Managing Enterprise Cybersecurity

Introduction to the Course

Anderson, Ch. 1

Threat modeling

Read the beginning of each chapter, skim the rest of the chapter: “Threat Modeling,” by Adam Shostack, Introduction, Chapter 1, Chapter 4

Optional: Schneier, Chapter 21

Risk Assessment

Threat Modeling Lab due

Start Milestone 1: Risk Assessment Report Draft

Information Privacy

Tim Cook, “‘Technology can harm, can help”

Web Privacy and Anonymity Lab due

Introduction to Cryptography

Milestone 1: Risk Assessment Report Draft due

Introduction to Google Cloud Platform and Linux Tutorial Lab due

Symmetric Cryptography

No Class Meeting

Milestone 2: Risk Assessment Final Report due

Asymmetric Cryptography

Anderson, Ch. 5, pp. 140–148, 153–155.

Digital Certificates and Public Key Infrastructure

Anderson Ch. 5, pp. 157-184, Sections 5.4.3.2 through 5.8

Authentication and Passwords

Symmetric Encryption & Hashing Lab due

Password Cracking

Mid-term Exam opens

 No Class Meeting – Group Work

Asymmetric Cryptography Lab due

Introduction to Networking

Deadline for Mid-term Exam 

Vulnerability Scanning

Gosney, “How LinkedIn’s password sloppiness hurts us all“

Goodin, “Why passwords have never been weaker“

Digital Certificates and Trust Lab due

Vulnerability Scanning continued

Start Milestone 3: Penetration Test

Vulnerability Exploitation

Thursday, 10/21/2021

Vulnerability Exploitation continued

Password Cracking Lab due

Human Element – Information Security in Organizations

Thursday, 10/28/2021

Midterm Exam due

Physical Security

Vulnerability Discovery Lab due

Network Security Monitoring

Incident Response – Equifax Case Study

Milestone 3: Penetration Test Report due

Vulnerability Exploitation lab due

Incident Recovery – Maersk Case Study

Online video: Bruce Schneier, The Security Mirage

“Cosmo, the Hacker ‘God’ Who Fell to Earth,” by Mat Honan.

Anderson, Chapter 2, pp. 17–43

Incident Recovery continued

“Network Security Monitoring,” by Richard Bejtlich, Chapter 1

Start Milestone 4: Penetration Test Report with Mitigations

Social Engineering Lab due

Malware Analysis

Introduction and Chapter 0 of Practical Malware Analysis by Sikorski and Honig.

HBR Case Study: “CYBERATTACK:”The Maersk Global Supply-Chain Meltdown,” Wesley et al.

“The Untold Story of NotPetya,” by Andy Greenberg

Network Security Monitoring Lab due

Fall Break – No Class Meeting

HBP Case Study: “Data Breach at Equifax,” Srinivasan et al.

Thanksgiving – No Class Meeting

Milestone 4: Final Penetration Test Report with Mitigations due

Malware Analysis Lab due

Course Wrap-up

Final Exam opens

Final Exam closes