Schedule - Spring 2027

This is the course as it appears under Modules in Canvas: the same modules, the same items in the same order, with the due date and points of each graded one. Work is due at 11:59 pm Mountain time on the day shown.

Labs may be submitted up to two days late with no penalty, except Lab 10, which is due on the last day of instruction. Discussions have no grace period, and nothing but the D6 final reflection is accepted after the last day of instruction on April 30.

▾Course Resources

▾Getting Started (January 11 - January 17)

Getting Started Overview
Due by Tuesday at 11:59 p.m. Mountain Time
0.01 Communicating with Each Other
0.02 Getting to Know You Survey
Due by Thursday at 11:59 p.m. Mountain Time
0.03 D1: Introductions and the Security MindsetDue Jan 14 at 11:59 pm|15 pts
Due by Sunday at 11:59 p.m. Mountain Time
0.04 D1: Introductions and the Security Mindset - RepliesDue Jan 17 at 11:59 pm|0 pts
0.05 Lab 0: Course Setup and CyBOK NavigationDue Jan 17 at 11:59 pm|20 pts

▾Module 1: What Is Cyber Security? (January 11 - January 17)

Module 1 Overview
Due by Tuesday at 11:59 p.m. Mountain Time
1.01 Readings and Lecture Notes

▾Module 2: Security Principles and the Human Factor (January 18 - January 24)

Module 2 Overview
Due by Sunday at 11:59 p.m. Mountain Time
2.01 Readings and Lecture Notes
2.02 Lab 1: Security Principles AuditDue Jan 24 at 11:59 pm|38 pts

▾Module 3: Law, Regulation, Ethics, and Privacy (January 25 - January 31)

Module 3 Overview
Due by Thursday at 11:59 p.m. Mountain Time
3.01 Readings and Lecture Notes
3.02 D2: Ethics and Privacy CaseDue Jan 28 at 11:59 pm|30 pts
Due by Sunday at 11:59 p.m. Mountain Time
3.03 D2: Ethics and Privacy Case - RepliesDue Jan 31 at 11:59 pm|0 pts

▾Module 4: Risk Management and Threat Modeling (February 1 - February 7)

Module 4 Overview
Due by Sunday at 11:59 p.m. Mountain Time
4.01 Readings and Lecture Notes
4.02 Lab 2: Threat Model a Small SystemDue Feb 7 at 11:59 pm|38 pts

▾Module 5: Authentication and Credentials (February 8 - February 14)

Module 5 Overview
Due by Thursday at 11:59 p.m. Mountain Time
5.01 Readings and Lecture Notes
5.02 D3: Authentication Policy CritiqueDue Feb 11 at 11:59 pm|30 pts
Due by Sunday at 11:59 p.m. Mountain Time
5.03 D3: Authentication Policy Critique - RepliesDue Feb 14 at 11:59 pm|0 pts

▾Module 6: Authorization, Access Control, and Accountability (February 15 - February 21)

Module 6 Overview
Due by Sunday at 11:59 p.m. Mountain Time
6.01 Readings and Lecture Notes
6.02 Lab 3: Access Control Matrix and Least PrivilegeDue Feb 21 at 11:59 pm|38 pts

▾Module 7: Symmetric Cryptography (February 22 - February 28)

Module 7 Overview
Due by Sunday at 11:59 p.m. Mountain Time
7.01 Readings and Lecture Notes
7.02 Lab 4: Symmetric Encryption in PracticeDue Feb 28 at 11:59 pm|38 pts

▾Module 8: Public-Key Cryptography, Hashing, and Signatures (March 1 - March 7)

Module 8 Overview
Due by Sunday at 11:59 p.m. Mountain Time
8.01 Readings and Lecture Notes
8.02 Lab 5: Hashing and SignaturesDue Mar 7 at 11:59 pm|38 pts

▾Module 9: Review and Catch-Up (March 8 - March 14)

▾Module 10: Keys, Certificates, PKI, and TLS (March 22 - March 28)

Module 10 Overview
Due by Sunday at 11:59 p.m. Mountain Time
10.01 Readings and Lecture Notes
10.02 Lab 6: Certificates and TLSDue Mar 28 at 11:59 pm|38 pts

▾Module 11: Network Security and Attacks (March 29 - April 4)

Module 11 Overview
Due by Thursday at 11:59 p.m. Mountain Time
11.01 Readings and Lecture Notes
11.02 D4: Network Security in the NewsDue Apr 1 at 11:59 pm|30 pts
Due by Sunday at 11:59 p.m. Mountain Time
11.03 D4: Network Security in the News - RepliesDue Apr 4 at 11:59 pm|0 pts

▾Module 12: Malware and Adversarial Behaviors (April 5 - April 11)

Module 12 Overview
Due by Sunday at 11:59 p.m. Mountain Time
12.01 Readings and Lecture Notes
12.02 Lab 7: Malware Triage Without MalwareDue Apr 11 at 11:59 pm|38 pts

▾Module 13: Software Security, Memory Safety, and Assurance (April 12 - April 18)

Module 13 Overview
Due by Sunday at 11:59 p.m. Mountain Time
13.01 Readings and Lecture Notes
13.02 Lab 8: Memory Safety and Assurance EvidenceDue Apr 18 at 11:59 pm|38 pts

▾Module 14: Web Security and Injection (April 19 - April 25)

Module 14 Overview
Due by Sunday at 11:59 p.m. Mountain Time
14.01 Readings and Lecture Notes
14.02 Lab 9: SQL InjectionDue Apr 25 at 11:59 pm|38 pts

▾Module 15: Security Operations, Detection, and Incident Response (April 26 - April 30)

Module 15 Overview
Due by Thursday at 11:59 p.m. Mountain Time
15.01 Readings and Lecture Notes
15.02 D5: A Current Security FailureDue Apr 29 at 11:59 pm|30 pts
Due by Friday at 11:59 p.m. Mountain Time
15.03 D5: A Current Security Failure - RepliesDue Apr 30 at 11:59 pm|0 pts
15.04 Lab 10: Log Analysis and Incident MemoDue Apr 30 at 11:59 pm|38 pts

▾Module 16: Finals Week (May 3 - May 7)

Due by Friday at 11:59 p.m. Mountain Time
16.01 D6: Final ReflectionDue May 7 at 11:59 pm|15 pts