Course Syllabus

Module 1 – Fundamentals & Cryptography (5 h)

• Topics: Blockchain basics, cryptographic principles (hash functions, PKI), threat modeling
• Description: Covers blockchain structure, immutability, and how public/private key systems and cryptographic hashes secure transactions. Includes threat modeling using STRIDE.
• Features: Interactive exercises on hashing, key pairs, and risk analysis based on W3CB curriculum

Module 2 – Consensus Security (5 h)

• Topics: Consensus mechanisms (PoW, PoS), Byzantine Fault Tolerance, double-spend attacks, 51% threats
• Description: Explores consensus algorithm security, attack vectors, and mitigation strategies.
• Features: Case studies on real-world exploits (e.g., Ethereum PoS vulnerabilities)

Module 3 – Node & Network Hardening (5 h)

• Topics: Node architecture, P2P networks, networking threats, DDoS, Sybil, eclipse attacks
• Description: Teaches secure node and network design; detection and defense against network-level threats.
• Features: Labs simulating node compromise and attack detection

Module 4 – Smart Contract Security (6 h)

• Topics: Smart contract vulnerabilities (reentrancy, integer overflow), Solidity best practices
• Description: In-depth audit of Ethereum contracts and vulnerability mitigation techniques.
• Features: Hands-on labs using test environments to identify and fix contract flaws .

Module 5 – Blockchain Testing & Auditing (4 h)

• Topics: Security assessment methods, tools, code reviews, testing frameworks
• Description: Prepares candidates for smart contract and blockchain code audits.
• Features: Guided audits using static/dynamic analysis and reporting templates

Module 6 – Enterprise & Layer‑2 Architectures (4 h)

• Topics: Private/permissioned chains (Hyperledger, Corda), sidechains, rollups
• Description: Discusses security models in enterprise blockchain setups and scaling layers.
• Features: Evaluations of permissioned ledger threat models

Module 7 – Key Management & Privacy (5 h)

• Topics: Wallet/key storage, HSMs, multi-sig; privacy techniques—mixers, ZKPs
• Description: Teaches secure key storage and privacy-preserving mechanisms like ZK-SNARKs.
• Features: Demos on key management and privacy protocols

Module 8 – Threat Detection & Analytics (4 h)

• Topics: Anomaly and fraud detection, forensic analytics, ML-based monitoring
• Description: Applies advanced detection techniques to blockchain data.
• Features: Machine learning labs analyzing chain anomalies using recent academic research

Module 9 – Penetration Testing & Incident Response (4 h)

• Topics: Recon tools, network scanning, node/API exploitation, IR processes
• Description: Guides learners through blockchain-specific penetration testing and incident response.
• Features: Simulated attacks and response drills.

Module 10 – Capstone Project (2 h)

• Description: A hands-on, team-based challenge simulating a real breach, from threat modeling and exploit to mitigation and forensic analysis.
• Features: Capture‑the‑flag style exercise combining replay of all modules.