CFS Cyber Security (CFS)

This course examines the current standard of due care and best business practice in information security. Demonstrations and hands-on practice will reinforce topics such as evaluation and selection of security models, risk management, threat analysis, organizational technology evaluation, security implementation, disaster recovery planning and security policy formation and implementation. Upon completion, the students will be able to examine security technology, methodologies and practices. CTAG approved CTCYBR001, effective fall 2019

This course provides an overview of cyber crime and computer related crime issues facing businesses and the criminal justice system. Demonstrations and hands-on practice will reinforce topics such as how computers are used in crime, interview techniques, search warrants, evidence handling, chain of custody, identification and recovery of computer data, report writing, case preparation, and courtroom testimony. Upon completion, the students will be able to understand government response to cyber crime issues from a law enforcement perspective.

This course will familiarize students with the various types of white collar crimes committed in the banking, health care and financial industry. Emphasis will be placed on recognition and investigation of white collar crime particularly those involving the use of information system resources.

This course provides students the opportunity to expand on the knowledge, skills, and practical exercises they have been exposed to in prior classes to prevent, detect, and respond to a cyber-attack. Students will expand their exposure to and use of open-source network tools for network monitoring and analysis. Successful completion of this course maps to the CompTIA Cybersecurity Analyst Certification (CySA+)

Students will complete practical assignments to facilitate locating an internship position to complete a total of 105 hours in an approved cyber security, digital forensics, or information technology setting (physical or virtual) to apply the skills learned in the program. Students will submit assignments to promote lessons learned from the experience and pass these along to their peers throughout the process and in a final presentation.

This course is a detailed examination of the aspects of contingency planning operations. Demonstrations and hands-on practice will reinforce topics such as incident response-prevention, detection, reaction, disaster recovery, and business continuity. Upon completion, the students will be able to provide documentation for a disaster recovery plan.

This course is a comprehensive overview of contemporary volume and file systems. Topics include, discovering hidden evidence, recovering deleted data, data structures, and tool validation. Students will analyze example disk images, and participate in advanced investigation scenarios.

This course presents methods to properly conduct a computer forensics investigation while mapping to the objectives of the International Association of Computer Investigative Specialist (IACIS) certification. Demonstrations and hands-on practice will reinforce topics such as finding evidence in file metadata, analyzing partitions and data structures, and identifying hidden data on a disk's Host Protected Area. Upon completion, the students will be able to gather evidence from disk images document findings.

In this course, students learn to discover weaknesses in operating environments using the well known hacking methods. Students will acquire the knowledge to systemically test and exploit internal and external defenses. Students will learn the countermeasures used to mitigate and reduce risk to enterprise networks. Students will be taught how to crack security systems so they can advise organizations on how to protect their systems.

The student will understand the methods and tools used in preserving, duplicating, imaging and validating data from peripheral devices such as cellular phones, PDAs, IPODs, and Blackberrys. In addition to this, attention will be given to the gathering of evidence from both hard wired and wireless networks devices. Students will practice the gathering of information from these devices using the appropriate methods and software to allow the information to be admissible in court.

This course covers typical methods of collecting, examining, and recovering data from typical UNIX style file systems. Methods for imaging and mounting file systems without changing data will be studied. Ways of monitoring system events and tracking intruders.

This course is designed to teach students the skills required to identify, acquire, and analyze data gathered from network devices using both passive and active tools. Emphasis will be placed on the use of open-source security tools to conduct an analysis of network activity to gather information relative to an investigation.