Cyber Sleuth Level 4: Cyber Security & Intrusion Attempt

Cyber security is a booming field worldwide. Our Cyber Security Immersion Program will give you a chance to test the waters and see whether this exciting field is for you. The program comprises a sequence of four courses totaling 7 weeks of online training with a short break between each course.

In this simulation-based, hands-on learning environment, you will learn critical skills while playing the role of a junior information security professional at a fictional government agency. You will work with real tools and follow procedures used by cyber security professionals to develop technical skills with the guidance of a knowledgeable mentor.

No prior knowledge of computer networks or operating systems is assumed. Successful students demonstrate intense curiosity, willingness to persist through difficult problems, attention to detail, and engagement in self-directed learning.

Cyber Security Level 4: Intrusion Attempt

Building on the skills you acquired in Cyber Security 1 and 3, which are prerequisites, you will further develop and practice your skills of conducting a principled cyber security investigation and analyzing computer network traffic, and you'll begin learning the skills of log analysis. A security operations center analyst has seen evidence of a password cracking attempt within a key network. You will analyze a packet capture file (PCAP) and event logs within a security information and management system to determine if any passwords were compromised and if the network was breached. By the end of the course, you will be able to:

  • Analyze suspicious network traffic using Wireshark
  • Analyze network and system logs using Splunk (an industry-standard security information and event management system)
  • Cross-correlate events seen in network traffic with events seen in logs
  • Recognize a common type of brute-forcing attack
  • Determine if a brute-forcing attack has been successful
  • Report technical information appropriately to nontechnical stakeholders

Level 4 will run for two weeks from 1:00-3:00PM PDT Monday through Friday, in a structured meeting-style with a course mentor, followed by about 2 hours of independent work after each class, with optional office hours from 4:00-5:00PM PDT on weekdays. Course activities and class meetings are facilitated by industry experts who partner with UC Davis.

Note: Cyber security courses are restricted to 11th and 12th grade students.

Course Code