Cyber Infrastructure and Technology: Secure the Foundation

I recently completed the Cyber Infrastructure and Technology (CIT) course, and it was a whirlwind tour of what it truly means to design and maintain secure systems. I went in wanting more than just surface-level knowledge, and I came out with a practical understanding that has reshaped how I see digital defense.

We kicked off by diving into endpoint security, a critical area now that traditional perimeters are history thanks to cloud and mobile tech. I got to grips with everything from antivirus/antimalware and HIPS/HIDS to advanced tools like ClamAV, YARA rules, and the behavioral analysis power of Endpoint Detection & Response (EDR). We also explored the clever world of honeypots for luring and learning from attackers.

Protecting actual data was a huge focus with Data Loss Prevention (DLP). Learning to use Regular Expressions (Regex) to identify sensitive information felt like gaining a superpower. Then there was mail security; I now understand the crucial DNS records (MX, TXT, etc.), protocols, and protection mechanisms like SPF and DMARC that keep our inboxes safer.

The real operational heart, for me, was learning about SIEM (Security Information and Event Management). Understanding how to collect and correlate logs, then query them using SPL to find the needle in the haystack, was eye-opening. Building on that, SOAR (Security Orchestration, Automation, Response) showed me the future of incident response, using automated playbooks to act fast.

The course also broadened my perspective beyond typical IT. We delved into IIoT and ICS security, understanding the unique risks to industrial systems like SCADA and PLCs. And a crucial reminder came with physical security – all the firewalls in the world don’t matter if someone can walk out with a server! Layered physical defenses, from access control to surveillance, are non-negotiable.

Finally, we tied it all together with secure network architecture. This wasn’t just about theory; it was about actionable strategies. I learned the importance of the People, Processes, and Technologies (PPT) framework, the principle of least privilege, diligent patch management, and robust network segmentation. Embracing a Zero Trust mindset, leveraging Next-Generation Firewalls (NGFWs), encrypting data, and planning for disaster recovery with solid backup strategies became core tenets. It all culminates in the philosophy of Defense in Depth (DiD) – a layered approach is the best defense.

What made this course so effective were the hands-on labs. Working with SIEMs, SOAR platforms, firewalls, and IDS/IPS in a virtualized environment made these complex concepts click.

I emerged not just with notes, but with the confidence to implement multi-layered security across physical, endpoint, and infrastructure domains. It was an intense, rewarding journey, and I’m eager to apply these lessons to build more secure digital environments.

SDSU Global Campus	Cyber Infrastructure & Technology
Classroom Hours:	43
Completion Date:	1/9/2022
Skills Practiced:	SIEM, SOAR, DLP, Endpoint Security, Honeypots