Appearance
Web Resources for Cyber Security
This page keeps source links outside the lessons so the modules remain easy to read.
Use the labels in this order:
- Easy second explanation: learn the idea in another friendly way.
- Official technical reference: verify exact definitions or standards.
- Practice resource: watch, run, or solve examples yourself.
Module 1: Cryptography
- Easy second explanation: Computerphile: RSA, AES and the history of crypto
- Official technical reference: NIST FIPS 197: AES standard
- Official signature reference: NIST FIPS 186-5: Digital Signature Standard
- Official TLS reference: RFC 8446: TLS 1.3
- Practice resource: CryptoHack — interactive crypto challenges.
Module 1: Communication & Network Security
- Easy second explanation: Ben Eater: ethernet, how frames work
- Official technical reference: RFC 791 (IPv4) and RFC 8200 (IPv6)
- Practice resource: Packet Tracer / EVE-NG — build and analyze a TCP/IP network.
Module 2: Security Management
- Easy second explanation: IBM: what is risk management?
- Official technical reference: NIST Cybersecurity Framework (CSF)
- Practice resource: ISO 27001 controls — review Annex A controls exercise.
Module 2: Cyber Law & IPR
- Easy second explanation: WIPO: WIPO Copyright and the Digital Economy
- Official technical reference: EU GDPR text with breaches
- Practice resource: CyberPeace Foundation cyber-law primer
Module 2: Network Security Technologies
- Easy second explanation: Computerphile: How does a Firewall work?
- Official technical reference: NIST SP 800-41: Guidelines on Firewalls and Firewall Policy
- Practice resource: pfSense docs / lab — configure a DMZ firewall.
Module 2: VPN & Cloud
- Easy second explanation: AWS: Shared Responsibility Model
- Official technical reference: NIST SP 800-145: The NIST Definition of Cloud Computing
- Practice resource: Terraform AWS free-tier lab — build a secure VPC.
Module 3: Access Control & IDS/IPS
- Easy second explanation: NIST overview of attribute-based access control
- Official technical reference: NIST SP 800-94: Guide to IDPS
- Practice resource: Suricata or Snort — write a detection rule.
Module 4: System & Application Security
- Easy second explanation: OWASP Top 10
- Official technical reference: TLS 1.3 RFC 8446
- Practice resource: OWASP WebGoat - complete guided defensive exercises only in its isolated training environment.
Module 4: Forensics & Incident Response
- Easy second explanation: SANS: Incident Handling Steps
- Official technical reference: NIST SP 800-61 Rev. 3: Incident Response Recommendations
- Practice resource: SIFT Workstation / REMnux — forensic image analysis lab.
Best way to use these links
- Read the module's simple idea and worked example.
- Try its self-check without looking at the answer.
- Open the easy resource if the idea is still unclear.
- Use the official reference to verify technical details.
- Finish with the practice resource.