Presentation is loading. Please wait.

Presentation is loading. Please wait.

JMU GenCyber Boot Camp Summer, 2016

Published byGarey Mills Modified over 7 years ago

Similar presentations

Presentation on theme: "JMU GenCyber Boot Camp Summer, 2016"— Presentation transcript:

1 JMU GenCyber Boot Camp Summer, 2016

2 © 2015 James Madison university
Welcome GenCyber Boot Camp for High School Teachers Department of Computer Science James Madison University Summer, 2016 JMU GenCyber Boot Camp © 2015 James Madison university

3 © 2015 James Madison university
Introductions Hossain Heydari Matt Jackson Nick McDonnell Dillon Paradis Brett Tjaden Xunhua (Steve) Wang JMU GenCyber Boot Camp © 2015 James Madison university

4 © 2015 James Madison university
Goals Have fun! Teach you about Cyber Defense so that you can: Interest your students in Cyber Defense Teach your students about Cyber Defense Cyber Defense Clubs CyberPatriot Program ( JMU GenCyber Boot Camp © 2015 James Madison university

5 © 2015 James Madison university
Schedule JMU GenCyber Boot Camp © 2015 James Madison university

6 © 2015 James Madison university
General Information No food or drinks near the laptops Restrooms If you have a car on campus see us for a parking permit Fill out a W-9 form if you want your money JMU GenCyber Boot Camp © 2015 James Madison university

7 © 2015 James Madison university
Questions Always welcome! JMU GenCyber Boot Camp © 2015 James Madison university

8 © 2015 James Madison university
Cyber Defense Protect Detect Triage Respond Prepare JMU GenCyber Boot Camp © 2015 James Madison university

9 © 2015 James Madison university
Threats A threat is a potential violation of system security Examples? JMU GenCyber Boot Camp © 2015 James Madison university

10 © 2015 James Madison university
Attackers Perform actions to try to cause security violations Outsiders: Competitors Hackers Organized crime Terrorists Foreign government, military, or law enforcement Insiders: Customers, suppliers, vendors, or business partners Disgruntled current (or former) employees Contractors, temps, or consultants JMU GenCyber Boot Camp © 2015 James Madison university

11 Why You Should Not Be an Attacker
It is illegal: United States Code, Title 18, Section 1030 (and others) USA Patriot Act, Homeland Security Act, PROTECT Act Unauthorized access or use of a computer or network system is illegal Unintentional attacks are illegal too JMU GenCyber Boot Camp © 2015 James Madison university

12 Understanding the Tools and Techniques of Attackers
Important for defenders: Can evaluate systems you defend as attackers will Can implement countermeasures designed to thwart attackers Better understand the implications of certain decisions JMU GenCyber Boot Camp © 2015 James Madison university

13 What do Cyber Defenders Protect?
Detect Triage Respond Prepare JMU GenCyber Boot Camp © 2015 James Madison university

14 © 2015 James Madison university
The Security Triad Confidentiality – information is protected from unauthorized access Example? Integrity – information is protected from unauthorized modification Availability – timely access to information (by authorized people) is ensured JMU GenCyber Boot Camp © 2015 James Madison university

15 © 2015 James Madison university
How do we Protect? Prevention – mechanism(s) that cause attacks to fail Example? Detection – mechanism(s) that determines that an attack is under way, or has occurred, and reports it Recovery – mechanism(s) that stop attacks and assess and repair any damage caused JMU GenCyber Boot Camp © 2015 James Madison university

16 GenCyber Cybersecurity First Principles
Domain Separation Process Isolation Resource Encapsulation Modularity Least Privilege Abstraction Data Hiding Layering Conceptually Simple JMU GenCyber Boot Camp © 2015 James Madison university

17 Getting Started with Cyber Defense
What to do first? Get to know you systems You cannot effectively defend what you don't understand Attackers make it their job to understand systems better than the defenders and leverage their advantage in knowledge “If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle” - Sun Tzu JMU GenCyber Boot Camp © 2015 James Madison university

18 Getting Started with Cyber Defense
What to do first? Get to know you systems You cannot effectively defend what you don't understand Attackers make it their job to understand systems better than the defenders and leverage their advantage in knowledge “If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle” - Sun Tzu “You Don't Know Me” - Elvis JMU GenCyber Boot Camp © 2015 James Madison university

19 After You Know Your Systems
Think about threats and attackers Think about what needs to be protected (security triad) Think about your goals (prevention, detection, recovery) JMU GenCyber Boot Camp © 2015 James Madison university

20 After You Have Thought About Your Systems
Start to plan, implement, and test improvements to your systems' security posture Respond to actions by attackers Protect Detect Triage Respond Prepare JMU GenCyber Boot Camp © 2015 James Madison university

21 © 2015 James Madison university
Hands-On Exercises You will not just be listening, you will be doing Virtual machines (VMs) – a simulated computer running on another computer VMs are great for hands-on Cyber Defense exercises You can create and use VMs with your students using free software: VirtualBox ( VMWare Player ( JMU GenCyber Boot Camp © 2015 James Madison university

22 Accessing your VM for this Boot Camp
Turn on laptop Click on “CyberDefender” account to log in Double click on Firefox icon to open web browser If you are not already on it, go to the following page: JMU GenCyber Boot Camp © 2015 James Madison university

23 Accessing your VM for this Boot Camp (cont)
Log in with the credentials you were given Click on “Host and Clusters” Expand the items on the left side until you see your “student” VM Click on your student VM to highlight it Power on the VM In the center window click on the “Summary” tab Click on “Launch Console” JMU GenCyber Boot Camp © 2015 James Madison university

Download ppt "JMU GenCyber Boot Camp Summer, 2016"

Similar presentations

Welcome Cyber Defense Bootcamp for High School Teacher

Welcome Cyber Defense Bootcamp for High School Teacher
Network Security Policy Why do I need a network security policy? Dr. Charles T. Wunker.

Network Security Policy Why do I need a network security policy? Dr. Charles T. Wunker.
September 10, 2012Introduction to Computer Security ©2004 Matt Bishop Slide #1-1 Chapter 1: Introduction Components of computer security Threats Policies.

September 10, 2012Introduction to Computer Security ©2004 Matt Bishop Slide #1-1 Chapter 1: Introduction Components of computer security Threats Policies.
11 ASSESSING THE NEED FOR SECURITY Chapter 1. Chapter 1: Assessing the Need for Security2 ASSESSING THE NEED FOR SECURITY  Security design concepts 

11 ASSESSING THE NEED FOR SECURITY Chapter 1. Chapter 1: Assessing the Need for Security2 ASSESSING THE NEED FOR SECURITY  Security design concepts 
Security Issues and Challenges in Cloud Computing

Security Issues and Challenges in Cloud Computing
1 Overview CSSE 490 Computer Security Mark Ardis, Rose-Hulman Institute March 8, 2004.

1 Overview CSSE 490 Computer Security Mark Ardis, Rose-Hulman Institute March 8, 2004.
Chapter 1: Introduction Components of computer security Threats Policies and mechanisms The role of trust Assurance Operational Issues Human Issues Computer.

Chapter 1: Introduction Components of computer security Threats Policies and mechanisms The role of trust Assurance Operational Issues Human Issues Computer.
Chapter 1 Introduction. Art of War  If you know the enemy and know yourself, you need not fear the result of a hundred battles.  If you know yourself.

Chapter 1 Introduction. Art of War  If you know the enemy and know yourself, you need not fear the result of a hundred battles.  If you know yourself.
July 1, 2004Computer Security: Art and Science ©2002-2004 Matt Bishop Slide #1-1 Chapter 1: Introduction Components of computer security Threats Policies.

July 1, 2004Computer Security: Art and Science © Matt Bishop Slide #1-1 Chapter 1: Introduction Components of computer security Threats Policies.
April 1, 2004ECS 235Slide #1 Chapter 1: Introduction Components of computer security Threats Policies and mechanisms The role of trust Assurance Operational.

April 1, 2004ECS 235Slide #1 Chapter 1: Introduction Components of computer security Threats Policies and mechanisms The role of trust Assurance Operational.
Cryptography and Network Security Chapter 1. Chapter 1 – Introduction The art of war teaches us to rely not on the likelihood of the enemy's not coming,

Cryptography and Network Security Chapter 1. Chapter 1 – Introduction The art of war teaches us to rely not on the likelihood of the enemy's not coming,
1 Figure 1-17: Security Management Security is a Primarily a Management Issue, not a Technology Issue Top-to-Bottom Commitment  Top-management commitment.

1 Figure 1-17: Security Management Security is a Primarily a Management Issue, not a Technology Issue Top-to-Bottom Commitment  Top-management commitment.
Homeland Security. Learning Topics Purpose Introduction History Homeland Security Act Homeland Defense Terrorism Advisory System Keeping yourself safe.

Homeland Security. Learning Topics Purpose Introduction History Homeland Security Act Homeland Defense Terrorism Advisory System Keeping yourself safe.
Prepared by: Dinesh Bajracharya Nepal Security and Control.

Prepared by: Dinesh Bajracharya Nepal Security and Control.
Computer & Network Security

Computer & Network Security
Summer, 2015 1.

Summer,
CSCD 434 Network Security Spring 2014 Lecture 1 Course Overview.

CSCD 434 Network Security Spring 2014 Lecture 1 Course Overview.
Course code: ABI 204 Introduction to E-Commerce Chapter 5: Security Threats to Electronic Commerce AMA University 1.

Course code: ABI 204 Introduction to E-Commerce Chapter 5: Security Threats to Electronic Commerce AMA University 1.
Wrap-up. Goals Have fun! Teach you about Cyber Defense so that you can: –Interest your students in Cyber Defense –Teach your students about Cyber Defense.

Wrap-up. Goals Have fun! Teach you about Cyber Defense so that you can: –Interest your students in Cyber Defense –Teach your students about Cyber Defense.
Chapter 1 Overview The NIST Computer Security Handbook defines the term Computer Security as:

Chapter 1 Overview The NIST Computer Security Handbook defines the term Computer Security as:

Similar presentations

Ads by Google