Managing Enterprise Cybersecurity

Introduction to the Course

Anderson, Ch. 1

Risk Assessment

Threat modeling

Start Milestone 1: Risk Assessment

Read the beginning of each chapter, skim the rest of the chapter:

“Threat Modeling,” by Adam Shostack, Introduction, Chapter 1, Chapter 4

Optional:

Schneier, Chapter 21

Information Privacy

Tim Cook, “‘Technology can harm, can help”

Information Privacy Lab due

Information Security in Organizations

Introduction to Google Cloud Platform and Linux Tutorial Lab due

Introduction to Cryptography

Milestone 1: Risk Assessment Draft due

Symmetric Cryptography

Anderson, Ch. 5, pp. 140–148, 153–155.

Symmetric Cryptography, continued

Asymmetric Cryptography

Digital Certificates and PKI

Anderson Ch. 3, pp. 97-103, 113–118 (section 3.4–3.4.4.2, 3.4.9–3.4.12)

Symmetric Cryptography Lab due

Authentication and Passwords

Asymmetric Cryptography Lab due

Password Cracking

Gosney, “How LinkedIn’s password sloppiness hurts us all“

Goodin, “Why passwords have never been weaker“

Digital Certificates lab due

Introduction to networking

Milestone 2 Final Risk Assessment Report due

Midterm exam opens

Vulnerability Scanning

Password cracking lab due

Vulnerability Exploitation

Midterm exam due

Vulnerability scanning lab due

Exploitation demonstration

Milestone 3 penetration test begins

Milestone group workday

Vulnerability exploitation lab due

Physical security

The Human element of security

Online video: Bruce Schneier, The Security Mirage

“Cosmo, the Hacker ‘God’ Who Fell to Earth,” by Mat Honan.

Anderson, Chapter 2, pp. 89–95; Chapter 13

Network Security Monitoring

“Network Security Monitoring,” by Richard Bejtlich, Chapter 1

Milestone 3 penetration test draft due

Incident Response

Malware Analysis

Introduction and Chapter 0 of Practical Malware Analysis by Sikorski and Honig.

Respond case study: Equifax

Harvard case: “Data Breach at Equifax,” Srinivasan et al.

Social Engineering Lab due

Recover case study: Maersk

“The Untold Story of NotPetya,” by Andy Greenberg

Milestone group work time

Fall Break (no class)

Milestone group work time

Course wrap-up

Final Milestones 4-5 Report due

Malware analysis lab due

Network security monitoring lab due

Final exam period begins

Last day of final exams