- Week
|
- Objectives and Tasks
|
- Course Notes / Assigned Reading
|
- Labs
|
- Week 1
|
- Course Introduction:
- SEC520 WIKI
- Course Outline
- Course Policies
- Required Materials
- Lab Setup
- Developing a "Security Mind":
- 4 Virtues of Internet Security
- 8 Rules of Internet Security
- Penetration Testing:
-
- Information Gathering
- Foot-printing
- User Information
- Verification
|
- Slides (Concepts):
- [ odp ] [ pdf ] [ ppt ] Course Intro / The "Security Mind"
- [ odp ] [ pdf ] [ ppt ] Penetration Testing: Reconnaissance
- Reading References:
- YouTube Videos:
- Resources:
|
- Lab 1:
- Set-Up for Labs:
- Lab 2:
- Pentration Testing:
|
- Week 2
|
- Scanning, Enumeration, & Vulnerability Testing:
- Penetration Testing (Continued):
|
- Slides (Concepts):
- [ odp ] [ pdf ] [ ppt ] Scanning & Enumeration
- [ odp ] [ pdf ] [ ppt ] Vulnerability Testing
- Reading References:
- YouTube Videos:
- Resources:
|
- Lab 3:
- Penetration Testing / Continued:
WARNING!
Scanning ports must require the permission of Server Owner (preferably in writing). Student must either work in Security lab to scan each others' ports, or sign an agreement to scan the Tank server within or outside Seneca College.
- Assignment #1 Posted:
|
- Week 3
|
- System Hardening in Linux:
- Purpose
- Rule of Preventative Action
- Rule of Separation
- Rule of Least Privilege
- AAA Protocol (Authentication):
|
- Slides (Concepts):
- [ odp ] [ pdf ] [ ppt ] Linux Hardening (part 1)
- Reading References:
- YouTube Videos:
-
- Part1 | Part 2 | Part 3
- Resources:
|
- Lab 4:
- System Hardening
|
- Week 4
|
- System Hardening in Linux / Continued:
- AAA Protocol (Authorization):
- ACLs
- SELinux
- Sudo
- Cron Jobs
- Turning Off Xwindows
|
- Slides (Concepts):
- [ odp ] [ pdf ] [ ppt ] Linux Hardening (part 2)
- YouTube Videos:
- Reading References:
- Resources:
|
- Lab 5:
- System Hardening
|
- Week 5
|
- Midterm (Test #1) Review:
- Complete Labs 1 - 5
- Submit Assignment #1
- Review for Midterm
|
|
- Assignment #1 Due:
- Assignment Submission Instructions
|
- Week 6
|
- Midterm (Test #1):
|
|
|
- Week 7
|
- Types of Attacks:
-
- Phishing
- Webbrowser - Malicious Payloads
- IP Spoofing (Man in the Middle) / Password
- Out-dated Software Patches
- Database Injection
- Password Cracking
|
- Slides (Concepts):
- YouTube Videos:
- Reading References:
|
- Lab 6:
- Attack Categories:
WARNING!
Scanning ports and exploiting servers must require the permission of Server Owner (preferably in writing). Student must either work in Security lab to scan each others' ports, or sign an agreement to scan the Tank server within or outside Seneca College.
|
| Study Week
|
|
- Week 8
|
- Hardening Windows 2003 Server:
- Installing and Configuring Security Configuration Wizard
- Using New Technology File System (NTSF)
- Configuring Automatic Updates
|
- Slides (Concepts):
- Reading References:
- YouTube Videos:
- Resources:
|
- Lab 7:
|
|
- Week 9
|
- Intrusion Detection:
- Purpose
- Logs
- Monitoring
- Iptables
- Using Tripwire
|
- Slides (Concepts):
- [ odp ] [ pdf ] [ ppt ] Intrusion Detection / Using Tripwire
- Reading References:
- YouTube Videos:
- Additional Resources (for interest):
|
- Lab 8:
- Assignment #2 Posted:
|
- Week 10
|
- Additional Considerations:
- Decoys: Honey-Pots
- Disaster Recovery
- The BIGGER Picture
|
- Slides:
- Reading References:
- YouTube Videos:
- Resources:
|
|
- Week 11
|
- Test #2:
|
|
|
- Week 12
|
- Assignment #2 Evaluation:
- Presentations
- Evaluate Secured System
|
|
- Assignment #2 Due:
- Assignment Submission Instructions
|
|
- Week 13
|
- Final Exam Review
|
|
|
| Exam Week - TBA
|
