Short answer: The ASTI Cyber Security course in Bangalore has 13 modules. It starts with security fundamentals and the CIA triad, then covers network and application security, cryptography, incident response and cyber law. It then moves on to ethical hacking and penetration testing, security tools such as SIEM, and cloud security, and it ends with a capstone project. There are 60+ hours of training and 30+ hours of assignments, in the BTM 1st Stage classroom or live online. No prior coding experience is needed.
This page explains what each module covers, why the modules come in this order, and which job roles and certifications they lead towards. It follows the syllabus published on the Cyber Security course page. If the two ever differ, the course page is the current version.
Cyber security syllabus at a glance
| Module | Topic | What you will be able to do |
|---|---|---|
| M1 | Introduction to Cyber Security | Explain what security teams protect, the main job roles, and how an organisation’s defences fit together |
| M2 | Types of Cyber Threats | Recognise malware, phishing, ransomware, social engineering and denial-of-service attacks, and explain how each one works |
| M3 | Cyber Security Principles (CIA Triad) | Judge a risk in terms of confidentiality, integrity and availability, and choose a control that fits it |
| M4 | Network Security | Read network traffic, understand ports, protocols, firewalls and segmentation, and spot suspicious connections |
| M5 | Application Security | Explain common web weaknesses from the OWASP Top 10 and how they are found and fixed |
| M6 | Cryptography Basics | Tell hashing, symmetric and asymmetric encryption apart, and explain how TLS and certificates protect data |
| M7 | Emerging Trends in Cyber Security | Discuss current topics such as zero trust, AI in attack and defence, and supply-chain risk |
| M8 | Incident Response & Risk Management | Follow an incident from detection to recovery, and record and rank risks |
| M9 | Cyber Laws & Ethics | Explain what the IT Act, 2000 means for security work, and why written permission comes before any test |
| M10 | Ethical Hacking & Penetration Testing | Run an authorised test in a lab, from reconnaissance and scanning to exploitation and a written report |
| M11 | Security Tools & Technologies | Use scanners, packet analysers and a SIEM platform to find and investigate security events |
| M12 | Cloud Security | Explain the shared responsibility model and secure cloud identity, storage and network settings |
| M13 | Capstone Project | Complete a project from start to finish that you can show to employers and explain in an interview |
Why the modules come in this order
Each module uses the one before it. The order follows how a junior security analyst builds up skills at work.
- Foundations first (M1 to M3). You cannot defend a system until you know what is at risk and why. The CIA triad gives you a simple test for every later decision.
- Networks and applications (M4 to M6). Most attacks travel over a network or go through a web application. Cryptography explains how data is kept safe along the way.
- Response, risk and law (M7 to M9). Security jobs are as much about handling incidents and following the law as about technology. This block also covers why testing without written permission is illegal.
- Offence and tools (M10 and M11). Ethical hacking comes after the law module on purpose. You practise attacks only in labs, and then you learn how defenders detect those same attacks with a SIEM.
- Cloud, then the capstone (M12 and M13). Many company systems now run on AWS or Azure. The capstone brings every module together into one piece of work you can show employers.
- ReconMap the target
- ScanFind weaknesses
- ExploitProve the risk in a lab
- DetectSee it in the SIEM
- RespondContain and report
Tools you will use
About 70% of the sessions are practical. The tools include Nmap, Wireshark, Burp Suite, Metasploit and SIEM platforms, used in lab environments that you are allowed to test.
| Tool | Used for | Module |
|---|---|---|
| Wireshark | Capturing and reading network traffic | M4, M11 |
| Nmap | Finding hosts, open ports and services | M4, M10 |
| Burp Suite | Testing web applications for OWASP Top 10 weaknesses | M5, M10 |
| Metasploit | Proving that a weakness can be exploited, in a lab | M10 |
| SIEM platform | Collecting logs, writing alerts and investigating incidents | M8, M11 |
Which roles and certifications the syllabus leads to
The modules line up with the usual entry-level security jobs and with well-known certifications. Certification exams are booked and paid for with the vendor, separately from the course. Check each vendor’s website for current fees and exam rules.
| Path | Key modules | Certifications to consider |
|---|---|---|
| SOC analyst (blue team) | M4, M8, M11 | ISC2 Certified in Cybersecurity (CC), CompTIA Security+, then CompTIA CySA+ or Microsoft SC-200 |
| VAPT / penetration tester | M4, M5, M10 | CompTIA Security+, EC-Council CEH, later OffSec OSCP+ |
| Cloud security | M3, M6, M12 | Microsoft SC-900, then a cloud provider’s security certification |
| GRC / risk and compliance | M3, M8, M9 | ISC2 CC, CompTIA Security+ |
For the offensive path in detail, read how to become an ethical hacker. If you are still choosing a direction, start with how to start a career in cyber security.
Who this syllabus suits
- Freshers and students from IT and non-IT backgrounds
- Working IT, networking or support staff who want to move into security
- Developers who want to understand application security
You do not need to know how to code before you start. Some scripting helps later, especially in M10 and M11, and the course introduces it when you need it.
Frequently asked questions
How long is the ASTI cyber security course?
It has 60+ hours of training and 30+ hours of assignments, across 13 modules. A new batch starts every 15 days, with weekday and weekend options, in the BTM 1st Stage classroom or live online.
Does the syllabus include ethical hacking?
Yes. Module 10 is a full module on ethical hacking and penetration testing, and it is practised only in authorised lab environments.
Do I need programming knowledge?
No. The course starts with fundamentals. Basic scripting is introduced when the labs need it.
Which certificate will I get?
You receive an ASTI course completion certificate. Vendor certifications such as ISC2 CC, CompTIA Security+ and CEH are separate exams that you book with the vendor.
Is placement guaranteed?
No. ASTI provides placement assistance, including resume building, interview preparation and job opportunities. Hiring decisions are made by employers. Placement assistance does not guarantee a job.