Program Schedule^*

• Week 1.1 (July 9, P-218 Merritt College, 4-6pm)- Working in Cyber Security Industry
• Week 1.2 (July 11, G-274 Laney College, 5-7pm) - Lecture by Celeste Matarazzo, LLNL
• Week 2.1 (July 16), P-218 Merritt College, 4-6pm) - Open Source Contributions Due
• Week 2.2 (July 18, G-274 Laney College, 5-7pm) - Lecture by Aaron Goldstein, Tanium
• Week 3.1 (July 23, P-103 Merritt College and Online) - Mentor Feedback
• Week 3.2 (July 25, G-274 Laney College, 5-7pm) - Lecture by Bill Reid, AWS
• Week 4.1 (July 30, P-103 Merritt College)- Sprint 1 Presentations
• Week 4.2 (Aug 1, G-274 Laney College) - Lecture by Brian Koref, Safe-Intacct & Caleb Fenton, SentinelOne
• Week 5.1 (Aug 6, P-103 Merritt College) - Code Reviews
• Week 5.2 (Aug 8, G-274 Laney College)- Lecture by Mel Masterson, AirBnB
• Week 6.1 (Aub 13, P-103 Merritt College) - Project Completion
• Week 6.2 (Aug 15, G-274 Laney College) - Lecture by Ahmad Nafeez (Security Researcher), & Presentations
• Week 7 (Aug 17, Saturday, Berkeley Skydeck)- Demo Day!

* = tentative

Guest Lecture Schedule^*

• Cyber Security Research: A Data Scientist’s Perspective by Celeste Matarazzo, LLNL July 11, 5:15pm - 6:15pm at G-274 Laney College: Cybersecurity has become one of the nation’s top priorities. As all aspects of our lives become increasingly dependent on computing networks and the Internet, cybersecurity has grown from a localized economic problem to a major national imperative. Situational awareness of computer networks presents many challenges including but not limited to the volume of the data and the dynamic and evolving nature of the problem space. For example, at the perimeter of a corporate enterprise computer network, it is common to see terabytes of network traffic each day, containing millions of unique IP addresses and connection records that number in the hundreds of millions. Celeste will provide an overview and discuss recent trends facing computer security researchers and practitioners. She will describe recent work at Lawrence Livermore National Laboratory to enable an analysis of computer networks. Characterizing network-wide activity depends critically on understanding time-varying patterns of system behaviors, such as the actions and connections between components. This approach makes use of state of the art data collection, building and accessing large-scale graph representations, new capabilities, and advances in data science and machine learning.Recording available.


• Hands-on Cyber Defense: by Aaron Goldstein, Tanium July 18, 5pm - 6pm at G-274 Laney College: Aaron will talk about blue team defenses and the footprint left behind from an attack. He will outline how threat actors pillage and pilfer organization data for personal gain. What organization’s weaknesses and blind spots should a security auditor look for? Time permitting he will also touch on red teaming methodology and provide some tips and tricks of the trade.Recording available, and Questions.Slides are shared as well.


• On Cloud Security, and Tips for Cyber Security Career by Bill Reid, Amazon, July 25, 4:30pm-6pm G-274 Laney College.Recording available, and list of Questions and Resources.


• On Leading Cyber Security Teams And Red Teaming by Brian Koref, Sage Intacct, Aug 1, 5:00pm-6pm G-274 Laney College.Recording available, and list of Questions and Resources.


• On Security Research and Machine Learning in Cyber Security by Caleb Fenton, SentinelOne, Aug 1, 6:00pm-7pm G-274 Laney College.Recording available, and list of Questions and Resources.


• On Threat Intelligence by Mel Masterson, AirBnB, Aug 8, 5:15pm-6:30pm G-274 Laney College.This lecture on threat intelligence will be interactive, and each student will have to sign-up for 3-4 minute assignment. Please pick your assignment from the list.Attend remotely, and list of Assignments and Resources. Slidesare available.


• On Appsec Research by Ahmad Nafeez, Security Researcher, Aug 15, 5:00pm-6:30pm *Online Only*.This lecture on applicaiton security will dive deep in to compression oracle attacks on VPN Networks.Attend online, and link to Slides, please add to list of Questions and Resources for the speaker.

Projects ^*

CLTC Sponsored - Security for Non-Profits

Cyber Defenders are working with a local non-profit to start a SafeTag based security audit for the organization. The group has so far complete a security survey for administrators and leadership of the organization, and are working on providing security tools for securing their website and training the employees. In addition to practical security fixes for the organization this project will deliver a security audit report to help the organization create a security policy.

Sage Intacct Sponsored - Web Application Penetration Test

Cyber Defenders are working with Sage Intacct to do a web application penetration testing. The group has so far completed 3 of the OWASP top 10 web application attacks on the application, and plan to complete the rest in upcoming weeks. This project will deliver a penetration testing report to help secure the application under test.

Lib13 Inc Sponsored - Application Security for React Developers

In this 3-week program, a group of students will learn how to build a react-js application and test each other's application for vulnerabilities. Through the process the group will become familiar with secure coding and developing hardened projects.

Past Curriculum