Title: Center of Academic Excellence (2 Year)

Knowledge Units for CAE2Y 2014

Section 1
  KU Element Check List
1.1 Basic Data Analysis
  1.1.1 Topic(s):
  Summary Statistics
  Graphing / Charts
  Spreadsheet Functions
  Problem solving
  1.1.2 Outcome(s): Students will be able to: ____ A...
1.2 Basic Scripting or Introductory Programming
  1.2.1 Topic(s):
  Basic Security
  Bounds checking, input validation
  Program Commands
  Program Control Structures
  Variable Declaration
  Debugging
  Scripting Language (e.g. PERL, Python, BASH, VB Sc...
  Basic Boolean logic/operations
  AND / OR / XOR / NOT
  1.2.2 Outcome(s): Students will be able to: ____ D...
1.3 Cyber Defense
  1.3.1 Topic(s):
  Network mapping (enumeration and identification of...
  Network security techniques and components
  Access controls, flow control, cryptography, firew...
  Applications of Cryptography
  Malicious activity detection / forms of attack
  Appropriate Countermeasures
  Trust relationships
  Defense in Depth
  Layering of security mechanisms to achieve desired...
  Patching
  OS and Application Updates
  Vulnerability Scanning
  Vulnerability Windows (0-day to patch availability...
  1.3.2 Outcome(s): Students will be able to: ____ D...
1.4 Cyber Threats
  1.4.1 Topic(s):
  Adversaries and targets
  Motivations and Techniques
  The Adversary Model (resources, capabilities, inte...
  Types of Attacks
  Password guessing / cracking
  Backdoors / trojans / viruses / wireless attacks
  Sniffing / spoofing / session hijacking
  Denial of service / distributed DOS / BOTs
  MAC spoofing / web app attacks / 0-day exploits
  Vulnerabilities that enable attacks
  Attack Timing (within x minutes of being attached ...
  Social Engineering
  Events that indicate an attack is/has happened
  Legal Issues
  Attack surfaces / vectors
  Attack trees
  Insider problem
  Covert Channels
  Threat Information Sources (e.g., CERT)
  1.4.2 Outcome(s): Students will be able to: ____ I...
1.5 Fundamental Security Design Principles
  1.5.1 Topic(s):
  Separation (of domains)
  Isolation
  Encapsulation
  Least Privilege
  Simplicity (of design)
  Minimization (of implementation)
  Fail Safe Defaults / Fail Secure
  Modularity
  Layering
  Least Astonishment
  Open Design
  Usability
  1.5.2 Outcome(s): Students will be able to: ____ L...
1.6 Information Assurance Fundamentals
  1.6.1 Topic(s):
  Threats and Adversaries
  Vulnerabilities and Risks
  Basic Risk Assessment
  Security Life-Cycle
  Intrusion Detection and Prevention Systems
  Cryptography
  Data Security (in transmission, at rest, in proces...
  Security Models
  Access Control Models (MAC, DAC, RBAC)
  Confidentiality, Integrity, Availability, Access, ...
  Security Mechanisms (e.g., Identification/Authenti...
  1.6.2 Outcome(s) Students will be able to: ____ Li...
1.7 Introduction to Cryptography
  1.7.1 Topic(s):
  Symmetric Cryptography (DES, Twofish)
  Public Key Cryptography
  Public Key Infrastructure
  Certificates
  Hash Functions (MD4, MD5, SHA-1, SHA-2, SHA-3)
  For integrity
  For protecting authentication data
  Collision resistance
  Digital Signatures (Authentication)
  Key Management (creation, exchange/distribution)
  Cryptographic Modes (and their strengths and weakn...
  Types of Attacks (brute force, chosen plaintext, k...
  Common Cryptographic Protocols
  DES -> AES (evolution from DES to AES)
  Security Functions (data protection, data integrit...
  1.7.2 Outcome(s): Students will be able to: ____ I...
1.8 Information Technology System Components
  1.8.1 Topic(s):
  Workstations
  Servers
  Network Storage Devices
  Routers / Switches / Gateways
  Guards / CDSes / VPNs / Firewalls
  IDSes, IPSes
  Mobile Devices
  Peripheral Devices / Security Peripherals
  1.8.2 Outcome(s): Students will be able to: ____ D...
1.9 Networking Concepts
  1.9.1 Topic(s):
  Overview of Networking (OSI Model)
  Network Media
  Network architectures (LANs, WANs)
  Network Devices (Routers, Switches, VPNs, Firewall...
  Network Services
  Network Protocols (TCP/IP, HTTP, DNS, SMTP, UDP)
  Network Topologies
  Overview of Network Security Issues
  1.9.2 Outcome(s): Students will be able to: ____ D...
1.10 Policy, Legal, Ethics and Compliance
  1.10.1 Topic(s):
  HIPAA / FERPA
  Computer Security Act
  Sarbanes - Oxley
  Gramm - Leach - Bliley
  Privacy (COPPA)
  Payment Card Industry Data Security Standard (PCI ...
  State, US and international standards / jurisdicti...
  Laws and Authorities
  US Patriot Act
  BYOD issues
  Americans with Disabilities Act, Section 508
  1.10.2 Outcome(s): Students will be able to: ____ ...
1.11 Systems Administration
  1.11.1 Topic(s):
  OS Installation
  User Management
  Password Policy
  Authentication Methods
  Command Line Interfaces
  Configuration Management
  Updates and patches
  Access Controls
  Logging and Auditing (for performance and security...
  Managing System Services
  Virtualization
  Backup and Restoring Data
  File System Security
  Network Configuration (port security)
  Host (Workstation/Server) Intrusion Detection
  Security Policy Development
  1.11.2 Outcome(s): Students will be able to: ____ ...
Section 13