Preemptively secure computer and network resources by utilizing information about threats, actors and attack vectors, and processes including red, blue, and purple teaming, and the ethics behind using this data. Topics include active defenses such as penetration testing, log management, hacking, threat management and system posturing. Prerequisites: CYB 700, CYB 703
Covers operating systems security infrastructure. Topics include, for a given operating system (Windows/Linux), updates and patches, access controls and account management, configuration management, hardening and securing services, and the use of scripting languages to automate security management. Additional topics may include auditing and forensics, virtualization and cloud computing.
Students will learn about the phases of an incident response system, and the use of IDS and forensics, dealing with false alarms and the remediation process to minimize business impact, plan business continuity, and work with law enforcement, auditors, insurance, and compliance in how to prevent future incidents. Prerequisites: CYB 700, CYB 703, CYB 705,
