B.Sc. (Information Technology) Computer Security Syllabus - Mumbai University
This is the TY BSc IT syllabus under NEP 2020, in force from the academic year 2026-27. The University still sets the earlier Choice Based papers alongside it for ATKT candidates, so check which scheme your exam form names before you revise.
Loading syllabus...
Syllabus for Computer Security
Module I
- 1. Information Security Overview: The Importance of Information Protection, The Evolution of Information Security, Justifying Security Investment, Security Methodology, how to Build a Security Program, The Impossible Job, The Weakest Link, Strategy and Tactics, Business Processes vs. Technical Controls. Risk Analysis: Threat Definition, Types of Attacks, Risk Analysis, Secure Design Principles: The CIA Triad and Other Models, Defense Models, Zones of Trust, Best 2. Authentication and Authorization: Authentication, Authorization Encryption: A Brief History of Encryption, Symmetric-Key Cryptography, Public Key Cryptography, Public Key Infrastructure. Database Security: General Database Security Concepts, Understanding Database Security Layers, Understanding Database- Level Security, Using Application Security, Database Backup and Recovery, Keeping Your Servers Up to Date, Database Auditing and Monitoring. 3. Network Device Security: Switch and Router Basics, Network Hardening Firewalls: Overview, The Evolution of Firewalls, Core Firewall Functions, Additional Firewall Capabilities, Firewall Design.
Module II
- 1. Intrusion Detection and Prevention Systems: IDS Concepts, IDS Types and Detection Models, IDS Features, IDS Deployment Considerations, Security Information and Event Management (SIEM). Voice over IP (VoIP) and PBX Security: Background, VoIP Components, VoIP Vulnerabilities and Countermeasures, PBX, TEM: Telecom Expense Management. Operating System Security Models: Operating System Models, Classic Security Models, Reference Monitor, Trustworthy Computing, International Standards for Operating System Security 2. Virtual Machines and Cloud Computing: Virtual Machines, Cloud Computing. Secure Application Design: Secure Development Lifecycle, Application Security Practices, Web Application Security, Client Application Security, Remote Administration Security. Physical Security: Classification of Assets, Physical Vulnerability Assessment, Choosing Site Location for Security, Securing Assets: Locks and Entry Controls, Physical Intrusion Detection
Text Books
- 1 William Stallings, Cryptography and Network Security: Principles and Practice, 8th Edition, Pearson, 2023.
- 2 Principles of Information Security by Ph.D. Whitman, Michael E. Herbert J. Mattord , 7th Edition, Cengage Learning, 2021
- 3 Cloud Security: A Comprehensive Guide to Secure Cloud Computing 1st Edition, by Ronald L. Krutz
- 1 The Complete Reference: Information Security Mark Rhodes- Ousley McGraw- Hill Second 2013
- 2 Essential Cybersecurity Science Josiah Dykstra O’Reill Fifth 2017
- 3 Principles of Computer Security: CompTIA Security+ and Beyond Wm.Arthur Conklin,Greg White McGraw Hill Second 2010
Reproduced from the University of Mumbai syllabus for B.Sc. (Information Technology) under NEP 2020, in force from the academic year 2026-27. Wording is as printed in that syllabus. Module numbering is as printed there too.
The complete syllabus
This subject is cut from the University circular for its year. Open a document here if you want the whole thing rather than a single subject.
Use FYBSc IT, SYBSc IT, or TYBSc IT first so your syllabus check matches the semester you are preparing for.
Use the syllabus to confirm topics, then open BSc IT notes for the same semester.
Move to BSc IT question papers after reviewing the module scope.