4 credits cyber-req CAE-CD; CAE-CO

CSCD 381 — Cybersecurity III: Offense and Defense

Adversary techniques and defender responses. Reconnaissance, scanning, exploitation, post-exploitation, lateral movement, persistence, and detection. Legal and ethical considerations for cyber operations.

catalog.ewu.edu

DCWF work roles this course develops

CE-322 Cyberspace Operator partial
Cyberspace Operator foundations.
CE-551 Red Team Specialist primary
Red Team Specialist.
CS-531 Cyber Defense Incident Responder strong
Cyber Defense Incident Responder counterpart knowledge.
CS-541 Vulnerability Assessment Analyst strong
Vulnerability Assessment Analyst adversary view.

Knowledge Units covered

CD-OSH Operating Systems Hardening partial
Operating Systems Hardening defender view.
CO-M6 Cybersecurity Foundations partial
Vulnerability Analysis (CAE-CO Mandatory).
CD-PTT Penetration Testing strong
Penetration Testing (CAE-CD Optional).
CO-M2 Computer Science Foundations strong
Basic Cyber Operations (CAE-CO Mandatory).

ABET student outcomes

Student outcomes defined by the ABET Computing Accreditation Commission. Outcome 7 applies to cybersecurity-designated programs.

ABET 1 strong Analyze a complex computing problem and apply principles of computing and other relevant disciplines to identify solutions.
ABET 4 strong Recognize professional responsibilities and make informed judgments in computing practice based on legal and ethical principles.
Legal/ethical operations.
ABET 7 primary Apply security principles and practices to maintain operations in the presence of risks and threats. (Cybersecurity / Cyber Operations only.)

O*NET civilian tasks prepared

Tasks drawn from the O*NET records for the occupations that most directly correspond to the DCWF roles this course develops.

SOC 15-1212.00: Monitor use of data files and regulate access to safeguard information in computer files.
SOC 15-1212.00: Document computer security and emergency measures policies, procedures, and tests.
SOC 15-1212.00: Monitor current reports of computer viruses to determine when to update virus protection systems.
SOC 15-1212.00: Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
SOC 15-1299.04: Identify security system weaknesses using penetration tests.
SOC 15-1299.04: Develop infiltration tests that exploit device vulnerabilities to evaluate their security.

NCAE CyberGames scoreboard errors this course addresses

The coursework covers topics that appear in these scoreboard patterns during NCAE regional and national events.

NCAE-eeb5e4e8f3 SMB Login / failure: SMB operation failed: [Errno 111] Connection refused
NCAE-5e1da0ed9d SSH Login / failure: Failed to connect to host: IP
NCAE-4b7774940b SMB Login / failure: SMB operation failed: [Errno 113] Host is unreachable
NCAE-2ec02e1cd0 SMB Login / failure: SMB connection failed: protocol error
NCAE-d9f492a0da SMB Login / failure: Failed to connect to host: IP
NCAE-55a9a5a7d4 SMB Login / failure: SMB operation failed: timed out
NCAE-720468fcb4 SMB Login / partial: SMB operation failed: Failed to list shares: Unable to locate Server Service RPC endpoint
NCAE-49be0b578b SMB Login / failure: SMB operation timed out in 5 seconds
NCAE-34e3807d5a SMB Login / partial: SMB operation failed: Failed to list shares: Unable to connect to IPC$
NCAE-4b0a05cc84 SSH Login / partial: The following users failed to authenticate with their public key: nills, vetomo
NCAE-9924ef98f9 SSH Login / partial: The following users failed to authenticate with their public key: vetomo, nills
NCAE-f750673474 SSH Login / partial: The following users failed to authenticate with their public key: simone_weil, todd_k
NCAE-cbaa327d45 SSH Login / partial: The following users failed to authenticate with their public key: vetomo, todd_k
NCAE-31a06c29be SSH Login / partial: The following users failed to authenticate with their public key: claude_chevalley
NCAE-57bc10ac12 SSH Login / partial: The following users failed to authenticate with their public key: claude_chevalley, simone_weil
NCAE-8b86722a38 SSH Login / partial: The following users failed to authenticate with their public key: nills, simone_weil
NCAE-7b7d319908 SSH Login / partial: The following users failed to authenticate with their public key: nills, todd_k
NCAE-a4e6291912 SSH Login / partial: The following users failed to authenticate with their public key: simone_weil, vetomo, claude_chevalley
NCAE-c5b357ae25 SSH Login / partial: The following users failed to authenticate with their public key: nills
NCAE-5985c6e330 SSH Login / partial: The following users failed to authenticate with their public key: simone_weil, nills
NCAE-ca679de119 SSH Login / partial: The following users failed to authenticate with their public key: vetomo, claude_chevalley
NCAE-fd86ddff99 SSH Login / partial: The following users failed to authenticate with their public key: vetomo
NCAE-d5ad63d4f1 SSH Login / partial: The following users failed to authenticate with their public key: simone_weil, vetomo, nills
NCAE-b2369be32e SSH Login / partial: The following users failed to authenticate with their public key: todd_k
NCAE-0f62f7018e SSH Login / partial: The following users failed to authenticate with their public key: claude_chevalley, todd_k, simone_weil
NCAE-c9f04c8da7 SSH Login / partial: The following users failed to authenticate with their public key: nills, todd_k, claude_chevalley
NCAE-3336e86af3 SSH Login / partial: The following users failed to authenticate with their public key: simone_weil, nills, claude_chevalley, todd_k
NCAE-0c3df3519e SSH Login / partial: The following users failed to authenticate with their public key: simone_weil, todd_k, vetomo
NCAE-3baf4b3c23 SSH Login / partial: The following users failed to authenticate with their public key: claude_chevalley, vetomo, nills
NCAE-9272351c5c SSH Login / partial: The following users failed to authenticate with their public key: todd_k, nills, simone_weil