Cyber Security Overview Madison County Career Technical Center February 17, Timothy Mullican Cyber Defense Analyst, Aleta Technologies

Transcription

1 Cyber Security Overview Madison County Career Technical Center February 17, 2014 Timothy Mullican Cyber Defense Analyst, Aleta Technologies

2 #whoami Timothy Mullican, 17 years old Cyber Defense Analyst at Aleta Technologies Internship from Jan 2013 Jan 2014 Senior at Laurel Springs School Online, accredited, private K- 12 school Sophomore at Calhoun Community College Will graduate with Associate of Science degree in December Plan to cononue working at Aleta and transfer to a 4- year University to finish B.S. degree in Cyber Security online Programmer, app designer, ethical hacker

3 What does a Cyber Defense Anlayst Do? Someone in this career needs to: Have several years of experience using mulople operaong systems (Linux, Windows, etc) Have knowledge of computer hardware Have experience computer programming/scripong in mulople languages (Perl, Bash, Python, C++, etc) Understand ethics and legal consequences Be proficient in various hacking techniques and know why/ how they work and how to defend against them Have an understanding of computer forensics Be able to get a security clearance (no criminal record, etc) Be a creaove problem solver who can work under pressure

4 Why are cyber security experts important? Cyber Security careers are growing in number Some work for government, some for contractors, some for private companies United States Strategic Command Began in 2010 U.S. Cyber Command (USCYBERCOM) U.S. Army Cyber Command Fleet Cyber Command (Navy) Air Forces Cyber Marine Corps Cyberspace Command

5 Every person or business who stores or accesses informaoon on computers should be concerned about cyber security U.S. resources are under constant aback Banks Healthcare Government Power, water, traffic control systems, etc Home appliances Anything with a connecoon to the internet can be potenoally abacked by someone via the internet

6 How can I get started? In addioon to high school computer courses, learn programming and become very familiar with different operaong systems Be ethical recognize and avoid illegal acovioes! Recommended Books: The Linux Command Line: A Complete IntroducOon (William E. Shobs) Programming Python (Mark Lutz) Learning Python (Mark Lutz) These are more advanced: Hacking: The Art of ExploitaOon, 2 nd ed. (Jon Erickson) Metasploit, The PenetraOon Tester s Guide (David Kennedy) O Reilly books on specific operaong system and programming topics

7 Experiment with Virtual Machines If your PC or laptop has enough disk space and RAM: Install Oracle VirtualBox (free) hbp:// Run a combinaoon of Windows and Linux Virtual Machines (VMs) while your PC operaong system remains up and running If you want to start over, you can delete and re- create the VMs May need to buy addioonal RAM and a second hard drive for PC (or a bigger hard drive for laptop)

8 Learning online Learning to program takes Ome Lots of reading and trial and error pracoce Be paoent! Learn where to get help (books, internet) In addioonal to reading books, use websites to pracoce programming skills and see examples (free) (free) developers.google.com/edu/python (free) many others

9 School events Cyber Patriot CompeOOon hbp:// Sponsored by the US Air Force and Northrop Grumman Teams represent the school and compete online throughout the school year (starts in the fall) Top teams travel to final compeooon Learn how to secure Windows and Linux operaong systems

10 Community Events Even though you are soll in high school, you can abend cyber security events (some of these require a fee) Bsides Huntsville security conference Feb 2015, hbp:// North Alabama Cyber Security Summit June 2014, hbp://northalabama.issa.org Takedowncon cyber security conference Aug 2014, hbp://

11 WriOng Apps PracOce what you learn by wriong iphone or Android apps Publishing to the app store is not free Learn the basics at a summer camp idtech summer camps at Vanderbilt or Emory I abended three summers at idtech hbp://

12 CerOficaOons CerOficaOons are a good addioon to your resume, but you also need pracocal work experience Study on your own, or take a ceroficaoon prep class You can earn ceroficaoons while soll in high school CompTIA A+ ceroficaoon is considered entry- level Some ceroficaoons require work experience Some ceroficaoons have expiraoon dates Cost is usually $100 - $200 per exam (some are mulople exams) If you wait unol you have a job, your employer may pay for them

13 My ceroficaoons CompTIA Security+ CompTIA Linux+ CompTIA Mobility+ EC- Council CEH (CerOfied Ethical Hacker) Linux Professional InsOtute LPIC- 1 SUSE CerOfied Linux Administrator Microsom MTA: Security EssenOals, MCP My next goal is to become a CISSP Associate (CerOfied InformaOon Systems Security Professional)

14 Colleges As of right now, UA and Auburn do not have specialized cyber security degrees They offer Computer Science or Computer Engineering May be adding a cyber security degree in the near future? Some schools offer specialized degrees in cyber security University of Maryland Champlain College (Vermont) Southern New Hampshire University Mercy College (New York) Others.

15 Careers Work for the government Protect computer systems and networks against terrorist abacks Work for a private company Protect against hackers, spyware, and viruses Typical job Otles include: cyber security analyst security specialist cyber security manager security system engineer cyber forensic specialist penetraoon tester

16 QuesOons? This presentaoon can be viewed on my website: hbp://