1,576
edits
Changes
m
::* [https://cs.senecac.on.ca/~scs/DonMillsPolicies/policy.html Course Policies]::* [http://zenit.senecac.on.ca/wiki/index.php/SEC520#Supplies_Checklist_ Required Materials are listed in your Supplies Checklist.28Required_for_Second_ClassOther materials and references are noted week by week.29 Required Materials]
<div><b>WARNINGS!</b><br /><ol><li>'''Scanning ports must require the permission of Server Owner''' (preferably in writing). Student must either work in Security lab to scan each others' ports, or sign an agreement to scan the Tank server within or outside Seneca College.<br /><br /><li>'''Your instructor will hand-out permission forms to allow students to obtain Tank accounts, and allow students to perform ethical "penetration testing" on that server'''. Students <b><u>must</u></b> sign this form, hand back to the instructor, and await further instructions before proceeding with penetration testing on the tank server</li></ol></div>
::* [ [http://matrix.senecac.on.ca/~murray.saul/tank-rules.odp odp] ] [ [http://matrix.senecac.on.ca/~murray.saul/tank-rules.pdf pdf] ] [ [http://matrix.senecac.on.ca/~murray.saul/tank-rules.ppt ppt] ] Interpreting and Respecting the Rules for the Tank Server
|
:'''Hardening Windows 2003 Server:'''
::*Installing and Configuring Security Configuration Wizard
::*Using New Technology File System (NTSF)
::*Configuring Automatic Updates
:'''Test #2:'''
::*Test Details
|
:'''Slides (Concepts):'''
::* [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w8_l1.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w8_l1.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w8_l1.ppt ppt] ] Hardening Windows
:'''Reading References:'''
::*[http://www.sans.org/score/checklists/ID_Windows.pdf Intrusion Discovery - Windows]
::* [http://lcweb.senecac.on.ca:2052/toc.aspx?site=RYW9D&bookid=12602 Hardening Windows, 2nd Edition]<br />(Chapter 5 - Pages: )
:'''YouTube Videos:'''
::*[http://www.youtube.com/watch?v=df1_yx2fa8g Security Configuration Wizard 2003]
:'''Resources:'''
::*
|
:'''Lab 4:'''
::*[https://scs.senecac.on.ca/~fac/sec520/labs/SEC520_Lab_4.html Hardening Windows 2003 Server]
:'''Assignment #1 Posted:'''
::* Assignment Instructions (N/A)
|- valign="top"
|
:'''Week 6'''
|
:'''Slides (Concepts):'''
::*[ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w3_l1.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w3_l1.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w3_l1.ppt ppt] ] Linux Hardening (part 1)
:'''Reading References:'''::*[http://lcweb.senecac.on.ca:2063/0596003919 Linux Security Cookbook (E-book)]<br />(Chapter 4 - Pages: )|
:'''YouTube Videos:'''
::*Linux Hardening
:::[http://www.youtube.com/watch?v=GJMKgV8V4FI Part1] | [http://www.youtube.com/watch?v=M9LdGH_AIZo Part 2] | [http://www.youtube.com/watch?v=0tEBXWU6Au4 Part 3]
::*[http://www.youtube.com/watch?v=yy1NR74ttAw&feature=results_main&playnext=1&list=PL48E055817B95897B PAM]
|
:'''Lab 4:'''
::System Hardening
::*[https://scs.senecac.on.ca/~fac/sec520/labs/SEC520_Lab_4.html Linux System Hardening (part 1)]
:'''YouTube Videos:'''
::*[http://www.youtube.com/watch?v=6piQXXHTmqk ACLs]
::*[http://www.youtube.com/watch?v=fpXuWhshKVA SELinux]
::*[http://www.youtube.com/watch?v=imnEUvvDxc4 Sudo]
::*[http://www.youtube.com/watch?v=4Icg3MYZZqI Cron Jobs]
:'''Reading References:'''
::*[http://lcweb.senecac.on.ca:2063/0596003919 Linux Security Cookbook]<br />(Chapter 5 - Pages: )
::*[http://lcweb.senecac.on.ca:2063/0131963694?uicode=seneca SELinux by Example]<br />(Chapter x - Pages: )
:'''Resources:'''::* [http://www.linuxquestions.org/linux/answers/security/acls_extended_filepermissions How to Use ACLs]::* SELinux::* [http://www.sudo.ws/sudo/intro.html Sudo In a Nutshell]|
:'''Assignment #1 Due'''
:'''Assignment #2 Posted:'''
::*[https://scs.senecac.on.ca/~fac/sec520/assignments/SEC520_Assignment_2.html Assignment Instructions]
|- valign="top"
|
:'''Week 10'''
:'''Additional Considerations:'''::*Decoys: Honey|-Pots::*DMZs::*Disaster Recovery::*The BIGGER Picturevalign="top"
:'''Slides (Concepts):'''
::*[ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w9_l1.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w9_l1.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w9_l1.ppt ppt] ] Intrusion Detection / Using Tripwire
:'''Reading References:'''::*[http://www.sans.org/score/checklists/ID_Linux.pdf Intrusion Discovery - Linux]::*[http://lcweb.senecac.on.ca:2063/0596003919 Linux Security Cookbook]<br />(Chapter 1 - Pages: )|
:'''YouTube Videos:'''
::*[http://www.youtube.com/watch?v=kUdCsZpt2ew Iptables]
:'''Additional Resources:'''
::*
Protected "SEC520 Weekly Schedule": OER transfer ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))
[[Category:SEC520]]
=SEC520 Weekly Schedule=
== Winter 2018==
::Instructor:<br />Austin (SAA)<br />Craig Barretto (craig.barretto@senecacollege.ca)
1 credit
::*Quiz and Labs ( 4 Quiz, 7 Labs (15%))
::::'''Logbooks due April 10th, 2018'''
::*Assignments (2) 20%
::::'''Assignment 1 - Due Date March 9''''''
::::'''Assignment 2 - Due Date TBA''''''
::*Tests (2) 30%
::::'''Written Test - March 8''''''
::::'''Lab Test - March 15'''''
::*Final Test 35%
{|width="100%" border="1" cellspacing="2"
| style="width: 10%;" |
:'''Reading References:'''
::* [http://lcweb.senecac.on.ca:2053/0596006691 Computer Security Basics (E-book)]<br />(Chapter 1: The New Insecurity)
::* [http://libcat.senecac.on.ca/vwebv/holdingsInfo?searchId=86056&recCount=50&recPointer=0&bibId=263746 Inside the Security Mind, Making the Tough Decisions (E-Book)] (Chapters 1 - 3)
::* [http://libcat.senecac.on.ca/vwebv/holdingsInfo?searchId=89542&recCount=50&recPointer=0&bibId=315433 Penetration Tester's Open Source Toolkit (E-book)]<br />(Chapter 2: Reconnaissance)
::* [http://zenit.senecac.on.ca/wiki/index.php/SEC520 SEC520 WIKI]
::* [https://scs.senecac.on.ca/course/sec520 Course Outline]
::*[http://www.youtube.com/watch?v=_Ch0RJlHFBo Scanning 1] , [http://www.youtube.com/watch?v=WKLNAAt57Wg Scanning 2]
::*[http://www.youtube.com/watch?v=_Ch0RJlHFBo Enumeration]
::*[https://pentest-tools.com/network-vulnerability-scanning/tcp-port-scanner-online-nmap Online Pen-Test Scanner]::*[https://www.youtube.com/watch?v=dR7NTYfmNcA Prep for Metasploit]
:'''Resources:'''
<div class="messagebox" style="background-color: #f9f6b7; border: 1px solid #c4c295; color: black; padding: 5px; margin: 1ex 0; min-height: 35px; margin-left:15px; margin-right:10px; padding-left: 20px;">
<div style="float: left; margin-left: -40px;"></div>
</div>
:'''Slides (Concepts):'''
::* [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w2_l2.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w2_l2.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w2_l2.ppt ppt] ] Vulnerability Testing
:'''Reading References:'''
:'''Resources:'''
::*[https://www.youtube.com/watch?v=r4Qq2eVjiP0 Setting up the Metasploit database]::*[https://www.youtube.com/watch?v=x01ZErjNlX0 First Metasploit Payload]::*[http://www.commonexploitsyoutube.com/watch?pv=243 jJd5qg3fkyw Using Armitage] (Metasploit Framework)]
:'''Lab 3:'''
::Continue Working on '''Lab 3'''
|
:'''Week 5'''
|
::*[http://atlas.arbor.net/ ATLAS Web-page] (Active Threat Level Analysis System)
::*[http://www.sans.org/top-cyber-security-risks/summary.php Top Security Risks 2009 (SANS Institute)]
::*[https://github.com/WebGoat/WebGoat/wiki Webgoat]
:'''Lab 54:'''
:Attack Categories:
::*[https://scs.senecac.on.ca/~fac/sec520/labs/SEC520_Lab_5SEC520_Lab_4.html Types of Attacks]
<div class="messagebox" style="background-color: #f9f6b7; border: 1px solid #c4c295; color: black; padding: 5px; margin: 1ex 0; min-height: 35px; margin-left:15px; margin-right:10px; padding-left: 20px;">
<div style="float: left; margin-left: -40px;"></div>
<div><b>WARNINGS!</b><br /><ol><li>'''Scanning ports must require the permission of Server Owner''' (preferably in writing). Student must either work in Security lab to scan each others' ports, or sign an agreement to scan the Tank any server within or outside Seneca College.<br /><br /><li>'''Your instructor will hand-out permission forms to allow students to obtain Tank accounts, and allow students to perform ethical "penetration testing" on that server'''. Students <b><u>must</u></b> sign this form, hand back to the instructor, and await further instructions before proceeding with penetration testing on the tank server</li></ol></div>
</div>
|- valign="top"| :'''Week 6''' More on mysql injection and Webgoat | ::* [[https://www.youtube.com/watch?v=Rqt_BgG5YyI Blind MySQL injection video]]'''Moved until after the break''Additional Tasks':'''Hardening Windows 7/8/10'''::*Installing and Configuring Security Configuration Wizard::Work on *Using New Technology File System (NTSF)::*Configuring Automatic Updates :'''Assignment Test #1: Details, March 6th'''::# Quiz 2 (February 22) | :'''Slides (Concepts):''' ::*[ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w3_l1.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w3_l1.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w3_l1.ppt ppt] ] Hardening - Basic Concepts::* [ [http://cs.senecac.on.ca/~fac/sec520/labs/sec520_lab5.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/labs/sec520_lab5.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/labs/sec520_lab5.pptx pptx] ] Hardening Windows :'''Reading References:'''::*[https://www.sans.org/media/score/checklists/ID-Windows.pdf Intrusion Discovery - Windows]::* [http://lcweb.senecac.on.ca:2052/toc.aspx?site=RYW9D&bookid=12602 Hardening Windows, 2nd Edition]<br />(Chapter 5 - Pages: )::* [http://old.honeynet.org/papers/enemy/ "Know Your Enemy: The Script Kiddie"] :'''YouTube Videos:'''::*[] :'''Resources:'''::* |
:'''Assignment #1:'''
::* Assignment Instructions (N/A)
::Continue working on '''Lab 4''' and install Webgoat
:'''Midterm (Test #1March 6th):'''
::*(Check course announcements for test details)
:'''Additional Tasks:'''
::Continue working on '''Lab 5:'''::*'''Hardening Windows 7/8/10'''
::Work on '''Assignment #1'''
|- valign="center"
!colspan="4"|<br />'''Study Week'''
:'''Week 58'''
:'''System Hardening in Linux:Types of Penetration Testing'''::*PurposeNetwork::*Rule of Preventative ActionAccess Control::*Rule of SeparationInfrastructure / Patching::*Rule of Least PrivilegePhysical/Building Security:::*AAA Protocol (Authentication):Social Engineering::::*PKI::::*PAM|::::*Kerebos
:'''Slides (Concepts): See Blackboard'''
:'''ResourcesLab 6:'''::* [http://www.linuxdoc.org/HOWTO/User-Authentication-HOWTO/x115.html Why Use PAM?]::* [http://www.ibm.com/developerworks/linux/library/l-pam/index.html Understanding and Configuring PAM]Work on vulnerable Windows 7 VM CTF
:'''Assignment #1 Due'''
:'''Week 89'''
|
:'''System Hardening in Linux / Continued:Passwords, Pwn'ing, & Pillaging'''::*AAA Protocol (Authorization)::::*ACLs:::*SELinux:::*Sudo:::*Cron Jobs:::*Turning Off Xwindows
:'''Slides (Concepts):See Blackboard'''::* [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w4_l1.odp odp] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w4_l1.pdf pdf] ] [ [http://cs.senecac.on.ca/~fac/sec520/slides/sec520_w4_l1.ppt ppt] ] Linux Hardening (part 2)
:'''Lab 7:'''
::Continue to work on vulnerable Windows 7 VM CTF
|- valign="top"
|
:'''Week 10'''
|
:'''Lab 5:Metasploit and Metasploitable 2'''::System Hardening::*[https://scs.senecac.on.ca/~fac/sec520/labs/SEC520_Lab_5.html Linux System Hardening (part 2)]
|
|
:'''Intrusion DetectionLabs:'''::*Purpose::*Logs::*Monitoring::*Iptables::*Using Tripwire
|
:'''Week 11'''
|
:'''Lab 78:'''::*[https://scs.senecac.on.ca/~fac/sec520/labs/SEC520_Lab_7.html Intrusion Detection]