bubble). Memory addressing, memory hierarchy,
virtual memory control systems. Hardware control, micro programmed control, Asynchronous
control, i/c control. Introduction to the methodology of faulty tolerant computing.
LAUTECHCYB 419: Current Trends in Cyber security
LH 30)
(2 Units Electives:
Senate Approved Relevance
Current Trends in Cybersecurity will equip students to gained comprehensive insights into the
latest trends, technologies, and challenges in cybersecurity. They will be equipped with the
knowledge and analytical skills necessary to critically assess, adapt to, and address emerging
cybersecurity threats and developments in an ever-evolving digital landscape. Students will be
able to evaluate cybersecurity challenges posed by remote work environments, addressing
strategies for securing distributed networks and remote access.
Overview:
The course "Current Trends in Cybersecurity" offers an in-depth exploration of the evolving
landscape of cybersecurity, focusing on the latest advancements, emerging technologies, and
contemporary challenges in the field. This course is designed to keep students abreast of the
dynamic nature of cybersecurity, providing insights into cutting-edge technologies, threat
landscapes, industry practices, and regulatory developments. By analyzing current trends,
students will gain a comprehensive understanding of the rapidly changing cybersecurity
environment, enabling them to anticipate, adapt, and implement proactive measures to address
emerging threats effectively.
Objectives:
1. Explore Emerging Cyber Threats: Analyze and evaluate the latest cyber threats, including
ransomware, zero-day exploits, AI-powered attacks, IoT vulnerabilities, and other emerging
threats shaping the cybersecurity landscape.
2. Investigate Advanced Persistent Threats (APTs): Study the characteristics and strategies of
advanced persistent threats, understanding their persistence, sophistication, and impact on
organizations.
65
3. Examine Cybersecurity Automation and AI: Explore the role of artificial intelligence (AI) and
machine learning (ML) in cybersecurity, including automated threat detection, predictive
analysis, and response mechanisms.
4. Assess Cloud Security Challenges: Discuss the challenges and best practices in securing
cloud-based infrastructures, examining strategies for mitigating risks associated with cloud
adoption.
5. Study IoT Security: Investigate the security implications of the Internet of Things (IoT)
devices and ecosystems, addressing vulnerabilities and implementing protective measures in IoT
environments.
6. Analyze Blockchain and Cryptocurrency Security: Explore the security aspects of blockchain
technology and cryptocurrency ecosystems, focusing on potential vulnerabilities and strategies
for secure implementation.
7. Discuss Quantum Computing and Cybersecurity: Examine the implications of quantum
computing on cybersecurity, including the potential threats and cryptographic solutions in a postquantum era.
8. Review Regulatory and Compliance Trends: Discuss the evolving regulatory landscape and
compliance requirements in cybersecurity, including privacy laws, industry standards, and
international regulations.
9. Explore Cybersecurity for Remote Work: Evaluate cybersecurity challenges posed by remote
work environments, addressing strategies for securing distributed networks and remote access.
10. Ethical and Societal Implications: Consider the ethical and societal implications of emerging
cybersecurity trends, discussing privacy concerns, ethical considerations, and the impact on
individuals and society.
Learning Outcomes
At the end of this Course, the student must be able to
1. Develop an understanding of the evolving landscape of ransomware threats, including their
mechanisms, impact, and effective mitigation strategies.
2. Gain proficiency in implementing Zero Trust security models, emphasizing continuous
verification and strict access controls to enhance overall network security.
3. Acquire the skills to apply artificial intelligence and machine learning algorithms for advanced
threat detection, enabling quick and adaptive responses to emerging cyber threats.
4. Learn effective endpoint security management strategies, addressing vulnerabilities associated
with the proliferation of remote work and ensuring secure access.
5. Understand and apply best practices in cloud security to safeguard data, prevent
misconfigurations, and protect against unauthorized access in cloud environments.
6. Develop proficiency in securing Internet of Things (IoT) devices, addressing the unique
challenges posed by the expanding attack surfaces introduced by connected devices.
7. Implement secure remote access solutions, ensuring that remote workforces can connect
securely to organizational networks without compromising on cybersecurity.
66
8. Learn to effectively utilize threat intelligence, incorporating realtime information into
cybersecurity practices for proactive threat identification and response.
9. Understand the implications of privacy regulations and data protection standards, and learn
how to align cybersecurity practices with legal and regulatory requirements.
10. Develop the ability to implement adaptive cybersecurity strategies that can evolve with the
dynamic threat landscape, ensuring resilience against sophisticated adversaries and emerging
attack vectors.
Course Contents
Introduction to Current Cybersecurity Landscape: Overview of contemporary cyber threats,
Understanding the dynamic nature of the cybersecurity landscape. Ransomware Mitigation
Strategies: Mechanisms and impact of ransomware attacks, Developing effective mitigation
strategies and incident response plans. Zero Trust Security Models: Principles of Zero Trust
security. Implementation and benefits of continuous verification and strict access controls. AI
and ML in Threat Detection: Application of artificial intelligence and machine learning in
cybersecurity, Hands on exercises in advanced threat detection. Endpoint Security in Remote
Work Environments: Challenges and vulnerabilities associated with remote work, Strategies for
effective endpoint security and secure remote access solutions. Cloud Security Best Practices:
Key considerations for securing data in cloud environments, preventing misconfigurations and
protecting against unauthorized access. IoT Security Strategies: Challenges and threats
introduced by IoT devices, Developing comprehensive security strategies for IoT environments.
Threat Intelligence Integration: Role of threat intelligence in cybersecurity, Utilizing real-time
information for proactive threat identification and response. Compliance and Data Protection:
Overview of privacy regulations and data protection standards, Aligning cybersecurity practices
with legal and regulatory requirements. Adaptive Cybersecurity Strategies: Implementing
adaptive cybersecurity strategies, Resilience against sophisticated adversaries and emerging
attack vectors, Hands-on Practical Projects: Participants will engage in hands-on projects,
including ransomware simulation exercises, implementation of Zero Trust security measures,
application of AI in threat detection, and securing IoT devices. These projects will reinforce
theoretical concepts and provide practical experience in addressing current cybersecurity
challenges.
CYB 402: Steganography: Access Methods and Data Hiding (2 Units C: LH 15; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. discuss secret writing and different methods and tools used for each;
2. identify why steganography is important, and how it is different from cryptography and
encryption;
3. describe the uses and applications of steganography, and how to use steganography
methods and work with any of the steganography types and techniques;
4. practice the different steganography techniques for encrypting the data and use data
hiding methods, techniques and access methods;
5. develop the information-hiding systems, steganography algorithm and security of a
steganographic algorithm;
67
6. analyse how to detect steganography, finding images, and verifying hidden content; and
7. organise practical experimentation of data hiding tools, investigation techniques and the
latest countermeasures.
Course Contents
History of secret writing. An overview of steganography. Introduction to steganography Definition of steganography. Why is steganography important? Steganography vs. Encryption.
Uses of steganography. Problem of steganography. Steganography applications and methods.
Steganography types and methods - text steganography, images steganography, video and audio
steganography. Steganography techniques. Survey of different steganography techniques for
encrypting the data. Information hiding: steganography and steganalysis. Data hiding methods,
techniques and access methods. Requirements for data hiding. Steganography and Business - the
basics of embedding, different aspects in information hiding systems. Steganographic algorithm.
Security of a steganographic algorithm. Steganography detection, finding images, and verifying
hidden content. Research and practical experimentation of data hiding tools. Research on
investigation techniques and the latest countermeasures.
Lab work: Practice secret writing using different methods and tools. Learn how to use
steganography methods and techniques for encrypting the data. Master data hiding methods,
techniques and access methods using case study exercises. Write samples steganography
algorithm and secure the algorithm. Detect elements of steganography, finding images, and
verifying hidden content in a given text, image, audio and video samples.
CYB 404: Cloud Computing Security (2 Units C: LH 30)
Learning Outcomes
At the end of this course, students should be able to:
1. review the concept of cloud, cloud computing, and benefits of the cloud and knowledge
of cloud-enabling technologies, virtualization and multi-tenanting;
2. describe cloud services and service-oriented architectures, and examine the cloud
reference model and cloud service models such as IaaS, PaaS and SaaS;
3. state the cloud deployment models of Public, Private, Hybrid and Community clouds and
express how to build a cloud, the open standards and open source cloud management
tools, architectural best practices and how to design for the cloud;
4. discuss the security in the cloud and how to efficiently secure your cloud, security for cloud
computing;
5. apply the economics of the cloud, costs and payment models, have knowledge of when to
use the cloud, cloud strategy, standards and the future;
6. analyse data centres, servers, data storage, data centre networking and virtualisation,
cloud cube model, cloud threats, threat mitigation, cloud and security risks, real world
issues with cloud computing, and cloud security alliance; and
7. distinguish the National Institute of Standards and Technology, Information Assurance
Framework, Cloud Audit, Cloud Management Audit/Assurance Programme, Cloud Business
Continuity Planning for secured and effective management of the cloud.
Course Contents
Introduction to cloud computing, cloud computing vendors, cloud computing threats, cloud
reference model. Cloud-enabling technologies. Services, Service-Oriented Architectures. Cloud
service models. Cloud deployment models. Introduction to data centres: servers, data storage,
68
networking and virtualisation. Data centre networking. Introduction to server virtualisation
software: VMware VSphere. Virtual machine management: configuration, placement and
resource allocation. Power efficiency in virtual data centres. Fault tolerance in virtual data
centres. The cloud cube model and security for cloud computing. Security in the cloud. Cloud
threats, threat mitigation and security risks. Real world issues with cloud computing. Cloud
security alliance. National Institute of Standards and Technology, Information Assurance
Framework. Cloud audit. Cloud management audit/assurance programme, Cloud business
continuity planning. Building a cloud. Architectural best practices: Designing for the cloud.
Economics of the cloud. Cloud strategy. Cloud standards and the future. Security of the cloud.
CYB 406: Deep and Dark Web Security (2 Units C: LH 15; PH 45)
Learning Outcomes
At the end of this course, students should be able to:
1. review Deep and Dark web terminologies;
2. describe how to access the Deep web and the Dark web with complete ease and total
security;
3. investigate advanced and famous websites located on the Hidden Web (Deep and Dark
Web);
4. plan, trade, buy, sell as well as mining cryptocurrencies;
5. discuss the dangers as well as precautions to be taken care of while surfing the Web, and
how to use Darknet E-mail services;
6. appraise how to anonymously access the Darknet and TOR hidden services (onion
services), and how to enter the dark web while staying safe and avoid the bad side of the
dark web; and
7. report on the best sites to visit while on the Dark web and Deep web.
Course Contents
Dark web, deep web, clear net. Tor Onion, Silk Road. How to get on the dark web. Users of dark
and deep web. Invisible Web Search Engines. Privacy and anonymity as core values of the
darknet. Decentralization on the dark web. Accessing the Deep web and the Dark web through
the TOR browser. Web security. Cryptocurrencies. Overview on Dark Web and Deep Web. The
Hidden side/area of the web. Deep/Dark Web Anonymity, TOR, Hidden services, TAILS, Web
Security, Cryptocurrencies. Crypto Trading and Crypto mining. Cryptocurrencies, Anonymity &
Security. How to install a VPN, and adequate browsers like Chrome, Opera, or Firefox with
tracking technologies. How Does the Dark Web Work? Reasons for Accessing the Dark Web.
Security issues of Dark and Deep web. How to use the Tor over VPN method - Session logs
storage. Encryption of traffic. Protection against malicious Tor exit nodes. How to use Tor over
VPN - bypass blocked Tor nodes, ISP visibility in accessing onion content, susceptible to end-toend timing attacks. Tor alternatives such as I2P, Matrix.org, Orbot, Globus Secure Browser,
Comodo Ice Dragon and Free Net. Cons and Pros of Tor. Use of virtual machine software.
Navigating the Dark Web. The Hidden Wiki as Wikipedia’s evil twin. Search engines such as
DuckDuckGo, Torch, the triple-W Virtual Library, Uncensored Hidden Wiki, and ParaZite.
Commercial services. Email clients. Darknet version of social media and instant messaging 69
Zuckerberg’s Facebook, Black Book, Tor book, Campfire, MadIRC Chat Server. Safety on the
dark web. Inside the dark and deep web. The Best Sites and Services on the Dark Web. Deep
web radio. Benefits of Deep and Dark web. Cyber Threats and Dangers on the Deep/Dark Web.
How to fight hackers underground. Dark web and Deep web monitoring.
Lab work: Install your VPN. Practice how to access the Deep web and the Dark web with
enhanced security. Investigate advanced and famous websites located on the Deep and Dark
Web. Practically learn how to anonymously access the darknet and TOR hidden services (onion
services), and how to enter the dark web while staying safe. Try to visit the best sites and buy an
educational resource.
CYB 498: Final Year Project II (3 Units C:PH 135)
Learning Outcomes
Upon completion of the project, students should be able to:
1. conduct research methodology, analyse collected data, document the project report using
the recommended format, and referencing style;
2. develop the prototype or simulated model of research study along with the programming
aspect, if required;
3. produce the report; and
4. prepare the PowerPoint presentation and defend the project in the final oral examination
in the presence of the external examiner.
Course Contents
This is a continuation of CYB 497. This includes the research methodology, analysis of data
using statistical tools, performance evaluation, standard documentation of the project,
referencing style, programming of the prototype/simulation model, plagiarism and grammarly
check, and PowerPoint presentation skill. The formal written report made up of chapters four and
five approved by the supervisor will be submitted to the Department for final grading. An oral
presentation is required.
LAUTECHCYB 408:
PH 45)
Cyber Security for Mobile Devices
2 Units Compulsory: LH 30
Senate approved relevance
Development of proficient and highly skilled Cyber Security graduates with required skills and
mastery in the area of Cyber Security Specializations is very important. The essence of this is to
equip students with requisite knowledge, and skills to effect professional approach to cyber
security threats and incidents with relevant mitigations. This is in line with LAUTECH vision
and mission of not just producing graduates, but graduates that is versatile with relevant skill sets
that can keep abreast of the Nigerian Information Technology challenges in order to gather,
analyse, and present evidence of any cyber security solutions with contextual approach in order
to deal with existing issues in an ethical and professional way.
70
Overview
Mobile Security is the strategy, infrastructure, and software used to protect and device that
travels with users, including smartphones, tablets, and laptops. Cyber security for mobile devices
includes protecting data on the local device and the deviceconnected endpoints and networking
equipment.
All smartphones, as computers, are preferred targets of attacks. This is because these devices
have family photos, pictures of pets, passwords, and more. For attackers, these items are a digital
passport to access everything they would need to know about a person. These attacks exploit
weaknesses inherent in smartphones that come from the communication mode—like Short
Message Service. Multimedia Messaging Service (MMS), WiFi, Bluetooth and GSM, the de
facto global
standard
for mobile
communications.
There
are
also exploits that
target software vulnerabilities in the browser or operating system, taking advantages of the weak
knowledge of an average user. So there is a need for security countermeasures to mitigate against
any security threats and faults in different layers of software to the dissemination of information
to end users.
Objectives
The objectives of the course are to:
1. explain mobile application security vulnerabilities and attacks;
2. describe real-world threats and attacks to mobile applications;
3. explain the types of recommended testing for mobile app security;
4. develop security baseline within the organizations;
5. explain the essential elements of mobile security devices;
6. state benefits of mobile devices security; and
7. explain the mobile security architecture of mobile VoIP communications.
Learning outcomes
On completion of the course, students should be able to:
1. explain four major mobile application security vulnerabilities;
2. describe five real-world threats to mobile applications;
3. explain five types of recommended testing for mobile app security;
4. develop two foundational security baseline within the organizations;
5. describe six types of Mobile Device Security;
6. state seven benefits of mobile devices security;
7. explain mobile security architecture of mobile VoIP communications;
8. describe six features of a secure mobile environments; and
9. Draw and explain security models of iOS and Windows Phone.
Course Contents
Introduction to Mobile Security. Building Blocks – Basic security and cryptographic
techniques. Security of GSM Networks. Security of UMTS Networks. Mobile Application
Security. WiFi and Bluetooth Security. SIM/UICC Security. Mobile Malware and App
Security. Android Security Model. IOS Security Model. Security Model of the Windows
Phone. SMS/MMS, Mobile Geolocation and Mobile Web Security. Security of Mobile VoIP
Communications. Emerging Trends in Mobile Security Threats to Mobile Applications.
71
Android Security Architecture. Android Security Measures. iOS Security Architecture. iOS
Security Measures. Mobile Device Management.
LAUTECHCYB 410: Security Strategies for Web Application and Social Networks
Units Compulsory: LH 30)
2
Senate approved relevance
It is important to build a highly skilled Cyber Security graduates with required skills and mastery
in the area of Cyber Security Specializations. Relevance of this course is to trained students on
the idea of building websites to function as expected, even when they are under attack. This is in
line with LAUTECH vision and mission of not just producing graduates, but graduates that is
versatile with relevant skill sets that can keep abreast of the Nigerian Information Technology
challenges in order to find security vulnerabilities in Web applications and their configuration,
how to secure systems against all the risks, threats and vulnerabilities associated with
webenabled applications accessible via the internet, to test that other features are implemented in
a secure way and to ensure that the functions exposed in the Web application are secure.
Overview
Security Strategies in Web Applications and Social Network provides a unique, indepth look at
how to secure mobile users as customer facing information migration from mainframe computers
and application servers to Web enabled applications. It includes comprehensive explanation of
the evolutionary changes that have occurred in computing, communications and social
networking.
Objectives
The objectives of the course are to:
1. examine web based risk;
2. describe secure systems against risks;
3. protecting data, customers, and organizations from data theft, interruptions in business
continuity, or other harmful results of cybercrime;
4. examine the adoption of a cyber security framework;
5. explain the impact of internet and web applications on the business world;
6. identify security strategy for web applications;
7. explain threat, vulnerabilities and attacks; and
8. examine security strategies for social networks;
Learning outcomes
On completion of the course, students should be able to:
1. Analyze the impact of internet and web applications on the business world;
2. Explain web application security;
3. Discuss the importance of Web Security Testing;
72
4. Explain the different types of security testing;
5. Discuss how application security testing reduces organization’s risk;
6. Review web application security test;
7. Explain web based risks, website attacks, weakness and security best practices;
8. Discuss the role and importance of audit to web application security;
9. Build a web application and security development life cycle plan; and
10. Recognize risks and threat associated with social networking and mobile communications;
Course Contents
Analysis of the impact of the Internet and Web applications on the business world. Analysis of
the evolution of social media and social networking on the business world. Web application
security and testing. Compare and contrast webbased risks. Compare and contrast common
website attacks and its weakness, Security best practices. Explain the value and importance of
vulnerability and security assessments for Web applications. Attributes and qualities of secure
coding practices. The role and importance of audit and compliance to web application security.
The role and importance of quality assurance testing for web applications. Evaluation of next
generation challenges in securing web applications and data. Comprehensive life cycle approach
to web application security. IT and Web Application Security Assessment. Security strategies for
social network. Threat, vulnerabilities and attack on social networks. Information security
protocols and best practices. Networks and the Internet.
LAUTECHCYB 412: Secure Software Development
30)
(2 Unit C: LH
Senate approved Relevance
The need for formidable and well equipped cyber Security Professional in the advent 24th Century
cannot be emphasized. Ladoke Akintola University of Technology, Ogbomosho, as the best State
University in Nigeria has turned graduates that virtually fits into most industries and governmental
parastatals. However, this course is developed to produce Cyber Security Professionals that meets
the requirement statuesque in the Software Development organizations and Enterprises with the
mission and objective of LAUTECH, which is Excellence, Integrity and Service.
Overview of the course
This course introduces students to basic concepts and various principles in developing and coding
Secured Software. Examines secure design and secure coding principles, practices, and methods
including least privilege, threat modeling, and static analysis. The Course helps student to
collaborate on the development of software using standard development tools and components to
create robust implementations. In addition, this course brings together those fundamental concepts
and skills related to the software development process, Critically analyse the relationship between
human trust, and the technological tokens that represent trust, in cyber systems, It also ensure that
students are able design a security architecture that satisfies the security needs of a given scenario,
potentially spanning multiple platforms, while enabling them to apply cryptographic techniques and
configure systems to achieve desired security objectives
Objectives
73
The objectives of the Course are:
1. Identify distinguishing factors or Concepts between Secured and Unsecured Coding;
2. Enumerate challenges and attacks on Unsecured Software codes in the Cyber space;
3. List and Suggest counter measures in mitigating the challenges of Unsecured Coding;
4. Analyse recent cyber security incidents, threats and vulnerabilities of Software codes;
5. Identify the skills of communicating security concepts and needs to a wide range of audiences;
6. Identify at least ten different Threat models and analyze their applicability in securing a
software;
7. Examine tools and Methods involved in building Secured Software in the Cyber Space;
8. Describe legal and regulatory environment surrounding the development and use of information
systems;
9. Critically analyse the relationship between human trust, and the technological tokens that
represent trust, in cyber systems;
10. Examine a security architecture that satisfies the security needs of a given scenario, potentially
spanning multiple platforms; and
11. Identify ethics and responsibilities of cyber security professionals;
Learning Outcomes
At the end of the Course, Students should be able to:
1.
Identify 6 basic distinguishing factors or Concepts between Secured and Unsecured
Coding;
2.
Enumerate 7 possible challenges and attacks on Unsecured Software codes in the Cyber
space;
3.
List and Suggest possible counter measures in mitigating the challenges of Unsecured
Coding;
4.
Analyse 8 recent cyber security incidents, threats and vulnerabilities of Software codes;
5.
Identify and Analyse 5 skills of communicating security concepts and needs to a wide
range of audiences Identify at least ten different Threat models and analyze their applicability in
securing a software;
6.
Examine 10 the basic tools and Methods involved in building Secured Software in the
Cyber Space;
7.
Describe 7 legal and regulatory environment surrounding the development and use of
information systems; and
8.
Identify a minimum of eight ethics and responsibilities of cyber security professionals.
Course Contents
Secure design and secure coding principles, practices, and methods; choosing good patterns of
implementation for the longterm well being of the system; Recognising security needs on, across
and between platforms; Least privilege, threat modeling, and static analysis; Common
vulnerabilities such as buffer overruns, integer overflows, injection attacks and crosssite
74
scripting; Secure coding Concepts; Software Locks and other access controls; Secure Software
Development Life Cycle Models; Practicing Secure design and secure coding; Developing
Secure Coding policies of different types and strategy for an organization; Skills of
communicating security concepts and needs to a wide range of audiences; Applying common
secure coding frameworks and best practices; Evaluating the effectiveness Secure coding frame
works; Inform students about legal and regulatory environment surrounding the development and
use of secured software codes in the context of cyber space; Ethics and responsibilities of cyber
security professionals; Uncovering recent Incidents and Threats insecure coding, Effects of weak
error handling; Secure coding Technologies, Performing Software Vulnerability assessment and
testing to establish a confidence level.
LAUTECHCYB 414 :
Compulsory: LH 30
Cyber Physical System: IoT Security Fundamentals
2 Units
Senate approved relevance
Cyber Physical Systems (CPS) and IoT Security Fundamentals are inherently intertwined,
representing the vital nexus where physical processes meet digital intelligence. The integration
of IoT within CPS expands the attack surface, demanding robust security measures to thwart
potential vulnerabilities. Realtime monitoring and control capabilities in CPS underscore the
need for adaptive security protocols to address emerging threats promptly. Data integrity and
privacy concerns are amplified as information flows seamlessly between physical and cyber
components, emphasizing the critical importance of safeguarding sensitive data. In this
interconnected ecosystem, collaboration and standardized security practices become imperative
to prevent cascading vulnerabilities. This is in line with LAUTECH vision and mission of not
just producing graduates, but graduates that is versatile with relevant skill sets that can keep
abreast of the Nigerian Information Technology challenges in order to fortifying the synergistic
relationship between physical and digital realms, ensuring resilient and trustworthy systems in
the everevolving landscape of IoT and CyberPhysical Systems.
Overview:
This course provides undergraduates with a comprehensive understanding of Internet of Things
(IoT) devices and their integration into modern cybersecurity landscapes. It focuses on the
security challenges inherent in IoT systems, exploring protocols, vulnerabilities, attacks, and
countermeasures to protect IoT environments. Students will gain practical skills through handson
exercises, case studies, and discussions, preparing them to address realworld IoT security
concerns.
Objectives:
The objectives of the course are to
1.
Comprehend the fundamentals of IoT, including its architecture, components, and
communication protocols.
2.
Identify and analyze security risks and threats associated with IoT devices and networks.
3.
Understand various IoT attack vectors and exploitation techniques used by adversaries.
4.
Evaluate security measures and best practices to secure IoT devices and networks.
5.
Develop practical skills in implementing security solutions and countermeasures for IoT
systems.
75
Learning outcomes
On completion of the course, students should be able to
1.
Understand the Integration of Physical and Cyber Components:
2.
Identify and Mitigate Expanded Attack Surfaces:
3.
Implement Real-time Monitoring and Control Mechanisms:
4.
Ensure Data Integrity and Privacy Protection:
5.
Adopt Adaptive Security Protocols:
6.
Recognize Interconnected Ecosystem Security:
7.
Implement Comprehensive Security Measures:
8.
Apply Standardized Security Practices:
9.
Evaluate Risks and Vulnerabilities:
10.
Promote Collaboration for Cyber Physical Security:
Course Contents:
Introduction to Cyber Physical Systems (CPS), Overview of CPS: Definitions,
characteristics, and applications, Interconnection between CPS and IoT systems, Security
implications of integrating CPS and IoT technologies. Cybersecurity Foundations for
CPS and IoT, Fundamentals of cybersecurity, Confidentiality, integrity, and availability
(CIA Triad), Security models and frameworks applicable to CPS and IoT, Risk
assessment and threat modeling in interconnected systems. Introduction to IoT Security,
Understanding IoT: Concepts, architecture, and applications, IoT devices and their
functionalities, Overview of IoT communication protocols (MQTT, CoAP, HTTP, etc.),
Security challenges in IoT ecosystems. IoT Device Security. IoT device architecture and
components, Common vulnerabilities in IoT devices, Secure bootstrapping and
provisioning, Firmware and software security best practices. IoT Network Security,
Network topologies in IoT environments, Wireless communication and IoT networks
(WiFi, Bluetooth, Zigbee, LoRa, etc.), Threats and vulnerabilities in IoT networks,
Network segmentation and isolation techniques. IoT Data Security and Privacy, Data
encryption and integrity in IoT systems, Privacy concerns and data handling in IoT
devices, Secure data transmission and storage, Compliance with data protection
regulations (GDPR, CCPA, etc.). IoT Security Threats and Attacks, Common IoT attack
vectors (DDoS, Man in the Middle, Physical Attacks, etc.), Case studies of prominent IoT
security breaches, Ethical hacking and penetration testing for IoT systems. IoT Security
Solutions and Best Practices GROUP DISCUSSION, Security frameworks for IoT
(OWASP IoT Top 10, IICF, etc.), Implementing security measures: Authentication,
authorization, and access control, Security monitoring and incident response in IoT
environments, Secure development lifecycle for IoT products. Securing IoT in Practical
Scenarios PRACTICAL, Hands on labs and simulations for securing IoT devices and
networks, Real-world case studies and industry best practices, Group projects:
Designing and implementing secure IoT solutions.
LAUTECHCYB 416 Intrusion Detection Techniques
1Unit Elective: LH 15
Senate approved relevance
Intrusion Detection Techniques are vital for maintaining cybersecurity by actively monitoring
and identifying unauthorized activities within computer systems and networks. These techniques
play a crucial role in preventing data breaches, protecting sensitive information, and ensuring the
integrity of digital assets. By promptly detecting and responding to potential security threats,
76
they mitigate the risk of unauthorized access, malware attacks, and other malicious activities.
Intrusion Detection Techniques enhance overall system resilience, contribute to regulatory
compliance, and facilitate a proactive defense strategy in the face of evolving cyber threats,
safeguarding the confidentiality, integrity, and availability of digital resources.
Overview
These techniques involve monitoring and analyzing system activities to detect abnormal patterns
or signs of potential security threats. They can be categorized into signature-based detection,
anomaly-based detection, and hybrid approaches, employing various methods like signature
matching, statistical analysis, and machine learning algorithms.
Objectives
1. Identify and alert on potential security incidents in their early stages to minimize damage.
2. Recognize deviations from normal behavior to detect previously unknown threats or novel
attack patterns.
3. Minimize the occurrence of false alarms to avoid unnecessary disruption and workload on
security personnel.
4. Continuously monitor network and system activities in real-time for prompt response to
emerging threats.
5. Facilitate quick and effective response strategies to contain and mitigate security incidents.
6. Provide data for post-incident analysis, aiding in understanding the nature of the intrusion and
improving future defenses.
7. Evolve and adapt to new types of threats and attack methodologies, ensuring ongoing
effectiveness in a dynamic cybersecurity landscape.
Learning Outcomes
On completion of the course, students should be able to
1. Understanding Intrusion Detection Concepts:
2. Mastery of Intrusion Detection Technologies:
3. Deployment and Configuration:
4. Incident Analysis and Response:
5. Network Traffic Analysis:
6. Evaluating False Positives and Negatives:
7. Security Information and Event Management (SIEM):
Course Contents
Introduction to Cybersecurity and Intrusion Detection: Overview of cybersecurity concepts and
the role of intrusion detection in safeguarding systems. Types of Intrusion Detection: In-depth
study of signature-based, anomaly-based, and behavior-based intrusion detection techniques.
Intrusion Detection System Architecture: Understanding the architecture and components of
intrusion detection systems. Deployment and Configuration of IDS: Practical aspects of
deploying and configuring intrusion detection systems in different network environments.
Incident Analysis and Response: Techniques for analyzing and responding to security incidents
detected by intrusion detection systems. Network Traffic Analysis Tools: Hands-on experience
with network analysis tools for monitoring and analyzing network traffic. False Positives and
Negatives Mitigation: Strategies for minimizing false positives and negatives in intrusion
detection alerts. SIEM Integration: Integration of intrusion detection systems with Security
Information and Event Management (SIEM) solutions. Emerging Threats and Advanced
77
Intrusion Techniques: Exploration of evolving cyber threats and advanced intrusion techniques
to stay current with the threat landscape.
LAUTECHCYB 418 Law of Digital Evidence
1 Unit Elective: LH 15
Senate approved relevance
The Law of Digital Evidence is essential in contemporary legal systems due to the pervasive use
of digital technologies. It ensures the fair and just treatment of electronic information in legal
proceedings, addressing issues related to admissibility, authenticity, and privacy. As digital
evidence becomes increasingly prevalent in criminal and civil cases, this legal framework guides
the collection, preservation, and presentation of electronic data. It helps prevent tampering and
manipulation, establishing the credibility of digital evidence. Moreover, the Law of Digital
Evidence protects individual privacy rights in the context of data acquisition and ensures that
legal standards align with technological advancements. This field is indispensable for
maintaining the integrity of legal processes, enhancing the reliability of evidence presented in
court, and adapting legal systems to the challenges posed by the digital age.
Overview
This legal domain encompasses rules and procedures governing the collection, preservation, and
presentation of digital information in court. It deals with issues like data privacy, chain of
custody, and the reliability of digital evidence, covering a wide range of sources such as emails,
social media, and computer files.
Objectives
1. Establish criteria for determining the admissibility of digital evidence in court proceedings.
2. Ensure the verification of the origin and integrity of digital evidence, preventing tampering or
manipulation.
3. Define protocols to maintain the chronological record of the possession and handling of digital
evidence, ensuring its reliability.
4. Safeguard the privacy rights of individuals during the collection and use of digital evidence.
5. Set legal standards for the acquisition and analysis of digital evidence, maintaining fairness in
legal processes.
6. Provide guidelines for the presentation of expert testimony to interpret and explain digital
evidence in court.
7. Foster cooperation and standardization across jurisdictions to address challenges related to
cross-border digital evidence in a globalized digital environment.
Learning Outcomes
On completion of the course, students should be able to understand:
1. Legal Framework Understanding:
2. Rules of Evidence:
3. Forensic Techniques and Procedures:
4. Expert Witness Testimony:
5. Privacy and Legal Compliance:
6. Electronic Discovery (eDiscovery):
7. Ethical and Professional Conduct:
Course Contents
78
Introduction to Digital Evidence and the Legal System: Overview of the legal landscape related
to digital evidence, including key legal concepts and the role of digital evidence in
investigations. Rules of Evidence and Admissibility: In-depth study of the rules governing the
admissibility of digital evidence, including relevance, hearsay, and authentication. Digital
Forensic Techniques: Exploration of digital forensic techniques for acquiring, preserving, and
analyzing digital evidence. Chain of Custody: Understanding the importance of maintaining a
secure and documented chain of custody for digital evidence. Expert Witness Preparation and
Presentation: Training on preparing for and presenting expert witness testimony in legal
proceedings. Privacy Laws and Compliance: Examination of privacy laws and compliance
requirements relevant to the collection and use of digital evidence. eDiscovery Processes:
Comprehensive coverage of electronic discovery processes, including identification,
preservation, collection, and production of electronically stored information (ESI). Legal
Challenges in Digital Evidence: Analysis of legal challenges and issues that may arise during
the handling of digital evidence in legal cases. Case Studies and Legal Precedents: Exploration
of real-world case studies and legal precedents to illustrate the application of digital evidence in
legal contexts. Practical Application and Mock Trials: Hands-on exercises and mock trials to
apply theoretical knowledge in practical scenarios, allowing students to simulate real legal
proceedings.
LAUTECHCYB 420 Application Security
1Units Elective: LH 30
Senate approved relevance
Application security is crucial in safeguarding software and digital systems from cyber threats. It
protects against unauthorized access, data breaches, and malicious activities, ensuring the
confidentiality, integrity, and availability of sensitive information. As applications become
integral to business operations, securing them prevents financial losses, reputational damage, and
legal consequences. Application security also supports compliance with regulations and
standards, building trust among users and stakeholders. By identifying and mitigating
vulnerabilities during development, it minimizes the risk of exploitation. As cyber threats
continually evolve, prioritizing application security is paramount for resilient and trustworthy
digital ecosystems.
Overview
Application security involves implementing measures to protect software and digital applications
from security threats throughout their lifecycle. It encompasses practices such as secure coding,
penetration testing, and vulnerability assessments to ensure robust protection against
cyberattacks.
Objectives
1. Identify and address vulnerabilities in software code to prevent exploitation by malicious
actors.
2. Safeguard sensitive data processed by applications, ensuring confidentiality and integrity.
3. Implement secure authentication mechanisms and fine-grained authorization controls to
control access to application resources.
4. Promote adherence to secure coding standards to prevent common programming errors that
can lead to security vulnerabilities.
5. Establish protocols for detecting and responding to security incidents promptly, minimizing
potential damage.
6. Ensure applications comply with industry regulations and data protection laws.
79
7. Implement ongoing monitoring and assessment processes to adapt security measures in
response to evolving threats and vulnerabilities.
Learning Outcomes
On completion of the course, students should be able to understand:
1. Understanding Application Security Concepts:
2. Secure Coding Practices:
3. Vulnerability Assessment and Testing:
4. Web Application Security:
5. Mobile Application Security:
6. Security Architecture and Design:
7. Secure Development Lifecycle (SDLC):
Course Contents
Introduction to Application Security: Overview of application security, emphasizing the
importance of secure coding and the impact of insecure applications. Common Vulnerabilities
and Threats: In-depth exploration of common vulnerabilities, threats, and attack vectors affecting
applications, such as injection attacks, cross-site scripting, and security misconfigurations.
Secure Coding Principles: Practical guidance on implementing secure coding principles,
covering topics like input validation, output encoding, and secure error handling. Vulnerability
Assessment and Penetration Testing: Hands-on training in conducting vulnerability assessments
and penetration tests to identify and address security weaknesses in applications. Web
Application Security Best Practices: Specific focus on securing web applications, including
secure authentication, session management, and protection against OWASP Top Ten
vulnerabilities. Mobile Application Security: Exploration of security considerations specific to
mobile applications, covering issues like data storage security, secure communication, and
mobile device management. Security Architecture and Design: Principles of secure software
architecture and design, with a focus on threat modeling, risk analysis, and designing for
security. Secure Development Lifecycle (SDLC) Implementation: Integration of security
practices into the software development lifecycle, including secure requirements gathering,
coding standards, and security testing. Secure Deployment and Configuration: Best practices for
securely deploying and configuring applications in various environments, considering factors
such as server hardening and secure deployment practices.
80