.

Security programs at Universities

<<

l33t5h@rk

User avatar

Jr. Member
Jr. Member

Posts: 79

Joined: Tue Nov 22, 2011 12:06 am

Post Fri Dec 09, 2011 12:19 am

Security programs at Universities

Curious to see if anyone out there has helped create or implement a security course or curriculum at a college or university. Wondering how certain things are handled w/ licensing, such as using Metasploit for a course when it is now owned by Rapid7. Assuming Metasploit framework still ok, but I'm not aware of how university would handle licensing obligations.
<<

hurtl0cker

User avatar

Jr. Member
Jr. Member

Posts: 73

Joined: Thu Nov 18, 2010 10:09 am

Location: WWW

Post Fri Dec 09, 2011 7:27 am

Re: Security programs at Universities

As far as teaching 'Metasploit' in universities is concerned, there is an article on Rapid7's blog

https://community.rapid7.com/community/ ... -education
Last edited by hurtl0cker on Fri Dec 09, 2011 1:12 pm, edited 1 time in total.
“Knowing is not enough; we must apply. Willing is not enough: we must do.”
- Bruce Lee
<<

l33t5h@rk

User avatar

Jr. Member
Jr. Member

Posts: 79

Joined: Tue Nov 22, 2011 12:06 am

Post Fri Dec 09, 2011 7:46 am

Re: Security programs at Universities

hurtl0cker wrote:As far as teaching 'Metasploit' in universities is concerned, there is an article on their blog

https://community.rapid7.com/community/ ... -education


Now that is what I call a precise answer. Basically exactly what I'm looking for.. Big props to hurtl0cker!
<<

hurtl0cker

User avatar

Jr. Member
Jr. Member

Posts: 73

Joined: Thu Nov 18, 2010 10:09 am

Location: WWW

Post Fri Dec 09, 2011 12:33 pm

Re: Security programs at Universities

@ l33t5h@rk - that's my pleasure to help u  :)

and I am just curious to know what exactly are u planning to do, I mean are you setting up some kind of lab to teach some students?
I have been trying for quite some time now to make my university setup a formal lab for security students but it's all gonna take lot's of time and talks with management. So a bunch of students gathered together and started building our own lab for practicing, it's still under progress
.
For now we are planning to use:
3 desktops running various OS's on Virtual box (XP, Vista, De-Ice, Metasploitable)
Some Alfa cards, Linksys router and AP for wireless penetration testing.
Webgoat, Ultimate LAMP for some Web App's stuff.

Following resources came handy for setting up our lab:
Professional Penetration Testing: Creating and Operating a Formal Hacking Lab by Thomas Wilhelm
http://www.metasploit.com/help/test-lab.jsp
Last edited by hurtl0cker on Fri Dec 09, 2011 1:44 pm, edited 1 time in total.
“Knowing is not enough; we must apply. Willing is not enough: we must do.”
- Bruce Lee
<<

El33tsamurai

User avatar

Full Member
Full Member

Posts: 219

Joined: Sat Feb 03, 2007 4:01 pm

Post Sat Dec 10, 2011 6:30 am

Re: Security programs at Universities

You could start by email the guys over at OSCP, they teach it.  So you must be able to use it for education purposes.
CCENT, A+, Network+, Security+
<<

l33t5h@rk

User avatar

Jr. Member
Jr. Member

Posts: 79

Joined: Tue Nov 22, 2011 12:06 am

Post Sun Dec 11, 2011 6:14 am

Re: Security programs at Universities

Right, so I occasionally teach courses at local schools and am looking to assist in developing a new course (or courses) focusing on security, including one in penetration testing. This Patrick Engebretson book http://www.amazon.com/Basics-Hacking-Penetration-Testing-Syngress/dp/1597496553/ref=sr_1_1?ie=UTF8&qid=1323601871&sr=8-1 is basically a perfect foundation for say Pen Testing 101 for example, and I know at DSU.edu he offers some courses so basically what I'd be looking to do is model the course after this outline as well as a handful of other topics. They have an MSDN license and higher ed gets a massive discount on sw so I'm assuming setting up the lab won't be an issue, and most would just be VMs anyway. I guess my q w/ Metasploit was since the R7 purchase how that would affect it's free use but the ms framework is still free so that is all I'd need anyway.
<<

El33tsamurai

User avatar

Full Member
Full Member

Posts: 219

Joined: Sat Feb 03, 2007 4:01 pm

Post Sun Dec 11, 2011 4:16 pm

Re: Security programs at Universities

Its free, but are you going to be charging for the class?  If so you might want to check with them because you are making a prophet off of it so is could come back to bit you.
CCENT, A+, Network+, Security+
<<

SephStorm

User avatar

Hero Member
Hero Member

Posts: 569

Joined: Sat Apr 17, 2010 12:12 pm

Post Sun Dec 11, 2011 7:45 pm

Re: Security programs at Universities

While we are in the arena, can anyone suggest a good university? I obviously would be looking for a CompSci/InfoSec degree, I never took the SAT/ACT and I would like to get some programming classes, but if I do, I need a good introduction, as well, im going to need to crawl slowly through that. Anyway, i'd also prefer an online program, as I can't move ATM.
sectestanalysis.blogspot.com/‎
<<

l33t5h@rk

User avatar

Jr. Member
Jr. Member

Posts: 79

Joined: Tue Nov 22, 2011 12:06 am

Post Sun Dec 11, 2011 9:23 pm

Re: Security programs at Universities

El33tsamurai wrote:Its free, but are you going to be charging for the class?  If so you might want to check with them because you are making a profit off of it so is could come back to bite you.


Understood. I believe it's still just in the design phase and at universities (and really everywhere that isn't a small company) everything moves at a glacial pace so we'll see what happens.

As for suggestions on programs, I stumbled upon the Engrebretson book and did some research and the programs at Dakota State look pretty promising. Very much security focused as well as online. I'm sure there are also thousands of others but perhaps making connections with the guys writing the books would be a good way to start. Tuition seemed reasonable as well.
<<

El33tsamurai

User avatar

Full Member
Full Member

Posts: 219

Joined: Sat Feb 03, 2007 4:01 pm

Post Mon Dec 12, 2011 11:39 am

Re: Security programs at Universities

As for Info Sec degrees if I had the money I would attend:
http://isis.poly.edu/
http://www.poly.edu/admissions/financial/costs

As you can see its about $1250 a Credit hour almost 4k for a class, but if the class are like this one below:

One of the instructors Dino Dai Zovi and his 45 minute class:
http://vimeo.com/5146345

As well as about 48 or so other videos that he has post about his class.

If might be worth it, just looks like they go so in depth on their subject matter making other Graduate programs look well crap.

I also found this:
http://pentest.cryptocity.net/

Which seems to have quite of bit of education materiel for free on subjects like:

Intro to Pentesting
Operational Review and Code Audits
Reverse engineering
Exploitation
Web Hacking
Network Pentests
CCENT, A+, Network+, Security+
<<

nytfox

User avatar

Newbie
Newbie

Posts: 20

Joined: Mon Nov 28, 2011 1:54 am

Post Sun Jan 01, 2012 3:11 am

Re: Security programs at Universities

@l33t5h@rk I'm not sure weda this has anything to with your question , but FYI http://www.securitytube.net/smfe , check it out
Unlike others I love NULLS
http://treasuresec.com

Return to Other

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software