Kim, D., & Solomon, M. G. (2012). Fundamentals of information systems security. Sudbury, MA: Jones & Bartlett.

Transcription

1 ITC 4390, Internet and Network Security Course Syllabus Course Description Practical examination of information security fundamentals. Includes security planning, technologies, and personnel issues. Covers material helpful in the preparation for the Security+ certification exam. Course Textbook Kim, D., & Solomon, M. G. (2012). Fundamentals of information systems security. Sudbury, MA: Jones & Bartlett. Course Learning Objectives Upon completion of this course, students should be able to: 1. Discuss the dimensions of threat to an organization's mission in a globally networked environment and the implications of interconnectivity. 2. Examine the types and ranges of current vulnerabilities and threats to which an organization's information assets may be exposed. 3. Describe the inter-relationships among mission, information assets, threats to those assets, and infra-structure vulnerabilities. 4. Explain organizational information risk management approaches that can be integrated into the on-going business management practices of an enterprise. 5. Describe the application of state-of-the-practice techniques for protecting information. 6. Identify mission-oriented protection strategies, such as information survivability. 7. Facilitate policy and resource decisions related to information technology security. 8. Develop a contextual framework as a touchstone for planning and implementing information security management. 9. Develop an approach for staying current with trends and requisite skills in information security. Credits Upon completion of this course, the students will earn three (3) hours of college credit. Course Structure 1. Unit Learning Objectives: Each unit contains Unit Learning Objectives that specify the measurable skills and knowledge students should gain upon completion of the unit. 2. Written Lectures: Each unit contains a Written Lecture, which discusses lesson material. 3. Reading Assignments: Each unit contains Reading Assignments from one or more chapters from the textbook. Supplemental Readings are provided Units II and VIII to aid students in their course of study. 4. Key Terms: Key Terms are intended to guide students in their course of study. Students should pay particular attention to Key Terms as they represent important concepts within the unit material and reading. 5. Unit Assessments: This course contains four Unit Assessments, one to be completed at the end of Unit II, IV, VI, and VII. Assessments are composed of multiple-choice questions and written response questions. 6. Unit Assignments: Students are required to submit for grading Unit Assignments in Units I-VI. Specific information and instructions regarding these assignments are provided below. 7. Final Exam (Proctored): Students are to complete a Final Exam in Unit VIII. All Final Exams are proctored see below for additional information. You are permitted four (4) hours to complete this exam, in the presence of your approved proctor. This is an open book exam. ITC 4390, Internet and Network Security 1

2 8. Ask the Professor: This communication forum provides you with an opportunity to ask your professor general or course content related questions. 9. Student Break Room: This communication forum allows for casual conversation with your classmates. Unit Assignments Unit I Project Create a 7-10 slide presentation on Information Systems Security and IT infrastructure. You may use various sources including your textbook. Be sure to cite any sources used in a reference slide with proper APA formatting. (Cover and reference slides do not count). You may also use the slide notes function. Definition of Information Systems Security and the three tenants of ISS The seven domains and the layered security approach Data classification of an IT infrastructure Explanation of how the IT security policy framework is used to reduce risks and threats. Unit II Project Create a 5-7 slide presentation on Risk Management Planning. You may use various sources including your textbook. Be sure to cite any sources used in a separate reference slide with proper APA formatting. (Cover and reference slide do not count). You may also use the slide notes function to explain slide contents as necessary. Your presentation should include the following: Definition of Risk Management A-I-C Compliance Qualitative and Quantitative Risk Analysis Risk Response Planning Implementation of a BIA, BCP and DRP Unit III Project Create a 5-7 slide presentation on Access Controls. You may use various sources including your textbook. Be sure to cite any sources used in a reference slide with proper APA formatting. (Cover and reference slides do not count). You may also use the slide notes function to explain slide contents as necessary. Define the four parts of Access Controls. Discuss two phases of Access Control. Describe three Authentication Types. Explain how the use of authentication types techniques impact security. Unit IV Project Create a 5-7 slide presentation on the Security Audit process. You may use various sources including your textbook. Be sure to cite any sources used in a reference slide with proper APA formatting. (Cover and reference slides do not count). You may also use the slide notes function to explain slide contents as necessary. Describe the risk review activities. Identify the four organizational permission levels. Define the purpose of a security audit. Discuss the six phases of a security audit plan. Unit V Project Create a 5-7 slide presentation on the keyword mixed alphabet cipher. You may use various sources including your textbook. Be sure to cite any sources used in a reference slide with proper APA formatting. (Cover and reference slides do not count). You may also use the slide notes function to explain slide contents as necessary. ITC 4390, Internet and Network Security 2

3 Explain how the cipher works. Identify the three elements that ensure the security of the cipher. Include an example of the cipher process by creating a unique keyword and encrypting the following plaintext message. Plaintext: IT SECURITY IS CRITICAL Unit VI Project Create a 5-7 slide presentation on the network types. You may use various sources including your textbook. Be sure to cite any sources used in a reference slide with proper APA formatting. (Cover and reference slides do not count). You may also use the slide notes function to explain slide contents as necessary. Describe and provide diagram of a local area network (LAN). Describe and provide a diagram of a wide area network (WAN). Discuss the placement and purpose of routers, switches and firewalls in both configurations. APA Guidelines CSU requires that students use the APA style for papers and projects. Therefore, the APA rules for formatting, quoting, paraphrasing, citing, and listing of sources are to be followed. A document titled APA Guidelines Summary is available for you to download from the APA Guide Link, found in the Learning Resources area of the mycsu Student Portal. It may also be accessed from the Student Resources link on the Course Menu. This document provides links to several internet sites that provide comprehensive information on APA formatting, including examples and sample papers. CSU Grading Rubric for Papers/Projects The course papers will be graded based on the CSU Grading Rubric for all types of papers. In addition, all papers will be submitted for electronic evaluation to rule out plagiarism. Course projects will contain project specific grading criteria defined in the project directions. To view the rubric, click the Academic Policies link on the Course Menu, or by accessing the CSU Grading Rubric link, found in the Learning Resources area of the mycsu Student Portal. Final Examination Guidelines Final Exams are to be administered to students by an approved Proctor. CSU approves two, flexible proctoring options: a standard Proctor, who is chosen by the student and approved by the university, or Remote Proctor Now (RP Now), an ondemand, third-party testing service that proctors examinations for a small fee. A standard Proctor is an unbiased, qualified individual who is selected by the student and agrees to supervise an examination. You are responsible for selecting a qualified Proctor, and the Proctor must be pre-approved by CSU. Students choosing RP Now must have an operational webcam/video with audio, a high-speed internet connection, and the appropriate system rights required to download and install software. To review the complete Examination Proctor Policy, including a list of acceptable Proctors, Proctor responsibilities, Proctor approval procedures, and the Proctor Agreement Form, go to the mycsu Student Portal from the link below. You are permitted four (4) hours to complete this exam, in the presence of your approved Proctor. This is an open book exam. Only course textbooks and a calculator, if necessary, are allowed when taking proctored exams. ITC 4390, Internet and Network Security 3

4 Communication Forums These are non-graded discussion forums that allow you to communicate with your professor and other students. Participation in these discussion forums is encouraged, but not required. You can access these forums with the buttons in the Course Menu. Instructions for subscribing/unsubscribing to these forums are provided below. Once you have completed Unit VIII, you MUST unsubscribe from the forum; otherwise, you will continue to receive updates from the forum. You will not be able to unsubscribe after your course end date. Click here for instructions on how to subscribe/unsubscribe and post to the Communication Forums. Ask the Professor This communication forum provides you with an opportunity to ask your professor general or course content questions. Questions may focus on Blackboard locations of online course components, textbook or course content elaboration, additional guidance on assessment requirements, or general advice from other students. Questions that are specific in nature, such as inquiries regarding assessment/assignment grades or personal accommodation requests, are NOT to be posted on this forum. If you have questions, comments, or concerns of a nonpublic nature, please feel free to your professor. Responses to your post will be addressed or ed by the professor within 48 hours. Before posting, please ensure that you have read all relevant course documentation, including the syllabus, assessment/assignment instructions, faculty feedback, and other important information. Student Break Room This communication forum allows for casual conversation with your classmates. Communication on this forum should always maintain a standard of appropriateness and respect for your fellow classmates. This forum should NOT be used to share assessment answers. Grading Assessments 8%) = 32% Assignments 7%) = 42% Final Exam = 26% Total = 100% Course Schedule/Checklist (PLEASE PRINT) The following pages contain a printable Course Schedule to assist you through this course. By following this schedule, you will be assured that you will complete the course within the time allotted. ITC 4390, Internet and Network Security 4

5 ITC 4390, Internet and Network Security Course Schedule By following this schedule, you will be assured that you will complete the course within the time allotted. Please keep this schedule for reference as you progress through your course. Unit I Information Security and Communication Chapter 1: Information Systems Security Chapter 2: Changing How People and Businesses Communicate Unit II Attacks, Threats and IS Business Drivers Chapter 3: Malicious Attacks, Threats, and Vulnerabilities Chapter 4: The Drivers of the Information Security Business Supplemental Reading: See Study Guide Proctor Approval Form Unit III Access Controls, Security Operations and Administration Chapter 5: Access Controls Chapter 6: Security Operations and Administration ITC 4390, Internet and Network Security 5

6 ITC 4390, Internet and Network Security Course Schedule Unit IV Security Policies and Procedures; Auditing to Recovery Chapter 7: Auditing, Testing, and Monitoring Chapter 8: Risk, Response, and Recovery Unit V Cryptography Chapter 9: Cryptography Unit VI Networks, Telecommunications, Malicious Code, and Activity Chapter 10: Networks and Telecommunications Chapter 11: Malicious Code and Activity ITC 4390, Internet and Network Security 6

7 ITC 4390, Internet and Network Security Course Schedule Unit VII Information Security Standards, Education and Training Chapter 12: Information Security Standards Chapter 13: Information Security Education and Training Request to take Final Exam Unit VIII Information Security Professional Certification and U.S. Compliance Laws Chapter 14: Information Security Professional Certifications Chapter 15: U.S. Compliance Laws Supplemental Reading: See Study Guide Final Exam ITC 4390, Internet and Network Security 7