{"text_format":"1","workbook":"xlsx","n_sheets":77,"sheets":["Wireless_Sensor-O","Vul_Anlys-O","Virutalization-O","Sys_Eng-O","Sys_Prog-O","CnA-O","Sup_Chain-O","SW_Rev_Eng-O","SW_Assur-O","SW_Sec_Anals-o","Risk-O","Sec_Prog_Mgt-O","Sec_Prog-O","RF_Princ-O","QA-O","Pen_Test-O","Ovw_Cyb_Ops-O","OS-Theory-O","OS_Harden-O","Net_Admin-O","Mob_Tech-O","Low_Prog-O","LifeCycle-O","IDS-O","Int_Comp-O","ICS-O","IND_Stud-O","IA_Stnds-O","IA_Comp-O","IA_Arch-O","HW_FW_Sec-O","HW_Rev-O","Fraud-O","Methods-O","Acct-O","Emb_Sys-O","Net_For-O","Media_For-O","Dev_For-O","Host_For-O","Dig_For-O","Dig_Comms-O","DMBS-O","Data_Struct-O","Data_Admin-O","CS-P_M-O","Cloud-O","Analog-O","Algo-O","AdvNetTech-0","Adv_Crypto-0","Optional-All","DBMS-4","KU-Main","Net_Def-4","Net_Tech-4","OS-Conc-4","Prog-4","Stats-4","Opt-List","2Y-List","4Y-List","4Y-All","BDA-2","Scripting-2","Cyber-Def-2","Threats-2","Funds-2","IA-Funds-2","Intro_Crypto-2","IT_Comps-2","Networking-2","Policy-2","Sys_Admin-2","Sheet2","Sheet4","Info"],"not_rendered":{"charts":0,"images":1,"macros":1,"external_links":0,"defined_names":54,"comments":72,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Wireless_Sensor-O","index":0,"n_rows":17,"n_cols":13,"rows_kept":17,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Wireless Sensor Networks"]
[null,"The intent of this KU is to provide students with a basic understanding of wireless sensor network architectures and the issues associated with them."]
[null,"Topics"]
[null,null,"Managed vs. Ad-hoc"]
[null,null,"Cross Layer Optimization"]
[null,null,"MAC approaches"]
[null,null,"Architectures"]
[null,null,"Routing Protocols"]
[null,null,"Authentication Hash Tables"]
[null,null,"Data Integrity"]
[null,null,"Data Poisoning"]
[null,null,"Resource Starvation"]
[null,null,"Energy Harvesting"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the challenges associated with wireless sensor networks, including coordination, energy efficiency, self organization and security."]

{"sheet":"Vul_Anlys-O","index":1,"n_rows":21,"n_cols":13,"rows_kept":21,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Vulnerability Analysis"]
[null,"The intent of this KU is to provide students with a thorough understanding of system vulnerabilities, to include what they are, how they can be found/identified, the different types of vulnerabilities, how to determine the root cause of a vulnerability, and how to mitigate their effect on an operational system."]
[null,"Topics"]
[null,null,"Definition of “vulnerability”"]
[null,null,"Failures of Procedures"]
[null,null,"Taxonomy"]
[null,null,"Buffer overflows, privilege escalation, rootkits"]
[null,null,"trojans/backdoors/viruses"]
[null,null,"Return oriented programming"]
[null,null,"Social Engineering Vulnerabilities"]
[null,null,"Vulnerability characteristics"]
[null,null,"Root causes of vulnerabilities"]
[null,null,"Administrative Privileges and Their Effect on Vulnerabilities"]
[null,null,"Mitigation strategies"]
[null,null,"Tools and Techniques for Identifying Vulnerabilities"]
[null,"Outcomes"]
[null,null,"Students will be able to describe characteristics of malware."]
[null,null,"Students will be able to identify malware."]
[null,null,"Students will be able to apply tools and techniques for identifying vulnerabilities."]

{"sheet":"Virutalization-O","index":2,"n_rows":17,"n_cols":13,"rows_kept":17,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Virtualization Technologies"]
[null,"The intent of this KU is to provide students with an understanding of how modern host virtualization is implemented, deployed, and used.  Students will understand the interfaces between major components of virtualized systems, and the implications these interfaces have for security."]
[null,"Topics"]
[null,null,"Virtualization Architectures"]
[null,null,"Virtualization techniques for code execution"]
[null,null,"Memory management in virtual environments"]
[null,null,"Networking in virtual environments"]
[null,null,"Storage in virtual environments"]
[null,null,"Scheduling of virtual machines"]
[null,null,"Migration and snapshots"]
[null,null,"Virtual management layers"]
[null,null,"Digital Forensics in virtual environments"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the fundamental concepts of virtualization."]
[null,null,"Students will be able to compare and contrast the different virtualization architectures."]

{"sheet":"Sys_Eng-O","index":3,"n_rows":16,"n_cols":12,"rows_kept":16,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Systems Security Engineering"]
[null,"The intent of this KU is to provide students with a thorough understanding of the skills necessary to participate in the development of large scale systems.  Students will understand that techniques, methods, and issues involved across the entire system life-cycle, from requirements identification and analysis, through various levels of design, implementation, testing and operation/maintenance."]
[null,"Topics"]
[null,null,"Design of testing"]
[null,null,"Testing methodologies"]
[null,null,"Emergent Properties"]
[null,null,"Systems Engineering"]
[null,null,"System Integration"]
[null,null,"Make or Buy Analysis"]
[null,null,"Systems Security Analysis"]
[null,null,"Enterprise system components"]
[null,"Outcomes"]
[null,null,"Students will be able to analyze system components and determine how they will interact in a composed system."]
[null,null,"Students will be able to analyze a system design and determine if the design will meet the system security requirements."]

{"sheet":"Sys_Prog-O","index":4,"n_rows":13,"n_cols":13,"rows_kept":13,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Systems Programming"]
[null,"The intent of this KU is to ensure that students are proficient in the development of complex, low level software (e.g., software interacting directly with the hardware platform or within the deepest level of an operating system), typically in the C or assembly programming language."]
[null,"Topics"]
[null,null,"Hardware / software interfaces and interactions"]
[null,null,"Programming to operating systems internal interfaces"]
[null,null,"Low level programming languages (C, Assembly)"]
[null,"Outcomes"]
[null,null,"Students shall be able to implement new functions in an OS kernel"]
[null,null,"Students will be able to develop complex and sophisticated programs, such as a device driver, that can be embedded into an OS kernel."]
[null,null,"Students will be able to write a program that implements a network stack to manage network communications."]
[null,null,"Students will be able to write a functional, stand-alone assembly language program of the complexity of a basic telnet client, with no help from external libraries."]

{"sheet":"CnA-O","index":5,"n_rows":13,"n_cols":13,"rows_kept":13,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Systems Certification and Accreditation"]
[null,"The intent of this KU is to provide students with an understanding of the processes and regulations associated with the analysis/evaluation of operational systems and the authorities and processes for the approval of their operation."]
[null,"Topics"]
[null,null,"DoD Policies and Directives"]
[null,null,"Roles / Players"]
[null,null,"Components of the C&A Process"]
[null,null,"Certification Boards and Panels"]
[null,null,"NIST Risk Management Framework (SP800-37)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the DoD system certification and accreditation processes."]
[null,null,"Students will be able to define certification and accreditation."]

{"sheet":"Sup_Chain-O","index":6,"n_rows":13,"n_cols":13,"rows_kept":13,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Supply Chain Security"]
[null,"The intent of this KU is to provide students with an understanding of the security issues associated with building complex systems out of third party components of unknown (and potentially unknowable) origin."]
[null,"Topics"]
[null,null,"Global Development"]
[null,null,"Off Shore Production"]
[null,null,"Transport and Logistics of IT Components"]
[null,null,"Evaluation of 3rd Party Development Practices"]
[null,null,"Understanding of the Capabilities and Limits of Software and Hardware Reverse Engineering"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the issues related to outsourcing hardware and/or software development and/or integration."]
[null,null,"Students will be able to describe methods to mitigate these issues, and the limitations of these methods."]

{"sheet":"SW_Rev_Eng-O","index":7,"n_rows":11,"n_cols":13,"rows_kept":11,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Software Reverse Engineering"]
[null,"The intent of this KU is to provide students with the capability to perform reverse engineering of executable code to determine its function and affects, or to recover the source code implementation."]
[null,"Topics"]
[null,null,"Specification Recovery"]
[null,null,"Malware Analysis"]
[null,null,"Reverse Engineering Tools & Techniques"]
[null,null,"Sandboxing"]
[null,"Outcomes"]
[null,null,"Students will be able to use a common SW RE tool to safely perform static and dynamic analysis of software (or malware) of unknown origin for the purposes of recovering the original implementation and/or understanding the software functionality."]

{"sheet":"SW_Assur-O","index":8,"n_rows":16,"n_cols":13,"rows_kept":16,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Software Assurance"]
[null,"The intent of this KU is to provide students with the ability to describe why software assurance is important to the development of secure systems and describe the methods and techniques that lead to secure software."]
[null,"Topics"]
[null,null,"Robust programming"]
[null,null,"Secure Software Concepts, Requirements, Design, Implementation and Testing"]
[null,null,"Secure Development Life-Cycle Phases: requirements, design, development, testing, deployment, operations, maintenance and disposal."]
[null,null,"Software testing and acceptance"]
[null,null,"Threat modeling"]
[null,null,"Fuzz testing"]
[null,null,"BUG BAR"]
[null,null,"Characteristics of secure software"]
[null,null,"Secure Software is not software that implements security functions (e.g., crypto, access control)"]
[null,"Outcome:"]
[null,null,"Students will be able to describe the importance of secure software, and the programming practices and development processes and methodologies that lead to secure software."]

{"sheet":"SW_Sec_Anals-o","index":9,"n_rows":13,"n_cols":13,"rows_kept":13,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Software Security Analysis"]
[null,"The intent of this KU is to provide students with an understanding of the tools and methods for analyzing software, either in source code or binary form."]
[null,"Topics"]
[null,null,"Testing Methodologies"]
[null,null,"Source and Binary Code Analysis"]
[null,null,"Static and Dynamic Analysis Techniques"]
[null,null,"Sandboxing"]
[null,null,"Common analysis tools and methods"]
[null,"Outcomes"]
[null,null,"Students will be able to describe software security analysis tools and techniques."]
[null,null,"Students will be able to apply their knowledge to perform software security analysis, using common tools, against previously unknown software components."]

{"sheet":"Risk-O","index":10,"n_rows":18,"n_cols":13,"rows_kept":18,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Security Risk Analysis"]
[null,"The intent of this KU is to provide students with sufficient understanding of risk assessment models, methodologies and processes such that they can perform a risk assessment of a particular systems and recommend mitigations to identified risks."]
[null,"Topics"]
[null,null,"Risk Assessment/Analysis Methodologies"]
[null,null,"Risk Measurement and Evaluation Methodologies"]
[null,null,"Risk Management Models"]
[null,null,"Risk Management Processes"]
[null,null,"Risk Mitigation Economics"]
[null,null,"Risk Transference/Acceptance/Mitigation"]
[null,null,"Communication of Risk"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how risk relates to a system security policy."]
[null,null,"Students will be able to describe various risk analysis methodologies."]
[null,null,"Students will be able to evaluate and categorize risk 1) with respect to technology; 2) with respect to individuals, and 3) in the enterprise, and recommend appropriate responses."]
[null,null,"Students will be able to compare the advantages and disadvantages of various risk assessment methodologies"]
[null,null,"Students will be able to select the optimal methodology based on needs, advantages and disadvantages."]

{"sheet":"Sec_Prog_Mgt-O","index":11,"n_rows":22,"n_cols":13,"rows_kept":22,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Security Program Management"]
[null,"The intent of this KU is to provide students with the knowledge necessary to define and implement a security program for the protection of an organizations systems and data."]
[null,"Topics"]
[null,null,"Project management"]
[null,null,"Resource management"]
[null,null,"Project budgeting (cost benefit, net present value, internal rate of return)"]
[null,null,"Risk management and Analysis"]
[null,null,"Quality Assurance / Quality Control"]
[null,null,"Monitoring and Control"]
[null,null,"Deliverables"]
[null,null,"Timelines"]
[null,null,"Security Awareness, Training and Education"]
[null,null,"Security Baselines"]
[null,null,"Change Management, Patch Management"]
[null,null,"Roles and Responsibilities of the Security Organization"]
[null,null,"Compliance with Applicable Laws and Regulations"]
[null,"Outcomes"]
[null,null,"Students will be able to apply their knowledge to develop a security program, identifying goals, objectives and metrics."]
[null,null,"Students will be able to apply their knowledge to effectively manage a security program."]
[null,null,"Students will be able to assess the effectiveness of a security program."]

{"sheet":"Sec_Prog-O","index":12,"n_rows":18,"n_cols":13,"rows_kept":18,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Secure Programming Practices"]
[null,"The intent of this KU is to provide students with an understanding of the characteristics of secure programs and the ability to implement programs that are free from vulnerabilities."]
[null,"Topics"]
[null,null,"Specification of Security Requirements"]
[null,null,"Principles of Secure Programming"]
[null,null,"Robust Programming"]
[null,null,"Defensive Programming"]
[null,null,"Input Validation, Type checking"]
[null,null,"Programming Flaws"]
[null,null,"Buffer Overflows, Integer Errors"]
[null,null,"Static Analysis"]
[null,null,"Data Obfuscation"]
[null,null,"Data Protection"]
[null,"Outcomes"]
[null,null,"Students will be able to produce software components that satisfy their functional requirements without introducing vulnerabilities"]
[null,null,"Students will be able to describe the characteristics of secure programming."]

{"sheet":"RF_Princ-O","index":13,"n_rows":12,"n_cols":13,"rows_kept":12,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["RF Principles"]
[null,"The intent of this KU is to provide students with a basic understanding of radio frequency communications."]
[null,"Topics"]
[null,null,"Basics of: Electromagnetic radiation, Antennas, Information Modulation, Digital Modulation, Spectral representation, Bandwidth, BER, Eb/No vs. S/N"]
[null,null,"Limiting Access in RF"]
[null,null,"Propogation Principles"]
[null,"Outcomes"]
[null,null,"Students should be able to identify methods for isolating RF emissions"]
[null,null,"Students should be able to identify techniques for obfuscating RF transmissions"]
[null,null,"Students should be able to discuss the tradeoffs associated with bandwidth data rate, modulation, complexity, acceptable BER, and signal spreading"]

{"sheet":"QA-O","index":14,"n_rows":13,"n_cols":13,"rows_kept":13,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["QA / Functional Testing"]
[null,"The intent of this KU is to provide students with methods to assess how well a functional unit meets a requirement."]
[null,"Topics"]
[null,null,"Testing methodologies (white, grey, black box testing)"]
[null,null,"Test coverage analysis"]
[null,null,"Automatic and manual generation of test inputs"]
[null,null,"Test execution"]
[null,null,"Validation of results"]
[null,"Outcomes"]
[null,null,"Students will be able to develop effective tests in a structured, organized manner."]
[null,null,"Students will be able to perform security functional testing to demonstrate that security policies and mechanisms are completely and correctly implemented."]

{"sheet":"Pen_Test-O","index":15,"n_rows":17,"n_cols":13,"rows_kept":17,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Penetration Testing"]
[null,"The intent of this KU is to provide students with methods of discovering ways of exploiting vulnerabilities to gain access to a system."]
[null,"Topics"]
[null,null,"Flaw Hypothesis Methodology"]
[null,null,"Other methodologies (e.g., OSSTMM)"]
[null,null,"Identifying flaws from documentation"]
[null,null,"Identifying flaws from source code analysis"]
[null,null,"Vulnerability Scanning"]
[null,null,"Understanding families of attacks"]
[null,null,"Understanding flaws that lead to vulnerabilities"]
[null,null,"Enumeration, foot printing"]
[null,null,"Attack Surface Discovery"]
[null,null,"Attack Vectors"]
[null,"Outcomes"]
[null,null,"Students will be able to plan, organize and perform penetration testing on a simple network."]

{"sheet":"Ovw_Cyb_Ops-O","index":16,"n_rows":23,"n_cols":13,"rows_kept":23,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Overview of Cyber Operations"]
[null,"The intent of this KU is to provide students with a basic understanding of the authorities, roles and steps associated with cyber operations."]
[null,"Topics"]
[null,null,"Legal Authorities and Ethics"]
[null,null,"Stages of a Cyber Operation (and details of each phase)"]
[null,null,"Target Identification"]
[null,null,"Reconnaissance"]
[null,null,"Gaining Access"]
[null,null,"Hiding Presence"]
[null,null,"Establishing Persistence"]
[null,null,"Execution"]
[null,null,"Assessment"]
[null,null,"Basic Process Modeling"]
[null,null,"Validating Procedures"]
[null,null,"Handling failures to follow procedures"]
[null,null,"Case studies of actual cyber operations"]
[null,"Outcomes"]
[null,null,"The student will be able to describe the laws that provide US entities the authority to perform cyber operations."]
[null,null,"The student will be able to list the phases of a well organized cyber operation and describe the goals and objectives of each phase."]
[null,null,"The student will be able to identify specific phases of a cyber operation in network traffic."]
[null,null,"The student will be able to describe potential motivations that might prompt an entity to perform a cyber operation."]

{"sheet":"OS-Theory-O","index":17,"n_rows":20,"n_cols":13,"rows_kept":20,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Operating Systems Theory"]
[null,"The intent of this KU is to provide students with an understanding of the issues related to the design and implementation of operating system concepts, components and interfaces."]
[null,"Topics"]
[null,null,"Privilege States"]
[null,null,"Processes & Threads, Process/Thread Management"]
[null,null,"Memory Management, Virtual Memory"]
[null,null,"Inter-process Communications"]
[null,null,"Concurrency and Synchronization, Deadlocks"]
[null,null,"File Systems"]
[null,null,"Input / Output"]
[null,null,"Real-time operating systems / security issues"]
[null,null,"Distributed OS architectures & security issues"]
[null,null,"Race Conditions"]
[null,null,"Buffer Overflows"]
[null,null,"Virtualization"]
[null,null,"Clear Interface Semantics"]
[null,"Outcomes"]
[null,null,"Students will have an understanding of operating systems theory and implementation. They will understand OS internals to the level that they can design and implement significant architectural changes to an existing OS."]

{"sheet":"OS_Harden-O","index":18,"n_rows":19,"n_cols":13,"rows_kept":19,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Operating Systems Hardening"]
[null,"The intent of this KU is to provide students with the ability to apply methods such as managing applications, services, and network ports to improve the robustness of operating systems."]
[null,"Topics"]
[null,null,"Secure Installation"]
[null,null,"Removing unnecessary components"]
[null,null,"File system maintenance (isolation of sensitive data)"]
[null,null,"User restrictions (access and authorizations)"]
[null,null,"User / Group / File Management"]
[null,null,"Password Standards and Requirements"]
[null,null,"Shutting Down Unnecessary/Unneeded Services"]
[null,null,"Closing Unnecessary/Unneeded Ports"]
[null,null,"Patch Management / Software Updates"]
[null,null,"Virtualization"]
[null,null,"Vulnerability Scanning"]
[null,"Outcomes"]
[null,null,"Students will be able to describe, for a given OS, the steps necessary for hardening the OS with respect to various applications."]
[null,null,"Students will be able to securely install a given OS, remove or shut down unnecessary components and services, close unnecessary ports, and ensure that all patches and updates are applied."]

{"sheet":"Net_Admin-O","index":19,"n_rows":17,"n_cols":13,"rows_kept":17,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Network Security Administration"]
[null,"The intent of this KU is to provide students with knowledge of the methods of analyzing and mitigating threats within a network environment."]
[null,"Topics"]
[null,null,"Network Components"]
[null,null,"Network Protocols"]
[null,null,"Network Security Devices"]
[null,null,"Network Security Services"]
[null,null,"Protection of Communicated Data"]
[null,null,"Network Configuration"]
[null,null,"Security Automation"]
[null,null,"Network Security Policies"]
[null,null,"Packet Capture and Analysis"]
[null,"Outcomes"]
[null,null,"Students will be able to appropriately position network security components within a network architecture to implement a layered defense."]
[null,null,"Students will be able to securely configure network devices and services and establish secure communications between networks."]

{"sheet":"Mob_Tech-O","index":20,"n_rows":17,"n_cols":13,"rows_kept":17,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Mobile Technologies"]
[null,"The intent of this KU is to provide students with an understanding of the hardware, communications, management and programming environments associated with mobile technologies."]
[null,"Topics"]
[null,null,"2G -> 3G -> 4G / LTE -> 5G"]
[null,null,"Standards Heritage"]
[null,null,"Core Architecture Evolution"]
[null,null,"Design Choices"]
[null,null,"Encryption"]
[null,null,"Mobile Use of SS7"]
[null,null,"RRC Signaling"]
[null,null,"Billing/Charging"]
[null,null,"Wireless Security (WEP vs WPA2)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how a mobile device maintains connectivity to the network while in motion, to include how infrastructure nodes handle passing the mobile device from one node to the next."]
[null,null,"Students will be able to explain the weaknesses of WEP and which ones have been addressed and how."]

{"sheet":"Low_Prog-O","index":21,"n_rows":15,"n_cols":13,"rows_kept":15,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Low Level Programming"]
[null,"The intent of this KU is to provide students will the skill and ability to program with low level languages to perform low level operations."]
[null,"Topics"]
[null,null,"C"]
[null,null,"Assembly"]
[null,null,"appropriate and secure use of library functions"]
[null,null,"detailed language syntax"]
[null,null,"pointers and pointer manipulation"]
[null,null,"recursive programming"]
[null,null,"modularization"]
[null,null,"defensive programming"]
[null,"Outcomes"]
[null,null,"Students will be able to utilize low level programming languages to implement complex programs such as internal operating system components and drivers to interface with and control hardware devices."]

{"sheet":"LifeCycle-O","index":22,"n_rows":15,"n_cols":13,"rows_kept":15,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Life-Cycle Security"]
[null,"The intent of this KU is to provide students with an understanding of how security principles can be applied to improve security throughout the system or product lifecycle."]
[null,"Topics"]
[null,null,"System Life-Cycle Phases and Issues"]
[null,null,"Development Processes"]
[null,null,"Configuration Management"]
[null,null,"Developmental Threats"]
[null,null,"Software Assurance Maturity Model"]
[null,null,"Building Security In Maturity Model"]
[null,"Outcomes"]
[null,null,"Students will be able to analyze a security failure and identify how decisions in other phases of the system life-cycle influenced the eventual failure."]
[null,null,"Students will be able to list and describe the phases of the system life-cycle."]
[null,null,"Students will be able to list and describe the elements of a maturity model."]

{"sheet":"IDS-O","index":23,"n_rows":21,"n_cols":13,"rows_kept":21,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Intrusion Detection / Prevention Systems"]
[null,"The intent of this KU is to provide students with knowledge and skills related to detecting and analyzing vulnerabilities and threats and taking steps to mitigate associated risks."]
[null,"Topics"]
[null,null,"Deep Packet Inspection"]
[null,null,"Log File Analysis"]
[null,null,"Log Aggregation"]
[null,null,"Cross Log Comparison and Analysis"]
[null,null,"Anomaly Detection"]
[null,null,"Misuse Detection (Signature Detection)"]
[null,null,"Specification-based Detection"]
[null,null,"Host-based Intrusion Detection and Prevention"]
[null,null,"Network-based Intrusion Detection and Prevention"]
[null,null,"Distributed Intrusion Detection"]
[null,null,"Hierarchical IDSes"]
[null,null,"Honeynets/Honeypots"]
[null,"Outcomes"]
[null,null,"Students will be able to demonstrate the ability to detect, identify, resolve and document host or network intrusions."]
[null,null,"Students will be able to demonstrate the ability to detect various types of malware (keyloggers, rootkits) and unauthorized devices (rogue wireless access points) on a live network."]
[null,null,"Students will be able to demonstrate the ability to configure IDS/IPS systems to reduce false positives and false negatives."]

{"sheet":"Int_Comp-O","index":24,"n_rows":11,"n_cols":13,"rows_kept":11,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Intro to Theory of Computation"]
[null,"The intent of this KU is to provide students with the basic knowledge of finite automata and their application to computation."]
[null,"Topics"]
[null,null,"Computability"]
[null,null,"Complexity"]
[null,null,"Turing machines"]
[null,null,"Deterministic and non-deterministic finite automata"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the concepts of complexity and computability."]

{"sheet":"ICS-O","index":25,"n_rows":19,"n_cols":13,"rows_kept":19,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Industrial Control Systems"]
[null,"The intent of this KU is to provide students with an understanding og the basics of industrial control systems, where they are likely to be found, and vulnerabilities they are likely to have."]
[null,"Topics"]
[null,null,"SCADA Firewalls"]
[null,null,"Hardware Components"]
[null,null,"Programmable Logic Controllers (PLCs)"]
[null,null,"Protocols (MODBUS, PROFINET, DNP3, OPC, ICCP, SERIAL)"]
[null,null,"Networking (RS232/485, ZIGBEE, 900MHz, BlueTooth, X.25)"]
[null,null,"Types of ICSs (e.g., power distribution systems, manufacturing)"]
[null,null,"Models of ICS systems (time driven vs. event driven)"]
[null,null,"Common Vulnerabilities in Critical Infrastructure Systems"]
[null,null,"Ladder Logic"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the use and application of PLCs in automation."]
[null,null,"Students will be able to describe the components and applications of industrial control systems."]
[null,null,"Students will be able to explain various control schemes and their differences."]
[null,null,"Students shall be able to demonstrate the ability to understand, evaluate and implement security functionality across an industrial network"]

{"sheet":"IND_Stud-O","index":26,"n_rows":7,"n_cols":13,"rows_kept":7,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Independent Study / Directed Study / Special Topics / Advanced Topics"]
[null,"The intent of this KU is to provide credit for courses that address emerging issues related to information assurance and cyber defense."]
[null,"Topics"]
[null,null,"Courses focused on emerging technologies and their security relevant issues or new Tools, Techniques and Methods related to IA/Cyber Defense"]
[null,null,"(this “wild-card” Knowledge Unit allows any school to submit an IA/Cyber Defense course for credit towards satisfying the academic requirements to be designated as a CAE. It will be up to the on-site review process to validate if the course is worthy of credit.)"]

{"sheet":"IA_Stnds-O","index":27,"n_rows":14,"n_cols":13,"rows_kept":14,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["IA Standards"]
[null,"The intent of this KU is to provide students with an understanding of the common standards related to information assurance."]
[null,"Topics"]
[null,null,"HIPAA"]
[null,null,"FERPA"]
[null,null,"Sarbanes-Oxley"]
[null,null,"Understanding appropriate commercial standards"]
[null,null,"Knowing which standards apply to specific situations"]
[null,null,"Rainbow Series"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the impact of legal/regulatory standards on a given system."]
[null,null,"Students will be able to describe how standards, such as the Orange Book, may be applied to the requirements for a sub-contractor or customer."]

{"sheet":"IA_Comp-O","index":28,"n_rows":16,"n_cols":13,"rows_kept":16,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["IA Compliance"]
[null,"The intent of this KU is to provide students with an understanding of the rules, regulations and issues related to compliance with applicable laws and regulations."]
[null,"Topics"]
[null,null,"HIPAA"]
[null,null,"Sarbanes Oxley"]
[null,null,"FERPA"]
[null,null,"Data Breach Disclosure Laws"]
[null,null,"FISMA"]
[null,null,"Gramm Leach Bliley"]
[null,null,"PCI DSS"]
[null,"Outcomes"]
[null,null,"Students shall be able to list the applicable laws for compliance in a given situation."]
[null,null,"Students shall be able to describe what the laws mandate and where they apply."]
[null,null,"Students will be able to conduct audits to determine compliance with laws."]

{"sheet":"IA_Arch-O","index":29,"n_rows":18,"n_cols":13,"rows_kept":18,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["h",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["IA Architectures"]
[null,"The intent of this KU is to provide students with an understanding of common security architectures for the protection of information systems and data."]
[null,"Topics"]
[null,null,"Defense in Depth"]
[null,null,"DMZs"]
[null,null,"Proxy Servers"]
[null,null,"Composition and Security"]
[null,null,"Cascading"]
[null,null,"Emergent Properties"]
[null,null,"Dependencies"]
[null,null,"TCB Subsets"]
[null,null,"Enterprise Architectures / Security Architectures"]
[null,null,"Secure network design"]
[null,"Outcomes"]
[null,null,"Students will be able to examine a specific architecture and identify potential vulnerabilities."]
[null,null,"Students will be able to design a secure architecture for a given application."]

{"sheet":"HW_FW_Sec-O","index":30,"n_rows":12,"n_cols":13,"rows_kept":12,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Hardware/Firmware Security"]
[null,"The intent of this KU is to provide students with an understanding of the diverse components in hardware/firmware, their roles, and the associated security concerns."]
[null,"Topics"]
[null,null,"Microcode"]
[null,null,"Firmware"]
[null,null,"Hardware Abstraction Layers"]
[null,null,"Virtualization Layers"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how systems are initialized, how software is loaded, and how software and hardware interact."]
[null,null,"Students will be able to describe the role of intermediate software such as hardware abstraction layers or other forms of middleware."]

{"sheet":"HW_Rev-O","index":31,"n_rows":16,"n_cols":13,"rows_kept":16,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Hardware Reverse Engineering"]
[null,"The intent of this KU is to provide students with an introduction to the basic procedures necessary to perform reverse engineering of hardware components to determine their functionality, inputs, outputs, and stored data."]
[null,"Topics"]
[null,null,"Principles of Reverse Engineering"]
[null,null,"Stimulus, Data Collection, Data Analysis"]
[null,null,"Specification development"]
[null,null,"Capability Enhancement / Modification Techniques"]
[null,null,"Detecting Modification"]
[null,null,"Stimulation Methods / Instrumentation (probing and measurement)"]
[null,null,"JTAG IEEE 1149.1"]
[null,null,"Defining and Enumerating Interfaces"]
[null,null,"Functional Decomposition"]
[null,"Outcomes"]
[null,null,"Students will be able to perform basic procedures such as probing, measuring, and data collection to identify functionality and to affect modifications."]

{"sheet":"Fraud-O","index":32,"n_rows":21,"n_cols":13,"rows_kept":21,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Fraud Prevention and Management"]
[null,"The intent of this KU is to provide students with the necessary knowledge to develop plans and processes for a holistic approach to preventing and mitigating fraud throughout the system lifecycle."]
[null,"Topics"]
[null,null,"Symptom Recognition"]
[null,null,"Data Driven Detection"]
[null,null,"Investigation of Theft"]
[null,null,"Concealment"]
[null,null,"Conversion Methods"]
[null,null,"Inquiry and Reporting"]
[null,null,"Financial, Revenue and Inventory"]
[null,null,"Liability and inadequate disclosure"]
[null,null,"Consumer fraud"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the components of the fraud triangle – necessary condition for fraud."]
[null,null,"Students will be able to describe the cost and effectiveness of common fraud detection and prevention methods."]
[null,null,"Students will be able to analyze record keeping and management procedures for assets and to identify/correct weaknesses."]
[null,null,"Students will be able to describe legal and ethical requirements for detecting, preventing and reporting fraud."]
[null,null,"Students will be able to describe investigative procedures for fraud."]
[null,null,"Students will be able to describe common methods of financial statement fraud."]

{"sheet":"Methods-O","index":33,"n_rows":17,"n_cols":13,"rows_kept":17,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Formal Methods"]
[null,"The intent of this KU is to provide students with a basic understanding of how mathematical logic can be applied to the design of secure systems."]
[null,"Topics"]
[null,null,"Concept of Formal Methods"]
[null,null,"Mathematical Logic"]
[null,null,"Applications"]
[null,null,"Role in system design"]
[null,null,"Role in software engineering"]
[null,null,"Limitations"]
[null,null,"Bell-LaPadula (as an example formal model)"]
[null,null,"Automated Reasoning Tools"]
[null,null,"System Modeling and Specification"]
[null,null,"Proofs and Verification"]
[null,"Outcomes"]
[null,null,"Students will be able to apply formal security policy models to real world scenarios."]

{"sheet":"Acct-O","index":34,"n_rows":19,"n_cols":13,"rows_kept":19,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Forensic Accounting"]
[null,"The intent of this KU is to provide students with the ability to apply forensics techniques to respond to and investigate financial incidents."]
[null,"Topics"]
[null,null,"Investigative Accounting"]
[null,null,"Fraudulent Financial Reporting"]
[null,null,"Misappropriation of Assets"]
[null,null,"Indirect Methods of Reconstructing Income"]
[null,null,"Money Laundering"]
[null,null,"Transnational financial flows"]
[null,null,"Litigation services"]
[null,null,"Evidence Management"]
[null,null,"Economic Damages and Business Valuations"]
[null,"Outcomes"]
[null,null,"Students will be able to describe common forms of financial statement fraud and related detection techniques."]
[null,null,"Students will be able to describe and implement methods of indirectly estimating concealed revenue and income."]
[null,null,"Students will be able to describe common methods of money laundering and related methods of prevention and detection (including related laws and regulations)."]
[null,null,"Students will be able to compute loss, damages, and business value for occurrences of fraud, theft and fraudulent financial statements."]

{"sheet":"Emb_Sys-O","index":35,"n_rows":13,"n_cols":13,"rows_kept":13,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Embedded Systems"]
[null,"The intent of this KU is to provide students with the ability to develop applications that run on embedded devices while complying with device constraints."]
[null,"Topics"]
[null,null,"Real-time Operating Systems"]
[null,null,"Microcontroller architectures"]
[null,null,"Interrupt handling and timing issues"]
[null,null,"Resource management in real time systems"]
[null,null,"C Programming"]
[null,null,"Java, JavaScript or some other runtime programming environment"]
[null,"Outcomes"]
[null,null,"Students will be able to discuss embedded system architectures, real time OS issues such as concurrency and synchronization, and real time resource management."]

{"sheet":"Net_For-O","index":36,"n_rows":14,"n_cols":13,"rows_kept":14,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Network Forensics"]
[null,"The intent of this KU is to provide students with the ability apply forensics techniques to investigate and analyze network traffic."]
[null,"Topics"]
[null,null,"Packet Capture and Analysis"]
[null,null,"Intrusion Detection and Prevention"]
[null,null,"Interlacing of device and network forensics"]
[null,null,"Log-file Analysis"]
[null,null,"Forensic Imaging and Analysis"]
[null,null,"(must include hands-on activities)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the methodologies used in network forensics."]
[null,null,"Students will be able to analyze and decipher network traffic, identify anomalous or malicious activity, and provide a summary of the effects on the system."]

{"sheet":"Media_For-O","index":37,"n_rows":17,"n_cols":13,"rows_kept":17,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Media Forensics"]
[null,"The intent of this KU is to provide students with the ability to apply forensics techniques to investigate and analyze a particular media in context."]
[null,"Topics"]
[null,null,"Drive Acquisition"]
[null,null,"Authentication of Evidence"]
[null,null,"Verification and Validation"]
[null,null,"Hashes"]
[null,null,"Metadata"]
[null,null,"Live vs. Static Acquisition"]
[null,null,"Sparse vs. Full Imaging"]
[null,null,"Slack Space"]
[null,null,"Hidden Files/clusters/partitions"]
[null,null,"(must include hands-on activities)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe methods and approaches for forensic analysis on specified media."]

{"sheet":"Dev_For-O","index":38,"n_rows":13,"n_cols":13,"rows_kept":13,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Device Forensics"]
[null,"The intent of this KU is to provide students with the ability to apply forensics techniques to investigate and analyze a device."]
[null,"Topics"]
[null,null,"Mobile Device Analysis"]
[null,null,"Tablets"]
[null,null,"SmartPhones"]
[null,null,"GPS"]
[null,null,"(must include hands-on activities)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe methods for the acquisition/analysis of mobile devices (e.g., device storage, system data, cell tower logs)."]
[null,null,"Students will be able to explain the legal issues related to mobile device forensic activities."]

{"sheet":"Host_For-O","index":39,"n_rows":18,"n_cols":13,"rows_kept":18,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Host Forensics"]
[null,"The intent of this KU is to provide students with the ability to apply forensics techniques to investigate and analyze a host in a network."]
[null,"Topics"]
[null,null,"File Systems and File System Forensics"]
[null,null,"Hypervisor Analysis"]
[null,null,"Registry Analysis"]
[null,null,"Cryptanalysis"]
[null,null,"Rainbow Tables"]
[null,null,"Steganography"]
[null,null,"Networking Concepts, Services, Protocols"]
[null,null,"Operating Systems Concepts"]
[null,null,"Live System Investigations"]
[null,null,"(must include hands-on activities)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe what can/cannot be retrieved from various OSes."]
[null,null,"Students will be able to describe the methodologies used in host forensics."]

{"sheet":"Dig_For-O","index":40,"n_rows":22,"n_cols":13,"rows_kept":22,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Digital Forensics"]
[null,"The intent of this KU is to provide students with the skills to apply forensics techniques throughout an investigation life cycle with a focus on complying with legal requirements."]
[null,"Topics"]
[null,null,"Legal Compliance"]
[null,null,"Applicable Laws"]
[null,null,"Affidavits"]
[null,null,"How to Testify"]
[null,null,"Case Law"]
[null,null,"Chain of custody"]
[null,null,"Digital Investigations"]
[null,null,"E-Discovery"]
[null,null,"Authentication of Evidence"]
[null,null,"Chain of Custody Procedures"]
[null,null,"Metadata"]
[null,null,"Root Cause Analysis"]
[null,null,"Using Virtual Machines for Analysis"]
[null,"Outcomes"]
[null,null,"Students shall be able to discuss the rules, laws, policies, and procedures that affect digital forensics"]
[null,null,"Students shall be able to use one or more common DF tools, such as EnCase, FTK, ProDiscover, Xways, SleuthKit."]
[null,null,"Students will be able to describe the steps in performing digital forensics from the initial recognition of an incident through the steps of evidence gathering, preservation and analysis, through the completion of legal proceedings."]

{"sheet":"Dig_Comms-O","index":41,"n_rows":14,"n_cols":13,"rows_kept":14,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Digital Communications"]
[null,"The intent of this KU is to provide students with knowledge of the protocols and methodologies used in modern digital communications systems."]
[null,"Topics"]
[null,null,"Components of a digital communications system"]
[null,null,"Digital Signaling"]
[null,null,"Spread Spectrum Signals"]
[null,null,"Multi-User Communication Access Techniques"]
[null,null,"CDMA, TDMA, FDMA, SDMA, PDMA"]
[null,"Outcomes"]
[null,null,"Students will be able to describe digital communications systems in terms of subsystems and modulation techniques."]
[null,null,"Students will be able to describe the current state of the art in digital communications."]
[null,null,"Students will be able to compare and contrast different approaches to digital communications and describe the advantages and disadvantages of each."]

{"sheet":"DMBS-O","index":42,"n_rows":19,"n_cols":13,"rows_kept":19,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Database Management Systems"]
[null,"The intent of this KU is to provide students with the skills to utilize database management system to solve specific problems."]
[null,"Topics"]
[null,null,"Overview of database types (e.g., flat, relational, network, object-oriented)"]
[null,null,"SQL (for queries)"]
[null,null,"Advanced SQL (for DBMS administration – e.g., user creation/deletion, permissions and access controls)"]
[null,null,"Indexing, Inference, Aggregation, Polyinstantiation"]
[null,null,"How to protect data (confidentiality, integrity and availability in a DBMS context)"]
[null,null,"Vulnerabilities (e.g., SQL injection)"]
[null,"Outcomes"]
[null,null,"Students will be able to list the most common structures for storing data in a database management system."]
[null,null,"Students will be able to configure a commodity DBMS for secure access."]
[null,null,"Students will be able to describe alternatives to relational DBMSs and their unique security issues."]
[null,null,"Students will be able to describe the role of a database, a DBMS, and a database server within a complex system supporting multiple applications."]
[null,null,"Students will be able to demonstrate basic SQL proficiency for table creation, data insertion and data query."]
[null,null,"Students will be able to describe DBMS access controls and privilege levels and apply them to a simple database."]
[null,null,"Students will be able to develop a DB structure for a specific system/problem."]

{"sheet":"Data_Struct-O","index":43,"n_rows":13,"n_cols":13,"rows_kept":13,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Data Structures"]
[null,"The intent of this KU is to provide students with an understanding of the basic abstract data types, associated operations and applying them to solve problems."]
[null,"Topics"]
[null,null,"Strings, Lists, Vectors, Arrays"]
[null,null,"Heaps, Queues, Stacks, Buffers"]
[null,null,"Searching and Sorting"]
[null,null,"Trees"]
[null,null,"Data Formats"]
[null,"Outcomes"]
[null,null,"Students will be able to list the most common structures and data formats for storing data in a computer system."]
[null,null,"Students will be able to discuss the advantages and disadvantages of different data structures/formats."]

{"sheet":"Data_Admin-O","index":44,"n_rows":16,"n_cols":13,"rows_kept":16,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Data Administration"]
[null,"The intent of this KU is to provide students with methods to protect the confidentiality, integrity, and availability of data throughout the data life cycle."]
[null,"Topics"]
[null,null,"Big Data"]
[null,null,"Hadoop / Mongo DB / HBASE"]
[null,null,"Data Policies"]
[null,null,"Data Quality"]
[null,null,"Data Ownership"]
[null,null,"Data Warehousing"]
[null,null,"Long Term Archival"]
[null,null,"Data Validation"]
[null,null,"Data Security (access control, encryption)"]
[null,"Outcomes"]
[null,null,"Students will be able to identify relevant security issues given a system and data management structure"]

{"sheet":"CS-P_M-O","index":45,"n_rows":18,"n_cols":13,"rows_kept":18,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Cybersecurity Planning and Management"]
[null,"The intent of this KU is to provide students with the ability to develop plans and processes for a holistic approach to cybersecurity for an organization."]
[null,"Topics"]
[null,null,"CBK"]
[null,null,"Operational, Tactical, Strategic Plan and Management"]
[null,null,"Business Continuity / Disaster Recovery"]
[null,null,"C-Level Functions"]
[null,null,"Making Cybersecurity a strategy (part of core organizational strategy)"]
[null,null,"Change control"]
[null,"Outcomes"]
[null,null,"Students will be able to examine the placement of security functions in a system and describe the strengths and weaknesses"]
[null,null,"Students will be able to develop contingency plans for various size organizations to include: business continuity, disaster recovery and incident response."]
[null,null,"Students will be able to develop system specific plans for:"]
[null,null,"The protection of intellectual property"]
[null,null,"The implementation of access controls, and"]
[null,null,"Patch and change management."]

{"sheet":"Cloud-O","index":46,"n_rows":17,"n_cols":13,"rows_kept":17,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Cloud Computing"]
[null,"The intent of this KU is to provide students with a basic understanding of the technologies and services that enable cloud computing, different types of cloud computing models and the security and legal issues associated with cloud computing."]
[null,"Topics"]
[null,null,"Virtualization platforms"]
[null,null,"Cloud Services"]
[null,null,"SaaS, PaaS, DaaS, IaaS"]
[null,null,"Service Oriented Architectures"]
[null,null,"Deployment Models"]
[null,null,"private, public, community, hybrid"]
[null,null,"Security"]
[null,null,"Storage"]
[null,null,"Legal/Privacy Issues"]
[null,"Outcomes"]
[null,null,"Students will be able to describe each type of service/model of cloud computing"]
[null,null,"Students will be able to compare and contrast: local resource requirements, local control, network requirements, and security (attacks, mitigations, overall vulnerability)"]

{"sheet":"Analog-O","index":47,"n_rows":15,"n_cols":13,"rows_kept":15,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Analog Telecommunications Systems"]
[null,"The intent of this KU is to provide students with a basic knowledge of the architectures and issues associated with analog communications systems."]
[null,"Topics"]
[null,null,"Signaling Methods"]
[null,null,"Architecture"]
[null,null,"Trunks, Switching"]
[null,null,"Grade of Service"]
[null,null,"Blocking"]
[null,null,"Call Arrival Models"]
[null,null,"Interference Issues"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the basic concepts of modern analog communications systems, using block diagrams."]
[null,null,"Students will be able to briefly describe concepts such as the different types of modulation and their advantages and applications, bandwidth, noise and the importance of the signal-to-noise ratio."]

{"sheet":"Algo-O","index":48,"n_rows":12,"n_cols":9,"rows_kept":12,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Algorithms"]
[null,"The intent of this KU is to provide students with the ability to select and apply algorithms to solve specific problems and to analyze the effectiveness of algorithms in context."]
[null,"Topics"]
[null,null,"Algorithm Analysis"]
[null,null,"Computational Complexity"]
[null,null,"Best/Worst/Average Case Behavior"]
[null,null,"Optimization"]
[null,null,"Searching / Sorting"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how to perform an analysis of algorithms to determine best and worst case behavior."]

{"sheet":"AdvNetTech-0","index":49,"n_rows":21,"n_cols":9,"rows_kept":21,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Advanced Network Technology & Protocols"]
[null,"The intent of this Knowledge Unit is to provide students with an understanding of the latest network technologies and more complex security issues involved in network communications. Examples include (but not limited to): software defined networking, converged voice/data networking."]
[null,"Topics"]
[null,null,"Routing algorithms and protocols"]
[null,null,"Software Defined Networking"]
[null,null,"Principles, protocols, implications"]
[null,null,"IPv6 Networking Suite"]
[null,null,"BGP"]
[null,null,"Quality of Service"]
[null,null,"Network Services"]
[null,null,"Social Networks"]
[null,null,"Network Topologies"]
[null,null,"Voice over IP (VoIP)"]
[null,null,"Multicasting"]
[null,null,"Advanced Network Security Topics"]
[null,null,"Secure DNS, Network Address Translation, Deep Packet Inspection, Transport Layer Security"]
[null,"Outcomes"]
[null,null,"Students will be able to describe current networking technologies and trends."]
[null,null,"Students will be able to describe and discuss data network architectures and protocols, to include their advantages and disadvantages, applications, and security issues."]

{"sheet":"Adv_Crypto-0","index":50,"n_rows":23,"n_cols":5,"rows_kept":23,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8],[3,1,3,2]]}
["Courses",null,null,"ABC-123","DEF-456"]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Advanced Cryptography"]
[null,"The intent of this KU is to provide students with knowledge of cryptographic algorithms, protocols, and their uses in the protection of information in various states."]
[null,"Topics"]
[null,null,"Number Theory"]
[null,null,"Probability and Statistics"]
[null,null,"Understanding of the major algorithms (AES, RSA, EC)"]
[null,null,"Suite B Algorithms"]
[null,null,"Understanding of the families of attacks (differential, man-in-the-middle, linear, etc.)"]
[null,null,"Hashing and Signatures"]
[null,null,"Key Management"]
[null,null,"Modes and appropriate uses"]
[null,null,"Classical Cryptanalysis (a la Konheim)"]
[null,null,"Identity-based Cryptography"]
[null,null,"Digital Signatures"]
[null,null,"Virtual Private Networks"]
[null,null,"Quantum Key Cryptography"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how various cryptographic algorithms and protocols work."]
[null,null,"Students will be able to evaluate security mechanisms based on cryptography."]
[null,null,"Students will be able to describe the application of cryptography in SSL, virtual private networks, secure storage, and other security applications."]
[null,null,"Students will be able to take a mode or protocol diagram and identify how an error propagates through the cryptosystem."]

{"sheet":"Optional-All","index":51,"n_rows":731,"n_cols":13,"rows_kept":731,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Advanced Cryptography"]
[null,"The intent of this KU is to provide students with knowledge of cryptographic algorithms, protocols, and their uses in the protection of information in various states."]
[null,"Topics"]
[null,null,"Number Theory"]
[null,null,"Probability and Statistics"]
[null,null,"Understanding of the major algorithms (AES, RSA, EC)"]
[null,null,"Suite B Algorithms"]
[null,null,"Understanding of the families of attacks (differential, man-in-the-middle, linear, etc.)"]
[null,null,"Hashing and Signatures"]
[null,null,"Key Management"]
[null,null,"Modes and appropriate uses"]
[null,null,"Classical Cryptanalysis (a la Konheim)"]
[null,null,"Identity-based Cryptography"]
[null,null,"Digital Signatures"]
[null,null,"Virtual Private Networks"]
[null,null,"Quantum Key Cryptography"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how various cryptographic algorithms and protocols work."]
[null,null,"Students will be able to evaluate security mechanisms based on cryptography."]
[null,null,"Students will be able to describe the application of cryptography in SSL, virtual private networks, secure storage, and other security applications."]
[null,null,"Students will be able to take a mode or protocol diagram and identify how an error propagates through the cryptosystem."]
["Advanced Network Technology & Protocols"]
[]
[null,"Topics"]
[null,null,"Routing algorithms and protocols"]
[null,null,"Software Defined Networking"]
[null,null,"Principles, protocols, implications"]
[null,null,"IPv6 Networking Suite"]
[null,null,"BGP"]
[null,null,"Quality of Service"]
[null,null,"Network Services"]
[null,null,"Social Networks"]
[null,null,"Network Topologies"]
[null,null,"Voice over IP (VoIP)"]
[null,null,"Multicasting"]
[null,null,"Advanced Network Security Topics"]
[null,null,"Secure DNS, Network Address Translation, Deep Packet Inspection, Transport Layer Security"]
[null,"Outcomes"]
[null,null,"Students will be able to describe current networking technologies and trends."]
[null,null,"Students will be able to describe and discuss data network architectures and protocols, to include their advantages and disadvantages, applications, and security issues."]
["Algorithms"]
[null,"The intent of this KU is to provide students with the ability to select and apply algorithms to solve specific problems and to analyze the effectiveness of algorithms in context."]
[null,"Topics"]
[null,null,"Algorithm Analysis"]
[null,null,"Computational Complexity"]
[null,null,"Best/Worst/Average Case Behavior"]
[null,null,"Optimization"]
[null,null,"Searching / Sorting"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how to perform an analysis of algorithms to determine best and worst case behavior."]
["Analog Telecommunications Systems"]
[null,"The intent of this KU is to provide students with a basic knowledge of the architectures and issues associated with analog communications systems."]
[null,"Topics"]
[null,null,"Signaling Methods"]
[null,null,"Architecture"]
[null,null,"Trunks, Switching"]
[null,null,"Grade of Service"]
[null,null,"Blocking"]
[null,null,"Call Arrival Models"]
[null,null,"Interference Issues"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the basic concepts of modern analog communications systems, using block diagrams."]
[null,null,"Students will be able to briefly describe concepts such as the different types of modulation and their advantages and applications, bandwidth, noise and the importance of the signal-to-noise ratio."]
["Cloud Computing"]
[null,"The intent of this KU is to provide students with a basic understanding of the technologies and services that enable cloud computing, different types of cloud computing models and the security and legal issues associated with cloud computing."]
[null,"Topics"]
[null,null,"Virtualization platforms"]
[null,null,"Cloud Services"]
[null,null,"SaaS, PaaS, DaaS, IaaS"]
[null,null,"Service Oriented Architectures"]
[null,null,"Deployment Models"]
[null,null,"private, public, community, hybrid"]
[null,null,"Security"]
[null,null,"Storage"]
[null,null,"Legal/Privacy Issues"]
[null,"Outcomes"]
[null,null,"Students will be able to describe each type of service/model of cloud computing"]
[null,null,"Students will be able to compare and contrast: local resource requirements, local control, network requirements, and security (attacks, mitigations, overall vulnerability)"]
["Cybersecurity Planning and Management"]
[null,"The intent of this KU is to provide students with the ability to develop plans and processes for a holistic approach to cybersecurity for an organization."]
[null,"Topics"]
[null,null,"CBK"]
[null,null,"Operational, Tactical, Strategic Plan and Management"]
[null,null,"Business Continuity / Disaster Recovery"]
[null,null,"C-Level Functions"]
[null,null,"Making Cybersecurity a strategy (part of core organizational strategy)"]
[null,null,"Change control"]
[null,"Outcomes"]
[null,null,"Students will be able to examine the placement of security functions in a system and describe the strengths and weaknesses"]
[null,null,"Students will be able to develop contingency plans for various size organizations to include: business continuity, disaster recovery and incident response."]
[null,null,"Students will be able to develop system specific plans for:"]
[null,null,"The protection of intellectual property"]
[null,null,"The implementation of access controls, and"]
[null,null,"Patch and change management."]
["Data Administration"]
[null,"The intent of this KU is to provide students with methods to protect the confidentiality, integrity, and availability of data throughout the data life cycle."]
[null,"Topics"]
[null,null,"Big Data"]
[null,null,"Hadoop / Mongo DB / HBASE"]
[null,null,"Data Policies"]
[null,null,"Data Quality"]
[null,null,"Data Ownership"]
[null,null,"Data Warehousing"]
[null,null,"Long Term Archival"]
[null,null,"Data Validation"]
[null,null,"Data Security (access control, encryption)"]
[null,"Outcomes"]
[null,null,"Students will be able to identify relevant security issues given a system and data management structure"]
["Data Structures"]
[null,"The intent of this KU is to provide students with an understanding of the basic abstract data types, associated operations and applying them to solve problems."]
[null,"Topics"]
[null,null,"Strings, Lists, Vectors, Arrays"]
[null,null,"Heaps, Queues, Stacks, Buffers"]
[null,null,"Searching and Sorting"]
[null,null,"Trees"]
[null,null,"Data Formats"]
[null,"Outcomes"]
[null,null,"Students will be able to list the most common structures and data formats for storing data in a computer system."]
[null,null,"Students will be able to discuss the advantages and disadvantages of different data structures/formats."]
["Database Management Systems"]
[null,"The intent of this KU is to provide students with the skills to utilize database management system to solve specific problems."]
[null,"Topics"]
[null,null,"Overview of database types (e.g., flat, relational, network, object-oriented)"]
[null,null,"SQL (for queries)"]
[null,null,"Advanced SQL (for DBMS administration – e.g., user creation/deletion, permissions and access controls)"]
[null,null,"Indexing, Inference, Aggregation, Polyinstantiation"]
[null,null,"How to protect data (confidentiality, integrity and availability in a DBMS context)"]
[null,null,"Vulnerabilities (e.g., SQL injection)"]
[null,"Outcomes"]
[null,null,"Students will be able to list the most common structures for storing data in a database management system."]
[null,null,"Students will be able to configure a commodity DBMS for secure access."]
[null,null,"Students will be able to describe alternatives to relational DBMSs and their unique security issues."]
[null,null,"Students will be able to describe the role of a database, a DBMS, and a database server within a complex system supporting multiple applications."]
[null,null,"Students will be able to demonstrate basic SQL proficiency for table creation, data insertion and data query."]
[null,null,"Students will be able to describe DBMS access controls and privilege levels and apply them to a simple database."]
[null,null,"Students will be able to develop a DB structure for a specific system/problem."]
["Digital Communications"]
[null,"The intent of this KU is to provide students with knowledge of the protocols and methodologies used in modern digital communications systems."]
[null,"Topics"]
[null,null,"Components of a digital communications system"]
[null,null,"Digital Signaling"]
[null,null,"Spread Spectrum Signals"]
[null,null,"Multi-User Communication Access Techniques"]
[null,null,"CDMA, TDMA, FDMA, SDMA, PDMA"]
[null,"Outcomes"]
[null,null,"Students will be able to describe digital communications systems in terms of subsystems and modulation techniques."]
[null,null,"Students will be able to describe the current state of the art in digital communications."]
[null,null,"Students will be able to compare and contrast different approaches to digital communications and describe the advantages and disadvantages of each."]
["Digital Forensics"]
[null,"The intent of this KU is to provide students with the skills to apply forensics techniques throughout an investigation life cycle with a focus on complying with legal requirements."]
[null,"Topics"]
[null,null,"Legal Compliance"]
[null,null,"Applicable Laws"]
[null,null,"Affidavits"]
[null,null,"How to Testify"]
[null,null,"Case Law"]
[null,null,"Chain of custody"]
[null,null,"Digital Investigations"]
[null,null,"E-Discovery"]
[null,null,"Authentication of Evidence"]
[null,null,"Chain of Custody Procedures"]
[null,null,"Metadata"]
[null,null,"Root Cause Analysis"]
[null,null,"Using Virtual Machines for Analysis"]
[null,"Outcomes"]
[null,null,"Students shall be able to discuss the rules, laws, policies, and procedures that affect digital forensics"]
[null,null,"Students shall be able to use one or more common DF tools, such as EnCase, FTK, ProDiscover, Xways, SleuthKit."]
[null,null,"Students will be able to describe the steps in performing digital forensics from the initial recognition of an incident through the steps of evidence gathering, preservation and analysis, through the completion of legal proceedings."]
["Host Forensics"]
[null,"The intent of this KU is to provide students with the ability to apply forensics techniques to investigate and analyze a host in a network."]
[null,"Topics"]
[null,null,"File Systems and File System Forensics"]
[null,null,"Hypervisor Analysis"]
[null,null,"Registry Analysis"]
[null,null,"Cryptanalysis"]
[null,null,"Rainbow Tables"]
[null,null,"Steganography"]
[null,null,"Networking Concepts, Services, Protocols"]
[null,null,"Operating Systems Concepts"]
[null,null,"Live System Investigations"]
[null,null,"(must include hands-on activities)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe what can/cannot be retrieved from various OSes."]
[null,null,"Students will be able to describe the methodologies used in host forensics."]
["Device Forensics"]
[null,"The intent of this KU is to provide students with the ability to apply forensics techniques to investigate and analyze a device."]
[null,"Topics"]
[null,null,"Mobile Device Analysis"]
[null,null,"Tablets"]
[null,null,"SmartPhones"]
[null,null,"GPS"]
[null,null,"(must include hands-on activities)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe methods for the acquisition/analysis of mobile devices (e.g., device storage, system data, cell tower logs)."]
[null,null,"Students will be able to explain the legal issues related to mobile device forensic activities."]
["Media Forensics"]
[null,"The intent of this KU is to provide students with the ability to apply forensics techniques to investigate and analyze a particular media in context."]
[null,"Topics"]
[null,null,"Drive Acquisition"]
[null,null,"Authentication of Evidence"]
[null,null,"Verification and Validation"]
[null,null,"Hashes"]
[null,null,"Metadata"]
[null,null,"Live vs. Static Acquisition"]
[null,null,"Sparse vs. Full Imaging"]
[null,null,"Slack Space"]
[null,null,"Hidden Files/clusters/partitions"]
[null,null,"(must include hands-on activities)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe methods and approaches for forensic analysis on specified media."]
["Network Forensics"]
[null,"The intent of this KU is to provide students with the ability apply forensics techniques to investigate and analyze network traffic."]
[null,"Topics"]
[null,null,"Packet Capture and Analysis"]
[null,null,"Intrusion Detection and Prevention"]
[null,null,"Interlacing of device and network forensics"]
[null,null,"Log-file Analysis"]
[null,null,"Forensic Imaging and Analysis"]
[null,null,"(must include hands-on activities)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the methodologies used in network forensics."]
[null,null,"Students will be able to analyze and decipher network traffic, identify anomalous or malicious activity, and provide a summary of the effects on the system."]
["Embedded Systems"]
[null,"The intent of this KU is to provide students with the ability to develop applications that run on embedded devices while complying with device constraints."]
[null,"Topics"]
[null,null,"Real-time Operating Systems"]
[null,null,"Microcontroller architectures"]
[null,null,"Interrupt handling and timing issues"]
[null,null,"Resource management in real time systems"]
[null,null,"C Programming"]
[null,null,"Java, JavaScript or some other runtime programming environment"]
[null,"Outcomes"]
[null,null,"Students will be able to discuss embedded system architectures, real time OS issues such as concurrency and synchronization, and real time resource management."]
["Forensic Accounting"]
[null,"The intent of this KU is to provide students with the ability to apply forensics techniques to respond to and investigate financial incidents."]
[null,"Topics"]
[null,null,"Investigative Accounting"]
[null,null,"Fraudulent Financial Reporting"]
[null,null,"Misappropriation of Assets"]
[null,null,"Indirect Methods of Reconstructing Income"]
[null,null,"Money Laundering"]
[null,null,"Transnational financial flows"]
[null,null,"Litigation services"]
[null,null,"Evidence Management"]
[null,null,"Economic Damages and Business Valuations"]
[null,"Outcomes"]
[null,null,"Students will be able to describe common forms of financial statement fraud and related detection techniques."]
[null,null,"Students will be able to describe and implement methods of indirectly estimating concealed revenue and income."]
[null,null,"Students will be able to describe common methods of money laundering and related methods of prevention and detection (including related laws and regulations)."]
[null,null,"Students will be able to compute loss, damages, and business value for occurrences of fraud, theft and fraudulent financial statements."]
["Formal Methods"]
[null,"The intent of this KU is to provide students with a basic understanding of how mathematical logic can be applied to the design of secure systems."]
[null,"Topics"]
[null,null,"Concept of Formal Methods"]
[null,null,"Mathematical Logic"]
[null,null,"Applications"]
[null,null,"Role in system design"]
[null,null,"Role in software engineering"]
[null,null,"Limitations"]
[null,null,"Bell-LaPadula (as an example formal model)"]
[null,null,"Automated Reasoning Tools"]
[null,null,"System Modeling and Specification"]
[null,null,"Proofs and Verification"]
[null,"Outcomes"]
[null,null,"Students will be able to apply formal security policy models to real world scenarios."]
["Fraud Prevention and Management"]
[null,"The intent of this KU is to provide students with the necessary knowledge to develop plans and processes for a holistic approach to preventing and mitigating fraud throughout the system lifecycle."]
[null,"Topics"]
[null,null,"Symptom Recognition"]
[null,null,"Data Driven Detection"]
[null,null,"Investigation of Theft"]
[null,null,"Concealment"]
[null,null,"Conversion Methods"]
[null,null,"Inquiry and Reporting"]
[null,null,"Financial, Revenue and Inventory"]
[null,null,"Liability and inadequate disclosure"]
[null,null,"Consumer fraud"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the components of the fraud triangle – necessary condition for fraud."]
[null,null,"Students will be able to describe the cost and effectiveness of common fraud detection and prevention methods."]
[null,null,"Students will be able to analyze record keeping and management procedures for assets and to identify/correct weaknesses."]
[null,null,"Students will be able to describe legal and ethical requirements for detecting, preventing and reporting fraud."]
[null,null,"Students will be able to describe investigative procedures for fraud."]
[null,null,"Students will be able to describe common methods of financial statement fraud."]
["Hardware Reverse Engineering"]
[null,"The intent of this KU is to provide students with an introduction to the basic procedures necessary to perform reverse engineering of hardware components to determine their functionality, inputs, outputs, and stored data."]
[null,"Topics"]
[null,null,"Principles of Reverse Engineering"]
[null,null,"Stimulus, Data Collection, Data Analysis"]
[null,null,"Specification development"]
[null,null,"Capability Enhancement / Modification Techniques"]
[null,null,"Detecting Modification"]
[null,null,"Stimulation Methods / Instrumentation (probing and measurement)"]
[null,null,"JTAG IEEE 1149.1"]
[null,null,"Defining and Enumerating Interfaces"]
[null,null,"Functional Decomposition"]
[null,"Outcomes"]
[null,null,"Students will be able to perform basic procedures such as probing, measuring, and data collection to identify functionality and to affect modifications."]
["Hardware/Firmware Security"]
[null,"The intent of this KU is to provide students with an understanding of the diverse components in hardware/firmware, their roles, and the associated security concerns."]
[null,"Topics"]
[null,null,"Microcode"]
[null,null,"Firmware"]
[null,null,"Hardware Abstraction Layers"]
[null,null,"Virtualization Layers"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how systems are initialized, how software is loaded, and how software and hardware interact."]
[null,null,"Students will be able to describe the role of intermediate software such as hardware abstraction layers or other forms of middleware."]
["IA Architectures"]
[null,"The intent of this KU is to provide students with an understanding of common security architectures for the protection of information systems and data."]
[null,"Topics"]
[null,null,"Defense in Depth"]
[null,null,"DMZs"]
[null,null,"Proxy Servers"]
[null,null,"Composition and Security"]
[null,null,"Cascading"]
[null,null,"Emergent Properties"]
[null,null,"Dependencies"]
[null,null,"TCB Subsets"]
[null,null,"Enterprise Architectures / Security Architectures"]
[null,null,"Secure network design"]
[null,"Outcomes"]
[null,null,"Students will be able to examine a specific architecture and identify potential vulnerabilities."]
[null,null,"Students will be able to design a secure architecture for a given application."]
["IA Compliance"]
[null,"The intent of this KU is to provide students with an understanding of the rules, regulations and issues related to compliance with applicable laws and regulations."]
[null,"Topics"]
[null,null,"HIPAA"]
[null,null,"Sarbanes Oxley"]
[null,null,"FERPA"]
[null,null,"Data Breach Disclosure Laws"]
[null,null,"FISMA"]
[null,null,"Gramm Leach Bliley"]
[null,null,"PCI DSS"]
[null,"Outcomes"]
[null,null,"Students shall be able to list the applicable laws for compliance in a given situation."]
[null,null,"Students shall be able to describe what the laws mandate and where they apply."]
[null,null,"Students will be able to conduct audits to determine compliance with laws."]
["IA Standards"]
[null,"The intent of this KU is to provide students with an understanding of the common standards related to information assurance."]
[null,"Topics"]
[null,null,"HIPAA"]
[null,null,"FERPA"]
[null,null,"Sarbanes-Oxley"]
[null,null,"Understanding appropriate commercial standards"]
[null,null,"Knowing which standards apply to specific situations"]
[null,null,"Rainbow Series"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the impact of legal/regulatory standards on a given system."]
[null,null,"Students will be able to describe how standards, such as the Orange Book, may be applied to the requirements for a sub-contractor or customer."]
["Independent Study / Directed Study / Special Topics / Advanced Topics"]
[null,"The intent of this KU is to provide credit for courses that address emerging issues related to information assurance and cyber defense."]
[null,"Topics"]
[null,null,"Courses focused on emerging technologies and their security relevant issues or new Tools, Techniques and Methods related to IA/Cyber Defense"]
[null,null,"(this “wild-card” Knowledge Unit allows any school to submit an IA/Cyber Defense course for credit towards satisfying the academic requirements to be designated as a CAE. It will be up to the on-site review process to validate if the course is worthy of credit.)"]
["Industrial Control Systems"]
[null,"The intent of this KU is to provide students with an understanding og the basics of industrial control systems, where they are likely to be found, and vulnerabilities they are likely to have."]
[null,"Topics"]
[null,null,"SCADA Firewalls"]
[null,null,"Hardware Components"]
[null,null,"Programmable Logic Controllers (PLCs)"]
[null,null,"Protocols (MODBUS, PROFINET, DNP3, OPC, ICCP, SERIAL)"]
[null,null,"Networking (RS232/485, ZIGBEE, 900MHz, BlueTooth, X.25)"]
[null,null,"Types of ICSs (e.g., power distribution systems, manufacturing)"]
[null,null,"Models of ICS systems (time driven vs. event driven)"]
[null,null,"Common Vulnerabilities in Critical Infrastructure Systems"]
[null,null,"Ladder Logic"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the use and application of PLCs in automation."]
[null,null,"Students will be able to describe the components and applications of industrial control systems."]
[null,null,"Students will be able to explain various control schemes and their differences."]
[null,null,"Students shall be able to demonstrate the ability to understand, evaluate and implement security functionality across an industrial network"]
["Intro to Theory of Computation"]
[null,"The intent of this KU is to provide students with the basic knowledge of finite automata and their application to computation."]
[null,"Topics"]
[null,null,"Computability"]
[null,null,"Complexity"]
[null,null,"Turing machines"]
[null,null,"Deterministic and non-deterministic finite automata"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the concepts of complexity and computability."]
["Intrusion Detection / Prevention Systems"]
[null,"The intent of this KU is to provide students with knowledge and skills related to detecting and analyzing vulnerabilities and threats and taking steps to mitigate associated risks."]
[null,"Topics"]
[null,null,"Deep Packet Inspection"]
[null,null,"Log File Analysis"]
[null,null,"Log Aggregation"]
[null,null,"Cross Log Comparison and Analysis"]
[null,null,"Anomaly Detection"]
[null,null,"Misuse Detection (Signature Detection)"]
[null,null,"Specification-based Detection"]
[null,null,"Host-based Intrusion Detection and Prevention"]
[null,null,"Network-based Intrusion Detection and Prevention"]
[null,null,"Distributed Intrusion Detection"]
[null,null,"Hierarchical IDSes"]
[null,null,"Honeynets/Honeypots"]
[null,"Outcomes"]
[null,null,"Students will be able to demonstrate the ability to detect, identify, resolve and document host or network intrusions."]
[null,null,"Students will be able to demonstrate the ability to detect various types of malware (keyloggers, rootkits) and unauthorized devices (rogue wireless access points) on a live network."]
[null,null,"Students will be able to demonstrate the ability to configure IDS/IPS systems to reduce false positives and false negatives."]
["Life-Cycle Security"]
[null,"The intent of this KU is to provide students with an understanding of how security principles can be applied to improve security throughout the system or product lifecycle."]
[null,"Topics"]
[null,null,"System Life-Cycle Phases and Issues"]
[null,null,"Development Processes"]
[null,null,"Configuration Management"]
[null,null,"Developmental Threats"]
[null,null,"Software Assurance Maturity Model"]
[null,null,"Building Security In Maturity Model"]
[null,"Outcomes"]
[null,null,"Students will be able to analyze a security failure and identify how decisions in other phases of the system life-cycle influenced the eventual failure."]
[null,null,"Students will be able to list and describe the phases of the system life-cycle."]
[null,null,"Students will be able to list and describe the elements of a maturity model."]
["Low Level Programming"]
[null,"The intent of this KU is to provide students will the skill and ability to program with low level languages to perform low level operations."]
[null,"Topics"]
[null,null,"C"]
[null,null,"Assembly"]
[null,null,"appropriate and secure use of library functions"]
[null,null,"detailed language syntax"]
[null,null,"pointers and pointer manipulation"]
[null,null,"recursive programming"]
[null,null,"modularization"]
[null,null,"defensive programming"]
[null,"Outcomes"]
[null,null,"Students will be able to utilize low level programming languages to implement complex programs such as internal operating system components and drivers to interface with and control hardware devices."]
["Mobile Technologies"]
[null,"The intent of this KU is to provide students with an understanding of the hardware, communications, management and programming environments associated with mobile technologies."]
[null,"Topics"]
[null,null,"2G -> 3G -> 4G / LTE -> 5G"]
[null,null,"Standards Heritage"]
[null,null,"Core Architecture Evolution"]
[null,null,"Design Choices"]
[null,null,"Encryption"]
[null,null,"Mobile Use of SS7"]
[null,null,"RRC Signaling"]
[null,null,"Billing/Charging"]
[null,null,"Wireless Security (WEP vs WPA2)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how a mobile device maintains connectivity to the network while in motion, to include how infrastructure nodes handle passing the mobile device from one node to the next."]
[null,null,"Students will be able to explain the weaknesses of WEP and which ones have been addressed and how."]
["Network Security Administration"]
[null,"The intent of this KU is to provide students with knowledge of the methods of analyzing and mitigating threats within a network environment."]
[null,"Topics"]
[null,null,"Network Components"]
[null,null,"Network Protocols"]
[null,null,"Network Security Devices"]
[null,null,"Network Security Services"]
[null,null,"Protection of Communicated Data"]
[null,null,"Network Configuration"]
[null,null,"Security Automation"]
[null,null,"Network Security Policies"]
[null,null,"Packet Capture and Analysis"]
[null,"Outcomes"]
[null,null,"Students will be able to appropriate position network security components within a network architecture to implement a layered defense."]
[null,null,"Students will be able to securely configure network devices and services and establish secure communications between networks."]
["Operating Systems Hardening"]
[null,"The intent of this KU is to provide students with the ability to apply methods such as managing applications, services, and network ports to improve the robustness of operating systems."]
[null,"Topics"]
[null,null,"Secure Installation"]
[null,null,"Removing unnecessary components"]
[null,null,"File system maintenance (isolation of sensitive data)"]
[null,null,"User restrictions (access and authorizations)"]
[null,null,"User / Group / File Management"]
[null,null,"Password Standards and Requirements"]
[null,null,"Shutting Down Unnecessary/Unneeded Services"]
[null,null,"Closing Unnecessary/Unneeded Ports"]
[null,null,"Patch Management / Software Updates"]
[null,null,"Virtualization"]
[null,null,"Vulnerability Scanning"]
[null,"Outcomes"]
[null,null,"Students will be able to describe, for a given OS, the steps necessary for hardening the OS with respect to various applications."]
[null,null,"Students will be able to securely install a given OS, remove or shut down unnecessary components and services, close unnecessary ports, and ensure that all patches and updates are applied."]
["Operating Systems Theory"]
[null,"The intent of this KU is to provide students with an understanding of the issues related to the design and implementation of operating system concepts, components and interfaces."]
[null,"Topics"]
[null,null,"Privilege States"]
[null,null,"Processes & Threads, Process/Thread Management"]
[null,null,"Memory Management, Virtual Memory"]
[null,null,"Inter-process Communications"]
[null,null,"Concurrency and Synchronization, Deadlocks"]
[null,null,"File Systems"]
[null,null,"Input / Output"]
[null,null,"Real-time operating systems / security issues"]
[null,null,"Distributed OS architectures & security issues"]
[null,null,"Race Conditions"]
[null,null,"Buffer Overflows"]
[null,null,"Virtualization"]
[null,null,"Clear Interface Semantics"]
[null,"Outcomes"]
[null,null,"Students will have an understanding of operating systems theory and implementation. They will understand OS internals to the level that they can design and implement significant architectural changes to an existing OS."]
["Overview of Cyber Operations"]
[null,"The intent of this KU is to provide students with a basic understanding of the authorities, roles and steps associated with cyber operations."]
[null,"Topics"]
[null,null,"Legal Authorities and Ethics"]
[null,null,"Stages of a Cyber Operation (and details of each phase)"]
[null,null,"Target Identification"]
[null,null,"Reconnaissance"]
[null,null,"Gaining Access"]
[null,null,"Hiding Presence"]
[null,null,"Establishing Persistence"]
[null,null,"Execution"]
[null,null,"Assessment"]
[null,null,"Basic Process Modeling"]
[null,null,"Validating Procedures"]
[null,null,"Handling failures to follow procedures"]
[null,null,"Case studies of actual cyber operations"]
[null,"Outcomes"]
[null,null,"The student will be able to describe the laws that provide US entities the authority to perform cyber operations."]
[null,null,"The student will be able to list the phases of a well organized cyber operation and describe the goals and objectives of each phase."]
[null,null,"The student will be able to identify specific phases of a cyber operation in network traffic."]
[null,null,"The student will be able to describe potential motivations that might prompt an entity to perform a cyber operation."]
[]
["Penetration Testing"]
[null,"The intent of this KU is to provide students with methods of discovering ways of exploiting vulnerabilities to gain access to a system."]
[null,"Topics"]
[null,null,"Flaw Hypothesis Methodology"]
[null,null,"Other methodologies (e.g., OSSTMM)"]
[null,null,"Identifying flaws from documentation"]
[null,null,"Identifying flaws from source code analysis"]
[null,null,"Vulnerability Scanning"]
[null,null,"Understanding families of attacks"]
[null,null,"Understanding flaws that lead to vulnerabilities"]
[null,null,"Enumeration, foot printing"]
[null,null,"Attack Surface Discovery"]
[null,null,"Attack Vectors"]
[null,"Outcomes"]
[null,null,"Students will be able to plan, organize and perform penetration testing on a simple network."]
["QA / Functional Testing"]
[null,"The intent of this KU is to provide students with methods to assess how well a functional unit meets a requirement."]
[null,"Topics"]
[null,null,"Testing methodologies (white, grey, black box testing)"]
[null,null,"Test coverage analysis"]
[null,null,"Automatic and manual generation of test inputs"]
[null,null,"Test execution"]
[null,null,"Validation of results"]
[null,"Outcomes"]
[null,null,"Students will be able to develop effective tests in a structured, organized manner."]
[null,null,"Students will be able to perform security functional testing to demonstrate that security policies and mechanisms are completely and correctly implemented."]
["RF Principles"]
[null,"The intent of this KU is to provide students with a basic understanding of radio frequency communications."]
[null,"Topics"]
[null,null,"Basics of: Electromagnetic radiation, Antennas, Information Modulation, Digital Modulation, Spectral representation, Bandwidth, BER, Eb/No vs. S/N"]
[null,null,"Limiting Access in RF"]
[null,null,"Propogation Principles"]
[null,"Outcomes"]
[null,null,"Students should be able to identify methods for isolating RF emissions"]
[null,null,"Students should be able to identify techniques for obfuscating RF transmissions"]
[null,null,"Students should be able to discuss the tradeoffs associated with bandwidth data rate, modulation, complexity, acceptable BER, and signal spreading"]
["Secure Programming Practices"]
[null,"The intent of this KU is to provide students with an understanding of the characteristics of secure programs and the ability to implement programs that are free from vulnerabilities."]
[null,"Topics"]
[null,null,"Specification of Security Requirements"]
[null,null,"Principles of Secure Programming"]
[null,null,"Robust Programming"]
[null,null,"Defensive Programming"]
[null,null,"Input Validation, Type checking"]
[null,null,"Programming Flaws"]
[null,null,"Buffer Overflows, Integer Errors"]
[null,null,"Static Analysis"]
[null,null,"Data Obfuscation"]
[null,null,"Data Protection"]
[null,"Outcomes"]
[null,null,"Students will be able to produce software components that satisfy their functional requirements without introducing vulnerabilities"]
[null,null,"Students will be able to describe the characteristics of secure programming."]
["Security Program Management"]
[null,"The intent of this KU is to provide students with the knowledge necessary to define and implement a security program for the protection of an organizations systems and data."]
[null,"Topics"]
[null,null,"Project management"]
[null,null,"Resource management"]
[null,null,"Project budgeting (cost benefit, net present value, internal rate of return)"]
[null,null,"Risk management and Analysis"]
[null,null,"Quality Assurance / Quality Control"]
[null,null,"Monitoring and Control"]
[null,null,"Deliverables"]
[null,null,"Timelines"]
[null,null,"Security Awareness, Training and Education"]
[null,null,"Security Baselines"]
[null,null,"Change Management, Patch Management"]
[null,null,"Roles and Responsibilities of the Security Organization"]
[null,null,"Compliance with Applicable Laws and Regulations"]
[null,"Outcomes"]
[null,null,"Students will be able to apply their knowledge to develop a security program, identifying goals, objectives and metrics."]
[null,null,"Students will be able to apply their knowledge to effectively manage a security program."]
[null,null,"Students will be able to assess the effectiveness of a security program."]
["Security Risk Analysis"]
[null,"The intent of this KU is to provide students with sufficient understanding of risk assessment models, methodologies and processes such that they can perform a risk assessment of a particular systems and recommend mitigations to identified risks."]
[null,"Topics"]
[null,null,"Risk Assessment/Analysis Methodologies"]
[null,null,"Risk Measurement and Evaluation Methodologies"]
[null,null,"Risk Management Models"]
[null,null,"Risk Management Processes"]
[null,null,"Risk Mitigation Economics"]
[null,null,"Risk Transference/Acceptance/Mitigation"]
[null,null,"Communication of Risk"]
[null,"Outcomes"]
[null,null,"Students will be able to describe how risk relates to a system security policy."]
[null,null,"Students will be able to describe various risk analysis methodologies."]
[null,null,"Students will be able to evaluate and categorize risk 1) with respect to technology; 2) with respect to individuals, and 3) in the enterprise, and recommend appropriate responses."]
[null,null,"Students will be able to compare the advantages and disadvantages of various risk assessment methodologies"]
[null,null,"Students will be able to select the optimal methodology based on needs, advantages and disadvantages."]
["Software Security Analysis"]
[null,"The intent of this KU is to provide students with an understanding of the tools and methods for analyzing software, either in source code or binary form."]
[null,"Topics"]
[null,null,"Testing Methodologies"]
[null,null,"Source and Binary Code Analysis"]
[null,null,"Static and Dynamic Analysis Techniques"]
[null,null,"Sandboxing"]
[null,null,"Common analysis tools and methods"]
[null,"Outcomes"]
[null,null,"Students will be able to describe software security analysis tools and techniques."]
[null,null,"Students will be able to apply their knowledge to perform software security analysis, using common tools, against previously unknown software components."]
["Software Assurance"]
[null,"The intent of this KU is to provide students with the ability to describe why software assurance is important to the development of secure systems and describe the methods and techniques that lead to secure software."]
[null,"Topics"]
[null,null,"Robust programming"]
[null,null,"Secure Software Concepts, Requirements, Design, Implementation and Testing"]
[null,null,"Secure Development Life-Cycle Phases: requirements, design, development, testing, deployment, operations, maintenance and disposal."]
[null,null,"Software testing and acceptance"]
[null,null,"Threat modeling"]
[null,null,"Fuzz testing"]
[null,null,"BUG BAR"]
[null,null,"Characteristics of secure software"]
[null,null,"Secure Software is not software that implements security functions (e.g., crypto, access control)"]
[null,"Outcome:"]
[null,null,"Students will be able to describe the importance of secure software, and the programming practices and development processes and methodologies that lead to secure software."]
["Software Reverse Engineering"]
[null,"The intent of this KU is to provide students with the capability to perform reverse engineering of executable code to determine its function and affects, or to recover the source code implementation."]
[null,"Topics"]
[null,null,"Specification Recovery"]
[null,null,"Malware Analysis"]
[null,null,"Reverse Engineering Tools & Techniques"]
[null,null,"Sandboxing"]
[null,"Outcomes"]
[null,null,"Students will be able to use a common SW RE tool to safely perform static and dynamic analysis of software (or malware) of unknown origin for the purposes of recovering the original implementation and/or understanding the software functionality."]
["Supply Chain Security"]
[null,"The intent of this KU is to provide students with an understanding of the security issues associated with building complex systems out of third party components of unknown (and potentially unknowable) origin."]
[null,"Topics"]
[null,null,"Global Development"]
[null,null,"Off Shore Production"]
[null,null,"Transport and Logistics of IT Components"]
[null,null,"Evaluation of 3rd Party Development Practices"]
[null,null,"Understanding of the Capabilities and Limits of Software and Hardware Reverse Engineering"]
[null,"Outcomes","TBR"]
["Systems Certification and Accreditation"]
[null,"The intent of this KU is to provide students with an understanding of the processes and regulations associated with the analysis/evaluation of operational systems and the authorities and processes for the approval of their operation."]
[null,"Topics"]
[null,null,"DoD Policies and Directives"]
[null,null,"Roles / Players"]
[null,null,"Components of the C&A Process"]
[null,null,"Certification Boards and Panels"]
[null,null,"NIST Risk Management Framework (SP800-37)"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the DoD system certification and accreditation processes."]
[null,null,"Students will be able to define certification and accreditation."]
["Systems Programming"]
[null,"The intent of this KU is to ensure that students are proficient in the development of complex, low level software (e.g., software interacting directly with the hardware platform or within the deepest level of an operating system), typically in the C or assembly programming language."]
[null,"Topics"]
[null,null,"Hardware / software interfaces and interactions"]
[null,null,"Programming to operating systems internal interfaces"]
[null,null,"Low level programming languages (C, Assembly)"]
[null,"Outcomes"]
[null,null,"Students shall be able to implement new functions in an OS kernel"]
[null,null,"Students will be able to develop complex and sophisticated programs, such as a device driver, that can be embedded into an OS kernel."]
[null,null,"Students will be able to write a program that implements a network stack to manage network communications."]
[null,null,"Students will be able to write a functional, stand-alone assembly language program of the complexity of a basic telnet client, with no help from external libraries."]
["Systems Security Engineering"]
[null,"The intent of this KU is to provide students with a thorough understanding of the skills necessary to participate in the development of large scale systems.  Students will understand that techniques, methods, and issues involved across the entire system life-cycle, from requirements identification and analysis, through various levels of design, implementation, testing and operation/maintenance."]
[null,"Topics"]
[null,null,"Design of testing"]
[null,null,"Testing methodologies"]
[null,null,"Emergent Properties"]
[null,null,"Systems Engineering"]
[null,null,"System Integration"]
[null,null,"Make or Buy Analysis"]
[null,null,"Systems Security Analysis"]
[null,null,"Enterprise system components"]
[null,"Outcomes"]
[null,null,"Students will be able to analyze system components and determine how they will interact in a composed system."]
[null,null,"Students will be able to analyze a system design and determine if the design will meet the system security requirements."]
["Virtualization Technologies"]
[null,"The intent of this KU is to provide students with an understanding of how modern host virtualization is implemented, deployed, and used.  Students will understand the interfaces between major components of virtualized systems, and the implications these interfaces have for security."]
[null,"Topics"]
[null,null,"Virtualization Architectures"]
[null,null,"Virtualization techniques for code execution"]
[null,null,"Memory management in virtual environments"]
[null,null,"Networking in virtual environments"]
[null,null,"Storage in virtual environments"]
[null,null,"Scheduling of virtual machines"]
[null,null,"Migration and snapshots"]
[null,null,"Virtual management layers"]
[null,null,"Digital Forensics in virtual environments"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the fundamental concepts of virtualization."]
[null,null,"Students will be able to compare and contrast the different virtualization architectures."]
["Vulnerability Analysis"]
[null,"The intent of this KU is to provide students with a thorough understanding of system vulnerabilities, to include what they are, how they can be found/identified, the different types of vulnerabilities, how to determine the root cause of a vulnerability, and how to mitigate their effect on an operational system."]
[null,"Topics"]
[null,null,"Definition of “vulnerability”"]
[null,null,"Failures of Procedures"]
[null,null,"Taxonomy"]
[null,null,"Buffer overflows, privilege escalation, rootkits"]
[null,null,"trojans/backdoors/viruses"]
[null,null,"Return oriented programming"]
[null,null,"Social Engineering Vulnerabilities"]
[null,null,"Vulnerability characteristics"]
[null,null,"Root causes of vulnerabilities"]
[null,null,"Administrative Privileges and Their Effect on Vulnerabilities"]
[null,null,"Mitigation strategies"]
[null,null,"Tools and Techniques for Identifying Vulnerabilities"]
[null,"Outcomes"]
[null,null,"Students will be able to describe characteristics of malware."]
[null,null,"Students will be able to identify malware."]
[null,null,"Students will be able to apply tools and techniques for identifying vulnerabilities."]
["Wireless Sensor Networks"]
[null,"The intent of this KU is to provide students with a basic understanding of wireless sensor network architectures and the issues associated with them."]
[null,"Topics"]
[null,null,"Managed vs. Ad-hoc"]
[null,null,"Cross Layer Optimization"]
[null,null,"MAC approaches"]
[null,null,"Architectures"]
[null,null,"Routing Protocols"]
[null,null,"Authentication Hash Tables"]
[null,null,"Data Integrity"]
[null,null,"Data Poisoning"]
[null,null,"Resource Starvation"]
[null,null,"Energy Harvesting"]
[null,"Outcomes"]
[null,null,"Students will be able to describe the challenges associated with wireless sensor networks, including coordination, energy efficiency, self organization and security."]

{"sheet":"DBMS-4","index":52,"n_rows":20,"n_cols":6,"rows_kept":20,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[3,1,3,2]]}
["Courses",null,null,"Textbook-761417"," "," "]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Database Management Systems"]
[null,"The intent of this Knowledge Unit is to provide students with the skills to utilize database management system to solve specific problems."]
[null,"Topics"]
[null,null,"Overview of database types (e.g., flat, relational, network, object-oriented) ",16]
[null,null,"SQL (for queries)",16]
[null,null,"Advanced SQL (for DBMS administration – e.g., user creation/deletion, permissions and access controls)"]
[null,null,"Indexing, Inference, Aggregation, Polyinstantiation",16]
[null,null,"How to protect data (confidentiality, integrity and availability in a DBMS context)",16]
[null,null,"Vulnerabilities (e.g., SQL injection)",16]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"List the most common structures for storing data in a database management system"]
[null,null,"Configure a commodity DBMS for secure access"]
[null,null,"Describe alternatives to relational DBMSs and their unique security issues"]
[null,null,"Describe the role of a database, a DBMS, and a database server within a complex system supporting multiple applications"]
[null,null,"Demonstrate basic SQL proficiency for table creation, data insertion and data query"]
[null,null,"Describe DBMS access controls and privilege levels and apply them to a simple database"]
[null,null,"Develop a DB structure for a specific system/problem."]

{"sheet":"KU-Main","index":53,"n_rows":22,"n_cols":5,"rows_kept":22,"cut":false,"hidden":false,"merged":[]}
["CAE Map to \"Elementary Information Security\" Textbook (Jones & Bartlett Learning)"]
["All links below take you to the datasheet for that KU."]
["Core 2Y Knowledge Units",null,"Optional Knowledge Units"]
[null,"Basic Data Analysis","Advanced Cryptography","Hardware Reverse Engineering","Secure Programming Practices"]
[null,"Basic Scripting","Advanced Network Technology and Protocols","Hardware/Firmware Security","Security Program Management"]
[null,"Cyber Defense","Algorithms","IA Architectures","Security Risk Analysis"]
[null,"Cyber Threats","Analog Telecommunications","IA Compliance","Software Assurance"]
[null,"Fundamental Security Design Principles","Cloud Computing","IA Standards","Software Reverse Engineering"]
[null,"Information Assurance Fundamentals","Cybersecurity Planning and Management","Independent/Directed Study/Research","Software Security Analysis"]
[null,"Introduction to Cryptography","Data Administration","Industrial Control Systems","Supply Chain Security"]
[null,"IT System Components","Data Structures","Intro to Theory of Computation","Systems Programming"]
[null,"Networking Concepts","Database Management Systems","Intrusion Detection","Systems Certification and Accreditation"]
[null,"Policy. Legal, Ethics and Compliance","Digital Communications","Life-Cycle Security","Systems Security Engineering"]
[null,"Systems Administration","Digital Forensics","Low Level Programming","Virtualization Technologies"]
[null,null,"Device Forensics","Mobile Technologies","Vulnerability Analysis"]
["Core 4Y Knowledge Units",null,"Host Forensics","Network Security Administration","Wireless Sensor Networks"]
[null,"Database Management Systems","Media Forensics","Operating Systems Hardening"]
[null,"Network Defense","Network Forensics","Operating Systems Theory"]
[null,"Network Technology and Protocols","Embedded Systems","Overview of Cyber Operations"]
[null,"Operating Systems Concepts","Forensic Accounting","Penetration Testing"]
[null,"Probability and Statistics","Formal Methods","QA / Functional Testing"]
[null,"Programming","Fraud Prevention and Management","RF Principles"]

{"sheet":"Net_Def-4","index":54,"n_rows":25,"n_cols":5,"rows_kept":25,"cut":false,"hidden":true,"merged":[[3,1,3,2],[0,0,0,2],[1,0,1,2]]}
["Courses",null,null,"Textbook-761417"," "]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Network Defense"]
[null,"The intent of this Knowledge Unit is to teach students the techniques that can be taken to protect a network and communication assets from cyber threats."]
[null,"Topics"]
[null,null,"Implementing IDS/IPS"]
[null,null,"Implementing Firewalls and VPNs",14]
[null,null,"Defense in Depth","13, 14"]
[null,null,"Honeypots and Honeynets"]
[null,null,"Network Monitoring",4]
[null,null,"Network Traffic Analysis",11]
[null,null,"Minimizing Exposure (Attack Surface and Vectors)","11, 13, 14"]
[null,null,"Network Access Control (internal and external)","11, 12"]
[null,null,"DMZs / Proxy Servers",15]
[null,null,"Network Hardening",11]
[null,null,"Mission Assurance"]
[null,null,"Network Policy Development and Enforcement","13, 15"]
[null,null,"Network Operational Procedures","13, 14"]
[null,null,"Network Attacks (e.g., session hijacking, Man-in-the-Middle)","13, 14"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Describe the various concepts in network defense.","Chapter 13, Review Questions (many); Chapter 13, Exercises E6-E9"]
[null,null,"Apply their knowledge to implement network defense measures.","Lab: Enabling Windows Active Directory and User Access Controls, Lab: Implementing an Information Systems Security Policy, Lab: Using Encryption to Enhance Confidentiality and Integrity"]
[null,null,"Use a network monitoring tools (e.g., WireShark).","Chapter 11, Exercises E5-E7; Lab: Performing Packet Capture and Traffic Analysis "]
[null,null,"Use a network mapping tool (e.g., Nmap).","Chapter 11, Exercise E11; Lab: Performing Reconnaissance and Probing using Common Tools"]

{"sheet":"Net_Tech-4","index":55,"n_rows":18,"n_cols":6,"rows_kept":18,"cut":false,"hidden":true,"merged":[[3,1,3,2],[0,0,0,2],[1,0,1,2]]}
["Courses",null,null,"Textbook-761417"," "," "]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Network Technology and Protocols"]
[null,"The intent of this Knowledge Unit is to provide students with an understanding of the components in a network environment, their roles, and communication methods."]
[null,"Topics"]
[null,null,"Network Architectures",11]
[null,null,"Network Infrastructure","10, 11"]
[null,null,"Network Services","10, 11, 14"]
[null,null,"Network Protocols (TCP/IP – v4 and v6, DNS, HTTP, SSL, TLS)","11, 12, 14"]
[null,null,"Network Address Translation and Sub-netting",11]
[null,null,"Network Analysis/Troubleshooting",11]
[null,null,"Network Evolution (Change Management, BYOD)",13]
[null,null,"Remote and Distributed Management","10, 11"]
[null,"Outcomes"]
[null," Students will be able to:"]
[null,null,"Apply their knowledge of network technologies to design and construct a working network","Chapter 10, Exercises E1, E3"]
[null,null,"Analyze a trace of packets to identify the establishment of a TCP connection","Lab: Performing Packet Capture and Traffic Analysis "]
[null,null,"Demonstrate the use of a network monitor to display packets","Lab: Performing Packet Capture and Traffic Analysis "]

{"sheet":"OS-Conc-4","index":56,"n_rows":18,"n_cols":7,"rows_kept":18,"cut":false,"hidden":true,"merged":[[3,1,3,2],[0,0,0,2],[1,0,1,2]]}
["Courses",null,null,"Textbook-761417"," "," "," "]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Operating Systems Concepts"]
[null,"The intent of this Knowledge Unit is to provide students with an understanding of the roles of an operating system, its basic functions, and the services provided by the operating system."]
[null,"Topics"]
[null,null,"Privileged and non-privileged states","1, 2, 3, 4"]
[null,null,"Processes and Threads (and their management)",2]
[null,null,"Memory (real, virtual, and management)",2]
[null,null,"Files Systems",3]
[null,null,"*Access Controls (Models and Mechanisms)"]
[null,null,"   Access control lists","4, 17"]
[null,null,"Virtualization / Hypervisors"]
[null,null,"How does the an OS protect itself from attack?","2, 3"]
[null,null,"*Fundamental Security Design Principles as applied to an OS"]
[null,null,"   Domain separation, process isolation, resource encapsulation, least privilege","1, 2, 3, 4, 8, 10, 13, 14"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Identify the major concepts in modern operating systems and the basic security issues in OS design and implementation (how the first principles of security apply to operating systems)","Chapter 1, Review Question R17; Chapter 2, Review Question R13; Chapter 2 Exercises E4-E5; Chapter 3 Exercises R2-R5"]

{"sheet":"Prog-4","index":57,"n_rows":15,"n_cols":11,"rows_kept":15,"cut":false,"hidden":true,"merged":[[3,1,3,2],[0,0,0,2],[1,0,1,2],[1,3,1,6]]}
["Courses",null,null,"Textbook-761417"," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Programming"]
[null,"The intent of this Knowledge Unit is to provide students with the skills necessary to implement algorithms using programming languages to solve problems."]
[null,"Topics"]
[null,null,"Programming Language, such as: C","2, 3"]
[null,null,"Programming constructs and concepts variables, strings, assignments, sequential execution, loops, functions",2]
[null,null,"Security issues, such as type checking and parameter validation"]
[null,null,"*Basic Boolean logic/operations"]
[null,null,"   AND / OR / XOR / NOT"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Demonstrate proficiency in the use of a programming language to solve complex problems in a secure and robust manner","Chapter 7, Exercises E13-E16"]
[null,null,"Write simple and compound conditions within a programming language or similar environment (e.g., scripts, macros, SQL)","Chapter 2, Exercises, E2-E3, E8-E11, E13"]
[null,null,"Demonstrate the ability to design and develop basic programs for modern computing platforms (e.g., PC, cloud, mobile, web)"]

{"sheet":"Stats-4","index":58,"n_rows":15,"n_cols":4,"rows_kept":15,"cut":false,"hidden":true,"merged":[[3,1,3,2],[0,0,0,2],[1,0,1,2]]}
["Courses",null,null,"Textbook-761417"]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Probability and Statistics"]
[null,"The intent of this Knowledge Unit is to provide students with the ability to use basic statistics to analyze and attach meaning to datasets."]
[null,"Topics"]
[null,null,"Probability as a concept"]
[null,null,"Random variables/events",6]
[null,null,"Odds of an event happening"]
[null,null,"Data Interpretation"]
[null,null,"Statistical Problem Solving"]
[null,null,"Probability Distributions"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Evaluate probabilities to solve applied problems"]
[null,null,"Describe how basic statistics and statistical methods can be applied in a given situation"]

{"sheet":"Opt-List","index":59,"n_rows":53,"n_cols":1,"rows_kept":53,"cut":false,"hidden":true,"merged":[]}
[]
["Optional Kus"]
["Advanced Cryptography"]
["Advanced Network Technology and Protocols"]
["Algorithms"]
["Analog Telecommunications"]
["Cloud Computing"]
["Cybersecurity Planning and Management"]
["Data Administration"]
["Data Structures"]
["Database Management Systems"]
["Digital Communications"]
["Digital Forensics"]
["Device Forensics"]
["Host Forensics"]
["Media Forensics"]
["Network Forensics"]
["Embedded Systems"]
["Forensic Accounting"]
["Formal Methods"]
["Fraud Prevention and Management"]
["Hardware Reverse Engineering"]
["Hardware/Firmware Security"]
["IA Architectures"]
["IA Compliance"]
["IA Standards"]
["Independent/Directed Study/Research"]
["Industrial Control Systems"]
["Intro to Theory of Computation"]
["Intrusion Detection"]
["Life-Cycle Security"]
["Low Level Programming"]
["Mobile Technologies"]
["Network Security Administration"]
["Operating Systems Hardening"]
["Operating Systems Theory"]
["Overview of Cyber Operations"]
["Penetration Testing"]
["QA / Functional Testing"]
["RF Principles"]
["Secure Programming Practices"]
["Security Program Management"]
["Security Risk Analysis"]
["Software Assurance"]
["Software Reverse Engineering"]
["Software Security Analysis"]
["Supply Chain Security"]
["Systems Programming"]
["Systems Certification and Accreditation"]
["Systems Security Engineering"]
["Virtualization Technologies"]
["Vulnerability Analysis"]
["Wireless Sensor Networks"]

{"sheet":"2Y-List","index":60,"n_rows":13,"n_cols":13,"rows_kept":13,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[1,4,1,8]]}
[null,null,null,null,null," "," "," "," "," "," "," "," "]
["Click here to return to KU Listing",null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Basic Data Analysis"]
["Basic Scripting"]
["Cyber Defense"]
["Cyber Threats"]
["Fundamental Security Design Principles"]
["Information Assurance Fundamentals"]
["Introduction to Cryptography"]
["Information Technology System Components"]
["Networking Concepts"]
["Policy. Legal, Ethics and Compliance"]
["Systems Administration"]

{"sheet":"4Y-List","index":61,"n_rows":8,"n_cols":13,"rows_kept":8,"cut":false,"hidden":true,"merged":[[1,4,1,8],[0,0,0,2],[1,0,1,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
[null,null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Database Management Systems"]
["Network Defense"]
["Network Technology and Protocols"]
["Operating Systems Concepts"]
["Probability and Statistics"]
["Programming"]

{"sheet":"4Y-All","index":62,"n_rows":101,"n_cols":13,"rows_kept":101,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,4,1,8],[89,1,89,2],[1,0,1,2],[3,1,3,2],[21,1,21,2],[44,1,44,2],[60,1,60,2],[76,1,76,2]]}
["Courses",null,null,"ABC-123","DEF-456"," "," "," "," "," "," "," "," "]
[null,null,null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Database Management Systems"]
[null,"The intent of this Knowledge Unit is to provide students with the skills to utilize database management system to solve specific problems."]
[null,"Topics"]
[null,null,"Overview of database types (e.g., flat, relational, network, object-oriented) "]
[null,null,"SQL (for queries)"]
[null,null,"Advanced SQL (for DBMS administration – e.g., user creation/deletion, permissions and access controls)"]
[null,null,"Indexing, Inference, Aggregation, Polyinstantiation"]
[null,null,"How to protect data (confidentiality, integrity and availability in a DBMS context)"]
[null,null,"Vulnerabilities (e.g., SQL injection)"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"List the most common structures for storing data in a database management system"]
[null,null,"Configure a commodity DBMS for secure access"]
[null,null,"Describe alternatives to relational DBMSs and their unique security issues"]
[null,null,"Describe the role of a database, a DBMS, and a database server within a complex system supporting multiple applications"]
[null,null,"Demonstrate basic SQL proficiency for table creation, data insertion and data query"]
[null,null,"Describe DBMS access controls and privilege levels and apply them to a simple database"]
[null,null,"Develop a DB structure for a specific system/problem."]
["Network Defense"]
[null,"The intent of this Knowledge Unit is to teach students the techniques that can be taken to protect a network and communication assets from cyber threats."]
[null,"Topics"]
[null,null,"Implementing IDS/IPS"]
[null,null,"Implementing Firewalls and VPNs"]
[null,null,"Defense in Depth"]
[null,null,"Honeypots and Honeynets"]
[null,null,"Network Monitoring"]
[null,null,"Network Traffic Analysis"]
[null,null,"Minimizing Exposure (Attack Surface and Vectors)"]
[null,null,"Network Access Control (internal and external)"]
[null,null,"DMZs / Proxy Servers"]
[null,null,"Network Hardening"]
[null,null,"Mission Assurance"]
[null,null,"Network Policy Development and Enforcement"]
[null,null,"Network Operational Procedures"]
[null,null,"Network Attacks (e.g., session hijacking, Man-in-the-Middle)"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Describe the various concepts in network defense."]
[null,null,"Apply their knowledge to implement network defense measures."]
[null,null,"Use a network monitoring tools (e.g., WireShark)."]
[null,null,"Use a network mapping tool (e.g., Nmap)."]
["Network Technology and Protocols"]
[null,"The intent of this Knowledge Unit is to provide students with an understanding of the components in a network environment, their roles, and communication methods."]
[null,"Topics"]
[null,null,"Network Architectures"]
[null,null,"Networks Infrastructure"]
[null,null,"Network Services"]
[null,null,"Network Protocols (TCP/IP – v4 and v6, DNS, HTTP, SSL, TLS)"]
[null,null,"Network Address Translation and Sub-netting"]
[null,null,"Network Analysis/Troubleshooting"]
[null,null,"Network Evolution (Change Management, BYOD)"]
[null,null,"Remote and Distributed Management"]
[null,"Outcomes"]
[null," Students will be able to:"]
[null,null,"Apply their knowledge of network technologies to design and construct a working network"]
[null,null,"Analyze a trace of packets to identify the establishment of a TCP connection"]
[null,null,"Demonstrate the use of a network monitor to display packets"]
["Operating Systems Concepts"]
[null,"The intent of this Knowledge Unit is to provide students with an understanding of the roles of an operating system, its basic functions, and the services provided by the operating system."]
[null,"Topics"]
[null,null,"Privileged and non-privileged states"]
[null,null,"Processes and Threads (and their management)"]
[null,null,"Memory (real, virtual, and management)"]
[null,null,"Files Systems"]
[null,null,"*Access Controls (Models and Mechanisms)"]
[null,null,"   Access control lists"]
[null,null,"Virtualization / Hypervisors"]
[null,null,"How does the an OS protect itself from attack?"]
[null,null,"*Fundamental Security Design Principles as applied to an OS"]
[null,null,"   Domain separation, process isolation, resource encapsulation, least privilege"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Identify the major concepts in modern operating systems and the basic security issues in OS design and implementation (how the first principles of security apply to operating systems)"]
["Probability and Statistics"]
[null,"The intent of this Knowledge Unit is to provide students with the ability to use basic statistics to analyze and attach meaning to datasets."]
[null,"Topics"]
[null,null,"Probability as a concept"]
[null,null,"Random variables/events"]
[null,null,"Odds of an event happening"]
[null,null,"Data Interpretation"]
[null,null,"Statistical Problem Solving"]
[null,null,"Probability Distributions"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Evaluate probabilities to solve applied problems"]
[null,null,"Describe how basic statistics and statistical methods can be applied in a given situation"]
["Programming"]
[null,"The intent of this Knowledge Unit is to provide students with the skills necessary to implement algorithms using programming languages to solve problems."]
[null,"Topics"]
[null,null,"Programming Language, such as: C"]
[null,null,"Programming constructs and concepts variables, strings, assignments, sequential execution, loops, functions"]
[null,null,"Security issues, such as type checking and parameter validation"]
[null,null,"*Basic Boolean logic/operations"]
[null,null,"   AND / OR / XOR / NOT"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Demonstrate proficiency in the use of a programming language to solve complex problems in a secure and robust manner"]
[null,null,"Write simple and compound conditions within a programming language or similar environment (e.g., scripts, macros, SQL)"]
[null,null,"Demonstrate the ability to design and develop basic programs for modern computing platforms (e.g., PC, cloud, mobile, web)"]

{"sheet":"BDA-2","index":63,"n_rows":12,"n_cols":4,"rows_kept":12,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[3,1,3,2]]}
["Courses",null,null,"Textbook-761417"]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Basic Data Analysis"]
[null,"Provide students with basic abilities to manipulate data into meaningful information."]
[null,"Topics"]
[null,null,"Summary statistics"]
[null,null,"Graphing/Charts"]
[null,null,"Spreadsheet Functions"]
[null,null,"Problem Solving"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[" "," ","Apply standard statistical inference procedures to draw conclusions from data"]

{"sheet":"Scripting-2","index":64,"n_rows":19,"n_cols":4,"rows_kept":19,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[3,1,3,2]]}
["Courses",null,null,"Textbook-761417"]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Basic Scripting"]
[null,"Provide students with the ability to create simple scripts/programs to automate and perform simple operations. This knowledge should include basic security practices in developing scripts/programs (e.g., bounds checking, input validation)."]
[null,"Topics"]
[null,null,"*Basic Security"]
[null,null,"   Bounds checking, input validation"]
[null,null,"Program Commands"]
[null,null,"Program Control Structures"]
[null,null,"Variable Declaration"]
[null,null,"Debugging"]
[null,null,"Scripting Language (e.g. PERL, Python, BASH, VB Scripting, Powershell)","3, 16"]
[null,null,"*Basic Boolean logic/operations"]
[null,null,"   AND / OR / XOR / NOT",7]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Demonstrate their proficiency in the use of scripting languages to write simple scripts (e.g., to automate system administration tasks)"]
[null,null,"Write simple and compound conditions within a programming language or similar environment (e.g., scripts, macros, SQL)"]
[" "," ","Write simple linear and looping scripts"]

{"sheet":"Cyber-Def-2","index":65,"n_rows":24,"n_cols":4,"rows_kept":24,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[3,1,3,2]]}
["Courses",null,null,"Textbook-761417"]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Cyber Defense"]
[null,"Provide students with a basic awareness of the options available to mitigate threats within a system."]
[null,"Topics"]
[null,null,"Network mapping (enumeration and identification of network components)",11]
[null,null,"*Network security techniques and components"]
[null,null,"   Access controls, flow control, cryptography, firewalls, intrusion detection systems, etc.","2, 4, 6, 7, 8, 9, 12, 13, 14"]
[null,null,"Applications of Cryptography","7, 8, 9, 14"]
[null,null,"Malicious activity detection / forms of attack","1, 2, 3, 4, 6, 12, 15"]
[null,null,"\tAppropriate Countermeasures","2, 3, 4, 6"]
[null,null,"Trust relationships","4, 8, 17"]
[null,null,"*Defense in Depth"]
[null,null,"   Layering of security mechanisms to achieve desired security","1, 13"]
[null,null,"*Patching"]
[null,null,"   OS and Application Updates",3]
[null,null,"Vulnerability Scanning",13]
[null,null,"Vulnerability Windows (0-day to patch availability)",3]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Describe potential system attacks and the actors that might perform them","Chapter 2, Exercise E18; Chapter 3, Review Questions R10-R11, R23; Chapter 3, Exercises E6-E7"]
[null,null,"Describe cyber defense tools, methods and components","Chapter 13, Exercises E6, E8-E9, Chapter 15, Exercises E1-E8; Lab: Eliminating Threats with a Layered Security Approach"]
[null,null,"Apply cyber defense methods to prepare a system to repel attacks","Chapter 3, Exercise E5; Chapter 7, Exercises E13-E16; Lab: Eliminating Threats with a Layered Security Approach"]
[null,null,"Describe appropriate measures to be taken should a system compromise occur","Chapter 1, Exercises E10-E11"]

{"sheet":"Threats-2","index":66,"n_rows":28,"n_cols":4,"rows_kept":28,"cut":false,"hidden":true,"merged":[[3,1,3,2],[0,0,0,2],[1,0,1,2]]}
["Courses",null,null,"Textbook-761417"]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Cyber Threats"]
[null,"Provide students with basic information about the threats that may be present in the cyber realm."]
[null,"Topics"]
[null,null,"Adversaries and targets","1, 17"]
[null,null,"Motivations and Techniques",1]
[null,null,"The Adversary Model (resources, capabilities, intent, motivation, risk aversion, access)"]
[null,null,"*Types of Attacks"]
[null,null,"   Password guessing / cracking",6]
[null,null,"   Backdoors / trojans / viruses / wireless attacks","2, 3, 4, 6"]
[null,null,"   Sniffing / spoofing / session hijacking","6, 15"]
[null,null,"   Denial of service / distributed DOS / BOTs","6, 10, 12"]
[null,null,"   MAC spoofing / web app attacks / 0-day exploits","3, 12"]
[null,null,"   Vulnerabilities that enable them","2, 3, 4, 6, 10, 12, 15"]
[null,null,"Attack Timing (within x minutes of being attached to the net)"]
[null,null,"Social Engineering","6, 13"]
[null,null,"Events that indicate an attack is/has happened","1, 2, 3, 4, 6, 12"]
[null,null,"Legal Issues","5, 13"]
[null,null,"Attack surfaces / vectors","3, 10"]
[null,null,"Attack trees",3]
[null,null,"Insider problem","10, 13"]
[null,null,"Covert Channels",17]
[null,null,"Threat Information Sources (e.g., CERT)","2, 17"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Students will be able to identify the bad actors in cyberspace and compare and contrast their resources, capabilities/techniques, motivations, aversion to risk"]
[null,null,"Students will be able to describe different types of attacks and their characteristics","Chapter 2, Exercises, E18; Chapter 3, Review Questions, R10-R11, R23; Chapter 3, Exercises E6-E7"]

{"sheet":"Funds-2","index":67,"n_rows":21,"n_cols":4,"rows_kept":21,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2]]}
["Courses",null,null,"Textbook-761417"]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Fundamental Security Design Principles"]
[null,null,"Provide students with basic security design fundamentals that help create systems that are worthy of being trusted."]
[null,"Topics"]
[null,null,"Separation (of domains)","1, 2, 3"]
[null,null,"Isolation","2, 3, 4, 15"]
[null,null,"Encapsulation","8, 10, 14"]
[null,null,"Least Privilege","1, 2, 3, 4, 8, 13"]
[null,null,"Simplicity (of design)","2, 5"]
[null,null,"Minimization (of implementation)","3, 5"]
[null,null,"Fail Safe Defaults / Fail Secure",1]
[null,null,"Modularity","5, 13"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"List the first principles of security","Chapter 1, Review Question R12"]
[null,null,"Describe why each principle is important to security and how it enables the development of security mechanisms that can implement desired security policies","Chapter 1, Exercise E7"]
[null,null,"Analyze common security failures and identify specific design principles that have been violated","Chapter 1, Exercises E2, E10-E11"]
[null,null,"Identify the needed design principle when given a specific scenario","Chapter 2, Exercise E15"]
[null,null,"Describe why good human machine interfaces are important to system use","Chapter 2, Review Question R14"]
[null,null,"Understand the interaction between security and system usability and the importance for minimizing the affects of security mechanisms","Chapter 2, Review Question R14; Chapter 2, Exercise E4"]

{"sheet":"IA-Funds-2","index":68,"n_rows":21,"n_cols":4,"rows_kept":21,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[3,1,3,2]]}
["Courses",null,null,"Textbook-761417"]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Information Assurance Fundamentals"]
[null,"Provide students with basic concepts of information assurance fundamentals."]
[null,"Topics"]
[null,null,"Threats and Adversaries",1]
[null,null,"Vulnerabilities and Risks",1]
[null,null,"Basic Risk Assessment","1, 2"]
[null,null,"Security Life-Cycle",1]
[null,null,"Intrusion Detection and Prevention Systems",15]
[null,null,"Cryptography","2, 6, 7, 8, 9, 14"]
[null,null,"Data Security (in transmission, at rest, in processing)","3, 17"]
[null,null,"Security Models","17, AppB"]
[null,null,"Access Control Models (MAC, DAC, RBAC)",17]
[null,null,"Confidentiality, Integrity, Availability, Access, Authentication, Authorization, Non-Repudiation, Privacy","1, 2, 6"]
[null,null,"Security Mechanisms (e.g., Identification/Authentication, Audit)","4, 6"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"List the fundamental concepts of the Information Assurance / Cyber Defense discipline","Chapter 1, Review Question R12"]
[null,null,"Describe how the fundamental concepts of cyber defense can be used to provide system security","Chapter 1, Review Questions R5-R6; Chapter 6, Review Questions R21-R22"]
[null,null,"Examine the architecture of a typical, complex system and identify significant vulnerabilities, risks, and points at which specific security technologies/methods should be employed","Chapter 1, Review Question R8; Chapter 1 Exercise E7; Chapter 6, Exercises E10, E12"]

{"sheet":"Intro_Crypto-2","index":69,"n_rows":24,"n_cols":4,"rows_kept":24,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[3,1,3,2]]}
["Courses",null,null,"Textbook-761417"]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Introduction to Cryptography"]
[null,"Provide students with a basic ability to understand where and how cryptography is used."]
[null,"Topics"]
[null,null,"Symmetric Cryptography (DES, Twofish)",7]
[null,null,"*Public Key Cryptography"]
[null,null,"   Public Key Infrastructure",8]
[null,null,"   Certificates",8]
[null,null,"*Hash Functions (MD4, MD5, SHA-1, SHA-2, SHA-3)"]
[null,null,"   For integrity","6, 8"]
[null,null,"   For protecting authentication data",6]
[null,null,"   Collision resistance",6]
[null,null,"Digital Signatures (Authentication)",8]
[null,null,"Key Management (creation, exchange/distribution)",8]
[null,null,"Cryptographic Modes (and their strengths and weaknesses)",9]
[null,null,"Types of Attacks (brute force, chosen plaintext, known plaintext, differential and linear cryptanalysis, etc.)",8]
[null,null,"Common Cryptographic Protocols",8]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Identify the elements of a cryptographic system","Chapter 8, Review Questions R9-R10"]
[null,null,"Describe the differences between symmetric and asymmetric algorithms","Chapter 7, Review Question R3; Chapter 8, Review Question R8"]
[null,null,"Describe which cryptographic protocols, tools and techniques are appropriate for a given situation","Chapter 8, Exercises E2-E4, E6-E7"]
[null,null,"Describe how crypto can be used, strengths and weaknesses, modes, and issues that have to be addressed in an implementation (e.g., key management), etc","Chapter 8, Exercises E2-E4, E6-E7"]

{"sheet":"IT_Comps-2","index":70,"n_rows":16,"n_cols":4,"rows_kept":16,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[3,1,3,2]]}
["Courses",null,null,"Textbook-761417"]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Information Technology System Components"]
[null,"Provide students with an understanding of the basic components in an information technology system and their roles in system operation."]
[null,"Topics"]
[null,null,"Workstations",1]
[null,null,"Servers",10]
[null,null,"Network Storage Devices",13]
[null,null,"Routers / Switches / Gateways",11]
[null,null,"Guards / CDSes / VPNs / Firewalls","11, 12"]
[null,null,"IDSes, IPSes",15]
[null,null,"Mobile Devices",14]
[null,null,"Peripheral Devices / Security Peripherals",12]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Describe the hardware components of modern computing environments and their individual functions.","Chapter 10, Review Questions R11-R12; Chapter 10, Exercise E3; Chapter 11, Exercises E1, E10"]

{"sheet":"Networking-2","index":71,"n_rows":20,"n_cols":7,"rows_kept":20,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[3,1,3,2]]}
["Courses",null,null,"Textbook-761417"," "," "," "]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Networking Concepts"]
[null,"Provide students with basic understanding of network components and how they interact."]
[null,"Topics"]
[null,null,"Overview of Networking (OSI Model)",10]
[null,null,"Network Media",10]
[null,null,"Network architectures (LANs, WANs)","10, 11"]
[null,null,"Network Devices (Routers, Switches, VPNs, Firewalls)","11, 12"]
[null,null,"Network Services","10, 11, 14"]
[null,null,"Network Protocols (TCP/IP, HTTP, DNS, SMTP, UDP)","11, 12, 14"]
[null,null,"Network Topologies",11]
[null,null,"Overview of Network Security Issues",11]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"Describe the fundamental concepts, technologies, components and issues related to communications and data networks","Chapter 10, Review Questions R2, R5-R10, R10"]
[null,null,"Describe a basic network architecture given a specific need and set of hosts/clients","Chapter 10, Exercises E1, E3"]
[null,null,"Track and identify the packets involved in a simple TCP connection (or a trace of such a connection)","Chapter 12, Exercise E2; Lab: Performing Packet Capture and Traffic Analysis "]
[null,null,"Use a network monitoring tool (e.g., WireShark)","Chapter 11, Exercises E5-E7; Lab: Performing Packet Capture and Traffic Analysis "]
[null,null,"Use a network mapping tool (e.g., Nmap).","Chapter 11, Exercise E11; Lab: Performing Reconnaissance and Probing using Common Tools"]

{"sheet":"Policy-2","index":72,"n_rows":21,"n_cols":5,"rows_kept":21,"cut":false,"hidden":true,"merged":[[0,0,0,2],[3,1,3,2],[1,0,1,2]]}
["Courses",null,null,"Textbook-761417"," "]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Policy. Legal, Ethics and Compliance"]
[null,"Provide students with and understanding of information assurance in context and the rules and guidelines that control them."]
[null,"Topics"]
[null,null,"HIPAA / FERPA",4]
[null,null,"Computer Security Act"]
[null,null,"Sarbanes – Oxley",4]
[null,null,"Gramm – Leach – Bliley",4]
[null,null,"Privacy (COPPA)",5]
[null,null,"Payment Card Industry Data Security Standard (PCI DSS)",4]
[null,null,"State, US and international standards / jurisdictions","4, 5"]
[null,null,"Laws and Authorities","4, 5"]
[null,null,"US Patriot Act"]
[null,null,"Bring Your Own Device (BYOD) issues",1]
[null,null,"Americans with Disabilities Act, Section 508"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"List the applicable laws and policies related to cyber defense and describe the major components of each pertaining to the storage and transmission of data","Chapter 4, Review Question R25"]
[null,null,"Describe their responsibilities related to the handling of information about vulnerabilities","Chapter 5, Review Questions R8-R10; Chapter 5 Exercise E2"]
[null,null,"Describe how the type of legal dispute (civil, criminal, private) affects the evidence used to resolve it","Chapter 5, Review Questions R3, R5, R7"]

{"sheet":"Sys_Admin-2","index":73,"n_rows":25,"n_cols":5,"rows_kept":25,"cut":false,"hidden":true,"merged":[[0,0,0,2],[1,0,1,2],[3,1,3,2]]}
["Courses",null,null,"Textbook-761417"," "]
["Click here to return to KU Listing",null,null,"(Click Here) READ THIS FIRST: This matrix is for the purpose of mapping your curriculum to the NSA/DHS CAE in IA/CD Knowledge Units (KUS).  Recommend that you start by filling in individual course numbers that a specific professor or instructor teaches above (ABC-123 is an example), sending the matrix to him or her and having them fill out the KUs  by inserting a topic/objective/week/session/etc number that relates to their courses, the initial process is streamlined and less cumbersome. The person charged with the final mappings should then merge the documents into a master and use the master to enter this information in the CAE application website.        NOTE: This document may be freely distributed to any institution interested in applying for the NSA/DHS CAE in IA/CD designation. Just delete this text and start filling in the matrix. If you have a better way to do this or a general comment, please email 'askcaeiae@nsa.gov.'  "]
["Systems Administration"]
[null,"Provide students with skill to perform basic operations involved in system administration."]
[null,"Topics"]
[null,null,"OS Installation"]
[null,null,"User accounts management","3, 4"]
[null,null,"Password policies","2, 3, 4, 6"]
[null,null,"Authentications Methods",6]
[null,null,"Command Line Interfaces",2]
[null,null,"Configuration Management",13]
[null,null,"Updates and patches",3]
[null,null,"Access Controls","2, 3, 4"]
[null,null,"Logging and Auditing (for performance and security)","4, 13"]
[null,null,"Managing System Services","2, 5"]
[null,null,"Virtualization"]
[null,null,"Backup and Restoring Data",13]
[null,null,"File System Security",4]
[null,null,"Network Configuration (port security)",15]
[null,null,"Host (Workstation/Server) Intrusion Detection",15]
[null,null,"Security Policy Development","1, 2"]
[null,"Outcomes"]
[null,"Students will be able to:"]
[null,null,"* Apply the knowledge gained to successfully install and securely configure, operate and maintain a commodity OS, to include: setting up user accounts, configuring appropriate authentication policies, configuring audit capabilities, performing back-ups, installing patches and updates, reviewing security logs, and restoring the system from a backup","Lab: Enabling Windows Active Directory and User Access Controls, Lab: Using Group Policy Objects and Microsoft Baseline Security Analyzer for Change Control"]
[null,null,"* Outcomes do not map 100% to the indicated labs"]

{"sheet":"Sheet2","index":74,"n_rows":0,"n_cols":0,"rows_kept":0,"cut":false,"hidden":true,"merged":[]}

{"sheet":"Sheet4","index":75,"n_rows":0,"n_cols":0,"rows_kept":0,"cut":false,"hidden":true,"merged":[]}

{"sheet":"Info","index":76,"n_rows":4,"n_cols":1,"rows_kept":4,"cut":false,"hidden":true,"merged":[]}
["This spreadsheet uses macros to navigate between the Knowledge Unit (KU) listing, and individual KUs. In order to use the navigation feature, you must enable macros."]
["It is a tool for you to use to aid you in creating and submitting your institution’s CAE Application, specifically the KUs. Customize and change it however you wish."]
[]
["Please enable macros and continue, or feel free to use the tool how you wish."]