Lesson Structure:    Cyber Security VIT103

There are 11 Lessons:

1  Introduction to Cyber Security and Cyber Attacks/Defenses

• The Importance of Cyber Security
• Threats to cyber security
• Common types of attacks
• A Layered Approach to Defense Mechanisms
• Data Centre Network
• Physical Security
• Software and Operating System Security
• Network Security

2  Vulnerability Assessment

• Introduction
• Assessing Vulnerabilities
• Security Posture
• Performing a Vulnerability Assessment
• Identifying Assets and classifying them
• Threats and Risk Assessment
• Baseline Reporting
• Penetration Testing
• Techniques
• Penetration Testing vs Vulnerability Assessment

3  Securing Facilities and Networks

• Securing a Data Centre
• Securing the Network
• Hardware – modem/router Level
• Software PC and Device level

4  Securing Your Online Digital Footprint

• Introduction
• What are Digital Footprints?
• Social Media
• Web browsing history and online shopping
• Devices used
• The importance of managing a digital footprint
• Protecting the user’s reputation
• Deciding where and how personal information is shared
• Preserving freedoms
• Preventing financial losses
• How to manage a digital footprint
• Understand the privacy risks of online identities
• Developing better online habits
• Investigate default settings for online tools and services
• Using privacy-enhancing tools

5  Internet Security and Digital Certificates

• Introduction
• Digital Certificates
• Digital Signatures
• DRM (Digital Rights Management) and IRM (Information Rights Management
• IRM/EDRM
• Generating a Digital Certificate
• Exchanging a Digital Certificate
• Verifying a Digital Certificate
• Web browsing
• Security Issues
• Secure Web Browsing using https

6  Wireless Network Vulnerabilities, Attacks and Security

• Introduction
• Types of Wireless Dara Networks
• NFC and Bluetooth Networks Attacks
• WLAN (Wireless LAN) attacks
• Introduction to network “blurred edges”
• Wireless data replay attacks
• Wireless DOS (Denial Of Service) attacks
• Rogue Access Point
• Attacks on Home WLANs – War Driving and War Chalking
• Wireless security vulnerability and solutions
• IEEE Wireless Security Vulnerabilities

7  Firewalls, IDS, and IPS

• Introduction
• Types of Firewall Protection
• Packet Filtering Firewall
• Application/Proxy Firewall
• Hybrid Firewall
• Firewall Limitations
• Formats of Firewalls
• UTM appliance
• Intrusion Detection Systems
• Network Intrusion Detection Systems (NIDS)
• Host-Based Intrusion Detection Systems (HIDS)
• Intrusion Prevention Systems
• Common Detection Methodologies: Anomaly Based IDPS, Signature-Based IDPS

8  Cryptography

• Introduction
• What is Cryptography? Definition, Terminology and Characteristics
• Common cipher attacks
• Ciphertext Only Attacks (COA)
• Known Plaintext Attack (KPA)
• Dictionary Attack
• Brute Force Attack (BFA)
• Power Analysis Attack
• Fault Analysis Attack
• Cryptographic Algorithms
• Symmetric Encryption
• Asymmetric Encryption

9  Access Control and Authentication

• Introduction
• What is Access Control?
• Definition and Terminology
• Access Control Models
• Implementing Access Control
• Group Policies
• ACL (Access Control Lists)
• DACL (Discretionary Access Control List)
• SACL (System Access Control List)
• What is Authenticication and Authorisation?
• Securing and protecting passwords
• Multi-Factor Authentication

10 Cyber-Attack Disaster Recovery Strategies

• Introduction
• Cyber Attack Recovery Planning and Preparation
• Backup procedures
• Monitoring and logging of events
• Containment of attack
• Assessing Damage/Loss Caused
• Recovery procedures
• Authorities and Tracking Down Attackers
• Data and Security Policies

11  Ongoing Security Management

• Introduction
• Managing Security Events
• Centralized vs Distributed data collection
• Being Organised
• Understanding the Workplace
• Networking
• Attitude
• Products and Services
• The Law

Learning Goals: Cyber Security VIT103

1. Define cyber security.
2. Explain the goals and importance of cyber security.
3. Understand important terminology relating to cyber security and list some attacks and defence mechanisms.
4. Explain how to perform a vulnerability assessment.
5. Understand the tools and techniques available.
6. Compare and contrast vulnerability scanning and penetration testing.
7. Explain how to secure physical data storage, data centre security, data warehouse and networks.
8. Discuss implementation of key methods.
9. Understand the effects of leaving a wide online digital footprint.
10. Understand the options available for users to manage their online digital footprint.
11. Explain how digital signatures are used, and how to generate, exchange and verify Digital Certificates.
12. Understand web browsing security issues using the http protocol, and how to use certificates to secure web browsing using the https protocol.
13. List the various types of wireless data communications networks and understand types of vulnerabilities and attacks against each of them.
14. Explain wireless network security standards available to protect wireless networks.
15. Understand what a firewall, an Intrusion Detection System (IDS), and an Intrusion Prevention System (IPS) represent in the world of cyber security.
16. Explain the importance and functions of firewalls, IDS and IPS systems, and the benefits and protection they offer in protecting computers as well as computer networks.
17. Understand the concept of cryptography and the importance of encrypting and decrypting data.
18. Explain components of cryptographic protocols and common standards used in encryption and decryption.
19. Define Access Control and become familiar with its terminology.
20. Understand the importance of implementing access control models.
21. Define authentication and understand the importance of creating and securing strong passwords and implementing double-factor or multi-factor authentication using the various means of authentication presented in this lesson.
22. Explain how to recover from a cyber-attack.
23. Discuss best procedures for setting up redundancy and quick recovery methods prior to an attack.
24. Discuss best practices after an attack has occurred and minimizing impacts to systems and networks involved.
25. Understand how to better manage the network in order to strengthen network control, through managing security events, implementing better network auditing strategies, and managing an intrusion detection and prevention system.

Practical Set Tasks:  Cyber Security VIT103

1. Research layered defence concepts and in particular the idea of defence in depth.
2. Research and explain a type of cyber-attack that is not listed in this lesson. Spend no more than 1 hour on this
3. activity.
4. Undertake research online and report on good vulnerability scanners currently available in the market. Compare and contrast them. Spend no more than 1 hour on this task.
5. Undertake research online and report on good penetration testing tools currently available in the market. Compare and contrast them. Spend no more than 1 hour on this task.
6. Research a recent cyber attack. Spend no more than 1 hour on this task.
7. Research a method of Network security that is not listed in the lesson.
8. Research a method of Data centre security that is not listed in the lesson.
9. Research 4 privacy enhancing tools online, such as VPNs, password managers, and other encryption software. Take notes; you may wish to create a table to contrast options. Spend no more than 1 hours on this task.
10. Research digital certificates and digital certificate issuers online. Compare different types of certificates and issuers. You may wish to use a table for this. Spend no more than 1 hour on this task.
11. Research hash values and hash functions. Clearly define the difference between the two, and think when they’re required, why, and how they work. Spend no more than 1 hour on this task.
12. Undertake research into the IEEE WLAN standards and summarize your findings into a table showing the standards name, the year it was introduced, frequency, maximum data rates, as well as indoor and outdoor range. Briefly explain the differences. Spend no more than 1 hour on this task.
13. Research the latest firewall solutions in the market. Read about their features, advantages, disadvantages and their application in the world of cyber security. Spend no more than 1 hour on this task.
14. Research the latest NIDS and HIDS solutions in the market. Pick the 2 most used/popular solutions for NIDS and the 2 most used/popular solutions for HIDS and read about how they work, their advantages, any licensing costs involved, and more. Spend no more than 2 hours on this task.
15. Undertake research into the various encryption algorithms, the size of the keys being used, and how long it would take to crack them using a brute force attack using today’s computer powers.
16. Research other types of Access control models that are available. Spend no more than 1 hour on this task.
17. Research different types of access control devices. Spend no more than 1 hour on this task.
18. Research other forms of multi factor authentication and devices that are used. Specifically, research 2FA: what it is and how it is used.
19. Undertake research into the current uses of the AES encryption algorithm (think about mobile data encryption, WIFI data transmissions, etc.)
20. Research SOE and image third-party software online. Take notes on the potential positives and negatives of using third-party software for this. Spend no more than 1 hour on this task.
21. Think about companies with a high potential of loss due to cyberattack. Create an at-risk profile, an at moderate risk profile, and a low-risk profile for such firms. Include the type of potential costs incurred with each, along with a plan to make the at-risk and at moderate risk firms less vulnerable. Research as necessary. Spend no more than 2 hours on this task.
22. Research what a security policy is and how they are written within a business to help ensure that employees and customers are aware at all times of what constitutes acceptable behaviour.
23. Research and report 1 page on two different types of software that is used to manage or automate tasks on computers.
24. From set task 1 investigate 5 alternative software applications that do the same as you found and compare their differences and how they operate.
25. Research 5 different methods or tools (software or hardware) that can be used in recovery or defence of a cyber-attack.

Each lesson is completed with a written assignment, based on the reading and set tasks. Assignments are marked and graded by personally assigned tutors, and returned with helpful comments and suggestions.

FREQUENTLY ASKED QUESTIONS

Here is a list of the most often asked FAQ’s.

General

Q. Why should I enrol with the Academy for Distance Learning?
A. Here at ADL, our students are our priority – we treat everyone as a unique individual.

Q. Do I need to buy text books?
A. No, as each module has been written by highly qualified industry professionals. The content of the material is presented in such a way that text books are not required. However, if you require additional reading your tutor will be able to supply a list.

Q. What happens if I have to stop studying for a while? (eg. become sick, go on holidays, have a baby, move house, etc)
A. It’s OK to take a break and start up your study at a later point in time. Just let us know.

Q. Is there an age limit?
A. There is no maximum age limit. We do however, have a minimum age limit of 18 years. Below that age parental consent would be required.

Q. Are your courses up-to date?
A. Our courses are revised and updated on a rotation system.

Q. Do you have a Cancellation policy?
A. Yes. We have a cancellation policy that is fair and equitable. For further details please click here.

Q. Will I have any opportunity to engage with other students?
A. We have a Student Community group based on facebook! If you don’t have a facebook account already, you could make one just for talking with fellow students on the group.

Enrolment

Q. When can I enrol/start?
A. You may enrol and start at any time of the year – it’s all self- paced.

Q. Can I study from anywhere in the world?
A. Our courses are available to anyone, anywhere in the world from the comfort of your own home. The course content is relevant to any country, culture or economy.

Q. How long do I have to complete the course?
A. You complete the course at any time that is convenient for you.

Q. Completing a 100 hour module – how long will it take?
A. For some students a 100 hour module will take approximately to 3- 6 months to complete. Others take less time and some even longer.

Assessment

Q. Assessment – how does it work?
A. For each 100 hour module you are assessed by assignments (at the end of each lesson) and a final one and a half hour exam (or you may elect to complete a Project, instead of sitting the exam) – the choice is yours – you sit for the exam in your own location.

Q. I don’t cope well with exams – what can I do?
A. You may elect to undertake a Project (set by your tutor) instead of sitting the exam. Projects are completed from your home and can usually take a couple of weeks to complete.

Q. If my assignment is not up to standard is there an opportunity to resubmit my work?
A. Yes –

Q. How many assignments do I need to complete for each module?
A. At the end of each lesson, there is an assignment – so if a course has say, 10 lessons, there would be 10 assignments.

Q. I am having difficulty attending workshops/industry meetings, what can be done?
A. If your course requires attendance at workshops, conferences, or industry meetings; alternative arrangements can be made in your country.

Qualifications

Q. Can I customize my diploma/higher qualification?

A. Not all educational institution’s certificates /diplomas meet everyone’s needs. The opportunity to Design Your Own Diploma at the Academy (subject to our approval) is an added bonus, not found at other colleges. You choose modules that you think will help you in achieving your goal.

Q. What do I get when I complete the course? Will I receive a transcript?
A. At the completion of all courses and providing all assignments and exam requirements have been met, you will receive your Award and a Transcript.

Tutors

Q. Our tutors – who are they?
A. We appoint Tutors and require that they must be currently active in their industry, with at least 5 years’ experience in their chosen profession.

Q. Can I contact my tutor at any time?
A. Yes – you have unlimited access to your tutor via email through our Online Classroom. You can always leave a message with ADL requesting your tutor to contact you. You decide on how much or how little contact you wish to have.

Q. Practical work – How is this done?
A. To find out more about this part of the course please visit the section on How Our Courses Work here.