SEC520 Weekly Schedule

SEC520 Weekly Schedule

Winter 2018

Instructor:
Austin (SAA)
Craig Barretto (craig.barretto@senecacollege.ca)

1 credit

• Quiz and Labs ( 4 Quiz, 7 Labs (15%))

Logbooks due February 22

• Assignments (2) 20%

Assignment 1 - Due Date March 9'

Assignment 2 - Due Date TBA'

• Tests (2) 30%

Written Test - March 8'

Lab Test - March 15

• Final Test 35%

Week	Objectives and Tasks	Course Notes / Assigned Reading	Labs
Week 1	Course Introduction: SEC520 WIKI Course Outline Course Policies Required Materials Lab Setup	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Course Intro / The "Security Mind" Reading References: Computer Security Basics (E-book) (Chapter 1: The New Insecurity) Inside the Security Mind, Making the Tough Decisions (E-Book) (Chapters 1 - 3) Penetration Tester's Open Source Toolkit (E-book) (Chapter 2: Reconnaissance) Resources: SEC520 WIKI Course Outline Required Materials are listed in your Supplies Checklist. Other materials and references are noted week by week.	Lab 1: Set-Up for Labs: Setup Hard Disk Pack for Labs
Week 2	Developing a "Security Mind": 4 Virtues of Internet Security 8 Rules of Internet Security Penetration Testing: Reconnaissance: Information Gathering Foot-printing User Information Verification	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Penetration Testing: Reconnaissance Reading References: Inside the Security Mind, Making the Tough Decisions (E-Book) (Chapters 1 - 3) Penetration Tester's Open Source Toolkit (E-book) (Chapter 2: Reconnaissance) YouTube Videos: Reconnaissance	Lab 2: Pentration Testing: Reconnaissance
Week 3	Scanning, Enumeration, & Vulnerability Testing: Penetration Testing (Continued): Scanning Enumeration Vulnerability Testing	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Scanning & Enumeration Reading References: Penetration Tester's Open Source Toolkit (E-book) (Chapter 3) YouTube Videos: Scanning 1 , Scanning 2 Enumeration Online Pen-Test Scanner Prep for Metasploit Resources: Nmap Reference Guide (How to use nmap utility to scan ports)	Lab 3: Penetration Testing / Continued: Scanning, Enumeration, & Vulnerability Testing
Week 4	Scanning, Enumeration, & Vulnerability Testing: Vulnerability Testing	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Vulnerability Testing Reading References: Penetration Tester's Open Source Toolkit (E-book) (Chapter 3) YouTube Videos: Vulnerability Testing - Overview Nessus Accessing System Via Metasploit (web-browser) Resources: Setting up the Metasploit database First Metasploit Payload Using Armitage (Metasploit Framework)]	Lab 3: Continue Working on Lab 3
Week 5	Types of Attacks: Client-side Attacks Phishing Webbrowser - Malicious Payloads IP Spoofing (Man in the Middle) / Password Server-side Attacks Out-dated Software Patches Database Injection Password Cracking	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Types of Attacks YouTube Videos: Phishing Malicious Payload IP Spoofing Database Injection Password Cracking Reading References: Penetration Tester's Open Source Toolkit (E-book) (Chapters 4,5,6) Resources: ATLAS Web-page (Active Threat Level Analysis System) Top Security Risks 2009 (SANS Institute) Webgoat	Lab 4: Attack Categories: Types of Attacks WARNINGS! Scanning ports must require the permission of Server Owner (preferably in writing). Student must either work in Security lab to scan each others' ports, or sign an agreement to scan any server.
Week 6 More on mysql injection and Webgoat	[Blind MySQL injection video] Moved until after the break Hardening Windows 7/8/10 Installing and Configuring Security Configuration Wizard Using New Technology File System (NTSF) Configuring Automatic Updates Test #1: Details, March 6th Quiz 2 (February 22)	Slides (Concepts): [ odp ] [ pdf ] [ ppt ] Hardening - Basic Concepts [ odp ] [ pdf ] [ pptx ] Hardening Windows Reading References: Intrusion Discovery - Windows Hardening Windows, 2nd Edition (Chapter 5 - Pages: ) "Know Your Enemy: The Script Kiddie" YouTube Videos: [] Resources:	Assignment #1: Assignment Instructions (N/A) Continue working on Lab 4 and install Webgoat
Week 7	Midterm (Test #1 March 6th): (Check course announcements for test details)		Additional Tasks: Lab 5: Hardening Windows 7/8/10 Work on Assignment #1
Study Week
Week 8	Types of Penetration Testing Network Access Control Infrastructure / Patching Physical/Building Security Social Engineering	Slides (Concepts): See Blackboard	Lab 6: Work on vulnerable Windows 7 VM CTF Assignment #1 Due
Week 9	Passwords, Pwn'ing, & Pillaging	Slides (Concepts): See Blackboard	Lab 7: Continue to work on vulnerable Windows 7 VM CTF
Week 10	Metasploit and Metasploitable 2		Labs:
Week 11			Lab 8:
Week 12	Work on Assignment #2 Complete Report		Assignment #2 Due:
Week 13	Final Exam Review Details
Exam Week - TBA