IS312T Information Security Essentials [Onsite]

Transcription

1 IS312T [Onsite] Curse Descriptin: This curse is an intrductin t the security essentials. The curse identifies and examines types f infrmatin security used in industry and hw they are implemented. Prerequisite(s) and/r Crequisite(s): Prerequisites: Basic curses in cmputer applicatins and functining f perating systems Credit hurs: 4 Cntact hurs: 60 (36 Thery Hurs, 24 Lab Hurs)

2 SYLLABUS: Instructr: Office hurs: Class hurs: MAJOR INSTRUCTIONAL AREAS Upn successful cmpletin f this curse, the student will be able t discuss each f the 10 dmains f the Cmmn Bdy f Knwledge (CBK). Security Management Practices Access Cntrl Systems LIE Security Architecture and Mdels Applicatin and System Develpment Operatins Security Cryptgraphy BCP / DRP Telecmmunicatins Physical Security COURSE OBJECTIVES After successful cmpletin f this curse, the student will have the pprtunity t: 1. Explain Infrmatin Security.

3 1.1 Define Infrmatin Security. 1.2 Explain imprtance f Infrmatin security. 1.3 Define Infrmatin Security terminlgy. 1.4 Define Risk analysis.

4 2. Identify the varius threats t Infrmatin Security. 2.1 Define threats. 2.2 Identify the attackers f Infrmatin Security. 2.3 Identify the types f attacks. 3. Explain the basic principles f Infrmatin Security. 3.1 Describe wh is respnsible fr Infrmatin Security. 3.2 Identify effective authenticatin methds. 3.3 Identify methds f cntrl access t cmputer systems. 4. Describe a Security Baseline. 4.1 Identify the methds used fr hardening netwrks. 4.2 Identify the methds used fr hardening perating systems. 4.3 Identify the methds used fr hardening applicatins. 5. Explain the cncept f a secure netwrk infrastructure. 5.1 Identify the resurces in a netwrk Infrastructure. 5.2 Describe the prcess f hardening netwrk devices. 5.3 Describe secure netwrk tplgies. 5.4 Describe the media and methds used t physically secure netwrk infrastructure. 6. Identify the need fr Web security. 6.1 Describe the prcess f prtecting Describe vulnerabilities in Web sites and Web based cmmunicatins. 7. Describe hw t prtect advanced cmmunicatins systems. 7.1 Define secure remte access. 7.2 Identify vulnerabilities in cellular telephny. 7.3 Describe the hardening f wireless netwrks. 8. Explain the cncept f Cryptgraphy. 8.1 Identify the varius elements f cryptgraphy. 8.2 Define Hashing Algrithms.

5 9. Describe Public Key Infrastructure. 9.1 Describe Digital Certificates. 9.2 Explain the prcess f key management. 10. Describe Operatinal Security Identify the need fr physical security Identify the need fr business cntinuity planning Identify the types f Backups Identify the slutins used in disaster recvery. 11. Describe Plicies and Prcedures Identify the need fr risk management Identify the tasks perfrmed in the varius phases f the risk management prcess Define the types f security plicy. 12. Explain Security Management Prcedures Define privilege management Define change management Explain Digital Rights Management (DRM) Identify the need fr security awareness training. 13. Describe Cmputer Frensics Define the uses f a cmputer frensics. Related SCANS Objectives 1. Research varius surces t acquire relevant infrmatin frm varius surces. 2. Organize the gathered infrmatin under predefined categries in a systematic fashin. 3. Articulate cncepts in written and verbal frms.

6 TEACHING STRATEGIES The curriculum is designed t prmte a variety f teaching strategies that supprt the utcmes described in the curse bjectives and that fster higher cgnitive skills. Delivery makes use f varius media and delivery tls in the classrm. COURSE RESOURCES Student Textbk Package Textbk : Ciampa, Mark. Security + Guide t Netwrk Security Fundamentals Secnd Editin. Canada: Curse Technlgy, Thmsn, DVD: Security+ LabSim CD ROM: A+ LabSim Lab Manual: Cretar, Paul. Lab Manual fr Security + Guide t Netwrk Security Fundamentals. Secnd Editin. Canada: Curse Technlgy, Thmsn, (dwnlad path: Virtual Library > Schl f Infrmatin Technlgy > Selected Textbks > IS312) References and Resurces ITT Tech Virtual Library Lg n t the ITT Tech Virtual Library at t access nline bks, jurnals, and ther reference resurces selected t supprt ITT Tech Virtual Library curricula. Bks

7 The fllwing bk is related t this curse and is available thrugh the ITT Tech Virtual Library: Whitman, Michael. and Herbert Mattrd. Principles f Infrmatin Security. Secnd editin. Canada: Curse Technlgy, 2005.

8 Other Resurces Internet All links t Web references utside the ITT Tech Virtual Library are subject t change withut prir ntice. EVALUATION & GRADING COURSE REQUIREMENTS 1. Attendance and Participatin Regular attendance and participatin are essential fr satisfactry prgress in this curse.

9 2. Cmpleted Assignments Each student is respnsible fr cmpleting all assignments n time. 3. Team Participatin (if applicable) Each student is respnsible fr participating in team assignments and fr cmpleting the delegated task. Each team member must hnestly evaluate the cntributins by all members f their respective teams.

10 Evaluatin Criteria Table Final grades will be based n the fllwing weighted categries: CATEGORY WEIGHT Participatin 10% Lab Assignments 25% Quizzes 20% Midterm Exam 20% Final Exam 25% Ttal 100% Grade Cnversin Table Final grades will be calculated frm the percentages earned in class as fllws: A 90% 100% 4.0 B+ 85% 89% 3.5 B 80% 84% 3.0 C+ 75% 79% 2.5 C 70% 74% 2.0 D+ 65% 69% 1.5 D 60% 64% 1.0 F <60% 0.0

11

12 COURSE OUTLINE Unit # Activities fr the unit 1. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 1, pp Chapter 2, pp Writing Assignments: 1 and 2 Class Activities: 1 and 2 Quiz: 1 Labs: 1. Als, refer t Labs in Appendix II 2. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 3, pp Writing Assignments: 1 and 2 Class Activities: 1 Quiz: 1 Labs: 1, 2, and 3. Als, refer t Labs in Appendix II 3. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 4, pp Chapter 5, pp Writing Assignments: 1 and 2 Class Activities: 1

13 Quiz 1 Labs: 1, 2, 3, 4, 5, 6, 7, and 8. Als, refer t Labs in Appendix II 4. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 6, Chapter 7, pp Writing Assignments: 1 and 2 Class Activities: 1 and 2 Quiz 1 Labs: 1, 2, 3, 4, 5, 6, 7, 8, and 9. Als, refer t Labs in Appendix II. 5. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 8, pp Writing Assignments: 1 and 2 Class Activities: 1 and 2 Quiz 1 Labs: 1, 2, 3, 4, 5, 6, and 7. Als, refer t Labs in Appendix II 6. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 9, pp Writing Assignments: 1, 2, and 3 Class Activities: 1

14 Midterm Exam Labs: 1, 2, 3, 4, 5, and 6. Als, refer t Labs in Appendix II 7. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 10, pp Writing Assignments: 1 and 2 Class Activities: 1 and 2 Quiz 1 Labs: 1, 2, and 3. Als, refer t Labs in Appendix II 8. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 11, pp Writing Assignment: 1 Class Activities: 1 and 2 Quiz 1 Labs: 1, 2, and 3. Als, refer t Labs in Appendix II 9. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 12, pp Writing Assignments: 1 and 2 Class Activities: 1 and 2

15 Quiz 1 Labs: 1, 2, 3, and 4. Refer t Labs in Appendix II 10. Read Security + Guide t Netwrk Security Fundamentals, Secnd Editin Chapter 13, pp Writing Assignments: 1 Class Activities: 1 and 2 Quiz 1 Labs: 1, 2, 3, 4, 5, and 6. Als, refer t Labs in appendix II 11. Final Exam INTENT/INTERFACE Security is the primary cncern f current cmputer prfessinals, with gd reasn. The Slammer wrm infected 75,000 cmputers within the first 11 minutes f its release. The number f cmputers infected dubled every 8.5 secnds. The Blaster wrm infected 138,000 cmputers within the first fur hurs f its release. Of the mre than 141 millin nline cnsumers in the United States, mre than 57 millin have received phishing s. One ut f every three cmputers cnnected t the Internet has unwanted sftware such as a Trjan hrse r spyware installed. This curse is designed t meet the needs f students and cmputer prfessinals wh want t understand hw t prtect themselves frm these dangers. It is an verview f the 10 security dmains f the Cmmn Bdy f Knwledge (CBK), as defined by the Internatinal Infrmatin Systems Security Certificatin Cnsrtium (ISC) 2. As the students prgress thrugh the curse, each dmain will be examined in depth. This will help the students understand infrmatin security and prepare them fr a career in the fast-paced and grwing field f infrmatin technlgy.