關於此課程：This course provides learners with a baseline understanding of common cyber security threats, vulnerabilities, and risks. An overview of how basic cyber attacks are constructed and applied to real systems is also included. Examples include simple Unix kernel hacks, Internet worms, and Trojan horses in software utilities. Network attacks such as distributed denial of service (DDOS) and botnet- attacks are also described and illustrated using real examples from the past couple of decades. Familiar analytic models are outlined such as the confidentiality/integrity/availability (CIA) security threat framework, and examples are used to illustrate how these different types of threats can degrade real assets. The course also includes an introduction to basic cyber security risk analysis, with an overview of how threat-asset matrices can be used to prioritize risk decisions. Threats, vulnerabilities, and attacks are examined and mapped in the context of system security engineering methodologies.
製作方： 纽约大学坦登工程学院
教學方： Dr. Edward G. Amoroso, Research Professor, NYU and CEO, TAG Cyber LLC
Computer Science
| 基本信息 | 課程 1（共 4 門，Introduction to Cyber Security Specialization ） |
| 級別 | 初級 |
| 語言 | English |
| 如何通過 | 通過所有計分作業以完成課程。 |
| 用戶評分 |
授課大綱
第 1 週
Introduction to Cyber Security
This module provides exposure to basic cyber security concepts including some simple, foundational attack methods.
10 個視頻, 6 個閱讀材料
- 視頻: Assignments and Reading
- 視頻: Hacking an Old-Fashioned Soda Machine
- 視頻: Simple Worm Program
- 視頻: Trojan Horse Login Program
- 視頻: Malicious Compiler Program
- 視頻: Typical Unix Kernel Attack
- 視頻: Explaining Interview Series
- 視頻: Welcome Lou Manousos (Part 1)
- 視頻: Welcome Lou Manousos (Part 2)
- Reading: Required: Smashing the Stack for Fun and Profit,” Aleph One
- Reading: Required: “Reflections on Trusting Trust,” Ken Thompson
- Reading: Video: DEF CON 23
- Reading: Video: Kevin Mitnick | Talks at Google
- Reading: Suggested: Introduction to Cyber Security (Ch. 1-2)
- Reading: Suggested: TCP/IP Illustrated Volume 1 (2nd Ed.), (Ch. 1-2)
已評分: Module 1 Quiz
第 2 週
Understanding Basic Security Frameworks
This module introduces some fundamental frameworks, models, and approaches to cyber security including the CIA model.
17 個視頻, 6 個閱讀材料, 2 個練習測驗
- 視頻: Purpose of Cyber Security
- 視頻: Adversary Types
- 視頻: Vulnerability Types
- 視頻: Threat Types
- 視頻: Matching Quiz
- Practice Quiz: Matching Quiz
- 視頻: Matching Quiz Solution
- 視頻: Confidentiality Threat
- 視頻: Integrity Threat
- 視頻: Availability Threat
- 視頻: Fraud Threat
- Practice Quiz: Further Consideration - Fraud
- 視頻: Testing for Vultnerabilities
- 視頻: Attacks
- 視頻: Brute Force vs. Hueristic Attacks
- 視頻: Crytanalysis
- 視頻: Cryptanalyzing Caesar Cipher
- 視頻: Welcome Jose Dominguez
- Reading: Required: “Why Cryptosystems Fail,” Ross Anderson
- Reading: Required: “There Be Dragons,” Steve Bellovin
- Reading: Video: DMARC Whiteboard Session
- Reading: Video: Defcon 18
- Reading: Suggested: Introduction to Cyber Security, (Ch. 3 - 4)
- Reading: Suggested: TCP/IP Illustrated Volume 1 (2nd Ed.), (Ch. 3 – 4)
已評分: Module 2 Quiz
第 3 週
Examining Cyber Threats More Closely
This module covers some of the more intense attacks over the past decade including worms and DDOS attacks.
10 個視頻, 6 個閱讀材料, 1 個練習測驗
- 視頻: SQL/ Slammer Worm of 2003
- 視頻: Nachi Worm of 2003
- 視頻: Botnet Design
- 視頻: Botnet Arithmetic
- 視頻: Welcome Elad Yoran
- 視頻: Assets and Infrastructure
- 視頻: Calculating Risk
- 視頻: Making Security and Cost Decisions Based on Risk
- 視頻: Threat Trees and Completeness of Analysis
- Practice Quiz: Further Consideration - Threat Trees
- Reading: Required: “Hackers Remotely Kill a Jeep on the Highway with Me in It,” Andy Greenberg, Wired Magazine
- Reading: Required: “A Hacker’s Evolution: Austin’s HD Moore Grew Up with Cybersecurity Industry,” 512 Tech
- Reading: Suggested: Introduction to Cyber Security (Ch. 5 - 6)
- Reading: Suggested: TCP/IP Illustrated Volume 1 (2nd Edition), (Ch. 5 - 6)
- Reading: Video: “Top Hacker Shows Us How It’s Done,” Pablos Holman, TEDx Midwest
- Reading: Video: “All Your Devices Can be Hacked,” Avi Rubin, TED Talk
已評分: Module 3 Quiz
第 4 週
Introducing Security Risk Analysis
This module introduces basic engineering and analysis methods for managing cyber security risk to valued assets.
8 個視頻, 8 個閱讀材料
- 視頻: Mapping Assets to Threats
- 視頻: Estimating Risk for Threat-Asset Pairs
- 視頻: Example Case Study Matrix (Part 1)
- 視頻: Example Case Study Matrix (Part 2)
- 視頻: Example Case Study Matrix (Part 3)
- 視頻: Mapping Assets, Threats, Vulnerabilities, and Attacks
- 視頻: Welcome Nasir Memon
- Reading: Required: “A Man-in-the-Middle Attack on UMTS,” Meyer and Wetzel
- Reading: Required: “Are Computer Hacker Break-Ins Ethical?” Eugene Spafford
- Reading: Video: “What’s Wrong With Your Password,” Lorrie Faith Cranor, TED Talk
- Reading: Video: “Fighting Viruses, Defending the Net,” Mikko Hypponen, TED Talk
- Reading: Suggested: Introduction to Cyber Security, (Ch. 7 - 8)
- Reading: Suggested: TCP/IP Illustrated Volume 1 (2nd Ed.), (Ch. 7 – 8)
- Reading: Project Description
- Reading: Additional Self-Learning Opportunities
已評分: Module 4 Quiz
已評分: Final Quiz - What level of security risk do you estimate for the following threat-asset matrix entries for the ACME Software Company:
常見問題解答
運作方式
Coursework
Each course is like an interactive textbook, featuring pre-recorded videos, quizzes and projects.
Help from Your Peers
Connect with thousands of other learners and debate ideas, discuss course material, and get help mastering concepts.
Certificates
Earn official recognition for your work, and share your success with friends, colleagues, and employers.
製作方
纽约大学坦登工程学院
Tandon offers comprehensive courses in engineering, applied science and technology. Each course is rooted in a tradition of invention and entrepreneurship.
價格
| 購買課程 | |
|---|---|
| 訪問課程材料 | 可用 |
| 訪問評分的材料 | 可用 |
| 收到最終成績 | 可用 |
| 獲得可共享的課程證書 | 可用 |
評分和審閱
Excellent course to study! This really helped me understand more about internet security.
A really good introductory course.
It covers both the basic "tech" aspects of cybersecurity (worms, trojans, botnets, etc.) and frameworks (CIA models) to map threats-assets then risks.
It sets a fundamental stress on the approach to cybersecurity. Not only on the most advertised aspects, but on the way the industry -CISOs- work -or should work :-)
The instructor does know a ton, and transmits his knowledge quite easily.
The course content is precise and lecturer is very knowledgeable. Thank you.
DH
Overall, I really enjoyed this course. Ed is a fantastic teacher. My only complaint (and why I did not give it 5 stars) is with the final exam. The instructions states that the answers are subjective, however I had to take the test over and over until I got the correct choices they were looking for. As an example, who knows if software sells person working from home has confiidentiality risk of high, medium, or low? I think it is pretty subjective, and I would have had to get more information about their work environment to really make that call. It was an excersize in frustration.