Presentation is loading. Please wait.

Presentation is loading. Please wait.

JMU GenCyber Boot Camp Summer, 2015. Welcome Cyber Defense Boot camp for High School Teachers Cyber Defense Lab (ISAT/CS Room 140) Department of Computer.

Published byJustin Adams Modified over 8 years ago

Similar presentations

Presentation on theme: "JMU GenCyber Boot Camp Summer, 2015. Welcome Cyber Defense Boot camp for High School Teachers Cyber Defense Lab (ISAT/CS Room 140) Department of Computer."— Presentation transcript:

1 JMU GenCyber Boot Camp Summer, 2015

2 Welcome Cyber Defense Boot camp for High School Teachers Cyber Defense Lab (ISAT/CS Room 140) Department of Computer Science James Madison University Summer, 2015 JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 2

3 Introductions Bryan Conner Kyle Evers Hossain Heydari Andrew Hutchson Matt Jackson Emil Salib Brett Tjaden Xunhua (Steve) Wang JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 3

4 Goals Have fun! Teach you about Cyber Defense so that you can: Interest your students in Cyber Defense Teach your students about Cyber Defense Cyber Defense Clubs CyberPatriot Program (http://www.uscyberpatriot.org/) JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 4

5 Schedule JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 5

6 General Information No food or drinks near the laptops Restrooms: – Out the door and turn left – Right at main hallway – Right at next hallway – Restrooms are on the right If you have a car on campus see us for a parking permit Fill out a W-9 form if you want your money JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 6

7 Questions Always welcome! JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 7

8 Cyber Defense JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 8 Prepare Triage Detect Protect Respond

9 Threats A threat is a potential violation of system security Examples? JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 9

10 Attackers Perform actions to try to cause security violations Outsiders: Competitors Hackers Organized crime Terrorists Foreign government, military, or law enforcement Insiders: Customers, suppliers, vendors, or business partners Disgruntled current (or former) employees Contractors, temps, or consultants JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 10

11 Why You Should Not Be an Attacker It is illegal: United States Code, Title 18, Section 1030 (and others) – USA Patriot Act, Homeland Security Act, PROTECT Act – http://www.cybercrime.gov Unauthorized access or use of a computer or network system is illegal Unintentional attacks are illegal too JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 11

12 Understanding the Tools and Techniques of Attackers Important for defenders: – Can evaluate systems you defend as attackers will – Can implement countermeasures designed to thwart attackers – Better understand the implications of certain decisions JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 12

13 What do Cyber Defenders Protect? JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 13 Prepare Triage Detect Protect Respond

14 The Security Triad Confidentiality – information is protected from unauthorized access Example? Integrity – information is protected from unauthorized modification Example? Availability – timely access to information (by authorized people) is ensured Example? JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 14

15 How do we Protect? Prevention – mechanism(s) that cause attacks to fail – Example? Detection – mechanism(s) that determines that an attack is under way, or has occurred, and reports it – Example? Recovery – mechanism(s) that stop attacks and assess and repair any damage caused – Example? JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 15

16 GenCyber Cybersecurity First Principles Domain Separation Process Isolation Resource Encapsulation Modularity Least Privilege Abstraction Data Hiding Layering Conceptually Simple JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 16

17 Getting Started with Cyber Defense What to do first? – Get to know you systems You cannot effectively defend what you don't understand Attackers make it their job to understand systems better than the defenders and leverage their advantage in knowledge “If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle” - Sun Tzu JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 17

18 Getting Started with Cyber Defense What to do first? – Get to know you systems You cannot effectively defend what you don't understand Attackers make it their job to understand systems better than the defenders and leverage their advantage in knowledge “If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle” - Sun Tzu “You Don't Know Me” - Elvis JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 18

19 After You Know Your Systems Think about threats and attackers Think about what needs to be protected (security triad) Think about your goals (prevention, detection, recovery) JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 19

20 After You Have Thought About Your Systems Start to plan, implement, and test improvements to your systems' security posture Respond to actions by attackers JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 20 Prepare Triage Detect Protect Respond

21 Hands-On Exercises You will not just be listening, you will be doing Virtual machines (VMs) – a simulated computer running on another computer VMs are great for hands-on Cyber Defense exercises You can create and use VMs with your students using free software: – VirtualBox (https://www.virtualbox.org/) – VMWare Player (http://www.vmware.com/products/player/) JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 21

22 Accessing your VM for this Boot Camp Turn on laptop Click on “CyberDefender” account to log in Double click on Firefox icon to open web browser If you are not already on it, go to the following page: https://vc.cyberdef.cs.jmu.edu:9443/vsphere-client/ JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 22

23 Accessing your VM for this Boot Camp (cont) Log in with the credentials you were given Click on “Host and Clusters” Expand the items on the left side until you see your “student” VM Click on your student VM to highlight it Power on the VM In the center window click on the “Summary” tab Click on “Launch Console” JMU GenCyber Boot Camp© 2015 JAMES MADISON UNIVERSITY 23

Download ppt "JMU GenCyber Boot Camp Summer, 2015. Welcome Cyber Defense Boot camp for High School Teachers Cyber Defense Lab (ISAT/CS Room 140) Department of Computer."

Similar presentations

EBooks and Audiobooks. This class will give you an overview of eBooks and electronic Audiobooks available from the Library. We will also explain the basic.

EBooks and Audiobooks. This class will give you an overview of eBooks and electronic Audiobooks available from the Library. We will also explain the basic.
Welcome Cyber Defense Bootcamp for High School Teacher

Welcome Cyber Defense Bootcamp for High School Teacher
Network Security Policy Why do I need a network security policy? Dr. Charles T. Wunker.

Network Security Policy Why do I need a network security policy? Dr. Charles T. Wunker.
September 10, 2012Introduction to Computer Security ©2004 Matt Bishop Slide #1-1 Chapter 1: Introduction Components of computer security Threats Policies.

September 10, 2012Introduction to Computer Security ©2004 Matt Bishop Slide #1-1 Chapter 1: Introduction Components of computer security Threats Policies.
11 ASSESSING THE NEED FOR SECURITY Chapter 1. Chapter 1: Assessing the Need for Security2 ASSESSING THE NEED FOR SECURITY  Security design concepts 

11 ASSESSING THE NEED FOR SECURITY Chapter 1. Chapter 1: Assessing the Need for Security2 ASSESSING THE NEED FOR SECURITY  Security design concepts 
Security Issues and Challenges in Cloud Computing

Security Issues and Challenges in Cloud Computing
INDEX  Ethical Hacking Terminology.  What is Ethical hacking?  Who are Ethical hacker?  How many types of hackers?  White Hats (Ethical hackers)

INDEX  Ethical Hacking Terminology.  What is Ethical hacking?  Who are Ethical hacker?  How many types of hackers?  White Hats (Ethical hackers)
1 Overview CSSE 490 Computer Security Mark Ardis, Rose-Hulman Institute March 8, 2004.

1 Overview CSSE 490 Computer Security Mark Ardis, Rose-Hulman Institute March 8, 2004.
1 An Overview of Computer Security computer security.

1 An Overview of Computer Security computer security.
Chapter 1: Introduction Components of computer security Threats Policies and mechanisms The role of trust Assurance Operational Issues Human Issues Computer.

Chapter 1: Introduction Components of computer security Threats Policies and mechanisms The role of trust Assurance Operational Issues Human Issues Computer.
Chapter 1 Introduction. Art of War  If you know the enemy and know yourself, you need not fear the result of a hundred battles.  If you know yourself.

Chapter 1 Introduction. Art of War  If you know the enemy and know yourself, you need not fear the result of a hundred battles.  If you know yourself.
July 1, 2004Computer Security: Art and Science ©2002-2004 Matt Bishop Slide #1-1 Chapter 1: Introduction Components of computer security Threats Policies.

July 1, 2004Computer Security: Art and Science © Matt Bishop Slide #1-1 Chapter 1: Introduction Components of computer security Threats Policies.
April 1, 2004ECS 235Slide #1 Chapter 1: Introduction Components of computer security Threats Policies and mechanisms The role of trust Assurance Operational.

April 1, 2004ECS 235Slide #1 Chapter 1: Introduction Components of computer security Threats Policies and mechanisms The role of trust Assurance Operational.
CSCD 434 Spring 2011 Lecture 1 Course Overview. Contact Information Instructor Carol Taylor 315 CEB Phone: 509-359-6908 Office.

CSCD 434 Spring 2011 Lecture 1 Course Overview. Contact Information Instructor Carol Taylor 315 CEB Phone: Office.
Cryptography and Network Security Chapter 1. Chapter 1 – Introduction The art of war teaches us to rely not on the likelihood of the enemy's not coming,

Cryptography and Network Security Chapter 1. Chapter 1 – Introduction The art of war teaches us to rely not on the likelihood of the enemy's not coming,
Engineering Secure Software. Lottery Story A Threat We Can’t Ignore  Documented incidents are prevalent Carnegie Melon’s SEI has studied over 700 cybercrimes.

Engineering Secure Software. Lottery Story A Threat We Can’t Ignore  Documented incidents are prevalent Carnegie Melon’s SEI has studied over 700 cybercrimes.
Storage Security and Management: Security Framework

Storage Security and Management: Security Framework
Computer Science and Engineering 1 Csilla Farkas Associate Professor Center for Information Assurance Engineering Dept. of Computer Science and Engineering.

Computer Science and Engineering 1 Csilla Farkas Associate Professor Center for Information Assurance Engineering Dept. of Computer Science and Engineering.
1 Figure 1-17: Security Management Security is a Primarily a Management Issue, not a Technology Issue Top-to-Bottom Commitment  Top-management commitment.

1 Figure 1-17: Security Management Security is a Primarily a Management Issue, not a Technology Issue Top-to-Bottom Commitment  Top-management commitment.
Homeland Security. Learning Topics Purpose Introduction History Homeland Security Act Homeland Defense Terrorism Advisory System Keeping yourself safe.

Homeland Security. Learning Topics Purpose Introduction History Homeland Security Act Homeland Defense Terrorism Advisory System Keeping yourself safe.

Similar presentations

Ads by Google