Course Title:
|
Course Materials:
|
Verton, D. (2003). Black ice: the invisible threat of cyber-terrorism. Emeryville, CA: The McGraw-Hill Companies.
Skoudis, E., & Liston, T. (2006). Counter hack reloaded: A step-by-step guide to computer attacks and effective defenses (2nd ed.). Upper Saddle River, NJ: Pearson Education, Inc. | |
Course Description:
| IFSM 457 Cyber Terrorism (3) Prerequisite: IFSM 300. An overview of the issues surrounding cyberterrorism, including low-level threats (attacks that vandalize Web pages or launch denial of service), middle-tier threats (online fraud and industrial espionage by companies, organized crime, and nation states), and high-end threats from nation states and terrorist groups. Socioeconomic motivations and the "hacker mentality" are explored. Review also covers common network and security loopholes, the concept of social engineering and its impact on IT security, existing government regulations, and the National IT Security Plan. Students may receive credit for only one of the following courses: IFSM 457 or IFSM 497C. | |
Course Goals/Objectives:
|
At the conclusion of this course, the student shall be able to:
* Explain and discuss how attacker’s methodology is used in a ‘phased’ approach to exploit system vulnerabilities.
* Explain in detail the five processes of Reconnaissance, Scanning, Gaining access, Maintaining access and Covering the tracks in hacker attacks.
* Identify attacker’s tools used to launch denial-of-service, session hijacking, port scan attacks and kernel-mode rootkits.
* Identify ‘new’ ID spoofing attacks using Google, Nmap idle scanning and stack based buffer overflows, passive covert channels and the defenses used against them.
* Articulate how a major cyber-terrorist threat to a nation’s critical infrastructure can be avoided.
* Identify and discuss why Wireless (Wi-Fi) is such a potential security threat.
* Demonstrate a key understanding of the current and growing vulnerability to the nation from acts of cyber-terrorism, and how they can be prevented. | |
Course Introduction:
The primary goal of this course is to provide the student with an important understanding of how system vulnerabilities open pathways to full-scale network cyber attacks. You will learn details about how attackers gain access to exploited systems, manipulate these systems, maintain access and work hard to cover their tracks. You will learn about the five phases of attacks, the most current tools and techniques used at each stage and how defenses are strategically used at each phase of a siege. In addition, this course will provide thought-provoking scenarios of possible cyber-terrorism attacks that could cripple the nation’s infrastructure if left unprotected. Content areas include, but are not limited to:
*Covert channels
*Achilles Web proxy attack tool
*User-mode and Kernel-mode Rootkits
*Goggle Hacking and Nmap port scanning
*The Wireless Threat
*Cyber-Terrorism’s Hidden dangers | |
Grading Information and Criteria:
|
Class Participation: 30 points
Midterm (Online): 20 points
Research Project Paper: 30 points
Final (Proctored Exam): 20 points
Total Points: 100
-----------------
Grading Scale:
Grade Range
90 - 100% A
80 - 89% B
70 - 79% C
60 - 69% D
59 - below F | |
Other Information:
|
Do not expect an Incomplete in the course unless you have serious personal problems very close to the end of the term or have official TDY orders or other documentation of official duties. The University of Maryland University College regulations are strict about the assignment of an Incomplete. Please consult the Undergraduate Catalog for further
information on Grading policies.
Late Policy: The assignment, participation (discussion Topics and Web
Activities), and exams should be submitted on time. Students have a long
lead-time in which to prepare, ask questions, and seek help. Therefore,
unless a major accident, illness, or work assignment (with supporting
documentation) prevents a student from submitting work on time, five (5)
points will be docked from each late assignment's grade.
Extra Credit: Extra credit is not normally given.
Attendance: Although attendance is not counted in the grade, Weekly
Participation is, and it is an important part of the learning process
online.
Writing and Research: Effective writing is critical to the intellectual
life of university students and graduates within the workplace. Effective managers are usually effective communicators. Your work in this course must demonstrate your ability to master and effectively communicate course content. Efficient writing:
*Meets the needs of the reader
*Adequately covers the subject
*Uses expected conventions of the format and organizations
*Demonstrates use of credible reasoning and evidence
*Satisfies standards of style and grammatical correctness
*Requires 100% compliance with UMUC's zero-tolerance policy regarding
plagiarism. | |
Project Descriptions:
|
PROJECT RESEARCH PAPER:
The formal course Project is a major research paper based on the text “Black Ice” and the author’s premise he presents for the “Invisible Threat of Cyber-Terrorism.” Using MPA/APA collegiate writing guidelines, draft a minimum eight (8) page, double-spaced, 10 or 12 font, one-inch margins, numbered pages, research paper with “Cover Page” and full Bibliography or Endnotes page. The paper is NOT intended to be a “Book Report” of the Black Ice text, but rather a critical analysis using at least twelve (12) resource citations--besides citations from Black Ice.
The assignment topic: “Critically evaluate the possibility of a Cyber-Terrorist attack, and it’s impact, on the national infrastructure in the US.”
At minimum the paper should include:
*After the Introduction, compare your viewpoint to the Author’s position and arguments for a potentially crippling cyber-terrorist attack. Do you agree or disagree with him? Why?
* The main body of the paper should further your position and be backed up by online resource examples (I have included 27 such links from UMUC’s Database library in the Cyber Café for reference).
*Critically assess the Author’s statements and arguments of how vulnerable the US might or might not be to a critical cyber-based attack. For example, Does ‘media hype’ and ‘hyperbole’ play a part? Should the US Government/Homeland Security raise funding now to prepare for such a cyber-terrorist attack?
*As a critical thinker, examine and question closely the writer’s assumptions, beliefs and statements. In concluding, support your position, and give your reasons for what you would do, and how you would do it--to prepare the US for a potentially disastrous major cyber-attack. | |
Academic Policies:
| Cases of plagiarism are handled consistent with current UMUC guidelines. See the UMUC policies at the following URL: http://www.umuc.edu/policy/ | |
Course Schedule:
|
The following is a tentative schedule. The Instructor reserves the right to make any changes deemed necessary or advisable.
*Please note the Course Dates: 03 April 2006-07 July 2006, a 14 week
DE course, with-- a one week Break from 24 May to 04 June, and a two (2) week Proctored Final Exam period * Please plan accordingly*
Week 1
03 April 2006 Introduction **Project due: 26 June**
Week 2
10 April Chapter 2, Counter Hack Chapters 1-3 Black Ice
Week 3
17 April Chapter 3, Counter Hack Chapters 4-6 Black Ice
Week 4
24 April Chapter 4, Counter Hack Chapters 7-9 Black Ice
Week 5
1 May Chapter 5, Counter Hack Chapters 10,11 Black Ice
Week 6
8 May Chapter 6, Counter Hack
Week 7
15 May **Online Mid-Term Exam** (48 hour increments)
Week 8
22 May Chapter 7, Counter Hack
Week 9
29 May *Break: 27 May-4 June * 1 week
Week 10
5 June Chapter 8, Counter Hack
Week 11
12 June Chapter 9, 10 Counter Hack
Week 12
19 June Chapter 11
Week 13 & 14
26 June-7 July Proctored Final Exam | |
Search
MyUMUC
WebTycho