Information Systems Integration

Introduction to the Course

Threat Modeling

Anderson, Ch. 1

Read the beginning of each chapter, skim the rest of the chapter:

“Threat Modeling,” by Adam Shostack, Introduction, Chapter 1, Chapter 4

Optional: Schneier, Chapter 21

Introduction to Linux | Google Cloud Platform (GCP)

Introduction to Cryptography

Symmetric Cryptography

Asymmetric Cryptography

Lab 1: Threat Modeling

Quiz: Anderson, Ch. 5, pp. 129-149 (2nd ed.); pp. 138–156 (3rd ed.).

Tutorial: Introduction to Linux

Tutorial: Introduction to Google Cloud Platform

Crypto Wars

Digital Certificates and PKI

Assign Milestone 1: Threat model

Authentication and Passwords

Password Cracking

2nd edition: Anderson Ch. 2, pp. 31-39, 56-58

Or:

3rd edition: Anderson Ch. 3, pp. 90-97 (section 3.4–3.4.4.2)-, pp. 105-110 (section 3.4.9–3.4.12) 

Gosney, “How LinkedIn’s password sloppiness hurts us all“

Goodin, “Why passwords have never been weaker” 

Quiz: Authentication and Passwords

Lab 3: Asymmetric Cryptography

Introduction to networking

Vulnerability Scanning

No class; Milestone group work day 

Lab 4: Digital Certificates and PKI

No class; Spring Break

Assign Milestone 2: Penetration test

Vulnerability Exploitation

In-class lab work

Milestone 1: Threat Model due

Lab 5: Password Cracking

Exploitation demonstration

Milestone group workday

Lab 6: Vulnerability Scanning

Assign Milestone 3

Physical security

The Human Element of Security

Online video: Bruce Schneier, The Security Mirage

“Cosmo, the Hacker ‘God’ Who Fell to Earth,” by Mat Honan.

Anderson, Chapter 11 (Physical Protection)

Assign Milestone 4

Incident Response

Information Privacy

Quiz: Anderson, Chapter 11 (Physical Protection)

Lab 7: Exploitation

Milestone 2: Penetration test report draft due

Risk assessment

Lab 8: Physical Security

Lab 9: Social Engineering

Quiz: “Citizenfour” film

Milestone 3: Penetration test report due (Due 1 Week from Comments)

Assign Milestone 5

Malware Analysis

Risk case study: Maersk

Milestone 4: Risk assessment report draft

Read Case Study: Link

Course wrap-up

Quiz: “Zero Days” film.

Lab 10: Web Privacy

Lab 11: Malware Analysis (Extra Credit)

Final exam period begins

Final Exam (Online via Canvas)

Milestone 5: Final risk assessment report due

Last day of final exams