SENG 411 Cyber Security Quiz

Course Information

• Course name: SENG 411 Cyber Security
• Instructor: Dr. Emin Emrah Özsavaş
• Email: [email protected]

Course Aims & Scope

• Describe the elements of cyber security
• Explain cyber threats and attacks
• Describe hacking methodologies
• Understand security controls and countermeasures
• Understand security governance

Textbooks & Material

• Ethical Hacking and Countermeasures Ver. 12, EC-Council 2022
• Praise for CISSP All-in-One Exam Guide, Fernando Maymi, Shon Harris, McGraw Hill 2022
• Practical Information Security Management: A Complete Guide to Planning and Implementation, Tony Campbell, Apress 2016

Syllabus

• Week 1: Introduction and Basics - Language of security, overview, Identity and Access Management, System Architectures - Identification, authentication, authorization, access control, system architecture concepts
• Week 2: Identity and Access Management, Systems Architectures - Access control, architecture concepts, identity and access management
• Week 3: Cryptography - Symmetric and asymmetric encryption, hash functions, digital signatures
• Week 4: Network Security - Network attacks, security architectures, countermeasures
• Week 5: Hacking Methodology - Footprinting and reconnaissance, scanning networks, enumeration, vulnerability analysis
• Week 6: Hacking Methodology and Sniffing - System hacking (gaining access, escalating privileges, maintaining access, clearing logs) sniffing concepts and techniques
• Week 7: Malware Threats - Malware concepts, APT, trojan, virus, worm, analysis, countermeasures
• Week 8: Social Engineering and Session Hijacking - Concepts, threats, countermeasures
• Week 9: Web Server and Web Application Security - Concepts, threats, countermeasures
• Week 10: Mobile and Cloud Security - Concepts, threats, countermeasures
• Week 11: Wireless, IoT, and OT Security - Concepts, threats, countermeasures
• Week 12: Security Operations, Role of AI/ML - Threat intelligence, digital evidence and incident response, digital forensics, AI/ML in security posture
• Week 13: Security Governance - Risk management, organizational security, security implementation, secure system development
• Week 14: General Review

Grading

• Assignments & quizzes
• Midterm exam
• Final exam

InfoSec Concepts

• Information Security: Protection of information from unauthorized access, use, disclosure, disruption, modification, or destruction. Confidentiality, integrity, and availability are key aspects.
• Information Technology Security (IT Security): Protection of information technologies.
• Cybersecurity: Protecting cyberspace from cyberattacks. Includes information and non-information assets.

CIA Triad

• Confidentiality: Access is limited to authorized users.
• Integrity: Data and resources are trustworthy and free of unauthorized changes.
• Availability: Resources are accessible when needed by authorized users.

InfoSec Details

• Vulnerability: Weakness in a system that can be exploited.
• Threat: An action that exploits a vulnerability.
• Attack: Intentional exploitation of a vulnerability.
• Countermeasure: Measures to resolve vulnerabilities and mitigate threats.
• Risk: Potential for loss, damage, or destruction of an asset, resulting from a threat exploiting a vulnerability.

Cyber Security

• Motive: Goal behind cyberattacks,
• Attacks: Motive + Method + Vulnerability
• Cyberwarfare: Cyberattacks related to conflict (fifth domain of battle).
• Cyber Resilience: Delivering the intended outcome despite adverse cyber events.

Hacking Methodology (CEH)

• Footprinting: Gathering information about the target.
• Scanning: Identifying active hosts and open ports.
• Enumeration: Actively probing the target system.
• Vulnerability Analysis: Identifying weaknesses.
• System Hacking: Gaining access, escalating privileges, maintaining access, and clearing logs.
• Cyber Kill Chain: Methodology for understanding and preventing attacks (reconnaissance, weaponization, delivery, exploitation, installation, and actions on objectives).
• Tactics, Techniques, and Procedures (TTPs): Activities, methods, and procedures employed by attackers (tactics are high-level, techniques are specific actions, and procedures are the sequence).
• Indicators of Compromise (IOCs): Clues or artifacts indicating a possible intrusion.
• MITRE ATT&CK: Framework for understanding and responding to cyberattacks.

Penetration Testing (PenTesting)

• Methods: Black-box (no prior knowledge), White-box (complete knowledge), Gray-box (limited knowledge)
• Goals: Assessing security before an attack.
• Tools: Software that simulates real-world attacks.
• Rules of Engagement (RoE): Clear permission before starting with appropriate constraints.

Teams

• Blue Team: Defensive security team
• Red Team: Attack team, simulates malicious activity

Types of Attackers

• Amateur: Uses readily available tools
• Hacker (Cracker): Knows hacking techniques (intentional)
• State-Funded Spy: Government-supported
• Terrorist: Actively harmful agendas

Ethical Hackers' Attributes

• Professional and ethical values.
• No hidden agenda.
• Obtain permission.
• Proper reporting.
• No damage to systems tested.
• Technical expertise (OS, networking, attacks)
• Organizational security policies and standards.