{"id":543,"date":"2026-10-16T01:12:01","date_gmt":"2026-10-16T01:12:01","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/tristancole\/?page_id=543"},"modified":"2026-10-19T09:23:49","modified_gmt":"2026-10-19T09:23:49","slug":"core-knowledge-section","status":"publish","type":"page","link":"https:\/\/sites.wp.odu.edu\/tristancole\/core-knowledge-section\/","title":{"rendered":"Core Knowledge Section"},"content":{"rendered":"\n<p>CLO2. Implement cryptographic algorithms and steganography techniques in a lab environment to enhance security.&nbsp;<\/p>\n\n\n\n<p>Implementing cryptographic algorithms alongside steganography is fundamentally about layering two different forms of protection to strengthen the security of digital information. Cryptography secures the <em>content<\/em> of a message by transforming it into ciphertext that cannot be understood without the proper key, while steganography secures the <em>existence<\/em> of the message by embedding that encrypted data inside an innocuous-looking medium such as an image, audio file, or text. When combined, these techniques create a dual\u2011defense system: even if someone discovers the hidden data, they still face the barrier of strong encryption, and if they cannot detect the hidden data at all, the encrypted content remains concealed behind ordinary files. This approach is valuable for secure communication, covert data transfer, and digital forensics because it demonstrates how confidentiality and concealment work together to reduce the likelihood of interception, detection, or unauthorized access.<\/p>\n\n\n\n<p>Cryptography and steganography are often paired in situations where both secrecy and concealment are essential, such as covert communication between intelligence agencies, where encrypted messages are hidden inside ordinary images to avoid detection, or in digital forensics, where investigators embed encrypted case notes or identifiers inside media files to prevent tampering while maintaining chain\u2011of\u2011custody integrity. This combination is also used in watermarking systems for copyright protection, where encrypted ownership information is subtly embedded into audio or video files so it cannot be easily removed or forged. In secure corporate environments, sensitive configuration files or credentials may be encrypted and then concealed within benign documents to reduce the risk of insider threats or automated scanning tools detecting them. Even everyday applications like secure messaging apps rely on similar principles, encrypting content and sometimes disguising metadata to make communication patterns harder to analyze. Together, these techniques provide a powerful dual layer of protection that shields both the meaning and the presence of sensitive information.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"490\" src=\"https:\/\/sites.wp.odu.edu\/tristancole\/wp-content\/uploads\/sites\/36891\/2026\/10\/image.png\" alt=\"\" class=\"wp-image-563\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>CLO3. Apply defense strategies to enhance protection for mobile devices and networks to mitigate security risks effectively.<br><\/p>\n\n\n\n<p>When I think about applying defense strategies for mobile devices and networks, I picture it as building a personal shield around everything I use daily. I\u2019d start with strong authentication, like biometrics and multifactor verification so that only I can unlock my phone or access sensitive apps. I\u2019d make sure my data stays encrypted, whether it\u2019s stored locally or sent across Wi Fi or cellular networks, and I\u2019d use a VPN when connecting to public hotspots to keep my traffic private. Keeping my device updated and using mobile security tools helps catch threats before they spread, while network segmentation and intrusion detection systems protect the broader environment I connect to. I\u2019d also stay alert to phishing attempts and suspicious links, since awareness is just as important as technology. Altogether, these habits and tools make my mobile world feel safer and more resilient against the constant stream of security risks.<br>When I think about protecting my own mobile devices and the networks I connect to, I imagine practical situations. For example, using multifactor authentication on my phone and apps means that even if someone steals my password, they still can\u2019t get into my accounts without my fingerprint or a one time code. Enabling full device encryption ensures that if I ever lose my phone, all my personal data remains unreadable to anyone who finds it.<br>On public Wi Fi, a VPN becomes essential because it shields my browsing activity from anyone trying to snoop on the network. At work, mobile device management (MDM) tools help enforce security policies, like blocking risky apps or requiring strong passwords, which keeps both my device and the company network safer. Features like remote wipe give me peace of mind knowing I can erase everything if my phone is stolen.<br>On the network side, things like intrusion detection systems (IDS) and network segmentation help catch suspicious behavior early and prevent attackers from moving freely across systems. Together, these strategies form a layered defense that protects me from the constant stream of threats targeting mobile devices and the networks they rely on.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"754\" height=\"782\" src=\"https:\/\/sites.wp.odu.edu\/tristancole\/wp-content\/uploads\/sites\/36891\/2026\/10\/image-1.png\" alt=\"\" class=\"wp-image-565\" \/><\/figure>\n\n\n\n<p>This is a code snippet I found of TLS certificate pinning in an Adroid app using OKHttp to prevent man-in-the-middle. The app will reject connections that do not match the pinned certificate.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>CLO5. Implement integrated security solutions in a simulated environment to enhance incident response plans, mitigate risks, and address cloud-based security scenarios effectively.<\/p>\n\n\n\n<p>Implementing integrated security solutions in a simulated environment means bringing multiple defensive tools together like SIEM platforms, endpoint protection, identity management, and cloud\u2011native security services and using them as a coordinated system. In this kind of setup, you can trigger incidents, watch how alerts flow through the environment, and refine your response procedures based on what you observe. It also involves identifying risks such as misconfigured cloud resources, insecure APIs, or excessive permissions, then applying layered controls like zero\u2011trust access, encryption, logging pipelines, and automated policy enforcement to reduce those risks. Overall, the goal is to design and test a unified security strategy that strengthens detection, response, and resilience across both on\u2011premises and cloud systems.<\/p>\n\n\n\n<p>When I picture implementing integrated security solutions in a simulated environment, I think about building a space where I can safely break things, fix them, and see how all the tools work together when something goes wrong. I might spin up a small lab with a SIEM, an endpoint protection agent, and a cloud dashboard, then trigger a fake malware alert just to watch how the logs move, how the alerts fire, and how my response plan actually plays out in real time. Even simulating a phishing attempt helps me understand how email filtering, MFA, and device isolation work as a unified defense. These experiences make incident responses feel less hypothetical and more like something I\u2019ve actually practiced, giving me confidence that I can spot risks early and respond effectively when things get messy.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>CLO2. Implement cryptographic algorithms and steganography techniques in a lab environment to enhance security.&nbsp; Implementing cryptographic algorithms alongside steganography is fundamentally about layering two different forms of protection to strengthen the security of digital information. Cryptography secures the content of a message by transforming it into ciphertext that cannot be understood without the proper key,&#8230; <\/p>\n<div class=\"link-more\"><a href=\"https:\/\/sites.wp.odu.edu\/tristancole\/core-knowledge-section\/\">Read More<\/a><\/div>\n","protected":false},"author":29586,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/tristancole\/wp-json\/wp\/v2\/pages\/543"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/tristancole\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/tristancole\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/tristancole\/wp-json\/wp\/v2\/users\/29586"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/tristancole\/wp-json\/wp\/v2\/comments?post=543"}],"version-history":[{"count":5,"href":"https:\/\/sites.wp.odu.edu\/tristancole\/wp-json\/wp\/v2\/pages\/543\/revisions"}],"predecessor-version":[{"id":568,"href":"https:\/\/sites.wp.odu.edu\/tristancole\/wp-json\/wp\/v2\/pages\/543\/revisions\/568"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/tristancole\/wp-json\/wp\/v2\/media?parent=543"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}