Cyber Security roadmap

What you will learn

1. 1. Security Foundations

   The two most exploited web weaknesses: injection and broken access control.

   • SQL, Command Injection & Path Traversal — Security · SQL, Command Injection & Path Traversal
   • Authorization, RBAC & ABAC — Security · Authorization, RBAC & ABAC

2. 2. Linux & Shell

   Work comfortably in a Linux shell and understand how file systems organize data.

   • Linux & Shell — DevOps · Linux & Shell
   • File Systems — Operating Systems · File Systems

3. 3. Network Models & Transport

   The OSI and TCP/IP models, IP addressing and subnetting, and TCP versus UDP.

   • OSI & TCP/IP Models — Computer Networking · OSI & TCP/IP Models
   • IP & Subnetting — Computer Networking · IP & Subnetting
   • TCP, UDP, Ports & Sockets — Computer Networking · TCP, UDP, Ports & Sockets

4. 4. TLS, NAT & Firewalls

   Encrypt traffic with TLS and certificates, and control it with NAT and firewalls.

   • TLS & Certificates — Computer Networking · TLS & Certificates
   • NAT & Firewalls — Computer Networking · NAT & Firewalls

5. 5. Security Operations & Incident Response

   How a SOC detects threats, how teams respond to incidents, and the forensics basics that preserve evidence.

   • Security Operations & SOC — Offensive & Defensive Security · Security Operations & SOC
   • Incident Response — Offensive & Defensive Security · Incident Response
   • Forensics Basics — Offensive & Defensive Security · Forensics Basics

6. 6. Threats, Vulnerabilities & Pentesting

   Know the malware families, run a vulnerability management program and follow an ethical penetration testing methodology.

   • Malware Types — Offensive & Defensive Security · Malware Types
   • Vulnerability Management — Offensive & Defensive Security · Vulnerability Management
   • Pentest Methodology (Ethical) — Offensive & Defensive Security · Pentest Methodology (Ethical)

7. 7. Cryptography, Zero Trust & Cloud Security

   Cryptography basics, identity-centric zero trust, securing cloud workloads and the compliance frameworks that audit them.

   • Cryptography Basics — Offensive & Defensive Security · Cryptography Basics
   • IAM & Zero Trust — Offensive & Defensive Security · IAM & Zero Trust
   • Cloud Security — Offensive & Defensive Security · Cloud Security
   • Compliance Frameworks — Offensive & Defensive Security · Compliance Frameworks

8. 8. API Security Best Practices

   Use the OWASP API Security Top 10 to secure authentication and tokens, enforce object- and function-level authorization, and validate input against mass assignment.

   • OWASP API Security Top 10 — API Security · OWASP API Security Top 10
   • API Authentication & Tokens — API Security · API Authentication & Tokens
   • BOLA & BFLA (Authorization) — API Security · BOLA & BFLA (Authorization)
   • Input Validation & Mass Assignment — API Security · Input Validation & Mass Assignment

9. 9. API Hardening & Monitoring

   Limit abuse with rate limits, lock down transport, CORS and secrets, and log and monitor APIs to detect attacks.

   • Rate Limiting & Abuse — API Security · Rate Limiting & Abuse
   • TLS, CORS & Secrets — API Security · TLS, CORS & Secrets
   • API Logging & Monitoring — API Security · API Logging & Monitoring

10. 10. Threat Modeling & Secure CodingOptional

    Use the OWASP Top 10 and threat modeling to find risks early, and write code that resists them.

    • OWASP Top 10 & Threat Modeling — Security · OWASP Top 10 & Threat Modeling
    • Secure Coding — Security · Secure Coding

11. 11. Cyber Security Capstone

    A scenario-based final challenge mixing detection, incident response, vulnerability management, and cloud and API security.

    • Cyber Security Capstone — Capstones · Cyber Security Capstone