Program Overview

Systems and Software Security

Course Overview

The objective of this course is to familiarize students with the issues of cybersecurity relevant to their professional life. This course will address various issues, including:

• Analysis of attacks to expose the methodology, tactics, and strategy used by cybercriminals
• The kind of vulnerability attackers target when they try to penetrate networks, access and/or compromise proprietary information
• Techniques used to make attacks difficult to detect
• Tools used for cyber defense and their limitations
• Security concerns related to computers and processors in modern products
• The rapidly changing landscape of cybersecurity and ways to stay informed

Course Details

• Instructor: Benoit Morel
• CEU Units: 4.8
• Number of Lectures: 12
• Hours per Week: 10-15
• Tuition: $2,700

Prerequisites

• Familiarity with computers

Textbook

No textbook is assigned due to the rapidly changing nature of the subject. Each lecture will be accompanied by up-to-date reading materials.

Topics

• Lecture 1: Introduction to the subject and course
• Lecture 2: Detailed analysis of the Aurora attack and its lessons
• Lecture 3: Penetration attack (1): HTML code injection
• Lecture 4: Penetration attack (2): Javascript code injection
• Lecture 5: Penetration attack (3): SQL code injection (intro)
• Lecture 6: Penetration attack (4) and the protection of database: advanced SQL attacks
• Lecture 7: The technology of modern malware
• Lecture 8: Tools for defense: Intrusion detection, Penetration testers
• Lecture 9: Wireless and smartphone security
• Lecture 10: The cybersecurity of embedded systems
• Lecture 11: The cybersecurity of RFIDs, sensors and SCADA systems
• Lecture 12: Cybersecurity of the future: Cloud Computing, VANET (Vehicle Ad Hoc Networks), Convergence
• TBD: Project Presentations

Additional Information

This course is part of the Software and Societal Systems Department at Carnegie Mellon University. The department offers various programs and courses in executive education, including open enrollment training and custom training options.