关于此课程： This course provides learners with a baseline understanding of common cyber security threats, vulnerabilities, and risks. An overview of how basic cyber attacks are constructed and applied to real systems is also included. Examples include simple Unix kernel hacks, Internet worms, and Trojan horses in software utilities. Network attacks such as distributed denial of service (DDOS) and botnet- attacks are also described and illustrated using real examples from the past couple of decades. Familiar analytic models are outlined such as the confidentiality/integrity/availability (CIA) security threat framework, and examples are used to illustrate how these different types of threats can degrade real assets. The course also includes an introduction to basic cyber security risk analysis, with an overview of how threat-asset matrices can be used to prioritize risk decisions. Threats, vulnerabilities, and attacks are examined and mapped in the context of system security engineering methodologies.
制作方： New York University Tandon School of Engineering
教学方： Dr. Edward G. Amoroso, Research Professor, NYU and CEO, TAG Cyber LLC
Computer Science
| 基本信息 | 课程 1（共 4 门，Introduction to Cyber Security Specialization ） |
| 级别 | Beginner |
| 语言 | English |
| 如何通过 | 通过所有计分作业以完成课程。 |
| 用户评分 |
授课大纲
第 1 周
Introduction to Cyber Security
This module provides exposure to basic cyber security concepts including some simple, foundational attack methods.
10 视频, 6 阅读材料
- 视频: Introduction: What You Will Learn from This Course on Cyber Security
- 视频: Assignments and Reading
- 视频: Hacking an Old-Fashioned Soda Machine
- 视频: Simple Worm Program
- 视频: Trojan Horse Login Program
- 视频: Malicious Compiler Program
- 视频: Typical Unix Kernel Attack
- 视频: Explaining Interview Series
- 视频: Welcome Lou Manousos (Part 1)
- 视频: Welcome Lou Manousos (Part 2)
- Reading: Required: Smashing the Stack for Fun and Profit,” Aleph One
- Reading: Required: “Reflections on Trusting Trust,” Ken Thompson
- Reading: Video: DEF CON 23
- Reading: Video: Kevin Mitnick | Talks at Google
- Reading: Suggested: Introduction to Cyber Security (Ch. 1-2)
- Reading: Suggested: TCP/IP Illustrated Volume 1 (2nd Ed.), (Ch. 1-2)
已评分: Module 1 Quiz
第 2 周
Understanding Basic Security Frameworks
This module introduces some fundamental frameworks, models, and approaches to cyber security including the CIA model.
17 视频, 6 阅读材料, 2 练习测试
- 视频: Assignments and Reading
- 视频: Purpose of Cyber Security
- 视频: Adversary Types
- 视频: Vulnerability Types
- 视频: Threat Types
- 视频: Matching Quiz
- Practice Quiz: Matching Quiz
- 视频: Matching Quiz Solution
- 视频: Confidentiality Threat
- 视频: Integrity Threat
- 视频: Availability Threat
- 视频: Fraud Threat
- Practice Quiz: Further Consideration - Fraud
- 视频: Testing for Vultnerabilities
- 视频: Attacks
- 视频: Brute Force vs. Hueristic Attacks
- 视频: Crytanalysis
- 视频: Cryptanalyzing Caesar Cipher
- 视频: Welcome Jose Dominguez
- Reading: Required: “Why Cryptosystems Fail,” Ross Anderson
- Reading: Required: “There Be Dragons,” Steve Bellovin
- Reading: Video: DMARC Whiteboard Session
- Reading: Video: Defcon 18
- Reading: Suggested: Introduction to Cyber Security, (Ch. 3 - 4)
- Reading: Suggested: TCP/IP Illustrated Volume 1 (2nd Ed.), (Ch. 3 – 4)
已评分: Module 2 Quiz
第 3 周
Examining Cyber Threats More Closely
This module covers some of the more intense attacks over the past decade including worms and DDOS attacks.
10 视频, 6 阅读材料, 1 练习测试
- 视频: Assignments and Reading
- 视频: SQL/ Slammer Worm of 2003
- 视频: Nachi Worm of 2003
- 视频: Botnet Design
- 视频: Botnet Arithmetic
- 视频: Welcome Elad Yoran
- 视频: Assets and Infrastructure
- 视频: Calculating Risk
- 视频: Making Security and Cost Decisions Based on Risk
- 视频: Threat Trees and Completeness of Analysis
- Practice Quiz: Further Consideration - Threat Trees
- Reading: Required: “Hackers Remotely Kill a Jeep on the Highway with Me in It,” Andy Greenberg, Wired Magazine
- Reading: Required: “A Hacker’s Evolution: Austin’s HD Moore Grew Up with Cybersecurity Industry,” 512 Tech
- Reading: Suggested: Introduction to Cyber Security (Ch. 5 - 6)
- Reading: Suggested: TCP/IP Illustrated Volume 1 (2nd Edition), (Ch. 5 - 6)
- Reading: Video: “Top Hacker Shows Us How It’s Done,” Pablos Holman, TEDx Midwest
- Reading: Video: “All Your Devices Can be Hacked,” Avi Rubin, TED Talk
已评分: Module 3 Quiz
第 4 周
Introducing Security Risk Analysis
This module introduces basic engineering and analysis methods for managing cyber security risk to valued assets.
8 视频, 8 阅读材料
- 视频: Assignments and Reading
- 视频: Mapping Assets to Threats
- 视频: Estimating Risk for Threat-Asset Pairs
- 视频: Example Case Study Matrix (Part 1)
- 视频: Example Case Study Matrix (Part 2)
- 视频: Example Case Study Matrix (Part 3)
- 视频: Mapping Assets, Threats, Vulnerabilities, and Attacks
- 视频: Welcome Nasir Memon
- Reading: Required: “A Man-in-the-Middle Attack on UMTS,” Meyer and Wetzel
- Reading: Required: “Are Computer Hacker Break-Ins Ethical?” Eugene Spafford
- Reading: Video: “What’s Wrong With Your Password,” Lorrie Faith Cranor, TED Talk
- Reading: Video: “Fighting Viruses, Defending the Net,” Mikko Hypponen, TED Talk
- Reading: Suggested: Introduction to Cyber Security, (Ch. 7 - 8)
- Reading: Suggested: TCP/IP Illustrated Volume 1 (2nd Ed.), (Ch. 7 – 8)
- Reading: Project Description
- Reading: Additional Self-Learning Opportunities
已评分: Module 4 Quiz
已评分: Final Quiz - What level of security risk do you estimate for the following threat-asset matrix entries for the ACME Software Company:
常见问题解答
运作方式
Coursework
Each course is like an interactive textbook, featuring pre-recorded videos, quizzes and projects.
Help from Your Peers
Connect with thousands of other learners and debate ideas, discuss course material, and get help mastering concepts.
Certificates
Earn official recognition for your work, and share your success with friends, colleagues, and employers.
制作方
New York University Tandon School of Engineering
Tandon offers comprehensive courses in engineering, applied science and technology. Each course is rooted in a tradition of invention and entrepreneurship.
价格
| 购买课程 | |
|---|---|
| 访问课程材料 | 可用 |
| 访问评分的材料 | 可用 |
| 收到最终成绩 | 可用 |
| 获得可共享的课程证书 | 可用 |
评分和审阅
Dr. Edward G. Amoroso is a refreshingly clear thinker, clear communicator, and very engaging presenter. When he talks, he has something meaningful to say. His examples are clear and memorable. And his opinions and rational for his approach to cybersecurity is always clearly justified and sensible. This is proving to be the best class I have found on cybersecurity, without comparison. Thank you!
Quizes are very tough :/
Excellent presentation, examples and course content
Ks
osm introduction