CYSE 300: Introduction to Cybersecurity
Introduction
Throughout CYSE 300, I learned more about the basics of cybersecurity and the different ways computers, networks, and information can be protected. This course helped me build a better understanding of topics like cyber threats, vulnerabilities, network security, encryption, access controls, and risk management. It also showed me that cybersecurity involves more than just fixing problems after they happen. Organizations need to understand their risks, protect important information, and have plans in place in case something goes wrong.
A big part of this course was applying what I learned through hands-on cybersecurity labs and a research paper. These assignments gave me opportunities to work with security tools, examine vulnerabilities, and learn how different security measures protect systems. They also helped me understand how technical security concepts are used in real-world situations. Since I am interested in cybersecurity, cyber law, and digital forensics, this course gave me a stronger foundation to build on as I continue working toward my degree and future career.
Artifact 1: Reconnaissance and Vulnerability Assessment Labs
One of the assignments that helped me develop my cybersecurity knowledge was the work involving reconnaissance, probing, and vulnerability assessments. These activities focused on identifying systems, examining potential weaknesses, and understanding how security tools can be used to find possible risks.
Through these labs, I learned why it is important to understand what systems an organization has and where weaknesses might exist. Reconnaissance can help identify information about a target system, while a vulnerability assessment can help determine which security issues need attention. This showed me that identifying problems early can help organizations take action before those weaknesses are used in an attack.
These assignments connect to the course objectives involving identifying information assets and prioritizing threats. They also helped me understand how cybersecurity professionals use technical tools to gather information and assess risks. In a future cybersecurity position, I could use this knowledge to help identify vulnerabilities and support efforts to make systems more secure.
Artifact 2: Windows Active Directory and Access Controls
Another important part of this course involved enabling Windows Active Directory and working with user access controls. This helped me understand how organizations manage user accounts, permissions, and access to resources on a network.
Access controls are important because not every employee should have access to every system or file. Organizations need to make sure users have the permissions they need to do their jobs without giving them unnecessary access to sensitive information. Learning about Active Directory helped me better understand how user accounts and permissions can be managed in a more organized way.
This lab connects to the course objectives involving information security strategies and protecting information assets. It also helped me understand the importance of limiting access and managing accounts properly. In the future, I could apply this knowledge when helping manage user accounts, reviewing permissions, or supporting an organization’s access control policies.
Artifact 3: Group Policy and Security Configuration
My work with Group Policy Objects and Microsoft Baseline Security Analyzer helped me understand how organizations can manage security settings and maintain more consistent configurations across their systems. These tools and concepts showed me how security settings can be applied and reviewed instead of relying on every computer to be configured separately.
This assignment helped me understand why change control and consistent security configurations matter. If systems are not configured properly, they may have unnecessary services, weak settings, or other weaknesses that increase the risk of an attack. Reviewing security settings can help organizations identify issues and make improvements.
This artifact connects to the course objectives involving security architecture, risk management, and protecting information assets. It also helped me see how organizations can use established security practices to reduce risk. These skills could be useful in a future role involving system administration, security configuration, or compliance.
Artifact 4: Packet Capture and Network Traffic Analysis
Another assignment that helped me understand cybersecurity was working with packet capture and network traffic analysis. This involved learning how information moves across a network and how network traffic can be examined to better understand communication between systems.
This lab helped me see that network activity can provide useful information when investigating possible security problems. Examining traffic can help security professionals understand what systems are communicating and identify activity that may need further investigation. It also showed me why understanding normal network behavior is important when trying to recognize something unusual.
This artifact connects to the course objectives involving identifying threats and responding to potential intruders. It helped me build a stronger understanding of network security and how technical evidence can support an investigation. In a future cybersecurity or digital forensics position, I could use these concepts to help investigate suspicious activity and understand what may have happened during a security incident.
Artifact 5: Encryption and Information Assurance
My work involving encryption helped me understand how sensitive information can be protected from unauthorized access and how cryptographic techniques support information security. Encryption is especially important when organizations store or transmit confidential information that should not be available to everyone.
This assignment helped me understand the importance of confidentiality and integrity. Confidentiality helps prevent unauthorized people from accessing information, while integrity helps ensure that information has not been improperly changed. These security goals are important for organizations that handle personal information, business records, or other sensitive data.
This artifact connects to the course objectives involving information security strategies and protecting information assets. It also helped me understand why encryption is an important part of a larger security plan rather than something that should be used on its own. In my future career, I could apply this knowledge when evaluating ways to protect sensitive data and understanding how different security controls work together.
Artifact 6: Business Continuity and Disaster Recovery
The business continuity lab helped me understand why organizations need plans for responding to disruptions and recovering important information after an incident. Cyberattacks, system failures, and other unexpected events can prevent an organization from accessing its systems or carrying out normal operations.
This assignment showed me that security is not only about preventing attacks. Organizations also need to think about what they will do if their protections fail. Backups, recovery procedures, and plans for restoring important systems can help reduce downtime and prevent the loss of valuable information.
This artifact connects directly to the course objective involving disaster recovery and the recovery of information assets after an incident. It also helped me understand the relationship between cybersecurity and business continuity. In a future position, I could use this knowledge to help organizations prepare for incidents, protect important data, and recover more effectively when something goes wrong.
Artifact 7: Website and Database Security Lab
The website and database security lab helped me understand how vulnerabilities in web applications and databases can create opportunities for attackers. Websites often interact with databases to store or retrieve information, so weaknesses in either part of the system can put sensitive data at risk.
Working through this topic helped me understand why secure coding, proper input validation, and regular vulnerability testing are important. It also showed me how a weakness in one part of a system can affect the security of the entire application.
This artifact connects to the course objectives involving threats, vulnerabilities, and information security strategies. It helped me see how attackers may take advantage of weaknesses and why organizations need to identify and address those issues. In the future, I could use this knowledge to better understand vulnerability reports, recognize common web security risks, and help support efforts to secure applications.
Artifact 8: Research Paper
My research paper was another important part of this course because it gave me an opportunity to look more closely at a cybersecurity topic and explain what I learned through research. Research assignments help connect technical concepts to real-world security problems and provide a better understanding of why certain security practices are necessary.
Working on the paper helped me practice gathering information, understanding different perspectives, and organizing my findings into a clear explanation. It also reinforced the importance of using reliable information when learning about cybersecurity. Since threats and security practices continue to change, being able to research unfamiliar topics is an important skill for anyone working in this field.
This artifact connects to the course objectives involving security strategies, risk management, and understanding the implications of cybersecurity issues. It also demonstrates my ability to communicate information about cybersecurity in a structured way. I can use this skill in the future when researching threats, reviewing security recommendations, or explaining technical issues to other people.
What I Learned from CYSE 300
Overall, CYSE 300 helped me build a stronger foundation in cybersecurity and understand how different security concepts work together. The labs gave me opportunities to learn about reconnaissance, vulnerabilities, access controls, network traffic, encryption, and disaster recovery. Each activity showed me a different part of protecting information and keeping systems secure.
One of the biggest things I learned is that no single security measure can protect an organization from every threat. Organizations need to understand their information assets, identify possible risks, apply appropriate security controls, and prepare for incidents. For example, access controls can help prevent unauthorized access, encryption can protect sensitive information, and backups can help an organization recover after an incident. These measures work best when they are part of a larger security strategy.
The course also helped me understand the importance of planning ahead. Identifying vulnerabilities and managing risks before an incident happens can help prevent problems from becoming more serious. At the same time, organizations need to be prepared to respond and recover if an attack or system failure does occur.
Applying What I Learned in the Future
As I continue working toward a career in cybersecurity, I can use what I learned in CYSE 300 as a foundation for more advanced technical work. I am interested in government cybersecurity opportunities, remote positions, and potentially working in areas related to cyber law and digital forensics. These fields require an understanding of how systems work, how information is protected, and how security incidents can be investigated.
The skills I developed through this course could help me identify vulnerabilities, understand network activity, evaluate security controls, and recognize the importance of protecting sensitive information. The work involving access controls and security configurations also gave me a better understanding of how organizations manage their systems and reduce unnecessary risks.
I know that I still have more to learn, especially when it comes to gaining real-world experience and earning certifications. However, this course gave me a starting point that I can continue building on. As technology changes and new threats develop, I want to keep improving my technical knowledge and learning how to apply cybersecurity concepts in practical situations. My goal is to take what I have learned at ODU and use it to become a stronger and more knowledgeable cybersecurity professional.