UOP-CMGT400 - Intro to Information Assurance & Security

Introduction to Computer Security and Networks

• How Seriously Should You Take Threats to Network Security?
• Identifying Types of Threats
• Assessing the Likelihood of an Attack on Your Network
• Basic Security Terminology
• Concepts and Approaches
• How Do Legal Issues Impact Network Security?
• Online Security Resources
• Network Basics
• How the Internet Works
• History of the Internet
• Basic Network Utilities
• Other Network Devices
• Advanced Network Communications Topics

Security Risks and Threats

• How Internet Fraud Works
• Identity Theft
• Cyber Stalking
• Protecting Yourself Against Cybercrime
• DoS Attacks
• Illustrating an Attack
• Common Tools Used for DoS Attacks
• DoS Weaknesses
• Specific DoS Attacks
• Real-World Examples of DoS Attacks
• How to Defend Against DoS Attacks
• Viruses
• Trojan Horses
• The Buffer-Overflow Attack
• Spyware
• Other Forms of Malware
• Detecting and Eliminating Viruses and Spyware
• Basic Terminology
• The Reconnaissance Phase
• Actual Attacks
• Malware Creation
• Penetration Testing
• The Dark Web

Enterprise Security, Attacks, and Vulnerabilities

• What Is Industrial Espionage?
• Information as an Asset
• Real-World Examples of Industrial Espionage
• How Does Espionage Occur?
• Protecting Against Industrial Espionage
• The Industrial Espionage Act
• Spear Phishing
• Cryptography Basics
• History of Encryption
• Modern Cryptography Methods
• Public Key (Asymmetric) Encryption
• PGP
• Legitimate Versus Fraudulent Encryption Methods
• Digital Signatures
• Hashing
• MAC and HMAC
• Steganography
• Cryptanalysis
• Cryptography Used on the Internet
• Quantum Computing Cryptography
• Virus Scanners
• Firewalls
• Antispyware
• IDSs
• Digital Certificates
• SSL/TLS
• Virtual Private Networks
• Wi-Fi Security

Vulnerability Scanning and Information Warfare

• What Is a Policy?
• Defining User Policies
• Defining System Administration Policies
• Defining Access Control
• Development Policies
• Standards, Guidelines, and Procedures
• Disaster Recovery
• Important Laws
• Basics of Assessing a System
• Securing Computer Systems
• Scanning Your Network
• Getting Professional Help
• Actual Cases of Cyber Terrorism
• Weapons of Cyber Warfare
• Economic Attacks
• Military Operations Attacks
• General Attacks
• Supervisory Control and Data Acquisitions (SCADA)
• Information Warfare
• Actual Cases
• Future Trends
• Defense Against Cyber Terrorism
• Terrorist Recruiting and Communication
• TOR and the Dark Web

Applying Security Mitigation Strategies for an Enterprise

• General Searches
• Court Records and Criminal Checks
• Usenet
• General Guidelines
• Finding Evidence on the PC
• Finding Evidence in System Logs
• Getting Back Deleted Files
• Operating System Utilities
• The Windows Registry
• Mobile Forensics: Cell Phone Concepts
• The Need for Forensic Certification
• Expert Witnesses
• Additional Types of Forensics
• Defining Cybersecurity Engineering
• SecML

Appendix A: Resources

About