Information Systems Integration

Introduction to the Course

Threat Modeling

Anderson, Ch. 1

Read the beginning of each chapter, skim the rest of the chapter:

“Threat Modeling,” by Adam Shostack, Introduction, Chapter 1, Chapter 4

Optional: Schneier, Chapter 21

Introduction to Linux | Google Cloud Platform (GCP)

Introduction to Cryptography

Symmetric Cryptography

Asymmetric Cryptography

Lab 1: Threat Modeling

Quiz: Anderson, Ch. 5, pp. 129-149 (2nd ed.); pp. 138–156 (3rd ed.).

Tutorial: Introduction to Linux

Tutorial: Introduction to Google Cloud Platform

Crypto Wars

Digital Certificates and PKI

Assign Milestone 1: Threat model

Authentication and Passwords

Password Cracking

2nd edition: Anderson Ch. 2, pp. 31-39, 56-58

Or:

3rd edition: Anderson Ch. 3, pp. 90-97 (section 3.4–3.4.4.2)-, pp. 105-110 (section 3.4.9–3.4.12) 

Gosney, “How LinkedIn’s password sloppiness hurts us all“

Goodin, “Why passwords have never been weaker” 

Quiz: Authentication and Passwords

Lab 3: Asymmetric Cryptography

Introduction to networking

Vulnerability Scanning

No class; Milestone group work day 

Lab 4: Digital Certificates and PKI

No class; Spring Break

Assign Milestone 2: Penetration test

Vulnerability Exploitation

In-class lab work

Milestone 1: Threat Model due

Lab 5: Password Cracking

Exploitation demonstration

Milestone group workday

Lab 6: Vulnerability Scanning

Assign Milestone 3

Physical security

The Human Element of Security

Lab 7: Exploitation

Online video: Bruce Schneier, The Security Mirage

“Cosmo, the Hacker ‘God’ Who Fell to Earth,” by Mat Honan.

Quiz: Anderson, Chapter 11

Milestone 2: Penetration test report draft due

Assign Milestone 4

Incident Response

IoT Security

Assign Milestone 5

Risk assessment

Information Privacy

Lab 8: Physical Security

Lab 9: Social Engineering

Quiz: Tim Cook, “Technology can harm, can help”

Quiz: “Citizenfour” film

Milestone 3: Penetration test report due

Malware Analysis

Information Security in Organizations

Quiz: Introduction and Chapter 0 of Practical Malware Analysis by Sikorski and Honig.

Milestone 4: Risk assessment report draft

Risk case study: Maersk

Course wrap-up

Lab 10: Online Privacy

Quiz: “Zero Days” film.

Optional: Lab 11: Network Security Monitoring

Lab 12: Malware Analysis

Book report due

Extra credit film, book reports due

Milestone 5: Final risk assessment report due

Final exam period begins

Last day of final exams