Managing Enterprise Cybersecurity

Introduction to the Course

Threat modeling

Anderson, Ch. 1

Read the beginning of each chapter, skim the rest of the chapter:

“Threat Modeling,” by Adam Shostack, Introduction, Chapter 1, Chapter 4

Optional:

Schneier, Chapter 21

Risk Assessment

Information Privacy

Start Milestone 1: Risk Assessment

Tim Cook, “‘Technology can harm, can help”

Information Privacy Lab due

Introduction to Linux | Google Cloud Platform (GCP)

Information Security in Organizations

Tutorial: Introduction to Linux

Tutorial: Introduction to Google Cloud Platform

Milestone 1: Risk Assessment Draft due

Lab: Introduction to Linux | Google Cloud Platform (GCP) due

Introduction to Cryptography

Symmetric Cryptography

Anderson, Ch. 5, pp. 140–148, 153–155.

Symmetric cryptography, cont.

Symmetric Cryptography Lab due

Asymmetric Cryptography

Digital Certificates and PKI

3rd edition: Anderson Ch. 3, pp. 97-103, 113–118 (section 3.4–3.4.4.2, 3.4.9–3.4.12)

Gosney, “How LinkedIn’s password sloppiness hurts us all“

Goodin, “Why passwords have never been weaker“

Asymmetric Cryptography Lab due

Digital Certificates Lab due

Authentication and Passwords

Password Cracking

Milestone 2 Final Risk Assessment Report due

Password Cracking Lab due

Midterm exam opens

Introduction to networking

Vulnerability Scanning

Vulnerability Exploitation

Midterm exam due

Milestone 3 penetration test begins

Vulnerability scanning lab due 

Exploitation demonstration

Milestone group workday

Vulnerability exploitation lab due

Physical security

The Human element of security

Online video: Bruce Schneier, The Security Mirage

“Cosmo, the Hacker ‘God’ Who Fell to Earth,” by Mat Honan.

Anderson, Chapter 2, pp. 89–95; Chapter 13

Network Security Monitoring

Incident Response

“Network Security Monitoring,” by Richard Bejtlich, Chapter 1

Milestone 3 penetration test draft due

Physical security lab due

Social engineering lab due

Respond case study: Equifax

Malware Analysis

Harvard case: “Data Breach at Equifax,” Srinivasan et al.

Introduction and Chapter 0 of Practical Malware Analysis by Sikorski and Honig.

Network security monitoring lab due 

Recover case study: Maersk

Milestone group work time

“The Untold Story of NotPetya,” by Andy Greenberg

Final Milestones 4-5 Report due

Malware analysis lab due

Course wrap-up

Milestone group work time

Final exam period begins

Last day of final exams