SEC520 Weekly Schedule

From CDOT Wiki
Jump to: navigation, search


SEC520 Weekly Schedule

Winter 2018

Instructor:
Austin (SAA)
Craig Barretto (craig.barretto@senecacollege.ca)

1 credit

  • Quiz and Labs ( 4 Quiz, 7 Labs (15%))
Logbooks due April 10th, 2018
  • Assignments (2) 20%
Assignment 1 - Due Date March 9'
Assignment 2 - Due Date TBA'
  • Tests (2) 30%
Written Test - March 8'
Lab Test - March 15
  • Final Test 35%
Week
Objectives and Tasks
Course Notes / Assigned Reading
Labs


Week 1


Course Introduction:
  • SEC520 WIKI
  • Course Outline
  • Course Policies
  • Required Materials
  • Lab Setup




Slides (Concepts):
  • [ odp ] [ pdf ] [ ppt ] Course Intro / The "Security Mind"


Reading References:


Resources:
  • Required Materials are listed in your Supplies Checklist. Other materials and references are noted week by week.



Lab 1:
Set-Up for Labs:



Week 2


Developing a "Security Mind":
  • 4 Virtues of Internet Security
  • 8 Rules of Internet Security
  • Penetration Testing:
  • Reconnaissance:
  • Information Gathering
  • Foot-printing
  • User Information
  • Verification



Slides (Concepts):
  • [ odp ] [ pdf ] [ ppt ] Penetration Testing: Reconnaissance
Reading References:
YouTube Videos:



Lab 2:
Pentration Testing:



Week 3


Scanning, Enumeration, & Vulnerability Testing:
  • Penetration Testing (Continued):
  • Scanning
  • Enumeration
  • Vulnerability Testing



Slides (Concepts):
  • [ odp ] [ pdf ] [ ppt ] Scanning & Enumeration


Reading References:
YouTube Videos:
Resources:



Lab 3:
Penetration Testing / Continued:




Week 4



Scanning, Enumeration, & Vulnerability Testing:
  • Vulnerability Testing



Slides (Concepts):
  • [ odp ] [ pdf ] [ ppt ] Vulnerability Testing


Reading References:
YouTube Videos:
Resources:



Lab 3:
Continue Working on Lab 3



Week 5


Types of Attacks:
  • Client-side Attacks
  • Phishing
  • Webbrowser - Malicious Payloads
  • IP Spoofing (Man in the Middle) / Password
  • Server-side Attacks
  • Out-dated Software Patches
  • Database Injection
  • Password Cracking



Slides (Concepts):
YouTube Videos:
Reading References:
Resources:



Lab 4:
Attack Categories:


WARNINGS!
  1. Scanning ports must require the permission of Server Owner (preferably in writing). Student must either work in Security lab to scan each others' ports, or sign an agreement to scan any server.



Week 6

More on mysql injection and Webgoat


Moved until after the break

Hardening Windows 7/8/10
  • Installing and Configuring Security Configuration Wizard
  • Using New Technology File System (NTSF)
  • Configuring Automatic Updates
Test #1: Details, March 6th
  1. Quiz 2 (February 22)



Slides (Concepts):
Reading References:
YouTube Videos:
  • []
Resources:




Assignment #1:
  • Assignment Instructions (N/A)
Continue working on Lab 4 and install Webgoat



Week 7



Midterm (Test #1 March 6th):
  • (Check course announcements for test details)





Additional Tasks:
Lab 5:
  • Hardening Windows 7/8/10
Work on Assignment #1

Study Week



Week 8



Types of Penetration Testing
  • Network
  • Access Control
  • Infrastructure / Patching
  • Physical/Building Security
  • Social Engineering


Slides (Concepts): See Blackboard




Lab 6:
Work on vulnerable Windows 7 VM CTF



Assignment #1 Due



Week 9


Passwords, Pwn'ing, & Pillaging




Slides (Concepts): See Blackboard




Lab 7:
Continue to work on vulnerable Windows 7 VM CTF


Week 10


Metasploit and Metasploitable 2






Labs:


Week 11





Lab 8:


Week 12



Work on Assignment #2
  • Complete Report
Assignment #2 Due:



Week 13



Final Exam Review
  • Details



Exam Week - TBA