UFCFFY-15-M Cyber Security Analytics¶
Lectures¶
- 01: Introduction (Online Slides) (PDF print format) (Video)
- 02: Security Operations and Frameworks (Online Slides) (PDF print format) (Video)
- 03: Security Operations and Monitoring (Online Slides) (PDF print format) (Video)
- 04: Machine Learning (Online Slides) (PDF print format) (Video)
- 05: Visualisation for Cyber Security (Online Slides) (PDF print format) (Video)
- 06: Mid-Module Review (Online Slides) (PDF print format)
- 07: Discussion Session on DetectionLab (Video)
- 08: Case Study: Insider Threat (Online Slides) (PDF print format) (Video)
- 09: NO SESSION
- 10: Case Study: Text Analytics and Fake News (Online Slides) (PDF print format)
- 11: Case Study: Malware Analysis (Online Slides) (PDF print format)
- 12: Module Wrap-Up / Support Session (Online Slides) (PDF print format)
Unassessed Practical Labs¶
- 00: Python Primer
- 01: Hello, Security Analytics
- 02: Network Traffic Analysis
- 03: Threat Hunting with MSTICpy
- 04: Machine Learning
- 05: More Network Traffic Analysis
- 06: DetectionLab
- 07: Working with Splunk and Python
- 08: Splunk Attack Range
- 09: Insider Threat Detection
- 09 Data: Example case (requires access to Blackboard)
- 10: Text Analytics and Fake News
- 10 Data: Fake News (requires access to Blackboard)
- 10 Data: True News (requires access to Blackboard)
- 11: Malware Analysis
- 11 Data: PuTTy (benign file example)
- 11 Data: theZoo (malicious file example)
Assessed Portfolio Tasks¶
- Task 1 (Release Week 2, 20%): Conduct an investigation on a web application to identify malicious attack activity using Python data science libraries.
- Task 2 (Release Week 4, 20%): Conduct an investigation on a URL database to develop a DGA classification system using machine learning techniques.
- Task 3 (Release Week 6, 40%): Conduct a research study using a virtualised infrastructure to simulate attacks and identify these through a SIEM platform.
- Task 4 (Release Week 8, 20%): Produce a video presentation for a prospective employer that presents your practical work and provides a critical reflection of your learning.
Useful References¶
- Markdown for Jupyter notebooks cheatsheet
- UWEcyber Splunk4Rookies - Workshop 1 - Recorded 15th February 2022 ( slides )
- UWEcyber Splunk Enterprise - Workshop 2 - Recorded 15th March 2022
Ask a Question¶
You can submit your comments or questions for this module using this link, or alternatively, please speak with your lab tutors or module leader during the timetabled sessions.
In [ ]: