On a University-Wide Required Cyber- Security Course
Transcript of On a University-Wide Required Cyber- Security Course
![Page 1: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/1.jpg)
On a University-Wide Required Cyber-Security Course
By Raymond Greenlaw
![Page 2: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/2.jpg)
Collaborators
Christopher Brown, Frederick Crabbe, Rita Doerr, Chris Hoffmeister, Justin Monroe, Donald Needham, Andrew Phillips, Anthony Pollman, Stephen Schall, John Schultz, Steven Simon, David Stahl, and Sarah Standard
Raymond Greenlaw United States Naval Academy 2
![Page 3: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/3.jpg)
Outline
1. History 2. Course Overview 3. The Cyber Battlefield 4. Models and Tools 5. Cyber Operations 6. Some Thoughts 7. Questions
3 Raymond Greenlaw United States Naval Academy
![Page 4: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/4.jpg)
History
• US Naval Academy (USNA) Mission • President Obama’s May 2009 Cyberspace
Policy Review • USNA Cyber Warfare Ad Hoc Committee • USNA Ad Hoc Committee on Cyber-Security
Curriculum Options • Six Months to Implement
4 Raymond Greenlaw United States Naval Academy
![Page 5: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/5.jpg)
Overview: Course Mission
Educate each midshipman about cyber infrastructure and systems, inherent cyber vulnerabilities and threats, and appropriate defensive security procedures, thereby enabling them to make principled decisions regarding the potential benefits, consequences, and risks from a proposed use of an information system in today’s cyber-warfare environment.
5 Raymond Greenlaw United States Naval Academy
![Page 6: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/6.jpg)
Overview: Goals 1. Understand basic physical and virtual architecture of cyberspace—
individual computer and program, physical components and protocols of network and Internet, and web,
2. hands on experience with components of physical and virtual architecture of cyberspace and ability to relate that experience to larger system,
3. an understanding of DoD’s pillars of IA (CIANA), inherent vulnerabilities of information systems that endanger these properties, defensive measures to ensure information systems retain these properties, and offensive measures to violate these pillars, and
4. hands on experience with defensive and offensive practices in cyberspace, and ability to relate that experience to new or more sophisticated attacks and defenses.
6 Raymond Greenlaw United States Naval Academy
![Page 7: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/7.jpg)
Overview: Mechanics
• 2 hours lecture, 2 hours lab; 3 credits • Laptops • Software installation • Resource page • Weekly instructors’ meetings • Email list • Networking issues
7 Raymond Greenlaw United States Naval Academy
![Page 8: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/8.jpg)
The Cyber Battlefield 1
• Introduction • Digital Data 1 & 2 • Computer Architecture • PC Vivisection Lab • Operating Systems 1 & 2 • Programs Parts 1‒5
8 Raymond Greenlaw United States Naval Academy
![Page 9: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/9.jpg)
The Cyber Battlefield 2
• Web: Servers, Browsers, and HTML • Web: Build Your Webpage Lab • Web: Client-Side Scripting: non-event driven,
event driven, and forms • Web: Server-Side Scripting • Web: Injection Attacks & XSS
9 Raymond Greenlaw United States Naval Academy
![Page 10: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/10.jpg)
The Cyber Battlefield 3
• Networks, Protocols, the Internet: Parts 1‒4 • Networks: Build a LAN Prep • Networks: Build a LAN Lab • Networks: Wireless Networking • Networks: Build a Wireless-Network Lab
10 Raymond Greenlaw United States Naval Academy
![Page 11: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/11.jpg)
Models and Tools
• Information Assurance • Firewalls • Authentication/Cryptography Parts 1‒4 • Authentication/Cryptography: X.509
Certificates Lab
11 Raymond Greenlaw United States Naval Academy
![Page 12: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/12.jpg)
Cyber Operations 1
• Forensics • Phases of a Cyber Attack/Recon • Forensics Lab • Network Attack • Cyber Recon Lab • Network Defense • Malware
12 Raymond Greenlaw
United States Naval Academy
![Page 13: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/13.jpg)
Cyber Operations 2
• Cyber Attacks: Case Studies • Cyber Attack Lab • Attack Lab Debrief • Cyber Defense Lab • Defense Lab Debrief
Raymond Greenlaw United States Naval Academy 13
![Page 14: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/14.jpg)
Some Thoughts
• Diverse group of instructors • Manpower required • Instructor commitment • Investment in software, hardware, and support • Materials • Assessment • Ongoing development • Non-technical students • Student performance • Student retention • Workload
Raymond Greenlaw United States Naval Academy 14
![Page 15: On a University-Wide Required Cyber- Security Course](https://reader031.fdocuments.in/reader031/viewer/2022012023/6169d3e011a7b741a34bcf48/html5/thumbnails/15.jpg)
Questions?
Dr. Raymond Greenlaw United States Naval Academy www.raymondgreenlaw.com
Raymond Greenlaw United States Naval Academy 15
http://www.usna.edu/cs/si110.