Introduction to Cybersecurity-6th Period Assignments

Here is some summer fun for you.

FYI

Here is a practice exam for you to take as often as you like to prepare for the final.

Happy Star Wars day.   Log into Code.org using Google and complete the Star Wars Hour of Code lesson.

These are the labs associated with setting up OpenSUSE to do a variety of tasks.  Some of these are REALLY SIMPLE like creating user accounts, which I expect you can do already.  Ultimately it moves to Lab40 to set up SAMBA services.  You will need this knowledge to be able to set up Linux VMs to work on the network we are building in the front of the classroom.  Once you demonstrate competence on this basic set of skills, we'll look at the Microsoft Server set and I will start letting you tinker with the network.

Here are the list of awards for CyberStart America participants.  Those of you who reached 20,000 points should be receiving an e-mail on FRIDAY inviting you to apply for the scholarships and awards.  I will make time in class for you to do this!  Read through the whole page because many of you will qualify  in more than one category.  There are awards for Cyber Patriot, pico, WiCyS, etc.

I'm seeing a lot of missing assignments still, so tomorrow will be a make up day to get all that work in.

CyberStart America ends on Wednesday!  We are the #2 school in the state for SCHOLARSHIP eligibility!!  If you haven't made 20K points yet, there is still time.   Let's finish strong!!!

Go to www.socrative.com. Sign in as a STUDENT and join room DGC9YEVXK. Using the laws below, answer the questions in the Cyber Law "quiz".

Download the current .iso file for OpenSUSE and create a new virtual machine.  You should set up yourself as the primary administrator / account and then add an ehscyber / Ev@nsKn1ghts! administrator once initial setup is done.

I have another sick child, so I thought you might find this interesting.  I will be updating grades while I am out today, so if you are missing anything, now is the time to do it.  Grades are due WEDNESDAY

First of all, to those of you who finished their work, thank you.  For those who did not, please do not send me e-mails asking me to update grades in time for progress reports -- it is too late.
I see many of you did not even bother to start the Snowden video yesterday, so I am leaving that for you to finish today.  When you get through, you can work on CyberStart America which ends next week, or complete any of the missing work you have.  I plan to give you a test on Friday over the thinks we have been studying this quarter, so you can start reviewing the material.

Sandworm tried to attack the Ukrainian power grid again.  Read the article and answer the accompanying questions.  Then look at the Tallin Manual EdPuzzle.  Finally, do the Quia quiz on the Tallin Manual and use the pdf link to help you answer the questions.  If you finish early, you can work on Cyberstart.

My youngest son is sick so I cannot be there today.  Use the time to increase your CyberStart America score.  If you are below 20,000 points, that is your goal.  If you are above 20,000, keep pushing to improve your odds at winning one of the prizes.  The program ends April 27th, so time is running out!!

Finish whatever challenges you can.  When you feel you can't solve any more of the challenges (you may be there already),  create a new document in this assignment and write up the challenges you were able to solve.  Use the writeups on CTFtime.org (linked below) as a guide.

My daughter came home sick last night so I won't be in today. 

If you have access to a computer in your split classroom, work on either CyberStart or picoCTF.  If you are stuck using your phone, read the attached article and answer the questions in Quia.  If you don't have either (not sure how you are reading this) then I will push paper copies to the teachers for you to do the old school way.

CSP students check out the TED talks linked below if you can.

I am printing out a few packets from the pico Primer on Web Exploitation for you to look over while I am out this afternoon.  If you can access pico from a BYOT device, feel free to continue.  Otherwise, study the material I am leaving on the door to give you some insight into how to do the web challenges.

Women of the NCL Webinar
March 15, 3 - 4 pm ET (12 -
1 pm PT)











 














The National Cyber League is delighted to
host a female-forward, ‘Women of the NCL’ webinar event to celebrate,
motivate, and encourage women in our cyber community. Witness the stories
of inspiring women as they share their journeys to becoming cybersecurity
professionals.



The webinar will have a female-lead panel representing women from
industry and academia as well as current and former NCL players. Share
the event with a friend and learn about our ‘Refer-a-Friend’ promotion
for attendees only. 



We're excited to have you join us! Register today.

You can form teams of up to FIVE people.  See the official rules for prizes and naming conventions.

Please take this during your scheduled class period.  When you are finished, work on picoGym or CyberStart.

Click on the link below to start the game

Post any screenshots from the labs here.

See how many of these you can answer.

1. If you have not turned in your Chapter 15 Review, do that first!
2. Study for the test which will be on Monday based on the observable off-task behaviors.
3. EXTRA CREDIT -- Improve your CyberStart score before the end of class!
4. EXTRA CREDIT - Attempt the Cyberskyline challenge (very difficult)
5. Complete any missing assignments and let me know so I can update your grade.

This lab shows you how to set up a pfSense firewall.  It is beneficial to have a variety of firewalls on a network to make it more challenging for hackers to navigate your system.

I have a doctor's appointment today, so please finish the lab from yesterday if you did not and proceed to the second lab on Access Control Lists for Linux-based Firewalls.

Sign into your Infoseclearning acoounts and complete the lab at the link.

The Carnegie Mellon University is sponsoring a three-week long CTF.  If you would like to get practice working with CTF challenges I will offer you extra credit.  If you decide to do this, you need to register with the picoCTF website, register for the event, and join the picoExtraCredit classroom using code:  

CfZ9NWGFJ

Answer the following questions about the CTF.

"IF" you have maxed out on the picoCTF, switch back to CyberStart America and work on MOONBASE to get some additional Python skill.  The CERTS CTF is less than two weeks from now, so you will need to be able to "read" Python to be successful in that.  Do not slack off!!!

Here are the directions, team assignments, and some tips for the CTF tomorrow.  REPORT DIRECTLY TO YOUR ASSIGNED LAB AT THE BEGINNING OF 3RD PERIOD TOMORROW.  We will set up name cards for the teams so you can all sit together.  Sign in and make sure your VMware and internet are working.  The event should start promptly at 10, so be ready to go.


IF YOU ARE ABSENT FOR SOME REASON, YOU CAN CONNECT REMOTELY AND STILL PARTICIPATE WITH YOUR TEAM.  YOUR TEAMMATES CAN SET UP A GOOGLE MEET OR USE SOME OTHER METHOD TO COMMUNICATE WITH YOU.

In preparation for the CERTS CTF next week, if you have gotten through Level 2 in Moonbase on CyberStart America, try one of the links below to test your skills:

I will be out again today, so if you are somewhere without a computer, work on this soft skill exercise.  Instead of typing it out just use notebook paper to complete it.  Don't worry if you do not have a lot of things to write down.  This is a good thinking exercise for you to go through, especially if you plan to apply for work-based learning or college.  You can see what types of things you need to work on.

Here's a good exercise for you to do while I'm out today.  Fill out the form from your point of view.  Consider how this impacts the work environment.

If you have maxed out your score in picoCTF and completed Lab 21, you can work on Cyber Start while the others catch up.

Join the mini picoCTF that starts next Monday.  Also join the pico6th classroom using code: 

Ch0oD3A27

Complete this lab and turn in.

If you were scheduled to take the exam today but did not come to school, I have re-opened it for you to do at home today, Jan 3.  Please e-mail me when you finish.  The Secret Word is  MRHANKY

Work on this review today and when you are done continue with CyberStart

Work hard today to score as many points as you can.  Make good use of the Field Manual, internet searches, and each other.  I'll post one last grade for your progress and then we will begin reviewing for the semester exams.

I will be out today.  Continue working through the CyberStart challenges. I will put up review material for the exam later today.

Take the quiz at the link below.  You may use any tool you find to help you solve the puzzles EXCEPT another person.

Take a screen shot of any solved puzzles to earn extra credit!

Continue working on CyberStart America.  I'd like to see everyone get into the 1,500 point range by the end of the day.  If you get stuck, use the Field Manual videos to help you figure out what to do.

CyberStart begins today!!  Those of you new to CyberStart can work on Headquarters level to get familiar with the challenge format.  Those acquainted with CyberStart from last year can begin at the Forensics base.


WHEN YOU GET IN, GO TO GROUPS AT THE TOP OF THE SCREEN AND JOIN MY 5TH PERIOD USING CODE dirty-drawing-mercury

As we have time in class, we will work on these labs over the next few days.

Split list / Sub instructions:  I will need to leave early today, so you will be on your Split List.  Create a separate document and begin working on the Study Guide using the text book to find the answers.

Split list / Sub instructions:  I will need to leave early today, so you will be on your Split List.  Create a separate document and begin working on the Study Guide using the text book to find the answers.

Finish the TCP/IP lab from yesterday and continue to do the other TCP/IP lab when you are finished.

Pre-register for this year's CyberStart America challenge.  The software will be released Oct 27th.  If this is the first time you are registering, use your school e-mail address.  If you have registered before, use the same account information you did last year -- you should be able to pick up where you left off.

Read the articles below and answer the Quia quiz questions in the related links.

This will either be a review of what you already know, or an introduction to basic cryptography.  Either way, this is an introduction to the skills you will need to be successful in competitions.

Register for a picoCTF account at the link below.  Use your school e-mail address so you can activate the account.

Let's see what you've retained so far.  I'll let you know the secret word in class.  If you are not here, e-mail me so you can take the quiz.

Answer the questions on this review from Chapter 11.  You will need the text book to complete some of these questions.   The text book is on the book shelf at the front of the classroom.  When you are done with them, put them back on the bookshelf the same way you found them!

Today we will look at some additional features of IPv6 addressing.  To do this, you MUST understand how hexadecimal pairs work.  If you have not already solidified binary, you need to redouble your efforts to understand hex.  The links below can also help you with this lesson.  The Wireshark Lookup Tool helps you identify MAC manufacturer codes and the video gives you another explanation of hex.

I will give you the secret word in class.

Click on the link below to start the game

1.  Take the Quia quiz at the link below.


2. Watch the EdPuzzle on VLSM.


3. Complete the attached lab.  Printouts are available on the table at the front of the room.

Today's in-class quiz.  If you are absent, e-mail me for the secret word.

Please complete this lab. Try to avoid using online tools except to check your work.

LFH students - please have this available during our Google Meet today to discuss.

Log into your Quia account using the link below.  I will give you the secret word in class.  If you are taking the test virtually, email me for access.  You will have 50 minutes to complete this test.  You will have ONE attempt so please be careful as you navigate through the test.

Use the attached review game and chapter review to prepare for the Chapter 1 test (NLT Thursday).

CHECK YOUR GRADES!


If you have any assignments marked as missing, or you have low quiz / test scores, now is the time to do or redo those.  You will find most retake quizzes in Quia on your class webpage.

Use the attached slides to continue to fill out the Study Guide I provided you with on Friday.  If you lost it, the Study Guide is attached and/or there are extra copies on the table or my desk.  Please complete items through Practice section 1.10 as a minimum.  Expect a quiz over those items tomorrow.

Here is the Study Guide and presentation for the Introductory unit.  If you are absent for any reason, you can keep up with us as we go through the lecture.  We will do the lab in class when we reach an appropriate point.  Be sure to check Google classroom if you are not here to see how far we progress.

Please take this quiz before we complete the study guide.

EQ: HOW DOES THE INTERNET WORK?
The internet is a network of networks. It is decentralized meaning no one is actually in charge, per se. And yet, somehow it is functioning. One way this happens is through the Internet Engineering Task Force (IETF) that suggests rules and standards for the operation of computers on the internet. These standards are developed through Requests for Comment (RFCs). Your first task is to go to the IEFC site and review the very long list of RFCs. Choose one to become the "expert" on. It doesn't matter what you choose or how old it is as long as it actually addresses an internet problem (no meetings or fake protocols -- avoid anything dated April 1), but whichever one you choose you need to explain to the rest of the class (so choose wisely).

DIRECTIONS AND RUBRIC:

1. After you have selected your RFC, create a Google document in Google Classroom and share it to the Class Drive folder (hot link on left side of home screen).
2. Copy the text or link to the RFC on the page.
3. Create a text box and title it SUMMARY:
4. Write a brief summary of what the RFC is establishing and how it affects the operation of the internet. Give specific examples if you can.
5. Be sure to mention the establishment date of the RFC and the date(s) of updates.
6. Be prepared to explain what you have found to the class. You can include relevant diagrams or pictures if they will help with your presentation.
7. Present you material to the class. We will do this "roundtable" style where you will talk about your RFC and they can look at the material you have put together on the collaboration page.
8. Since there are 8200+ RFCs, everyone should try to pick a different one. You can use the chat function to announce your choice to the class. Once claimed, others should avoid using the same one, please.


RUBRIC

Being able to correctly follow the directions above – 50 points
Making a coherent / easily understood presentation/collaboration page – 25 points
Talking with a modicum of authority and confidence about the subject matter – 25 points

*Note, you may need to look up terms or definitions in other places, especially if the concepts are highly technical.

Take the Quia quiz on Hardening Operating Systems IN CLASS.  It is timed.

I am interested in starting student chapters for two professional Computer Industry (specifically Cybersecurity) organizations:  Women in Cybersecurity (WiCyS) and the International Consortium of Minority Cybersecurity Professionals (ICMCP).  As the names imply, they are specifically designed to connect and assist professionals who are women or who identify as minorities.  WiCyS already has a student chapter process set up, we would just need to apply.  ICMCP does not; however, if there is interest, I will coordinate with the Atlanta chapter to see if we can be an affiliate.  Both organizations offer scholarships and mentor programs for students who are serious candidates to enter the computer industry.  This would also be a great opportunity for those of you looking to get a leadership position for a college resume since we will need to develop a charter and appoint officers.


If you are interested in being a member of either of these organizations, please respond to this post.

Theorize why all the various cables you plug into a computer are shaped the way they are. How did all of the different companies agree on the shapes and configurations? Who is in charge of designing the internet? Post a hypothesis based on your existing knowledge and that of your classmates. Then try researching the topic. When you find the answer, post it as well.

Please use this review game to check your knowledge of the tasks you have been completing using the Cyber Patriot images.  I will give you a quiz on this material on MONDAY.


If you have NOT completed the previous assignments, please do so and post your answers / score reports in Google Classroom.


If you need help, ask the peer facilitator in your class (or a more experienced student).  If you need my assistance, email me the specific nature of your problem so I can create a video or solve your problem in another way.

This week we are going to explore a VM of an Linux Ubuntu image.  Many of the security issues will be addressed in the same fashion as last week.  Use the slides linked below to help guide you through securing the image.

Happy Friday!  I checked your progress yesterday and it appears you guys are all over the place.  Many of you have the image completed, so first order of business will be helping others who are stuck.  I will pop in during the first part of class via the Google Meet link for your class on the home page of this classroom (close this and look in the heading for the class for the link).  If you are finished and proficient in Ubuntu, please assist the others around the room!!!  If you are stuck, please identify yourselves to the group so they can unstick you. 


Next, for the Lynis follow-on assignment, you need to re-run lynis AFTER you do all the tasks in the "suggestions" session to get an updated hardening score.  A score of 49 means you installed the program, but that's it.


Finally, when you finish with those things, go ahead and play the Quizizz review!!


When I come back on Monday, I will have a quiz on securing Windows and Ubuntu, so make sure you understand what you are doing!

I will need to leave early today and will be out with a sick child for most of the week.  I have put the Ubuntu Exhibition Round image on your desktop. It is in the Zip file called cpiv_exrd2_se_ubu16.zip.  You will need to EXTRACT this folder exactly the same way as you did the last one.  Double click on it, choose EXTRACT, EXTRACT ALL, EXTRACT through the three menus.  The password is in the Power Point slide below.  The Unique Identifier is also in this slide.


When you get the image open, this will be different than Windows.  Many of the functions are command line driven, so it will take a little getting used to.  Read the READ ME file just like before and follow the instructions.  At the end of the README file there is a link to the answer key.  If you get stuck, you may open the answer key to see how to do tasks.  The slides below also explain what you are doing.  At the end, I will want you to upload a screen shot of your score report to verify you have done everything.  DO NOT GIVE UP!!!



IF THERE IS AN EXPERIENCED LINUX USER IN THE GROUP, PLEASE SPEAK UP AND HELP YOUR CLASSMATES GET THROUGH THE IMAGE.

1.  Before you start this assignment, make sure you have posted a screenshot of your score report from the Ubuntu image to yesterday's assignment.  If you did not finish that, please do that first.


2.  This assignment was designed by the FBLA sponsors in the county to familiarize you with our pathway's Career Technical Student Organization (CTSO) - Future Business Leaders of America (FBLA).  If you want to qualify for membership in the National Technical Honor Society (NTHS) or be awarded higher diploma seals at graduation, you need to be an ACTIVE member of FBLA.  FBLA is a national organization that offers scholarships through various regional, state, and national competitions.  There are a number of Information Technology (IT) competitions to choose from, or you could pick something not related to IT.  Please carefully consider joining FBLA as you do this assignment.  If you decide to join, I have attached the membership form link below to make it easier for you.

THIS IS A FOLLOW-ON INSTRUCTION FOR THOSE OF YOU WHO GET TO 100 ON THE UBUNTU IMAGE --


Open a command terminal window and install lynis.  To do this, type: sudo apt-get install lynis


Once lynis installs, type: sudo lynis --check-all


Lynis will begin doing a security audit of your system.  It will stop several times to prompt you to hit ENTER or Y -- do it each time until the command prompt returns.
Scroll up to the "SUGGESTIONS" area and begin installing or fixing all of the recommended suggestions.  Your goal is to raise your hardening score at the bottom.  When you are done, rerun the check and post a screenshot of your new hardening score.

1.  If you have not finished your Quia pretest, please complete this for homework!  www.quia.com/web


2. Work on the Cyber Patriot XIV Exhibition Round image.  You will be responsible for knowing the information contained in the slide sets below.  If you are absent and cannot work on the virtual image, attempt to look at the items on your own Windows computer if you have access.


3. When you are finished, upload a screenshot of your scoring report.

During the year we will expose you to tools and techniques that could potentially allow you to penetrate security protocols on computer systems.  For this reason, you need to act responsibly and within the bounds of the law.  Please read the attached document, sign and date, and have your parents also sign and date.

If you remember your account information from last year, I transferred you to the new class (use forgot username, forgot password if you can't remember your login information).  If you did not have an account last year, use the instructions below to register for a Quia account.  When you are done, take the Getting to Know You survey and the pretest.

1.  Finish your Quia pretest!  www.quia.com/web


2. Work on the Cyber Patriot XIV Exhibition Round image.

Take this test and post your results.