CYS1100 - Fundamentals of Information Systems Security

• Social Engineering Fundamentals
• User Security Awareness Education
• Malicious Software (Malware)
• Password Attacks
• Physical Attacks
• Adversarial Artificial Intelligence
• Supply-Chain Attacks
• Cloud-based vs. On-premises Attacks
• Cryptographic Attacks

4 LiveLab in this lesson — see the labs panel →

• Privilege Escalation
• Cross-Site Scripting (XSS) Attacks
• Injection Attacks
• Pointer/Object Dereference
• Directory Traversal
• Buffer Overflows
• Race Conditions
• Error Handling
• Improper Input Handling
• Replay Attacks
• Request Forgeries
• Application Programming Interface (API) Attacks
• Resource Exhaustion
• Memory Leaks
• Secure Socket Layer (SSL) Stripping
• Driver Manipulation
• Pass the Hash
• Wireless Attacks
• On-Path Attacks
• Layer 2 Attacks
• Domain Name System (DNS) Attacks
• Distributed Denial-of-Service (DDoS) Attacks
• Malicious Code or Script Execution Attacks

3 LiveLab in this lesson — see the labs panel →

• Actors and Threats
• Attributes of Threat Actors
• Attack Vectors
• Threat Intelligence and Threat Intelligence Sources
• Research Sources

1 LiveLab in this lesson — see the labs panel →

• Vulnerability Scan Output
• SIEM Dashboards
• Log Files
• syslog/rsyslog/syslog-ng
• journalctl
• NXLog
• Bandwidth Monitors
• Metadata
• NetFlow/sFlow
• Protocol Analyzer Output

2 LiveLab in this lesson — see the labs panel →

• Documentation/Evidence
• Acquisition
• On-premises vs. Cloud
• Integrity
• Preservation
• E-discovery
• Data Recovery
• Nonrepudiation
• Strategic Intelligence/Counterintelligence

2 LiveLab in this lesson — see the labs panel →