Cyber Analytics

Class Schedule and Assignments

Class-by-class schedule. Homework deadlines are shown separately from exams and milestones.

Class / Week
Topic / Activity
Homework Due
Exam / Milestone
Class 1 Week 1
Descriptive Analytics (Asset Inventory) Network Discovery & Host Enumeration

ARP cache harvesting, fping/masscan sweeps, mDNS/SSDP multicast, TCP connect probing with pilot probe, producer-consumer pipeline architecture.

Chapter 1 Phase 1 Slides
N/A
-
Class 2 Week 2
Diagnostic Analytics (Device Identity) Service Enrichment & Device Fingerprinting

Concurrent multi-protocol probing, nmap service detection, HTTP/TLS/JARM inspection, RTSP/ONVIF probing, MAC OUI lookup, CPE construction, confidence scoring.

Chapter 2 Phase 2 Slides
HW1 (Phase 1 Lab) Due: Night before class
-
Class 3 Week 3
Detective Analytics (Vulnerability) Protocol Security & Vulnerability Assessment

CPE-to-CVE pipeline, OpenVAS/GVM integration, Nuclei template scanning, default credential checking, firmware integrity, protocol grammar inference, LLM-guided mutation fuzzing.

Chapter 3 Phase 3 Slides
HW2 (Phase 2 Lab) Due: Night before class
-
Class 4 Week 4
Predictive Analytics (Risk Modeling) Attack Graph Analytics & Risk Scoring

NetworkX graph construction, Yen's k-shortest paths, BRS composite formula, what-if simulation, MITRE ATT&CK ICS mapping, STIX 2.1 export, behavioral baselines, threat intelligence integration.

Chapter 4 Phase 4 Slides
HW3 (Phase 3 Lab) Due: Night before class
-
Class 5 Week 5
Prescriptive Analytics (Offensive Testing) Autonomous Penetration Testing

MDP environment design, rule-based agent, PPO agent with hierarchical policy, safety controller (simulation/shadow / controlled / autonomous), campaign orchestration, SHA-256 evidence chains, reward shaping.

Chapter 5 Phase 5 Slides
HW4 (Phase 4 Lab) Due: Night before class
-
Class 6 Week 6
Simulation Analytics (Digital Twin) Digital Twin & Remediation Simulation

Twin builder (scan data -> Docker containers), scenario engine (attack/pentest replay), remediation simulator with checkpoint rollback, cascading failure detection, traffic replay, IEC / NIST compliance.

Chapter 6 Phase 6 Slides
HW5 (Phase 5 Lab) Due: Night before class
-
Class 7 Week 7
Midterm Exam Midterm Exam

Two-hour closed-book exam administered on Blackboard during class meeting time.

None
Midterm Exam
Class 8 Week 8 (asynch)
Cryptographic Analytics (Quantum Readiness) Post-Quantum Cryptographic Readiness

Shor/Grover algorithms, NIST PQC standards (ML-KEM, ML-DSA, SLH-DSA), TLS cipher suite classification, HNDL risk modelling (Mosca's inequality), Grover oracle simulation, PQ migration planning.

Chapter 7 Phase 7 Slides
HW6 (Phase 6 Lab) Due: Night before class
Asynchronous session
Class 9 Week 9
Collaborative Analytics (Federated Learning) Federated Threat Intelligence

Federated learning paradigm, differential privacy (Gaussian mechanism, Renyi DP), SCAFFOLD algorithm, Transformer-based IDS with INT8 quantisation, Byzantine poisoning defence (Multi-Krum), causal attribution (do-calculus).

Chapter 8 Phase 8 Slides
HW7 (Phase 7 Lab) Due: Night before class
-
Class 10 Week 10
Supply Chain Analytics (Integrity) Supply Chain Integrity & Counterfeit Detection

SBOM parsing (SPDX/CycloneDX), transitive vulnerability DAGs, multi-signal counterfeit detection, vendor trust scorecards, EU CRA compliance, firmware phylogenetics, SLSA provenance verification.

Chapter 9 Phase 9 Slides
HW8 (Phase 8 Lab) Due: Night before class
-
Class 11 Week 11
Deception Analytics (Active Defense) Active Deception & Threat Hunting

Honeypot theory and interaction levels, Q-learning RL agent for adaptive behaviour, SHA-256 hash chain session recording, MITRE ATT&CK TTP mapping, Bayesian attacker modelling, honeypot placement optimisation, Merkle tree evidence.

Chapter 10 Phase 10 Slides
HW9 (Phase 9 Lab) Due: Night before class
-
Class 12 Week 12
Formal Analytics (Verification) Formal Protocol Verification

Applied Pi Calculus, Dolev-Yao attacker model, bounded model checking (BFS state exploration), six security property classes (secrecy, authentication, forward secrecy, key freshness, replay protection, sequence integrity), protocol downgrade detection, NL-to-temporal-logic translation.

Chapter 11 Phase 11 Slides
HW10 (Phase 10 Lab) Due: Night before class
-
Class 13 Week 13
Autonomous Analytics (Closed-Loop Remediation) Autonomous Remediation with Safety Verification

HYDRA stream aggregation, Pareto multi-objective optimisation, 5-stage safety pipeline (simulate -> verify -> approve -> execute -> health-check), micro-segmentation policy generation (iptables, Palo Alto, AWS SG), IEC 62443 / NIST 800-82 / EU CRA compliance, rollback checkpoints, self-healing loop.

Chapter 12 Phase 12 Slides
HW11 (Phase 11 Lab) Due: Night before class
-
Class 14 Week 14
Final Exam Final Exam

Two-hour closed-book exam administered on Blackboard during class meeting time.

None
Final Exam