The course provides hands on laboratory exploration of adversarial cyber threats to DOD networks and weapon systems. No previous experience in cybersecurity is necessary. Students will learn and execute (in the lab environment) basic offensive cyber techniques, develop system requirements to defeat the threats, implement countermeasures and assess countermeasures effectiveness. Two days are spent on enterprise network attacks and security countermeasures and one day is spent working with an unmanned aerial system simulator which is representative of currently fielded DOD unmanned weapon systems. The inclusion of offensive techniques training for DoD weapon systems differentiates this workshop from similar training provided in the commercial sector.
The objective of this workshop includes the ability to: Use threat based engineering principles to support decisions made regarding cybersecurity throughout the system development lifecycle. Analyze cyber-attack vectors—“Think like an adversary”. Describe the approach to “baking in” cybersecurity in designs as part of the systems engineering technical processes. Develop system requirements which are intended to reduce the likelihood of cyber-attack success or reduce the mission impact of a successful attack. Execute cyber-attacks against networks and weapon systems in a laboratory environment to identify vulnerabilities. Execute cyber-attacks against networks and weapon systems in a laboratory environment to assess effectiveness of implemented countermeasures. Describe how threat based engineering and assessment are accomplished. Describe the ethical and legal requirements associated with offensive cyber operations.