Computer and Network Security:Schedule

CS 457/557 EE 410/510

Warning: This schedule is tentative will change as the semester progresses!

`
Date Topic
Week 1
Mon
8/24
Welcome and Syllabus, Introductions, Security vs Computer Security, What you worry about?
Wed
8/26
Security Process, Cybersecurity Frameworks, Wild West Bank
Fri
8/28
Security Process: Personal Computer and Banking Computer Examples
Week 2
Mon
8/31
VIDEO: CVE, NVD
Wed
9/2
Malware (Worm, Virus, Trojan Horse, etc.)
Morris Worm
Fri
9/4
Vulnerabilities, Exposures, Exposures
Start Attack Trends
Week 3
Mon
9/7
VIDEO: Weaknesses vs Vulnerabilities, CWE Mappings
Weds
9/9
Attack Trends, Denial of Service
Fri
9/11
Attack Trend continued
Week 4
Mon
9/14
VIDEO: OWASP Top 10, OWASP more broadly, Risks
Weds
9/16
VIDEO: SQL Injection, XSS, CSRF, SSRF
Fri
9/18
Buffer Overflows, Backdoors, Keyloggers
Week 5
Mon
9/21
VIDEO: Netstat, ifconfig, netcat, TCP States, IANA port list
Weds
9/23
Security Policies, Confidentiality, Integrity, Availability, Identification, Authentication, Authorization, Accounting, Access Matrix, Access Control Lists, Capabilities
Fri
9/25
Security Policies: Discretionary, Mandatory, Multi-level security systems, Bell-LaPadula, Biba
Week 6
Mon
9/28
VIDEO: Phishtank, Virus Total, SpamHaus
Wed
9/30
Authentication, Passwords, Biometrics, Mulitfactor-Authentication
Fri
10/2
Prevention Overview, Network Access Control, Types of Firewalls
Week 7
Mon
10/5
VIDEO: Wireshark, telnet vs ssh, IP spoofing, TCP Session Stealing
Wed
10/7
RSA Assignment
Stateful/Stateless Packet Inspection, Firewall rules
Fri
10/9
Watch other groups malware presentation videos
Week 8
Mon
10/12
FALL BREAK
Wed
10/14
VIDEO: Nmap, Warhol worm, EFF unique browswer
Fri
10/16
Encryption Basics, ECB vs Cipher Block Chaining
Week 9
Mon
10/19
VIDEO: Certificate Authorities (Chrome and Firefox), DEFCON, BlackHat, Bsides
Wed
10/21
Digital Signatures, Message Digests, SSL and the Future of Authenticity (Moxie Marlinspike)
Fri
10/23
Distributed Trust, PGP, HTTPS, SSL, IPSec
Authentication, Key Distriibution, Trusted intermediaries, Man in the Middle
Week 10
Mon
10/26
VIDEO: Evaluating Detection/Classification systems (ROC-AUC)
Wed
10/28
PGP, SSL, IPsec, Detection and Logging
Fri
10/31
Discuss Projects, More Logging
Week 11
Mon
11/2
VIDEO: Honeypot, Cowrie, Kali, Phishing Toolkit
Wed
11/4
Intrusion Detection Systems Signature-Based vs Anomaly-Based
ROC-AUC, Alternatives to AUC, Base Rate Fallacy, HIDS vs NIDS

Fri
11/6
Honeypots, Scalability/Fidelity/Containment
Week 12
Mon
11/9
VIDEO: Certifications, Movies, Books, Contest
Wed
11/11
Detection: Malware Signatures, Static vs Dynamic
Evolution of Anti-Virus, AV Signatures, Clam AV
Fri
11/13
Recovery vs Forensics, Preparation and Recovery Backups and recovery, Backtracking Intrusions
Week 13
Mon
11/16
VIDEO: Honeypot, Cowrie, Kali Linux, Phishing Toolkit
Wed
11/18
Response
Assess/Reassess; Assurance/Certification
Fri
11/20
Penetration Testing, Assurance
Week 14
Mon
11/23
VIDEO: Security Books and Movies (Takedown/Trackdown/Freedom Downtime), Advent of Cyber exercises, Security Certifications, Google Sumer of Code, Finding Companies
Wed
11/25
THANKSGIVING BREAK
Fri
11/27
THANKSGIVING BREAK
Week 15
Mon
11/30
VIDEO: Reflections on Trusting Trust
Wed
12/2
AI Security
Fri
12/4
Review for Final
FINALS

TBA