Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Computer and Network Security

engineering.purdue.edu

Post reply on HN
Print view View original

11–17 of 17 posts

Re: Computer and Network Security

#11

Post by beardedwizard »

ZeroSolstice wrote: post #9
waihtis wrote: post #2

Nice and hands on but feels very early 2000's. Nothing about cloud, AD, limited discourse about vulnerabilities which dominate (at least) the enterprise security space. Given how frequently the cybersecurity shortage is talked about one would think some higher education facilities would adopt a more modern position.

Can you elaborate on what you would add for the cloud, AD, or vulnerability content? In my perspective what you listed are simply tools and vendor offerings of which reading the documentation or getting a vendor specific certification is the expected process. This course teaches the foundations on which the items you listed were built from. The reason you probably feel that its so dated is because security hasn't cha…

here is a simple example: DDoS is handled on almost every app platform a developer can deploy on, but misconfigured cloud resources (#5 in the newest OWASP top 10) is not described here at all. In fact, the cloud primitives of compute, storage and workloads are not described and instead classic 2000's network security is covered.

Re: Computer and Network Security

#12

Post by vvvvvvvvvvvv »

waihtis wrote: post #2

Nice and hands on but feels very early 2000's. Nothing about cloud, AD, limited discourse about vulnerabilities which dominate (at least) the enterprise security space. Given how frequently the cybersecurity shortage is talked about one would think some higher education facilities would adopt a more modern position.

I haven't found a good modern security guide, it's either incomplete blogspam or dusty tomes like this one. It's not bad but I need recent practical advice, stuff like how to securely set up postgres and a reverse proxy, and not the bare example, something actually realistic, all I get are more firewall advice :(

Re: Computer and Network Security

#14

Post by ZeroSolstice »

beardedwizard wrote: post #11
ZeroSolstice wrote: post #9

Earlier quoted context omitted.

Can you elaborate on what you would add for the cloud, AD, or vulnerability content? In my perspective what you listed are simply tools and vendor offerings of which reading the documentation or getting a vendor specific certification is the expected process. This course teaches the foundations on which the items you listed were built from. The reason you probably feel that its so dated is because security hasn't cha…

here is a simple example: DDoS is handled on almost every app platform a developer can deploy on, but misconfigured cloud resources (#5 in the newest OWASP top 10) is not described here at all. In fact, the cloud primitives of compute, storage and workloads are not described and instead classic 2000's network security is covered.

The lectures aren't a how-to guide. The items that are explained are to provide reference to the lecture material. For example the apache2 setup could just as easily be nginx, lighttpd on Windows, FreeBSD, Redhat, etc. Its explaining the concept of a DDoS, malware, viruses, spam, cryptography. Cloud primitives? how would that relate to computer and network security instead of being covered in an operating systems course? They are just abstractions of physical hardware properties and would be specific to the implementation you were working on, ie AWS, GCP, Azure, etc. Any specific implementation or security is completely dependent on what the vendor implements and is ephemeral.

The OWASP top 10 is self described as an awareness document[1] it wouldn't be something you teach a college course on.

[1] https://owasp.org/Top10/A00_2021_How_to_use_the_OWASP_Top_10...

Re: Computer and Network Security

#15

Post by say_it_as_it_is »

ZeroSolstice wrote: post #13
say_it_as_it_is wrote: post #4

Is this just lecture notes, homework questions, and no lecture videos?

Says its lecture notes right at the top. > "Think of these lecture notes as a living textbook that strives to strike a..." Why would you need to watch a video on lecture notes?

Because lecture notes on these subjects without the accompanied lectures are an awful way to learn the material. This web site offers little value.

Re: Computer and Network Security

#17

Post by ZeroSolstice »

say_it_as_it_is wrote: post #15
ZeroSolstice wrote: post #13

Earlier quoted context omitted.

Says its lecture notes right at the top. > "Think of these lecture notes as a living textbook that strives to strike a..." Why would you need to watch a video on lecture notes?

Because lecture notes on these subjects without the accompanied lectures are an awful way to learn the material. This web site offers little value.

Well two things:

1. Maybe you aren't the intended audience for this.

2. They are lecture notes and homework which are typically distilled from a textbook or industry experience topic.

These are helpful items for someone teaching or speaking to these topics, you aren't supposed to directly learn from the notes. Its the equivalent of saying you could learn c++ from a power point presentation.

Post reply on HN