Difference between revisions of "SEC520 Weekly Schedule"
m (Protected "SEC520 Weekly Schedule": OER transfer ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))) |
|||
(84 intermediate revisions by 4 users not shown) | |||
Line 1: | Line 1: | ||
[[Category:SEC520]] | [[Category:SEC520]] | ||
+ | =SEC520 Weekly Schedule= | ||
+ | == Winter 2018== | ||
+ | ::Instructor:<br />Austin (SAA)<br />Craig Barretto (craig.barretto@senecacollege.ca) | ||
+ | 1 credit | ||
+ | ::*Quiz and Labs ( 4 Quiz, 7 Labs (15%)) | ||
+ | ::::'''Logbooks due April 10th, 2018''' | ||
+ | ::*Assignments (2) 20% | ||
+ | ::::'''Assignment 1 - Due Date March 9'''''' | ||
+ | ::::'''Assignment 2 - Due Date TBA'''''' | ||
+ | ::*Tests (2) 30% | ||
+ | ::::'''Written Test - March 8'''''' | ||
+ | ::::'''Lab Test - March 15''''' | ||
+ | ::*Final Test 35% | ||
{|width="100%" border="1" cellspacing="2" | {|width="100%" border="1" cellspacing="2" | ||
| style="width: 10%;" | | | style="width: 10%;" | | ||
Line 37: | Line 50: | ||
:'''Reading References:''' | :'''Reading References:''' | ||
+ | ::* [http://lcweb.senecac.on.ca:2053/0596006691 Computer Security Basics (E-book)]<br />(Chapter 1: The New Insecurity) | ||
::* [http://libcat.senecac.on.ca/vwebv/holdingsInfo?searchId=86056&recCount=50&recPointer=0&bibId=263746 Inside the Security Mind, Making the Tough Decisions (E-Book)] (Chapters 1 - 3) | ::* [http://libcat.senecac.on.ca/vwebv/holdingsInfo?searchId=86056&recCount=50&recPointer=0&bibId=263746 Inside the Security Mind, Making the Tough Decisions (E-Book)] (Chapters 1 - 3) | ||
::* [http://libcat.senecac.on.ca/vwebv/holdingsInfo?searchId=89542&recCount=50&recPointer=0&bibId=315433 Penetration Tester's Open Source Toolkit (E-book)]<br />(Chapter 2: Reconnaissance) | ::* [http://libcat.senecac.on.ca/vwebv/holdingsInfo?searchId=89542&recCount=50&recPointer=0&bibId=315433 Penetration Tester's Open Source Toolkit (E-book)]<br />(Chapter 2: Reconnaissance) | ||
Line 44: | Line 58: | ||
::* [http://zenit.senecac.on.ca/wiki/index.php/SEC520 SEC520 WIKI] | ::* [http://zenit.senecac.on.ca/wiki/index.php/SEC520 SEC520 WIKI] | ||
::* [https://scs.senecac.on.ca/course/sec520 Course Outline] | ::* [https://scs.senecac.on.ca/course/sec520 Course Outline] | ||
− | + | ||
− | ::* | + | ::* Required Materials are listed in your Supplies Checklist. Other materials and references are noted week by week. |
Line 129: | Line 143: | ||
::*[http://www.youtube.com/watch?v=_Ch0RJlHFBo Scanning 1] , [http://www.youtube.com/watch?v=WKLNAAt57Wg Scanning 2] | ::*[http://www.youtube.com/watch?v=_Ch0RJlHFBo Scanning 1] , [http://www.youtube.com/watch?v=WKLNAAt57Wg Scanning 2] | ||
::*[http://www.youtube.com/watch?v=_Ch0RJlHFBo Enumeration] | ::*[http://www.youtube.com/watch?v=_Ch0RJlHFBo Enumeration] | ||
− | + | ::*[https://pentest-tools.com/network-vulnerability-scanning/tcp-port-scanner-online-nmap Online Pen-Test Scanner] | |
+ | ::*[https://www.youtube.com/watch?v=dR7NTYfmNcA Prep for Metasploit] | ||
:'''Resources:''' | :'''Resources:''' | ||
Line 146: | Line 161: | ||
<div class="messagebox" style="background-color: #f9f6b7; border: 1px solid #c4c295; color: black; padding: 5px; margin: 1ex 0; min-height: 35px; margin-left:15px; margin-right:10px; padding-left: 20px;"> | <div class="messagebox" style="background-color: #f9f6b7; border: 1px solid #c4c295; color: black; padding: 5px; margin: 1ex 0; min-height: 35px; margin-left:15px; margin-right:10px; padding-left: 20px;"> | ||
<div style="float: left; margin-left: -40px;"></div> | <div style="float: left; margin-left: -40px;"></div> | ||
− | + | ||
</div> | </div> | ||
Line 170: | Line 185: | ||
:'''Slides (Concepts):''' | :'''Slides (Concepts):''' | ||
::* [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w2_l2.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w2_l2.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w2_l2.ppt ppt] ] Vulnerability Testing | ::* [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w2_l2.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w2_l2.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w2_l2.ppt ppt] ] Vulnerability Testing | ||
− | + | ||
:'''Reading References:''' | :'''Reading References:''' | ||
Line 181: | Line 196: | ||
:'''Resources:''' | :'''Resources:''' | ||
− | ::*[http://www. | + | ::*[https://www.youtube.com/watch?v=r4Qq2eVjiP0 Setting up the Metasploit database] |
+ | ::*[https://www.youtube.com/watch?v=x01ZErjNlX0 First Metasploit Payload] | ||
+ | ::*[http://www.youtube.com/watch?v=jJd5qg3fkyw Using Armitage] (Metasploit Framework)] | ||
Line 189: | Line 206: | ||
:'''Lab 3:''' | :'''Lab 3:''' | ||
::Continue Working on '''Lab 3''' | ::Continue Working on '''Lab 3''' | ||
− | |||
Line 196: | Line 212: | ||
| | | | ||
− | + | ||
:'''Week 5''' | :'''Week 5''' | ||
+ | | | ||
− | + | :'''Types of Attacks:''' | |
− | + | ::*Client-side Attacks | |
+ | :::*Phishing | ||
+ | :::*Webbrowser - Malicious Payloads | ||
+ | :::*IP Spoofing (Man in the Middle) / Password | ||
+ | ::*Server-side Attacks | ||
+ | :::*Out-dated Software Patches | ||
+ | :::*Database Injection | ||
+ | :::*Password Cracking | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
Line 218: | Line 233: | ||
:'''Slides (Concepts):''' | :'''Slides (Concepts):''' | ||
− | ::*[ [http://cs.senecac.on.ca/~fac/sec520/slides/ | + | ::* [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w7_l1.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w7_l1.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w7_l1.ppt ppt] ] Types of Attacks |
+ | |||
+ | :'''YouTube Videos:''' | ||
+ | ::*[http://www.youtube.com/watch?v=ZUygX8TBBw0 Phishing] | ||
+ | ::*[http://www.youtube.com/watch?v=PqfZM3Lxrmg Malicious Payload] | ||
+ | ::*[http://www.youtube.com/watch?v=-hd7XG-b6uk IP Spoofing] | ||
+ | ::*[http://www.youtube.com/watch?v=AhTfo6pWBIM Database Injection] | ||
+ | ::*[http://www.youtube.com/watch?v=Iyh_w0Ix2bc Password Cracking] | ||
:'''Reading References:''' | :'''Reading References:''' | ||
− | ::*[http:// | + | ::* [http://libcat.senecac.on.ca/vwebv/holdingsInfo?searchId=89542&recCount=50&recPointer=0&bibId=315433 Penetration Tester's Open Source Toolkit (E-book)]<br />(Chapters 4,5,6) |
− | :''' | + | :'''Resources:''' |
− | ::* | + | |
− | + | ::*[http://atlas.arbor.net/ ATLAS Web-page] (Active Threat Level Analysis System) | |
− | ::*[ | + | ::*[http://www.sans.org/top-cyber-security-risks/summary.php Top Security Risks 2009 (SANS Institute)] |
+ | ::*[https://github.com/WebGoat/WebGoat/wiki Webgoat] | ||
− | |||
− | |||
− | |||
Line 237: | Line 257: | ||
:'''Lab 4:''' | :'''Lab 4:''' | ||
− | :: | + | :Attack Categories: |
− | ::*[https://scs.senecac.on.ca/~fac/sec520/labs/SEC520_Lab_4.html | + | ::*[https://scs.senecac.on.ca/~fac/sec520/labs/SEC520_Lab_4.html Types of Attacks] |
+ | |||
+ | |||
+ | <div class="messagebox" style="background-color: #f9f6b7; border: 1px solid #c4c295; color: black; padding: 5px; margin: 1ex 0; min-height: 35px; margin-left:15px; margin-right:10px; padding-left: 20px;"> | ||
+ | <div style="float: left; margin-left: -40px;"></div> | ||
+ | <div><b>WARNINGS!</b><br /><ol><li>'''Scanning ports must require the permission of Server Owner''' (preferably in writing). Student must either work in Security lab to scan each others' ports, or sign an agreement to scan any server.<br /><br /></ol></div> | ||
+ | </div> | ||
+ | |||
− | |||
− | |||
|- valign="top" | |- valign="top" | ||
Line 249: | Line 274: | ||
:'''Week 6''' | :'''Week 6''' | ||
+ | More on mysql injection and Webgoat | ||
| | | | ||
+ | ::* [[https://www.youtube.com/watch?v=Rqt_BgG5YyI Blind MySQL injection video]] | ||
+ | '''Moved until after the break''' | ||
+ | :'''Hardening Windows 7/8/10''' | ||
+ | ::*Installing and Configuring Security Configuration Wizard | ||
+ | ::*Using New Technology File System (NTSF) | ||
+ | ::*Configuring Automatic Updates | ||
− | :''' | + | :'''Test #1: Details, March 6th''' |
− | :: | + | ::# Quiz 2 (February 22) |
− | |||
| | | | ||
+ | |||
+ | :'''Slides (Concepts):''' | ||
+ | |||
+ | ::*[ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w3_l1.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w3_l1.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w3_l1.ppt ppt] ] Hardening - Basic Concepts | ||
+ | ::* [ [http://cs.senecac.on.ca/~fac/sec520/labs/sec520_lab5.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/labs/sec520_lab5.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/labs/sec520_lab5.pptx pptx] ] Hardening Windows | ||
+ | |||
+ | :'''Reading References:''' | ||
+ | ::*[https://www.sans.org/media/score/checklists/ID-Windows.pdf Intrusion Discovery - Windows] | ||
+ | ::* [http://lcweb.senecac.on.ca:2052/toc.aspx?site=RYW9D&bookid=12602 Hardening Windows, 2nd Edition]<br />(Chapter 5 - Pages: ) | ||
+ | ::* [http://old.honeynet.org/papers/enemy/ "Know Your Enemy: The Script Kiddie"] | ||
+ | |||
+ | :'''YouTube Videos:''' | ||
+ | ::*[] | ||
+ | |||
+ | :'''Resources:''' | ||
+ | ::* | ||
Line 266: | Line 313: | ||
− | :''' | + | |
− | ::Continue | + | |
− | + | ||
+ | :'''Assignment #1:''' | ||
+ | ::* Assignment Instructions (N/A) | ||
+ | ::Continue working on '''Lab 4''' and install Webgoat | ||
Line 281: | Line 331: | ||
− | :'''Midterm (Test #1):''' | + | :'''Midterm (Test #1 March 6th):''' |
::*(Check course announcements for test details) | ::*(Check course announcements for test details) | ||
Line 293: | Line 343: | ||
+ | :'''Additional Tasks:''' | ||
+ | :'''Lab 5:''' | ||
+ | ::*'''Hardening Windows 7/8/10''' | ||
+ | ::Work on '''Assignment #1''' | ||
+ | |||
+ | |- valign="center" | ||
+ | !colspan="4"|<br />'''Study Week''' | ||
− | |||
− | |||
|- valign="top" | |- valign="top" | ||
| | | | ||
− | + | ||
:'''Week 8''' | :'''Week 8''' | ||
− | |||
− | + | | | |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
+ | :'''Types of Penetration Testing''' | ||
+ | ::*Network | ||
+ | ::*Access Control | ||
+ | ::*Infrastructure / Patching | ||
+ | ::*Physical/Building Security | ||
+ | ::*Social Engineering | ||
| | | | ||
− | :'''Slides (Concepts):''' | + | :'''Slides (Concepts): See Blackboard''' |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
+ | | | ||
+ | :'''Lab 6:''' | ||
+ | ::Work on vulnerable Windows 7 VM CTF | ||
− | |||
− | |||
− | |||
− | |||
:'''Assignment #1 Due''' | :'''Assignment #1 Due''' | ||
− | |||
− | |||
− | |||
− | |||
− | |||
Line 363: | Line 398: | ||
− | :''' | + | :'''Passwords, Pwn'ing, & Pillaging''' |
− | + | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
Line 378: | Line 406: | ||
− | :'''Slides (Concepts):''' | + | :'''Slides (Concepts): See Blackboard''' |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
Line 400: | Line 415: | ||
| | | | ||
− | + | :'''Lab 7:''' | |
− | :'''Lab | + | ::Continue to work on vulnerable Windows 7 VM CTF |
− | : | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
Line 423: | Line 427: | ||
− | :''' | + | :'''Metasploit and Metasploitable 2''' |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
| | | | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
+ | | | ||
− | + | :'''Labs:''' | |
− | |||
− | |||
− | |||
|- valign="top" | |- valign="top" | ||
| | | | ||
− | |||
− | |||
:'''Week 11''' | :'''Week 11''' | ||
− | |||
| | | | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
Line 485: | Line 456: | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
Line 504: | Line 464: | ||
:'''Lab 8:''' | :'''Lab 8:''' | ||
− | |||
Latest revision as of 14:57, 21 July 2023
SEC520 Weekly Schedule
Winter 2018
- Instructor:
Austin (SAA)
Craig Barretto (craig.barretto@senecacollege.ca)
- Instructor:
1 credit
- Quiz and Labs ( 4 Quiz, 7 Labs (15%))
- Logbooks due April 10th, 2018
- Assignments (2) 20%
- Assignment 1 - Due Date March 9'
- Assignment 2 - Due Date TBA'
- Tests (2) 30%
- Written Test - March 8'
- Lab Test - March 15
- Final Test 35%
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
More on mysql injection and Webgoat |
Moved until after the break
|
|
|
|
|
|
|
Study Week
| |||
---|---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
|
|
Exam Week - TBA |