Specification points
College Board AP Cybersecurity cybersecurity
108 points in 5 topics, with College Board's codes and titles.
Codes and titles are read by a script from College Board's published specification and have not been checked by a person. What each point covers is in the specification itself: College Board’s specification.
1 Introduction to Security
- 1.1 Understanding Social Engineering
- 1.1.A Indicators of social engineering
- 1.1.B How social engineering manipulates victims
- 1.1.C Impacts of social engineering attacks
- 1.2 Suspicious Website Logins
- 1.2.A Signs of a password attack
- 1.2.B Exploiting weak authentication
- 1.2.C Strengthening authentication
- 1.3 Best Practices for Public Networks
- 1.3.A Types of adversary
- 1.3.B Types of wireless attack
- 1.3.C Protecting sensitive data online and on Wi-Fi
- 1.4 AI-Based Cybersecurity Attacks
- 1.4.A AI-augmented cyberattacks
- 1.4.B Defending against AI-augmented attacks
- 1.5 Leveraging AI in Cyber Defense
- 1.5.A AI tools for cyber defence
- 1.5.B AI in threat detection and response
2 Securing Spaces
- 2.1 Cyber Foundations
- 2.1.A Identifying social engineering attacks
- 2.1.B Identifying adversaries
- 2.1.C Phases of a cyberattack
- 2.1.D Risk assessment
- 2.1.E Managing risk
- 2.1.F Types of security control
- 2.1.G Defence in depth
- 2.2 Physical Vulnerabilities and Attacks
- 2.2.A Common physical attacks
- 2.2.B Exploiting physical vulnerabilities
- 2.2.C Assessing physical risks
- 2.3 Protecting Physical Spaces
- 2.3.A Managerial controls for physical security
- 2.3.B Mitigating physical risks
- 2.4 Detecting Physical Attacks
- 2.4.A Controls that detect physical attacks
- 2.4.B Placing physical detection controls
- 2.4.C Detecting physical attacks
3 Securing Networks
- 3.1 Network Vulnerabilities and Attacks
- 3.1.A Common network attacks
- 3.1.B Exploiting network vulnerabilities
- 3.1.C Assessing network risks
- 3.2 Protecting Networks: Managerial Controls and Wireless Security
- 3.2.A Managerial controls for network security
- 3.2.B Wireless network security settings
- 3.3 Protecting Networks: Segmentation
- 3.3.A Network segmentation techniques
- 3.3.B Segmentation for network security
- 3.4 Protecting Networks: Firewalls
- 3.4.A Types of network firewall
- 3.4.B Firewall access control lists
- 3.4.C Placing firewalls
- 3.4.D Configuring a firewall
- 3.5 Detecting Network Attacks
- 3.5.A Automated tools for detecting network attacks
- 3.5.B AI for network threat detection
- 3.5.C Choosing a network detection method
- 3.5.D Evaluating a network detection method
- 3.5.E Detecting network attacks in log files
4 Securing Devices
- 4.1 Device Vulnerabilities and Attacks
- 4.1.A Types of computing device
- 4.1.B Types of malware
- 4.1.C Exploiting device vulnerabilities
- 4.1.D Assessing device risks
- 4.2 Authentication
- 4.2.A Password hashing
- 4.2.B How password attacks work
- 4.2.C Types of authentication
- 4.2.D Secure login settings
- 4.3 Protecting Devices
- 4.3.A Managerial controls for device security
- 4.3.B Anti-malware software
- 4.3.C Keeping software up to date
- 4.3.D Host-based firewalls
- 4.4 Detecting Attacks on Devices
- 4.4.A Detecting attacks on devices
- 4.4.B Controls for detecting device attacks
- 4.4.C Evaluating a device detection method
- 4.4.D Detecting password attacks in log files
5 Securing Applications and Data
- 5.1 Application and Data Vulnerabilities and Attacks
- 5.1.A Exploiting application and file vulnerabilities
- 5.1.B How application attacks work
- 5.1.C Assessing application and data risks
- 5.2 Protecting Applications and Data: Managerial Controls and Access Controls
- 5.2.A Data classification and security
- 5.2.B Managerial controls for applications and data
- 5.2.C Choosing an access control model
- 5.2.D Access control on Linux
- 5.3 Protecting Stored Data with Cryptography
- 5.3.A Encrypting files
- 5.3.B Symmetric encryption
- 5.4 Asymmetric Cryptography
- 5.4.A Choosing asymmetric keys
- 5.4.B Key length and security
- 5.4.C Asymmetric encryption
- 5.5 Protecting Applications
- 5.5.A Secure by design and by default
- 5.5.B Input sanitisation
- 5.6 Detecting Attacks on Data and Applications
- 5.6.A Detecting attacks on data
- 5.6.B Controls for detecting application and data attacks
- 5.6.C Evaluating application attack detection
- 5.6.D Verifying file integrity with hashes
- 5.6.E Detecting application attacks in log files