Cyber_Curriculum_PWS_Appendix_4_POI_Phase_1.pdf

Pen & Ink C3, 4 Jan 18, mde

Pen & Ink C4, 5 Jan 18, mde

SUPPORT MATERIALS AND GUIDANCE (continued)

POI NUMBER

E3OQR17D1 001A

BLOCK

I

UNIT

DATE

28 Sep 2016

PAGE NO.

all Air Force students. Throughout the course instructors will weave in information about core values using active learning techniques. These techniques are identified as modeling, one-way stories, guided discussions, two-way stories, simulations, lived experiences, and case studies. Instructors will use their discretion as to the technique to be used and optimum times to inject the core value information. Describe the AF Core Values and why we should follow them throughout the course. Instructors will present the basic levels of AF doctrine as well as the Principles of War. Optional Guest Speakers at their convenience: wing commander and squadron commander’s welcome and squadron commander’s expectations brief.

Pen & Ink C4, 5 Jan 18, mde According to the Joint Travel Regulation, if your TDY is between 31-180 days at a single location, a flat-rate of 75% of the per diem allowance is payable for each full day. If your TDY is 181 days or more at a single location, a flat-rate of 55% of the per diem allowance is payable for each full day. There are some exceptions, so please check with your home unit if you have questions.

E3OQR17D1 001A

BLOCK

I

UNIT

DATE

28 Sep 2016

PAGE NO.

PLAN OF INSTRUCTION/LESSON PART I

NAME OF INSTRUCTOR

COURSE TITLE

Undergraduate Cyberspace Training (phase 1)

BLOCK TITLE

Introduction to Cyberspace Operations

COURSE CONTENT TIME

2. Cyber Career Forces

a. Restate officer, enlisted, and civilian career paths, the importance of training in professional development, and contractor contributions to cyber forces. Task(s): 1.2.1.1, 1.2.1.2, 1.2.1.3, 1.2.1.4, 1.2.1.5, 1.2.1.6 MEAS: W

(5)

(1) Career Paths

(2) Officer

(3) Enlisted

(4) Civilians

(5) Contractors

(6) Training

b. Restate cyber organizations and their corresponding missions. Task(s): 1.2.2.1, 1.2.2.2, 1.2.2.3, 1.2.3.6 MEAS: W

(4)

(1) Air Force

(2) DoD/Joint Forces

(3) Combined Forces

(4) Command and Control Relationships

SUPERVISOR APPROVAL OF LESSON PLAN

SIGNATURE AND DATE SIGNATURE AND DATE

20180103

SUPPORT MATERIALS AND GUIDANCE

BLOCK

I

UNIT

DATE

28 Sep 2016

Student Instructional Materials

ST E3OQR17D1 001A - Introduction to Cyber Operations

FOREIGN DISCLOSURE: The information in this TRAINING UNIT is not restricted and may be disclosed to international students. Refer to the foreign disclosure section of the Course Training Plan for further information.

Audiovisual Aids

Warrior Ethos Vignettes

Slide Presentation (Optional)

Training Methods

Lecture (9 hrs)

Instructional Guidance

Brief Warrior Ethos daily.

2(a)

Reminder: Integrate job-oriented safety (See applicable Air Force Occupational Safety and Health (AFOSH), standards), environmental issues (including pollution prevention awareness), energy conservation

(correct/incorrect applications of energy conservation in the workplace and on the job and principles applicable to AFSC specific job tasks and responsibilities), publications awareness (emphasize compliance with instructions is mandatory), Risk Management (weave principles throughout the core curriculum, where appropriate). Instructors will weave core values information into the curriculum. Throughout the course, instructors will weave in information about basic doctrine, using AFDD 1, Air Force Basic Doctrine, Organization, and Command. Use active learning techniques called modeling, including one-way stories, guided discussions, two-way stories, simulations, personal experiences, and case studies. Instructor discretion determines which technique to use and when it will be presented.

Integrate the Air Force technical data system and other publications applicable to an AFSC throughout the course.

Explain the responsibilities and qualifications of cyberspace officer, enlisted, civilian and contractor personnel.

Officer: Describe AFSCs as they relate to the officer cyber career fields.

Enlisted: Describe AFSCs as they relate to the enlisted cyber career fields.

Civilian: Explain the role of the civil servant civilian in Air Force cyber missions and organizations.

Contractor: Explain how military contractor personnel support Air Force cyber missions and the differences between civil servant civilian and contractor roles.

Career paths: Describe how the cyber career force structure affects the career path of other AFSCs in the career force.

Training: Explain the training processing in the career force structure

2(b) Explain the Air Force, DoD and Combined Organizations and Missions.

BLOCK

I

UNIT

DATE

28 Sep 2016

Current State of AFNETOPS Structure: Describe current AF cyber organizations, locations, and corresponding

MAJCOMs. Explain the AF-wide global organizational chart and explain the different hierarchical levels.

Describe the role of cyber organizations in the Expeditionary Air Force construct, and what mission cyber officers can expect to perform while deployed. Describe the individual missions of each organization.

DoD/Joint Cyber Organizations and Missions: Explain DOD and Joint Cyber organizations, locations, and chains of command. Explain how these organizations perform as a joint team and what products/services they provide to the global cyber mission.

Describe command elements who lead these organizations and their reporting structure. Describe how cyber officers may be called upon throughout their careers to serve in a joint or DOD environment.

Combined Government and Civilian Organizations: Describe Combined Cyber organizations, locations, and missions. Provide examples of past coalition and allied operations involving cyber missions. Describe how cyber operations are used in a coalition environment during wartime, and provide examples of how allies benefit from cyber training from other countries.

Application

Knowledge

Evaluation

Measurement deferred until end of block.

BLOCK

I

UNIT

DATE

28 Sep 2016

BLOCK

I

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Introduction to Cyberspace Operations

3. Military Networks

a. Specify Department of Defense (DoD) cyber operations. Task(s): 1.2.3.1, 1.2.3.2, 1.2.3.3, 1.2.3.4, 1.2.3.5 MEAS: W

(1) Concepts

(2) Doctrine, Policy, and Guidance

(3) Cyberspace

(4) Global Information Grid (GIG)

(5) National Strategy

b. Restate Department of Defense (DoD) and Air Force information technology systems.

Task(s): 1.2.5.1, 1.2.5.2, 1.2.5.3, 1.2.5.4, 1.2.5.5, 1.2.5.6, 1.2.5.7, 1.2.5.8 MEAS: W

(1) Air Force Information Network (AFNet) Architecture

(2) Enterprise Service Centers (ESCs)

(3) Joint Information Environment (JIE)

(4) Supported Enterprise Missions

(5) Core Enterprise Services

(6) Standardization and Evaluation in the Domain

(7) Mission Platforms in the Domain

(8) Operations Maintenance Management

BLOCK

I

UNIT

DATE

28 Sep 2016 international students. Refer to the foreign disclosure section of the Course Training Plan for further

Lecture (8 hrs)

3(a) Reminder: Integrate job-oriented safety (See applicable Air Force Occupational Safety and Health

(AFOSH), standards), environmental issues (including pollution prevention awareness), energy conservation

(correct/incorrect applications of energy conservation in the workplace and on the job and principles applicable to AFSC specific job tasks and responsibilities), publications awareness (emphasize compliance with instructions is mandatory), Risk Management (weave principles throughout the core curriculum, where appropriate). Instructors will weave core values information into the curriculum. Throughout the course, instructors will weave in information about basic doctrine, using AFDD 1, Air Force Basic Doctrine, Organization, and Command. Use active learning techniques called modeling, including one-way stories, guided discussions, two-way stories, simulations, personal experiences, and case studies. Instructor discretion

Integrate the Air Force technical data system and other publications applicable to an AFSC throughout the

Explain cyberspace concepts, characteristics, objectives, policies, and doctrine.

Definitions: Explain definitions of cyberspace.

Characteristics: Explain cyberspace concepts, characteristics, objectives, policies, and doctrine.

Describe cyberspace as a domain and its characteristics using air, space, and seas as a parallel.

Concepts: Discuss the concepts of cyberspace including cyber superiority, counter-cyber, cyber control, cross-domain operations and operational considerations. Describe the strategic objectives of cyberspace.

Doctrine, Policy, and Guidance: Introduce sources of doctrine and policy that govern cyberspace actions for the

Joint Force and Air Force

BLOCK

I

UNIT

DATE

28 Sep 2016

3(b)

- Describe the Air Force Network Operation process and TCNOs, NOTAMs, and AF and joint guidance to conduct AFNETOPS. Describe the AFNET Standard Operating Procedures process.

Time Compliance Network Orders (TCNOs): Describe how TCNOs are issued to direct the immediate patching of information systems to mitigate or eliminate exploitation vulnerabilities. These orders have a significant implication if not accomplished in a timely manner.

C4 Notice to Airmen (NOTAM): Explain how Command, Control, Communications, and Computers Notices to

Airmen (C4 NOTAMs) disseminate information that does not direct specific action to be taken or compliance to be tracked

- Air Force Networks (AFNet): Explain the various networks that a 17D may encounter within the DoD and joint cyber world. Explain what each network is and the differing characteristics between each military service’s network components.

Air Force Network Operations (AFNetOps): Discuss the AFPD 13-3, AFNetOps and DODIN responsibilities.

Core Services: Describe enterprise network core services including email, Nonsecure Internet Protocol Router

Network (NIPRNet), Secret Internet Protocol Router Network (SIPRNet), Radio over Internet Protocol Routed

Network (RIPRNet), Joint Worldwide Intelligence Communications System (JWICS), Defense Switched

Network (DSN), Defense Red Switched Network (DRSN), Air Traffic Control and Landing Systems

(ATCALS), and cellular/Blackberry services.

Explain what each core service is, what their uses are, and the primary users.

Explain plans and programs within enterprise networks including project management and processes, as well as roles and organizations involved in program and project management.

Explain Project Workflow Requirements Resource (PWRR), Base Civil Engineer Work Request (AF 332), Project Support Agreement (PSA), Systems Telecommunications Engineering Manager (STEM) functions, and the budget process.

Supported Missions: Explain the Federal Desktop Core Configuration (FDCC) program, the Common Access

Card (CAC), the Federal Information Security Management Act (FISMA), Net-centric and Enterprise Services

(NCES), and Global Command and Control System (GCCS). Explain what a supported mission is along with a few examples including; Video Teleconferencing (VTC), Giant Voice, Medical Systems, SharePoint, and

Automated Message Handling System (AMHS).

Land WarNet: Discuss TRADOC Pamphlet 525-5-600, The US Army Concept of Operation for Land WarNet

2015 and DODIN responsibilities.

Navy Marine Corps Intranet (NMCI): Explain the Navy Marine Corps Intranet outsource program and DODIN responsibilities.

Defense Information System Network (DISN): Review the many elements that make up the DoD enterprise network system of the DISN.

BLOCK

I

UNIT

DATE

28 Sep 2016

Defense Enterprise Computing Centers (DECC): Discuss the Office of the Secretary of Defense (OSD) through

DISA has pushed the services to centralize data processing and storage into central computing centers under

DECC.

BLOCK

I

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Introduction to Cyberspace Operations

4. Cyber Technologies

a. Restate transmission systems and their use within the cyber domain. Task(s): 1.2.4.1, 1.2.4.2, 1.2.4.3, 1.2.4.4, 1.2.4.5, 1.2.4.6 MEAS: W

(1) Concepts

(2) Structure

(3) Signal Characteristics

(4) Spectrum

(5) Mediums

(6) Multiplexing

b. Restate cyber related technologies and their impact on military operations. Task(s): 1.5.9.1, 1.5.9.2, 1.5.9.3, 1.5.9.4, 1.5.9.5, 1.5.9.6, 1.5.9.7, 1.5.9.8, 1.5.9.9, 1.5.9.10 MEAS: W

(1) Internet Protocol

(2) Radio Systems

(3) Voice Systems

(4) Industrial Systems

(5) Space Systems

(6) Air Defense Systems

(7) Airborne Network Systems

(8) Command & Control Network Systems

(9) Data Mining & Analytics

(10) GIS

c. Restate the Department of Defense (DoD) Certification and Accreditation (C&A) process.

Task(s): 1.2.6.1, 1.2.6.2, 1.2.6.3, 1.2.6.4 MEAS: W

(1)

(1) DOD Certification and Accreditation

(2) Policies and procedures

(3) Authority to Operate (ATO) and Authority to Connect (ATC) Decisions

(4) Enterprise Mission Assurance Support Service (eMASS)

COURSE CONTENT (continued)

BLOCK

I

UNIT

DATE

28 Sep 2016

d. Correlate mission assurance and its impact on military operations. Task(s): 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.6.10, 1.6.11, 1.6.12, 1.6.13, 1.6.14, 1.6.15 MEAS: W

(9)

(1) Information Operations (IO)

(2) Information Security

(3) Operations Security

(4) Physical Security

(5) Enterprise Information Management (EIM)

(6) Certification and Accreditation

(7) Maintenance Management

(8) Security Tools and Countermeasures

(9) Roles and Responsibilities

(10) Emissions Security

(11) Communications Security

(12) Computer Security

(13) CIA Triad

(14) Disposal and Destruction

(15) Environmental Controls

BLOCK

I

UNIT

DATE

28 Sep 2016 international students. Refer to the foreign disclosure section of the Course Training Plan for further

Lecture (18 hrs)

4(a)

Transmission Concepts: Describe the characteristics of radio frequency signals as they pertain to the medium in which they travel. Explain long haul transmission systems concepts and structure. Describe the methods of transmitting communications signals over long distances and globally, and the various components of those systems.

Structure: Explain signal characteristics involved in a basic signal then move into a variety of characteristics which are used to define and describe a signal. This includes the concepts of analog, digital, strength, frequency, and other properties of signals.

Signal Characteristics: Introduce the concept of a data signal. Describe ways signals may be encoded as well as degraded and methods to mitigate.

Multiplexing: Explain the basic concepts of how multiplexing signals occurs. Describe how multiplexing combines multiple analog message signals or digital data streams into one signal over a shared medium.

Spectrum Concepts: Describe electromagnetic radiation and waves. Describe some of the radiation hazards.

Spectrum Management Regulation and Roles: Explain spectrum management and the frequency management roles. Describe the importance and goals of managing the frequency.

Frequency Medium: Explain spectrum operation and that lower frequencies are easier to intercept and jam, and can travel through objects more readily. Explain higher frequencies have less noise and fewer effects from EMI, and require smaller antennas.

Radio Frequency Ranges: Explain the portions of the spectrum to include the ranges.

4(b)

Voice Systems: Explain the commercial voice network systems.

BLOCK

I

UNIT

DATE

28 Sep 2016

Radio Systems: Describe commercial networked radio systems.

Internet Protocol: Explain commercial internet protocol systems.

Emerging Commercial Technologies: Describe the new Voice-over-Internet protocol (VoIP) systems, industrial control systems, etc.

Space Systems: Explain Space Systems.

Radar: Explain various Radar systems.

Airborne Network Systems: Describe the networked Airborne Network Systems.

Air Defense Systems: Describe the networked Air Defense Systems.

Base Level Systems: Review the typical Base Level networked systems at the base level.

Command & Control (C2) Networks: Explain the importance of Command and Control (C2) networked systems.

4(c)

Explain key elements of DoD RMF.

Roles and Responsibilities: Discuss Designated Accrediting Authority, Certifying Authority, Portfolio Manager, Program manager, User representative, etc. as well as how each member is determined.

System Evaluation: Discuss what goes into determining whether the system will be accredited or not. This accreditation process includes: Entry Access List (EAL), Mission Assurance Category (MAC) levels, Confidentiality level and Cyber Security controls derived from DODI 8500.2.

RMF Steps and Activities: Discuss RMF by covering the activities that make up the RMF. Discuss how RMF provides an ongoing validation that DoD information systems provide adequate cyber security capabilities and is not a simple one time process. Also, cover who is responsible for ensuring each part of the RMF is accomplished.

Policies and Procedures: Describe the policies and procedures that are used in C&A and explain how the

Authorization to Operate (ATO) and Authorization to Connect (ATC) applies to certification and accreditation.

Discuss the policies and procedures that govern C&A.

Types of Accreditation: Discuss the importance of the certification and accreditation process in relation to network security. Discuss the process of how C&A applies to the issuing of ATO and ATC: Interim

Authorization to Test (IATT); Interim Authorization to Operate (IATO); Authorization to Operate (ATO);

Authorization to Connect (ATC); and Denial Authorization to Connect (DATC).

Explain the purpose and key elements of Enterprise Mission Assurance Support Service (eMASS).

Purpose: Explain the purpose and key elements of the Enterprise Mission Assurance Support Services

(eMASS). Show how the eMASS is being used to gather all the pertinent information that the program

BLOCK

I

UNIT

DATE

28 Sep 2016 managers, portfolio managers, and other key elements have accumulated to ensure that the certification and accreditation process are being accomplish.

Key Elements of eMass: Discuss that eMASS is the DoD tracking database of choice for all Information

Systems and has replaced Enterprise Information Technology Data Repository (EITDR) for the Air Force

4(d)

CIA: Explain the key elements of the Confidentiality, Integrity and Availability (CIA) triad and how each contributes to cyber surety.

Information Operations (IO), Information Security, and Enterprise Information Management (EIM):

Explain the concept of information operations and the core components of mission assurance.

Operations Security, Physical Security, Roles and Responsibilities, Emissions Security, Communications Security, Computer Security, Disposal and Destruction, and Environmental

Controls: Explain the policies, procedures and methodologies that are used in emissions security, communication security, computer security, operations security and physical security.

Security Tools and Countermeasures: Explain security tools with their corresponding security countermeasures.

Certification and Accreditation: Explain the policies and procedures used in C&A and how the Authority to

Operate (ATO) and Authority to Connect (ATC) applies to certification and accreditation.

BLOCK

I

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Introduction to Cyberspace Operations

5. Expeditionary Cyberspace

a. Specify expeditionary cyberspace concepts. Task(s): 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6,

1.5.7 MEAS: W

(1) Planning

(2) Deployed Systems

(3) Organizations

(4) Expeditionary Concepts

(5) Mobilization

(6) Tactical Communications

(7) Air Operations Center

BLOCK

I

UNIT

DATE

28 Sep 2016 international students. Refer to the foreign disclosure section of the Course Training Plan for further

Lecture (4 hrs)

5(a)

Planning: Explain the AEF concept.

Organization: Explain Deployable Communications organizations and other deployable units.

(1) Combat Comm

(2) Crisis Response

(3) Air Communications

(4) Air Control Squadron

(5) Other - QRP, Fly-Away Kit

(6) Thoughts to support local base emergencies

Deployed Systems: Explain Theater Deployable Communications

(1) UTC parts - manpower, equipment

(2) TDC UTCs

(3) Related UTCs

Mobilization: Explain deployment mobilization concepts.

(1) AEF

(2) LOGMOD/LOGDET

(3) DOC statement

(4) TPFDD and UTC sync

(5) Comm UTCs

Tactical Communications: Explain the deployment and employment considerations and major system components of tactical satellite, radio, telephone and IP network communications.

(1) TACSAT considerations

(2) - SAR/GAR, crypto, timing

(3) OTH radio considerations

(4) - weather, power, site design

(5) LOS radio considerations

(6) - power, channelization, talk groups

(7) Telephone considerations

BLOCK

I

UNIT

DATE

28 Sep 2016

(8) - local switch, DSN trunks

(9) IP considerations

(10) - security, NAT, VPN, DODIN interconnect

Air Operation Center (AOC): Explain the support, offensive, and defensive roles of cyberspace operations in the

AOC.

(1) AOC systems admin and support

(2) AOC network perimeter

(3) AOC C2 systems

(4) AOC remote notes

(5) COLE for cyber sorties

(6) COLE for cyber timing/sync w/other air/space operations

BLOCK

I

UNIT

DATE

28 Sep 2016

BLOCK

I

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Introduction to Cyberspace Operations

6. Project Management

a. Specify project management concepts. Task(s): 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.3.8, 1.3.9, 1.3.10, 1.3.11 MEAS: W

(8)

(1) Foundational Concepts

(2) Cyberspace Infrastructure Planning System

(3) Requirements and Workorder Mgt

(4) Special Requirements

(5) Management Phases

(6) Management Meetings

(7) Implementation

(8) MILCON & CE

(9) System Installation Records

(10) Project Acceptance

(11) Project Folders

BLOCK

I

UNIT

DATE

28 Sep 2016 international students. Refer to the foreign disclosure section of the Course Training Plan for further

Lecture (8 hrs)

6(a)

Reminder: Integrate job-oriented safety (See applicable Air Force Occupational Safety and Health (AFOSH), standards), environmental issues (including pollution prevention awareness), energy conservation

(correct/incorrect applications of energy conservation in the workplace and on the job and principles applicable to AFSC specific job tasks and responsibilities), publications awareness (emphasize compliance with instructions is mandatory), Risk Management (weave principles throughout the core curriculum, where appropriate). Instructors will weave core values information into the curriculum. Throughout the course, instructors will weave in information about basic doctrine, using AFDD 1, Air Force Basic Doctrine, Organization, and Command. Use active learning techniques called modeling, including one-way stories, guided discussions, two-way stories, simulations, personal experiences, and case studies. Instructor discretion

Integrate the Air Force technical data system and other publications applicable to an AFSC throughout the

Programs vs. Projects: Explain that plans and projects are selected at the discretion of the Air Force, MAJCOM, or base Communications Systems Officer (CSO). A project is a carefully defined set of activities requiring the use of resources (money, people, materials, energy, space, provisions, communications, etc.) to meet the pre-defined objectives. A project is considered a temporary, one-time endeavor undertaken to create, install, or update a product or service in order to bring about beneficial change or added value. Projects are funded to support specific requirements on an as-needed/approved basis for the Air Force, MAJCOM, or base CSO.

Base Level Organizational Roles: Explain the organization that manage plans and programs at all AF levels, their roles in the procurement and project management process.

Specialized Organizations: Discuss the various specialized organizations that might be dealt with in the procurement and project management process.

Systems and Products Involved in Project Management Planning: Discuss the various publications and systems used within the project management process.

BLOCK

I

UNIT

DATE

28 Sep 2016

Support and Service Contracts: Explain the logistics and sustainment support role of contracting.

Contracts and Ethics: Discuss the importance of how cyber officers interact (ethical behavior) professionally/socially with contractors.

Forms: Review the five common forms used by cyber officers in the contracting process.

Explain the levels of spending set forth by the Federal Budget and the processes encountered by cyber officers.

Budget Cycle: Describe the length and quarters of the budgetary cycle.

Budget Related Forms Processing Systems: Discuss the Automated Business Services System (ABSS), Defense

Travel System (DTS), and Enterprise Solution-Supply (ES-S) within the budget processing system.

BLOCK

I

UNIT

DATE

28 Sep 2016

BLOCK

I

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Introduction to Cyberspace Operations

7. Joint Operational Planning

16.5

a. Correlate Continuity of Operations Plan (COOP) and its impact on the mission. Task(s):

1.4.1.1, 1.4.1.2, 1.4.1.3, 1.4.1.4, 1.4.1.5 MEAS: W

(1) Risk and Vulnerability Assessment

(2) Sustainment

(3) Disaster Recovery

(4) Contingency Operations

(5) Combining Mission Assurance and COOP

b. In teams of no more than 5, use JP 5-0, Joint Operational Planning, and the provided scenario to create a COOP, with no more than 4 instructor assists. Task(s): 1.4.1.5, 1.5.8, 1.6.16 MEAS:

PC

(15.5)

(1) Combining Mission Assurance and COOP

(2) Perform Mobilization

(3) Establish and Conduct Cyber Surety Validation and Verifications

BLOCK

I

UNIT

DATE

28 Sep 2016

Joint Publication 5-0, Joint Operations Planning

Scenario Provided international students. Refer to the foreign disclosure section of the Course Training Plan for further

Demonstration/Performance (15.5 hrs)

Lecture (1 hrs)

7(a) Provide overview of operation Eagle Claw and briefly discuss resulting Goldwater Nicholas Act of 1986.

The last 30 years resulted in Joint Operational Planning and the agreement and implementation of the JOPP. Use the 5 step JOPP as presented in earlier objectives to allow the student to implement and practice the process.

7(b) Administer PC I-7b.

Training Equipment

Desk Top (1)

Raritan (1)

Switch (1)

Thin Client (1)

Demonstration/Performance

Progress check given during this block.

Written test measurement deferred until end of block.

BLOCK

I

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Introduction to Cyberspace Operations

8. Written Test and Feedback

1.5

a. Test

b. Feedback

BLOCK

I

UNIT

DATE

28 Sep 2016

Test Type

Written Tests (1.5 hrs)

Refer to Instruction to the Examiner located within the test kits. Administer written measurement.

NOTE: Any student not making a minimum passing score on the test must be referred to the IS.

Record grades on AETC Form 325 or on the Student Report Card in TTMS in accordance with AETCI 36-2215, Technical and Basic Military Training Administration. Record test results on AETC Form 668, Test Data or in a computer-generated test analysis system for test analysis. Identify high-miss test questions. Destroy the answer sheets upon completion of the test unless the course is in validation. For courses in validation, all measurement material will be saved and submitted with the validation package to TDE.

Security Type: UNCLASS

BLOCK

II

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Operating Systems

1. Windows Overivew

21.5

a. Explain basic facts about physical hardware and Windows operating system components.

Task(s): 2.1.1, 2.1.2, 2.1.10, 2.1.11, 4.2 MEAS: W

(6.5)

(1) Identify the role and types of CPU, memory bus, and CMOS/BIOS

(2) Identify the variations of Windows OS family

(3) Differentiate between user mode and kernel mode

(4) Identify the role and function of the kernel mode

(5) Identify the role and type of drivers

b. Identify basic facts about the Windows file structure. Task(s): 2.1.4, 2.1.12 MEAS: W

(7)

(1) Identify the role of the file system

(2) Describe features of FAT and NTFS

(3) Explain key concepts of disk management

c. Identify basic facts about the Windows boot process. Task(s): 2.1.3 MEAS: W

(2)

(1) Identify key boot files

(2) Identify the phases of the boot process

d. Identify basic facts about the Windows registry. Task(s): 2.1.18 MEAS: W

(3)

(1) Define the registry

(2) Identify categories of root keys

(3) Explain registry data types

e. Identify basic facts about Windows applications, processes, and services. Task(s): 2.1.6, 2.1.7

MEAS: W

(1) Differentiate between an application and a service

(2) Explain process ownership and management

BLOCK

II

UNIT

DATE

28 Sep 2016

ST E3OQR17D1 001A - Operating Systems international students. Refer to the foreign disclosure section of the Course Training Plan for further

Lecture (21.5 hrs)

1(a) Describe features of each of the main physical components of a computer utilizing the von Neumann architecture as a guide. Identify the roles of the central processing unit (CPU), two memory types (read only and random access), input/output devices, and the bus. If available, pass around any of the physical component have available or use online resources for pictorial representation. Discuss what an operating system is and describe the four variations of Windows: business, server, handheld/embedded, and client/consumer. Describe the two process modes of windows, user and kernel, and how they utilize virtual memory address space.

Introduce the Windows operating system components/features to be discussed: kernel, drivers, file system, boot process, and registry. Further define what the kernel is and how it is further divided in subcomponents of executive, microkernel, and kernel mode drivers. Describe types of drivers, their purpose, and layers of.

1(b) Define and describe the Windows file system. Draw on board an excerpt of the file system as it is being discussed, highlighting common folders/directories found in all Windows operating system versions. Describe how files are stored on hard disk, differentiating between a sector and cluster. Define and differentiate between the two files systems file allocation table (FAT) and new technologies files system (NTFS). Demonstrate and discuss the commands “chkdsk” and “defrag” and also demonstrate the use of the disk management snap-in to the Microsoft Management Console (MMC).

1(c) Describe the phases of the Windows boot process highlighting key files required for successfully booting the Windows operating system, in particular the files NTLDR, boot.ini, ntdetect.com, ntoskrnl.exe, and hal.dll.

Discuss the importance of understanding the boot process to identify problems which could signify possible corruption/malware.

1(d) Describe the purpose of the windows registry and identify location of database files used to populate.

Demonstrate traversal through the registry while discussing the five root keys: HKEY_CLASSES_ROOT, HKEY_CURRENT_USER, HKEY_LOCAL_MACHINE, HKEY_USERS, and HKEY_CURRENT_CONFIG.

While in HKEY_USERS root key, define what a Windows Security Identifier (SID) is and its purpose to the

Windows operating system. Describe how to change a registry entry but make sure students understand the adverse effects if not done correctly.

BLOCK

II

UNIT

DATE

28 Sep 2016

1(e) Define a process, application, and service. Differentiate between applications and services. Use the services snap-in to the MMC, task manager, and PowerShell to demonstrate how to view and manage what applications and services are running. Discuss the commands “sc” and “netsvc” which can be used at the command prompt, and also discuss the PowerShell commands to view and manage services and processes.

BLOCK

II

UNIT

DATE

28 Sep 2016

BLOCK

II

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Operating Systems

2. Windows Networking and Security Concepts

a. State general principles about networking. Task(s): 2.1.5, 2.1.13, 2.1.19 MEAS: W

(1) Explain Windows networking concepts

(2) Identify Windows server roles

(3) Explain networking capabilities provided by Window platforms (DHCP, IIS, Exchange)

(4) Explain purpose of IIS logging

(5) Explain key concepts of use management

b. Explain concepts of Windows security as it relates to authentication, confidentiality, integrity, and availability. Task(s): 2.1.8, 2.1.14, 2.1.15, 2.1.16, 2.1.17, 2.1.22 MEAS: W

(1) Describe the security identifier (SID)

(2) Identify Windows authentication protocols Kerberos and NTLM

(3) List windows features that contribute to confidentiality, integrity, and availability

c. Explain concepts of Windows backup and recovery. Task(s): 2.1.20, 2.1.21 MEAS: W

(1) Define and identify types of system backups (and snapshots)

(2) Define system recovery

(3) Explain how to automate backups/snapshots

(4) Explain safe mode

BLOCK

II

UNIT

DATE

28 Sep 2016 international students. Refer to the foreign disclosure section of the Course Training Plan for further

Lecture (13 hrs)

2(a) Differentiate between what is a server and what is a client in regards to networking. Define and differentiate between Windows Server roles and features. Describe the Active Directory Domain Services

(ADDS), Domain Name Services (DNS), Dynamic Host Control Protocol (DHCP), and Internet Information

Services (IIS) roles. Demonstrate, if possible, and describe two tools used to manage servers: Best Practice

Analyzer (BPA) and System Center Operations Manager (SCOM). Demonstrate the use of the commands “net accounts” and “net user” to manage password information and user accounts on a local machine.

2(b) Revisit what a Windows SID is. Define what a protocol is, in particular authentication protocols. Describe and differentiate between the authentication protocols new technologies LAN manager (NTLM) and Kerberos.

Show how authentication takes place in each of these protocols through visuals and online resources to reinforce understanding. Discuss methods Windows employs to meet security threats to ensure availability, integrity, and confidentiality of information.

2(c) Define and describe the types of backups; full, incremental, and differential; and the importance of backing up data. Differentiate between a system restore and restoring from backup. Demonstrate how the task scheduler MMC can be used to automate not only the backup process but other computer management activities

(i.e. defragmentation).

BLOCK

II

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Operating Systems

3. Linux and UNIX

a. Explain basic facts regarding the Linux operating system and variants. Task(s): 2.2.1, 2.2.10, 2.2.11, 2.2.15, 2.4 MEAS: W

(1) Identify variants (or flavors)

(2) Identify characteristics and components

(3) Explain the role the kernel plays in managing the operating system and memory

(4) Define heap and stack

b. Explain basic facts regarding the Linux file structure. Task(s): 2.2.2, 2.2.16 MEAS: W

(6)

(1) Explain the types of files and file structure

(2) Explain the purpose of common directory files

(3) Describe the categories of users

(4) Explain the regular and directory file permissions as they apply to the categories of users

(5) Use command line interface (CLI) commands to navigate and modify file structure

c. Identify basic facts about the Linux boot process. Task(s): 2.2.4, 2.2.5, 2.2.13 MEAS: W

(1) Explain the purpose of each stage of the boot process

(2) Identify key configuration files

(3) Identify run levels

(4) Explain how services are started/stopped

(5) Use command line interface (CLI) commands to manage services

(6) Differentiate between system and application programs

d. Explain Linux network and user management. Task(s): 2.2.3, 2.2.6, 2.2.16, 2.2.17 MEAS: W

(1) Differentiate between root user and administrator

(2) Explain the relationship between etc/passwd and etc/shadow

(3) Explain the relationship between hashing and salting

(4) identify key networking files and processes

(5) Explain port mapping

(6) Use command line interface (CLI) commands to manage users and network services

BLOCK

II

UNIT

DATE

28 Sep 2016

e. Explain attack vectors and hardening for Linux systems. Task(s): 2.2.8 MEAS: W

(1) Differentiate between threat, vulnerability, and risk

(2) Explain how attack vectors take advantage of vulnerabilities

(3) Explain the vulnerabilities infiltrated by Heartbleed and Shell Shock

(4) Identify methods to harden Linux operating system

f. Contrast similarities and differences on Linux and Windows. Task(s): 2.2.12, 2.2.14 MEAS: W

(1) Identify similarities between Linux and Windows

(2) Identify differences between Linux and Windows

(3) Explain how Linux could be used to implement Windows server configurations

BLOCK

II

UNIT

DATE

28 Sep 2016 international students. Refer to the foreign disclosure section of the Course Training Plan for further

3(a) Describe the variations and different between Unix and Linux. Define the characteristics of flexibility, multitasking, multi-user, and portability. Describe and define the purpose of the Linux components system libraries and utilities, kernel, shell, and file system leaving much of the file system details for the next objective.

When describing the shell, further break down and describe the characteristics of the Bourne, Korn, C, and Born

Again (BASH) shells.

3(b) Explain the three types of files found in Linux; directory, regular, and special; and the two parts that make up a file; filename and data. Describe the difference between a hard and soft link and where they can and cannot be used. Define the directory file structure and draw on board common directory files found on all Linux system: root, bin, boot, dev, etc, home, lib, proc, root, sbin, user, and var. Make sure students understand the different between the root user account, root directory “/”, and root user’s home folder “/root”. Describe the permissions read, write, and execute and how they apply differently to a regular file and directory file.

Demonstrate the use of the command “ls –l” and “chmod” to show how to change permissions from command line. Also describe each part of the “ls –l” commands output. Describe how Linux files systems are “mounted” and the use of the commands “mount” and “umount”.

3(c) Describe the phases of the Linux boot process highlighting key files required for successfully booting the

Linux operating system, in particular the files grub.cfg, initrd, and init. Describe the different run levels centering in on the default levels of 3 (command line) and 5 (graphical). Examine how services are started on

Linux system and how to manage them with the “ps”, “kill”, and “pkill” commands. Differentiate between the three types of processes daemon, kernel, and user. Discuss processing states running and not-running further breaking down the not-running states into substates runnable, sleeping, interruptible sleep, uninterruptible sleep, and zombie (defunct). Describe the use of the virtual directory “/proc”.

3(d) Differentiate between root user and administrator on Linux. Further differentiate between the Linux root user and Windows administrator and how root has more power. Describe the relationship between the

“/etc/passwd” and “/etc/shadow” files. If have Linux system, demonstrate how the files can actually be edited to create user accounts (be careful if do so). Explain hashing and salting of user passwords and how salting adds an extra layer of protection. Discuss the networking files “/etc/hostname”, “/etc/hosts”, “/etc/resolv.conf”, “/proc/net”, “/etc/networks”, “/etc/network/interface”, “/etc/groups and /etc/group”, “/etc/fstab”, “/var/log”, BLOCK

II

UNIT

DATE

28 Sep 2016

“/etc/services”, “/home”, “/etc/profile”, “/var/mail”, and “/etc/hosts.allow and /etc/hosts.deny”. Demonstrate the use of the commands ping, traceroute, netstat, and ifconfig. Discuss the command iwconfig, nslookup, arp, tcpdump, and dig. Describe port mapping.

3(e) Define and differentiate between a threat, vulnerability, and risk and how attack vectors take advantage of open vulnerabilities. Discuss two incidents that took advantage of an open vulnerability: Heartbleed and Shell

Shock. Discuss methods used to harden the Linux operating system.

3(f) Open discussion on the similarities and differences between Windows and Linux using information discussed in previous and this unit in the block. Explain some of the benefits of using Linux over Windows in a networking environment (of standalone).

BLOCK

II

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Operating Systems

4. Virtualization

a. Explain the characteristics of the different types of virtual machines and their uses to solve technology problems. Task(s): 2.3.1, 2.3.2 MEAS: W

(1) Define virtualization, virtual machine, and hypervisor

(2) Explain the advantages of virtualization

(3) Differentiate between the two types of hypervisors

(4) Explain operating system and server virtualization

b. Differentiate the virtual environment terminology, features, and products from Microsoft and

VMware. Task(s): 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.12 MEAS: W

(1) Compare Window's Hyper-V and VMware's ESXi hypervisors

(2) Identify and describe products for VM management

(3) Identify licensing requirements

c. Explain the storage technologies used in virtual environments. Task(s): 2.3.8 MEAS: W

(1) Define DAS, NAS, SAN, NFS, and RAID

(2) Describe thin and thick provisioning implementation

(3) Explain storage virtualization

d. Explain the network and security technologies used in virtual environments. Task(s): 2.3.7,

2.3.9 MEAS: W

(1) Explain network virtualization

(2) Explain virtualization technologies used to enhance security

e. Explain the preparation and planning required for implementing virtualization. Task(s): 2.3.11

(1) Explain virtualization as it applies to available physical hardware

(2) Identify constraints to editing virtual machine configuration

BLOCK

II

UNIT

DATE

28 Sep 2016 international students. Refer to the foreign disclosure section of the Course Training Plan for further

4(a) Define virtualization, virtual machine, and hypervisor. Further divide hypervisor into the two types: Type

1 (Bare Metal/Native) and Type 2 (Hosted). Discuss the advantages virtualization brings to an organization to include reducing capital and operating costs; stability and security; minimizing or eliminating downtime;

supporting business continuity and disaster recovery; increasing IT productivity, efficiency, agility, and responsiveness; and enabling centralized management. Define and describe operating system and server virtualization.

4(b) Differentiate/Compare Windows Hyper-V and VMWare’s ESXi hypervisors. Further discuss the products used to manage virtualization in a Microsoft versus a VMWare environment. Discuss licensing requirements.

4(c) Define and describe types of storage technologies: direct access storage (DAS), network access storage

(NAS), and storage area network (SAN). Discuss the storage protocols Fibre Channel (FC) and Fibre Channel over Ethernet (FCoE), Server Message Block (SMB), iSCSI, and Network File System (NFS). Explain methods of implement redundant array of independent disks (RAID) for redundancy, striping, mirroring, and parity.

Explain storage virtualization and differentiate between thick and thin provisioning. Draw this out to show the problem of overprovisioning when using thin provisioning method when assigned storage space to virtual machine.

4(d) Start with basic definitions to include physical versus logical network topology, NIC, switch, and server.

Discuss network virtualization and intended purpose to optimize network speed, reliability, flexibility, scalability, and security. Describe how can consolidate multiple physical networks of logically segment a single physical network. Explain NIC Teaming, Failover Priority, and affinity & anti-affinity. Make sure to discuss the difference in terminology in particular VMWare’s vMotion versus Microsoft’s Live Migration. Discuss security in virtualization to include sandboxing and snapshots.

4(e) Discuss the preparation and planning involved in virtualization. Compare between starting new or converting to virtual environment. Explain you can only virtualize what you have. Explain the number of

CPUs and the virtual hard disk are two configuration settings on a virtual machine that should not be changed one the virtual machine is running because it could cause issues.

BLOCK

II

UNIT

DATE

28 Sep 2016

BLOCK

II

UNIT

DATE

28 Sep 2016

BLOCK

II

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Operating Systems

5. Written Test and Feedback

BLOCK

II

UNIT

DATE

28 Sep 2016

Record grades on AETC Form 325 or on the Student Report Card in TTMS in accordance with AETCI 36-2215, Technical and Basic Military Training Administration. Record test results on AETC Form 668, Test Data or in a computer-generated test analysis system for test analysis. Identify high-miss test questions. Destroy the answer sheets upon completion of the test unless the course is in validation. For courses in validation, all measurement

BLOCK

III

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Scripting

1. Scripting Fundamentals

70.5

a. Explain the fundamental concepts of programming. Task(s): 3.1, 3.2, 3.4, 3.8 MEAS: W

(1) Identify the four fundamental stages of programming

(2) Define editing, task lists, pseudocode, and flowcharts

(3) Know what a compiler does and identify its role in handling errors

(4) Identify the use of comments in code

(5) Describe the use of preprocessing directives

(6) Identify the program source, object, and executable file

b. Explain the use of variables in programming. Task(s): 3.6, 3.8 MEAS: W

(7.5)

(1) Define variables

(2) Describe integer variables

(3) Identify the five basic arithmetic operators

(4) Describe the assignment operator

(5) Explain the relationship between variables and memory

(6) Describe floating-point variables

(7) Define implicit type conversion and explicit type conversion

(8) Describe character type variables

(9) Describe string type variables

c. Explain flow control statements. Task(s): 3.5, 3.8 MEAS: W

(1) Identify the fundamental relational operators

(2) Explain the use of if-else statements

(3) Explain the use of switch statements

(4) Describe the function of “while” loops

(5) Describe the function of “for” loops

BLOCK

III

UNIT

DATE

28 Sep 2016

d. Explain the structure of programs. Task(s): 3.5, 3.8 MEAS: W

(1) Explain the purpose of functions, function parameters, and function prototypes

(2) Explain scope as it relates to variables

e. Explain the difference between scripting and compiled languages. Task(s): 3.3 MEAS: W

(1) Identify the capabilities and limitations of using compiled languages

(2) Identify the capabilities and limitations of using scripting languages

f. Explain the Python scripting language. Task(s): 3.9, 3.11 MEAS: W

(18)

(1) Identify the correct usage of data types using Python

(2) Identify the correct usage of flow control using Python

(3) Identify the correct usage of functions using Python

g. Explain the Perl scripting language. Task(s): 3.10, 3.11 MEAS: W

(16)

(1) Identify the correct usage of data types using Perl

(2) Identify the correct usage of flow control using Perl

(3) Identify the correct usage of functions using Perl

BLOCK

III

UNIT

DATE

28 Sep 2016

ST E3OQR17D1 001A - Scripting international students. Refer to the foreign disclosure section of the Course Training Plan for further

Lecture (61.5 hrs)

Lecture/Discussion (9 hrs)

1(a) Describe the four fundamental stages of programming: writing/editing, compiling, linking/building, and executing. In the writing/editing stage, differentiate between task lists, pseudocode, and flowcharts. Have students practice creating each with the exercises included in the slide show or make up your own. Define what an Integrated Development Environment (IDE) is and the benefits over a simple text editor. In the compiling stage, define what a compiler does and how the output can be used for debugging. Also discuss syntax for comments, preprocessing directives, and functions. Define the different types of libraries, and describe and demonstrate the use of the “printf” function from the “stdio.h” library. In the linking/building stage, describe how libraries are linked and the types of errors produced if there is a missing or nonexistent library component.

In the executing stage, describe the process and that error could still exist in logic. Also make sure to identify the types of files created and when they are created: source file (editing), object file (after compiling), and executable file (after linking).

1(b) Define a variable and rules for their use including acceptable naming conventions. Describe the types of variables: Integers, Floats, Character, and String. Describe the basic arithmetic and assignment operators.

Explain the relationship between a variable type and the amount of memory allocated. Demonstrate the purpose of castings: implicit and explicit type conversion. Throughout the lecture, provide examples of each of the data types and their use. Provide the students with ample time to complete in class exercises.

1(c) Describe flow control in C through the use of conditional (decision making) statements and loops.

Describe the relational operators and Boolean logic operators. Discuss loop control with counters via incrementing/decrementing. Throughout the lecture, provide examples of conditional statements and loops.

Provide the students with ample time to complete in class exercises.

1(d) Revisit C program structure to include the parts Link, Declaration, Main function, and User-defined functions. Describe functions and the difference between a function prototype and definition. Show the syntax for creating a function. Explain variable scope, global and local, through numerous examples. Throughout the lecture, provide examples of creating and using functions. Provide the students with ample time to complete in class exercises.

BLOCK

III

UNIT

DATE

28 Sep 2016

1(e) Discuss the difference between scripting and compiled languages. Explain the capabilities of portability, OS interaction, regular expressions, one-liners, and interactive script execution as they apply to scripting.

Differentiate between the three programming paradigms structure, procedural, and object oriented. Discuss the drawback of processor abstraction with scripting. Discuss scenarios where scripting could alleviate repetitive tasks/workload.

1(f) Describe data types, flow control, and functions in Python. Throughout the lecture, provide examples of each. Provide the students with ample time to complete in class exercises.

1(g) Describe data types, flow control, and functions in Perl. Throughout the lecture, provide examples of each.

Provide the students with ample time to complete in class exercises.

BLOCK

III

UNIT

DATE

28 Sep 2016

BLOCK TITLE

Scripting

2. Written Test and Feedback

BLOCK

III

UNIT

DATE

28 Sep 2016

Record grades on AETC Form 325 or on the Student Report Card in TTMS in accordance with AETCI 36-2215, Technical and Basic Military Training Administration. Record test results on AETC Form 668, Test Data or in a computer-generated test analysis system for test analysis.