Cyber Lab

Fall 2023

https://tinyurl.com/cyber-careers-f23

📣 Announcements

• Cyber x AI Symposium
• Next Monday 6-8 @ Boelter 4000
• PBR CTF #4: NewportBlake CTF
• This Saturday 12-5 @ Boelter 8500
• Boba Social
• This Saturday 5 pm.
• Meet @ Bruin Bear.

📣 Announcements

• Membership Requirements
• If you want to gain active membership status with ACM Cyber, fill our our membership requirement form!
• https://tinyurl.com/cyber-membership-f23

​

• Project Lead/Talk Sign-ups:
• If you’re interested in giving a talk or leading a project next quarter, fill out this form!
• https://tinyurl.com/cyber-talk-proj-signup-w23

Careers in Cybersecurity

Alec Machlis

Couple Notes:

• Cybersecurity is GIGANTIC
• Can only do surface level overview
• Discuss actual work in Cybersecurity, not supporting roles
• Job titles are fluid and vary from company to company - check job descriptions for details

Why does cybersecurity exist?

• Protect Data:
• Keep it Confidential
• Keep its Integrity
• Keep it Available

Why do companies care about cybersecurity?

• Legal/Regulatory Requirements
• Financial Damage
• Reputational Damage

And maybe a mention or two on the careers within the fields

Fields in Cybersecurity

Application Security

• Desktop, Websites, Blockchain, APIs, AI/ML, etc
• Prevent attacks in your applications

• Application Security Engineering
• Security Auditing (OtterSec)
• DevSecOps
• Bug Bounty

Avg salary: ~$144k

“Red Team”

• Focus on systems rather than individual apps
• Technological, human, and physical defenses

• Pentesters - digital and physical!
• Vulnerability Researcher/Exploit Developer
• ~$127k

Security Operations

• Threat detection, response, and mitigation
• Often consists of a “SOC”, or Security Operations Center

• Security Analyst/Incident Responder
• Threat Hunting
• Digital Forensics Analyst
• Vulnerability Assessment & Management

Security Architecture

• Building and maintaining secure systems

• Security Engineering
• Access Control
• IT Management: Cloud, Containers, System Management, Cryptology, Networks, etc

Threat Intelligence

• OSINT as a job
• Tracking the current threat landscape as it applies to a company

• Tracking Adversary behavior - Tactics, Techniques, and Procedures
• Identify Indicators of Compromise

Governance, Risk, and Compliance

• “Business” side of Cybersecurity

​

• Risk Assessment
• Risk Management
• Governance/Legal Compliance
• User Education

• Consulting
• GRC Analyst
• Information Assurance Analyst
• Risk Analyst
• Compliance Analyst

Cybersecurity Classes at UCLA

• EC ENGR 117/COM SCI M138: Computer Systems Security
• Taught next quarter by Dr. Yuan Tian!
• Web security, software security, machine learning security, mobile security, IoT security, threat modeling.
• EC ENGR 188/209AS: Secure Computing Systems/Secure & Trustworthy Edge Computing Systems
• Taught next quarter by Dr. Nader Sehatbakhsh!
• Cryptography, side-channel attacks, sensor security, hardware security, machine learning security, cyber-physical systems.
• COM SCI 136: Introduction to Computer Security
• Taught by Dr. Peter Reiher Spring Quarter (may change)
• Network security, operating systems security, cryptography
• General overview of Cybersecurity

Related UCLA Classes

• COM SCI 33: Introduction to Computer Organization
• Learn low-level assembly and basics of pwn/buffer overflow attacks
• COM SCI 35L: Software Construction
• Learn many tools used when practicing cybersecurity
• COM SCI 111: Operating Systems
• COM SCI 130/143/144: Application Development
• MATH 116/COM SCI M282: Cryptography
• COM SCI 183 (tentative/new): Blockchain Security?
• COM SCI 118: Networking
• EE/CS M151B/EE/CS M152A/CS 152B: IoT/Embedded Devices

​

🏆 Membership Code / Feedback Form

https://tinyurl.com/cyber-feedback-f23

Fill out feedback form for code! :D

https://members.uclaacm.com/

Thank you! ❤️