SEC520 Weekly Schedule

SEC520 Weekly Schedule

Winter 2015

Instructor:
Murray Saul (A)

Week	Objectives and Tasks	Course Notes / Assigned Reading	Labs
Week 1	Course Introduction: SEC520 WIKI Course Outline Course Policies Required Materials Lab Setup	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Course Intro / The "Security Mind" Reading References: Computer Security Basics (E-book) (Chapter 1: The New Insecurity) Inside the Security Mind, Making the Tough Decisions (E-Book) (Chapters 1 - 3) Penetration Tester's Open Source Toolkit (E-book) (Chapter 2: Reconnaissance) Resources: SEC520 WIKI Course Outline Course Policies Required Materials	Lab 1: Set-Up for Labs: Setup Hard Disk Pack for Labs
Week 2	Developing a "Security Mind": 4 Virtues of Internet Security 8 Rules of Internet Security Penetration Testing: Reconnaissance: Information Gathering Foot-printing User Information Verification	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Penetration Testing: Reconnaissance Reading References: Inside the Security Mind, Making the Tough Decisions (E-Book) (Chapters 1 - 3) Penetration Tester's Open Source Toolkit (E-book) (Chapter 2: Reconnaissance) YouTube Videos: Reconnaissance	Lab 2: Pentration Testing: Reconnaissance
Week 3	Scanning, Enumeration, & Vulnerability Testing: Penetration Testing (Continued): Scanning Enumeration Vulnerability Testing	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Scanning & Enumeration Reading References: Penetration Tester's Open Source Toolkit (E-book) (Chapter 3) YouTube Videos: Scanning 1 , Scanning 2 Enumeration Resources: Nmap Reference Guide (How to use nmap utility to scan ports)	Lab 3: Penetration Testing / Continued: Scanning, Enumeration, & Vulnerability Testing WARNINGS! Scanning ports must require the permission of Server Owner (preferably in writing). Student must either work in Security lab to scan each others' ports, or sign an agreement to scan the Tank server within or outside Seneca College. Your instructor will hand-out permission forms to allow students to obtain Tank accounts, and allow students to perform ethical "penetration testing" on that server. Students must sign this form, hand back to the instructor, and await further instructions before proceeding with penetration testing on the tank server
Week 4	Scanning, Enumeration, & Vulnerability Testing: Vulnerability Testing	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Vulnerability Testing [ pdf ] Interpreting and Respecting the Rules for the Tank Server Reading References: Penetration Tester's Open Source Toolkit (E-book) (Chapter 3) YouTube Videos: Vulnerability Testing - Overview Nessus Accessing System Via Metasploit (web-browser) Resources: Using Armitage (Metasploit Framework)	Lab 3: Continue Working on Lab 3
Week 5	Types of Attacks: Client-side Attacks Phishing Webbrowser - Malicious Payloads IP Spoofing (Man in the Middle) / Password Server-side Attacks Out-dated Software Patches Database Injection Password Cracking	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Types of Attacks YouTube Videos: Phishing Malicious Payload IP Spoofing Database Injection Password Cracking Reading References: Penetration Tester's Open Source Toolkit (E-book) (Chapters 4,5,6) Resources: ATLAS Web-page (Active Threat Level Analysis System) Top Security Risks 2009 (SANS Institute)	Lab 4: Attack Categories: Types of Attacks WARNINGS! Scanning ports must require the permission of Server Owner (preferably in writing). Student must either work in Security lab to scan each others' ports, or sign an agreement to scan the Tank server within or outside Seneca College. Your instructor will hand-out permission forms to allow students to obtain Tank accounts, and allow students to perform ethical "penetration testing" on that server. Students must sign this form, hand back to the instructor, and await further instructions before proceeding with penetration testing on the tank server
Week 6	Hardening Windows 2003 Server: Installing and Configuring Security Configuration Wizard Using New Technology File System (NTSF) Configuring Automatic Updates Test #2: Test Details	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Hardening - Basic Concepts [ odp ] [ pdf ] [ ppt ] Hardening Windows Reading References: Intrusion Discovery - Windows Hardening Windows, 2nd Edition (Chapter 5 - Pages: ) "Know Your Enemy: The Script Kiddie" YouTube Videos: Security Configuration Wizard 2003 Resources:	Lab 5: Hardening Windows 2003 Server Assignment #1: Assignment Instructions (N/A)
Week 7	Midterm (Test #1): (Check course announcements for test details)		Additional Tasks: Continue working on Lab 5 Work on Assignment #1
Study Week
Week 8	System Hardening in Linux: Purpose Rule of Preventative Action Rule of Separation Rule of Least Privilege AAA Protocol (Authentication): PKI PAM Kerebos	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Linux Hardening Reading References: Intrusion Discovery - Linux Linux Security Cookbook (E-book) (Chapter 4 - Pages: ) YouTube Videos: Linux Hardening Part1 | Part 2 | Part 3 PAM Resources: Why Use PAM? Understanding and Configuring PAM	Lab 6: System Hardening Linux System Hardening (part 1) Assignment #1 Due
Week 9	System Hardening in Linux / Continued: AAA Protocol (Authorization): ACLs SELinux Sudo Cron Jobs Turning Off Xwindows	Slides (Concepts): YouTube Videos: ACLs SELinux Sudo Cron Jobs Reading References: Linux Security Cookbook (Chapter 5 - Pages: ) SELinux by Example (Chapter x - Pages: ) Resources: How to Use ACLs SELinux Sudo In a Nutshell	Lab 7: System Hardening Linux System Hardening (part 2) Assignment #2: Assignment Instructions (N/A)
Week 10	System Hardening in Linux / Continued: Complete Labs 6 and 7		Labs: Complete Labs 6 and 7
Week 11	Intrusion Detection: Purpose Logs Monitoring Iptables Using Tripwire Additional Considerations: Decoys: Honey-Pots DMZs Disaster Recovery The BIGGER Picture	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Intrusion Detection / Using Tripwire Reading References: Intrusion Discovery - Linux Linux Security Cookbook (Chapter 1 - Pages: ) YouTube Videos: Iptables Additional Resources:	Lab 8: Intrusion Detection
Week 12	Work on Assignment #2 Complete Report		Assignment #2 Due:
Week 13	Final Exam Review Details
Exam Week - TBA