Indian Institute of Technology Kanpur

Professional Certification Course in Generative AI & Cybersecurity

Indian Institute of Technology Kanpur

Cyber Security

About Programme

Master Cybersecurity with the Power of AI to Build, Defend, and Lead in the Future of Digital Security

Earn an industry recognized EICTA Consortium Certification backed by a prestigious national academic body.
Includes cyber range simulations and enterprise-level capstone project
Gain access to the EICTA Connect privilege that links you with industry, startups, and professionals.
Learn through masterclasses delivered by faculty from IIT Kanpur and other IITs, NITs, and IIITs.
Covers ethical hacking, AI-powered offensive security, SOC operations, and quantum-ready defense

What you'll learn

Perform penetration testing and ethical hacking to identify and exploit system vulnerabilities.
Monitor, detect, and respond to threats as a SOC Analyst or Blue Team Specialist.
Conduct digital forensics investigations, including incident analysis and evidence handling.
Execute red team operations by simulating advanced real-world cyber attacks.
Secure cloud environments and implement DevSecOps practices across CI/CD pipelines.
Apply AI techniques for threat detection, analysis, and automated security response.
Understand the fundamentals of quantum-ready cybersecurity and next-generation cryptography.

Skills you'll gain

System security and hardeningLog analysis and operating system auditingAI-assisted threat identificationEthical hacking and penetration testingOSINT automationExploit development and payload mutationActive Directory exploitationAI-driven offensive security techniquesSOC operations and threat huntingDigital forensics and incident responseMalware detection and classification using machine learningNetwork anomaly detectionCloud security in AWS and AzureDevSecOps pipeline automationPost-quantum cryptography fundamentalsCyber range execution and simulationProfessional reporting and documentation

Programme Content

Cybersecurity Foundations & Threat Landscape

  • Domains: Red, Blue, SOC, DFIR, GRC
  • Kill Chain & ATT&CK
  • Threat actors & risk concepts

    • Application Security, Threat Modeling & Zero Trust

  • Secure Development Lifecycle
  • Identity, sessions & trust boundaries
  • STRIDE & ATT&CK threat modeling
  • Zero Trust principles & NIST SP 800-207

    • Governance, Risk & Compliance Engineering

  • Governance vs Management, AI as asset
  • KPIs, KRIs, MTTD, MTTR, board risk translation
  • NIST CSF, 800-53, ISO 27001, FedRAMP
  • Control inheritance, CCM, privacy engineering

    • Networking for Security

  • TCP/IP & OSI fundamentals
  • Protocol abuse (DNS, ARP, ICMP)
  • Wireshark lab

    • Linux Security & Hardening

  • Permissions & privilege model
  • SSH & logging
  • Hardening lab

    • Download Full Curriculum

    Recon & OSINT

  • Active vs Passive recon
  • WHOIS, Shodan, subdomain enumeration
  • Metadata extraction
  • Maltego lab

    • Vulnerability Scanning

  • Nmap advanced scanning
  • Nessus/OpenVAS
  • CVSS interpretation

    • Web Application Security (OWASP Top 10)

  • Auth & session attacks
  • SQLi
  • XSS
  • IDOR, CSRF, SSRF, RCE
  • API security testing

    • Exploitation Techniques

  • Metasploit framework
  • Shell handling
  • Privilege escalation
  • Post-exploitation basics

    • Wireless Security

  • WPA2 cracking
  • Rogue AP lab

    • Rules of Engagement & Regulatory Context

  • Legal boundaries & authorization
  • Cyber insurance & CERT-In reporting overview

    • Download Full Curriculum

    Active Directory Attacks

  • Kerberos abuse
  • Pass-the-Hash/Ticket
  • Mimikatz lab

    • Lateral Movement & Pivoting

  • SMB/RDP pivoting
  • SOCKS tunneling
  • Internal enumeration

    • Payload Development & Evasion

  • Payload generation
  • AV evasion & AMSI bypass
  • Sandbox evasion

    • GenAI-Assisted Offensive Security

  • AI phishing automation
  • AI recon automation
  • Payload mutation

    • Adversarial AI Attacks

  • Data poisoning
  • Model evasion
  • Prompt injection
  • Deepfake threats

    • Ethics & Governance of AI Offense

  • Responsible disclosure
  • AI attack governance

    • Download Full Curriculum

    SOC Operations & CTI Integration

  • SOC workflow & escalation
  • Alert triage & playbooks
  • CTI-driven prioritization

    • Detection Engineering & Threat Hunting

  • Log ingestion (ELK/Splunk)
  • ATT&CK-based hunts
  • Writing detections & Sigma rules
  • CTI-driven hypothesis hunting
  • Alert tuning & detection coverage

    • DFIR & Ransomware Recovery Engineering

  • Disk & memory acquisition
  • Forensic artifacts & Volatility
  • CTI in scoping incidents
  • Immutable backups & recovery vaults

    • AI/ML for Threat Detection

  • Malware classification
  • Network anomaly detection

    • AI SOC Reliability & Explainability

  • Model drift & false positives
  • Explainable AI

    • Incident Response for AI Systems

  • AI compromise & poisoning response
  • CTI for AI threats
  • Intelligence sharing & governance escalation

    • Download Full Curriculum

    Cloud Security

  • IAM roles & policies
  • Storage misconfigurations
  • WAF & GuardDuty
  • Cloud logging

    • DevSecOps & Supply Chain Security

  • CI/CD security
  • SAST/DAST
  • Containers & Kubernetes
  • SBOM & supply chain attacks

    • API & Microservices Security

  • API auth & OAuth2
  • Token abuse & rate limiting
  • gRPC/GraphQL testing

    • AI Security Engineering (MLOps)

  • Dataset security
  • Model registry risks
  • Inference API abuse

    • AI Supply Chain & Model Governance

  • Third-party models
  • Model BOM
  • Dataset poisoning risk

    • Quantum-Ready Cybersecurity

  • Quantum threat overview
  • PQC concepts & demo

    • Third-Party & Vendor Risk Management

  • Vendor risk frameworks
  • SSPM & continuous monitoring

    • Download Full Curriculum

    Capstone Options

  • Build AI-powered SOC that auto-detects malware traffic
  • Full enterprise pentest including AD exploitation and forensics
  • Hybrid Red + Blue + Purple Team cyber range simulation
  • Post-Quantum secure cloud architecture for an organization
  • DevSecOps pipeline with automated SAST/DAST + threat response

    • Capstone Deliverables

  • Technical execution & demo (team or individual)
  • Detailed documentation with evidence
  • Final report containing: Executive Summary, Attack / Defense mapping to ATT&CK, IOC list & MITRE techniques
  • Video + GitHub portfolio submission
  • Final presentation

    • Download Full Curriculum

    Program Certificate

    Earn a career certificate

    Add this credential to your LinkedIn profile, resume, or CV. Share it on social media and in your performance review.

    Other programs in this subject area you might find useful

    Same topic, Similar duration - Broader exploration across all institutes

    Contact us for the further details

    Speak with an Advisor

    1. Pedagogy (case method, experiential learning, coaching, simulations)
    2. Target Audience
    3. Programme Objective
    4. Testimonials
    5. Programme Benefits
    6. Brochure

    Prashansa Uttam

    Programme Advisor

    +91 9403890085contact@echomind.oneMon – Fri, 9am – 5pm IST

    Indian Institute of Technology Kanpur

    Executive Education Office

    NA
    NA
    NA
    https://www.iitk.ac.in
    Kanpur, India

    Tell us about your program enquiry

    Fill out the form below and our team will get back to you within 24 hours.

    Professional Certification Course in Generative AI & Cybersecurity | IIT Kanpur