Security history video
Post partner name(s) and topic on #general by 11:59PM November 10
Post link to the video on #general by 11:59PM Nov 15
Goals
- Get to know a historical security incident in detail
- Practice organizing and executing a presentation about a partially technical topic for a partially technical audience
Rubric
10 - Content: explanation of the incident, appropriate background info,
clarity of technical exposition, implications of the incident,
citations where relevant, etc.
4 - Presentation: readable slides, appropriate use of diagrams and images,
clear speech, etc.
1 - Extra awesomeness: I set aside one point to reward particularly impressive
presentation elements, like a great demo, a particularly creative presentation
technique, exceptionally well designed diagrams, etc. I don't give this point out
very often, so 13 or 14 points on this assignment is great.
Please do this project in groups of 2 or 3 if at all possible. If you need help finding a partner, direct message me on Slack.
What's the plan?
For this assignment, you're going to make a short video about an important security history topic. Your video will tell the story of your topic, and should include, as appropriate, brief descriptions of important technical aspects of the topic.
Possible topics
Here's a short list of some possible topics. There are many more choices, so feel free to propose something else that grabs your interest.
- Stuxnet
- NotPetya
- Ukraine power grid attack 2015
- SolarWinds
- The Morris Worm
- Heartbleed
- ILOVEYOU
- Attack on Estonia, 2007
- log4shell
- Shellshock
- Sony Pictures hack, 2014
- Aurora Generator Test
- Shadow Brokers & EternalBlue
- Equifax data breach
- Target data breach
- ...so many more examples!...
What to hand in
- Once you have chosen a topic, please post your names and topic in the #general channel on Slack. Do this by the end of the day Friday, Nov 10.
- Post your video somewhere. Make it public for carleton.edu people (or, if you prefer, completely public). If you need help sorting this out, let me know.
- Post a link to your video in the #general channel on Slack. Do this by the end of the day Wednesday, Nov 15.
- Make sure your video includes text near the beginning showing all partners' names.
A little advice
- Picking your topic: choose something that you find interesting and that you would like to know more about. Some of the topics (e.g. Stuxnet) are complex enough to be worthy of book-length discussion, but still, a 5-minute video can get you started.
- Keep your video short—no more than 15 minutes
- Tell a story. What happened? Who did it happen to? Why did it happen? What makes this topic interesting?
- Where appropriate, include relevant technical details. Your audience is the other students in this class, so if, say, you're doing Heartbleed, you can absolutely go into a little detail about how a bug in a TLS implementation became exploitable. Not all topics will need this (e.g. if you decided to summarize Edward Snowden's leaked documents), but for many topics, the story is enhanced by a little technical knowledge.