Packing Slip Creative Commons License




item

Training for Advanced Computer & Technology Security Measures: CEH, Certified Ethical Hacker

contact

Miguel Fernandez (Phoenix College)
miguel.fernandez@pcmail.maricopa.edu

college(s)

Phoenix College

discipline(s)

English, CIS, general

summary

This summer project was to train to deal with computer security risks and attacks, focusing on countermeasures and prevention. Following the curriculum from the International EC-Council, I covered hacker strategies, focusing on social engineering: how hackers exploit the end user to create mayhem.

details

Completing CEH training translated into learning to see security risks, dangers, threats, and vulnerabilities from the potential hacker’s opportunistic point of view. This skill set allows me to sit on a technology committee and see potential security issues of initiatives from the concept level, all the way to the role out of projects. Potential problems such as down time, privacy violations, intrusions, and unauthorized access can be anticipated and countered. New technologies and methodologies such as wireless access or use of blogs and WIKIs can be secured before threats occur. Having at least one person with this specialized training is invaluable for a technology committee. Focusing on social engineering also allows me to design and offer end-user training, which is vital, as the end-user is the most vulnerable spot on the security hierarchy.


------------------------------------------------------------
Outcomes: In a paragraph or two describe what worked well. Did you accomplish your objective(s)? Were you able to complete your summer project as written? If not, what did you modify and why? What did not go as well as expected, if anything? Were there any surprises? Note: Use the questions as guides for your outcomes. Do not include detailed list of workshops attended, speakers who presented, or a list of items you have seen, heard, or read.
------------------------------------------------------------
Self study is practically the only way to secure the “latest” knowledge because of the speed of change in the computer security field. The second most important thing in this training was the use of virtualization software to create a “virtual” computer or server to test against. All the goals of the project were completed and all the topics covered – the only thing not done was take the certifying exam that is not covered by the Summer Project. The two most important areas of computer security risk were definitely wireless networking and social engineering attacks. The only surprises related to the project was the ease with which security can be breached using software tools and hacker techniques, as well as the advanced manipulative social engineering strategies that prey upon the end-user by using confusion, sales and marketing strategies, psychological tricks as well as bureaucracy.


------------------------------------------------------------
Professional Growth: Your own professional growth is a large part of your project. Your professional growth is important to you, your students, your college, and possibly other colleagues. How did project affect you professionally? What skills did you learn? What environments were you working in and how might your summer project influence your teaching or other responsibilities? Did you gain a different perspective? Was it professionally valuable for you?
------------------------------------------------------------
The skills and knowledge gained are vital professionally, as someone who teaches online courses and uses websites and network space on campus. As a member of faculty, the Summer Project’s skill set allows me to become more effective in proposing technology projects and as a evaluative member of the technology committee. Two current side projects, developing an online radio station and developing an English department intranet for training and teaching resources, will directly benefit from a new awareness of the security issues involved with both. Should it become necessary, I can confidently lead training sessions and presentations given to staff on campus on how to become more security-aware in their day-to-day use of campus technology and resources like email and web browsing.


------------------------------------------------------------
Dissemination: How will you share this information with your colleagues, department, students, or college?
------------------------------------------------------------
The skills learned from the Summer Project get directly disseminated to my department and college in general. At English Department meetings, I have already proselytized the need for security awareness and the potential pitfalls and techniques they may face in email, phone calls, visited webpages and from unauthorized access. At the various technology committee meetings I will be able to consult on security concerns from the roleplayed point of view of an attacker/hacker, a point of view that would normally be lacking. The fact that I am from the English Department means that I will be able to share and disseminate knowledge in “plain English,” inspiring confidence and attracting people who find technology unnecessarily obtuse and confusing. Training, lessons, tips, and advice from someone with my new skill set, tempered with the communication focus that arises from being from the English Department, will make both the message and the medium a valuable asset for years to come.


Note! As a professional courtesy to the owner of this package, if you use some aspect of this package or have some thoughts about it, please share your feedback via the comments form below.

web links

http://www.mcli.dist.maricopa.edu/fpg/
This 2006 Summer Project was supported by the Faculty Professional Growth program at Maricopa Community Colleges

http://www.eccouncil.org/CEH.htm
Homepage of the International Council of E-Commerce Consultants. They list their recommended curriculum.

shareback
[0 shareback(s)]

A "Shareback" cites the places on the web that mention, reference, or use this MLX package, and "shares" that information back here (more about shareback...)

Sharebacks can be generated automatically by weblog tools.

extra

Last modified:  Sep-29-2006
Date created:  Sep-29-2006
Visitor count:  2475
Dublin Core Metadata record XML
This package is included in the Faculty Professional Growth Summer Project Reports special collection.

 

 

maricopa center for learning & instruction (mcli)
find it from mcli about mcli mcli home mcli home
MLX packing slip
Maricopa Center for Learning and Instruction (mcli)
URL: http://www.mcli.dist.maricopa.edu/mlx/


Maricopa Community Colleges
  www.maricopa.edu