34 courses with the subject CYBR, each shown exactly as we captured it from the college's catalog, with every element we hold. Where the wording looks broken, that is our reading of the catalog, not the college's text.
CYBR 201Fundamentals of Cybersecurity3
Introduction to fundamental cybersecurity concepts. Exploration of the basic security design principles needed to create systems worthy of trust. Introduction to IT system components and their roles in system operation. Consideration of the processes and regulations associated with operational analysis and evaluation, including approval authorities and processes.
Exploration of the intersection between cybersecurity and policy, law, ethics, privacy, compliance, and law enforcement. Examination of applicable laws and policies related to cyber defense. Topics include privacy and the internet, the effectiveness of cybersecurity applications in preventing crime and abuse, and the application of ethical concepts in cybersecurity.
Introduction to basic concepts in cryptography, including encryption/decryption, sender authentication, data integrity, non-repudiation, attack classification (ciphertext-only, known plaintext, chosen plaintext, chosen ciphertext), secret key (symmetric) cryptography and public key (asymmetric) cryptography, and information-theoretic security (one-time pad, Shannon Theorem). Introduction to data security topics authenticity, anonymity, and integrity.
Exploration of programming and machine constructs behind code vulnerabilities and best practices for developing secure programs. Introduction to low-level code mechanics in C and assembly language frequently leveraged in code exploitation. Study of programming principles that guard against software vulnerabilities, including pointers, hardware control, overflows, input sanitization, data obfuscation, secure design, and static analysis.
CYBR 307Essential Technical Cybersecurity for Business
Introduction to key technical elements of the cybersecurity landscape essential for solving business problems. Development of simple scripts/programs. Exploration of common technical concepts, fundamental operating system functions, and tools employed by cybersecurity practitioners.
Exploration of the concepts of information assurance, audit and security assessment to measure compliance with applicable laws and regulations, and cyber risk management. Hands-on experience applying the NIST Risk Management Framework to government systems to protect the system’s unique mission.
Study of the concepts used when defending a network and exploration of the basic tools and techniques that can be employed to protect a network and communication assets from cyber threats. Study of the knowledge required to administer and maintain a comprehensive enterprise security infrastructure. Introduction to common security architectures for the protection of information systems and data.
Introduction to database security theories and applications. Consideration of threats in database systems and applications of security concepts. Topics include data integrity and authentication, and information storage security.
Explores methods used to raise general security awareness. Reviews current industry practices, contingency planning, and systems specific plans (e.g., change management). Examines the roles involved in planning and managing security. Students develop necessary skills to adapt policies to achieve confidentiality, integrity, and availability of organizational assets and data.
Application of security concepts to ensure the confidentiality, integrity, and availability of the computer operating system. Operating systems/security concepts are applied in the context of operating system hardening.
Introduction of principles, applications, and implementation of blockchain technologies, smart contracts, and other secure decentralized systems. Explorations of the cryptographic principles underlying decentralized systems and create applications leveraging these technologies.
Introduction to the concepts in computer and forensics investigations. Recovery and analysis of digital evidence using industry best practices and standard commercial and open source tools. Development of comprehensive investigative forensic reports. Coverage of the legal and ethical considerations of computer crime investigations.
Introduction to cyber operations concepts, with specific focus on the computing aspects. Topics include: Basics of cyber operations including a cyber operations procedures, applicable laws, and information assurance, and information assurance architectures.
Exploration of Information Assurance (IA) policies and frameworks from the organizational mechanics of developing policies to the psychology of implementation. Review of various information security and assurance concepts in clear, simple terms such as governance, regular mandates, business drivers, legal considerations and more while effectively balancing technical knowledge and soft skills.
CYBR 363Artificial Intelligence for Cybersecurity3
Introduction to fundamental knowledge in applying AI and ML techniques to real-world datasets. Students are introduces to supervised and unsupervised learning models, applications to internet traffic and anomaly detection, and ethics, fairness, and bias in data-drive cybersecurity.
Introduction to web application security principles focusing on identifying and mitigating top ten vulnerabilities through common application testing methodologies. Exploration of various web application architectures and backend & frontend technologies. Hands-on application of security testing tools and techniques to assess and enhance the security posture of web applications throughout their development life cycle.
Introduction to organizational security posture improvement through penetration testing and ethical hacking. Study of ways to exploit vulnerabilities to gain access to a system. Exploration of common security architectures for the protection of information systems and data.
Introduction to digital forensics and evidence-handling techniques for different types of information technologies and forms of data. Exploration of the basic principles of digital forensics. Introduction to the legal requirements for collecting, seizing, and protecting digital evidence. Application of digital forensics techniques throughout an investigation life cycle.
Exploration of network protocols, services, and infrastructures. Exploration of detection and analysis of cybersecurity threats using common open-source tools. Monitoring of a security policy. Review of security controls. Exploration of essential tasks to secure a network. Review of methods for malicious access prevention to computer networks, hosts, and data.
Design and implementation of software solutions to achieve security goals using data captured on computer systems and networks. Topics include: advanced network forensics, network defense tools and principles, and advanced intrusion detection and prevention implementations.
Introduction to cloud security architecture and exploration of the guiding security design principles, design patterns, industry standards, and associated technologies. Study of regulatory compliance requirements critical to the design, implementation, delivery, and management of secure cloud-based services.
Introduction to security operations centers (SOC). Study of processes used for operations such as incident response, vulnerability assessment, and threat investigation. Introduction to software tools to manage SOC activities such as security information and event management (SIEM) systems, vulnerability scanners, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
Investigation of cyber fraud, and the study of plans and processes for a holistic approach to preventing and mitigating fraud throughout the system lifecycle. Specific attention paid to financial fraud and the application of forensics techniques to respond to and investigate financial incidents.
Explores security issues associated with building complex systems out of third-party components; the authorities and processes for the approval of their operation; how security principles can be applied to improve security throughout the system or product lifecycle; and the basics of industrial control systems and vulnerabilities they are likely to have.
Introduction to risk assessment models, methodologies, and processes. Examination of how cybersecurity risks are part of an organizations’ overall risk. Study of the techniques and guidelines used to perform a cybersecurity risk assessment of a system, process, or organization and appropriate mitigations.
Introduction to key aspects of cyberspace’s emergence as the fifth domain of strategic warfare, the center of human communication, and an integral part of social governance. Study of cyber politics as an area related to political philosophy, international economics, and realpolitik in diplomacy and warfare.
Introduction to the U.S state laws, federal laws, and regulatory policies, as well as international laws that regulate cyberspace activities. Coverage of cyberspace and the legal/policy background that individuals, businesses, and governments must understand to conduct cyber actions within the limits of legal authority.
Investigation under faculty supervision beyond what is offered in existing courses. Written experience report and oral presentation required. For further information, consult the Enrichment Courses and Programs section in this catalogue.
Individual reports and group discussions of field, laboratory and/or library research on selected topics in cybersecurity. May only be taken once for credit in the major.
Academic training and practical experience through work in a private company or public agency. Faculty supervision and evaluation of all study and on-site activity. Written experience report and oral presentation required.
