Managing Enterprise Cybersecurity

Introduction to the Course

Anderson, Ch. 1

Threat modeling

Read the beginning of each chapter, skim the rest of the chapter: “Threat Modeling,” by Adam Shostack, Introduction, Chapter 1, Chapter 4

Optional: Schneier, Chapter 21

Risk Assessment

Lab 1: Threat Modeling due

Start Milestone 1: Risk Assessment Report Draft

Information Privacy

Tim Cook, “‘Technology can harm, can help”

Lab 2: Web Privacy and Anonymity Lab due

Introduction to Cryptography

Milestone 1: Risk Assessment Report Draft due

Introduction to Cryptography continued…

No Class Meeting

Lab 3: Introduction to Google Cloud Platform and Linux Tutorial due

Milestone 2: Risk Assessment Final Report due

Symmetric Cryptography

Anderson, Chapter 5

Lab 4: Symmetric Encryption & Hashing due

Asymmetric Cryptography

Anderson Chapter 5

Digital Certificates and Public Key Infrastructure

Lab 5: Asymmetric Cryptography due

Authentication and Passwords

Gosney, “How LinkedIn’s password sloppiness hurts us all“

Goodin, “Why passwords have never been weaker“

Midterm Exam opens

Password Cracking

Lab 6: Digital Certificates and Trust due

Lab 7: Password Cracking due

Introduction to Networking

Deadline for Mid-term Exam 

Vulnerability Scanning

Vulnerability Scanning continued (Group Work Day)

Start Milestone 3: Penetration Test

Vulnerability Exploitation

Thursday, 10/21/2021

Lab 8: Vulnerability Discovery due

Vulnerability Exploitation continued

Human Element – Information Security in Organizations

Online video: Bruce Schneier, The Security Mirage

“Cosmo, the Hacker ‘God’ Who Fell to Earth,” by Mat Honan.

Thursday, 10/28/2021

Lab 9: Vulnerability Exploitation due

Physical Security

Network Security Monitoring

“Network Security Monitoring,” by Richard Bejtlich, Chapter 1

Lab 10: Physical Security Scavenger Hunt

Incident Response – Equifax Case Study

HBP Case Study: “Data Breach at Equifax,” Srinivasan et al.

Milestone 3: Penetration Test Report due

Incident Recovery – Maersk Case Study

HBR Case Study: “CYBERATTACK:”The Maersk Global Supply-Chain Meltdown,” Wesley et al.

Lab 11: Social Engineering due

Incident Recovery continued

The Untold Story of NotPetya,” by Andy Greenberg

Malware Analysis

Introduction and Chapter 0 of Practical Malware Analysis by Sikorski and Honig.

Lab 12: Network Security Monitoring due

Malware Analysis continued…

“

Fall Break – No Class Meeting

Thanksgiving – No Class Meeting

Course Wrap-up

Lab 13: Malware Analysis due

Course Wrap-up continued

Final Exam opens

Saturday,

12/11/2021

Milestone 4: Final Penetration Test Report with Mitigations due

Final Exam closes