WORKPLACE COMPETENCIES -- Effective workers can productively use:

Transcription

1 ITSY 2401 irewalls and Network Security DEL MAR OLLEGE IS DEPARTMENT I. ITSY 2401 irewalls and Network Security (3-3-4) Identify elements of firewall design, types of security threats and responses to security attacks. Use best practices to design, implement and monitor a network security plan. Learn security incident postmortem analysis and on going network security activities. Suggested prerequisite: ITNW 1325, ITNW 2301 and ITSY 2400 ourse IDEA Objectives: Essential: Gaining factual knowledge (terminology, classifications, methods, trends) Important: Learning to apply course material (to improve thinking, problem solving, and decision. Essential: Developing specific skills, competencies, and points of view needed by professionals in the field most closely related to this course. SANS (Secretary s ommission on Achieving Necessary Skills) competencies are integrated into this course curriculum to improve education by helping to better define and assess the proficiency skills needed for employment. Each course competency will implement several SANS to help you develop and reinforce employable skills. ompetencies are criterion referenced (ie. They are measured against predetermined levels of proficiency in skills for effective job performance). The know-how identified by SANS is made up of five competencies and a three-part foundation of skills and personal qualities that are needed for solid job performance. These are: WORKPLAE OMPETENIES -- Effective workers can productively use: Resources -- They know how to (1) allocate time, (2) money, ( 3) materials, and (4) staff Information --They can (5) acquire and evaluate data, (6) organize, and maintain files, (7) interpret and communicate, and (8) use computers to process information. Interpersonal Skills -- They can work on (9) teams, (10) teach others, (11) serve customers, (12) lead, (13) negotiate, and (14) work well with people from culturally diverse backgrounds. Systems -- They (15) understand social, organizational, and technological systems; (16) they can monitor and correct performance; and (17) they can design or improve systems. Technology -- They can (18) select equipment and tools, (19) apply technology to specific tasks, and (20) maintain and troubleshoot equipment. OUNDATION SKILLS -- ompetent workers in the high-performance workplace need: Basic Skills-- (1) reading, (2) writing, (3) arithmetic and (4) mathematics, (5) listening and (6) speaking. Thinking Skills-- (7) to think creatively, (8) to make decisions, (9) to solve problems, (10) to visualize, (11) the ability to learn, and (12) to reason. Personal Qualities --(13) individual responsibility, (14) self-esteem, (15) sociability, (16) self-management, and (17) integrity.

2 II. END-O-OURSE OUTOMES (and Texas Skill Standards): Texas Skill Standards Provide data/information assurance Ensure Infrastructure and Network Security Develop manage and enforce it Perform security education Develop and implement physical security, d t d Perform system analysis and design Skill Standard A1 Gather and document data/information assurance requirements A2 Develop data/information assurance plans and implementation strategies A3 Review and test plans and strategies for compliance with applicable regulations and standards A4 Implement data/information assurance plans and strategies A5 Monitor performance to ensure integrity and confidentiality A6 Maintain and update data/information assurance plans and strategies as appropriate B1 Gather data and analyze security requirements B2 Identify, analyze, and evaluate infrastructure and network vulnerabilities B3 Develop critical situation contingency plans and disaster recovery plan B4 Implement/test contingency and backup plans and coordinate with stakeholders B5 Monitor, report and resolve security problems 1 Perform research and analyze requirements 2 Develop, assess and document security policies, practices and procedures 3 Disseminate policies and implementation practices and procedures 4 Implement, enforces and monitor security polices, practices and procedures D1 Identify and assess education and training requirements for all constituents D2 Identify resource and support materials D3 Design and develop education and training plans and strategies D4 Deliver education and training D5 Assess results and determine follow up requirements E1 Identify and assess current and anticipated security risks and vulnerabilities E2 Research and evaluate alternative current and emerging practices, tools and technologies E3 Select and apply relevant tools to meet security goals and requirements E4 Monitor, evaluate and test security conditions and environment E5 Implement, extend, and refine physical security plans and practices 1 Define current systems-level requirements and forecast future needs and trends 2 Evaluate current and emerging tools and technologies 3 Evaluate organization s security strategies 4 Make recommendations regarding organization s investment in security 5 oordinate systems testing and integration 6 Audit and maintain systems performance and ensure future readiness ITSY OURSE 2401 A. The student will explain the basic functions of a firewall, list two types of firewalls comparing and contrasting their differences, and state the reasons why a firewall should be deployed. B. The student will analyze a hypothetical network security plan, select and document the firewall functions necessary to protect the network.

3 . Describe various possible firewall topologies that might be deployed, compare and contrast the various possibilities, select one of the topologies, and support that choice in writing. D. The student will document system security skills through firewall implementation and testing; use system tools, practices, and relevant technologies to implement a firewallbased security plan. E. The student will document and present an appropriate firewall policy for a given topology.. The student will evaluate and present a report on the various practices, tools, and technologies that are used to identify security breaches, sources of attacks, and protect mission critical systems through the use of firewalls. G. The student will research, document, and present the required hardware and software components required in order to implement a firewall-based solution for a given set of security requirements. H. The student will research, document, and present a report on the use of relevant tools to secure a network, respond to and follow up on various types of attacks. I. The student will design, document, and implement appropriate packet filtering rules. J. The student will design and document a logging policy, select logging options for the packet filtering rules, and configure the alert mechanism. K. The student will create a test plan for the firewall implementation. L. The student will research, develop, and implement a firewall rules to establish an appropriate level of security based on an analysis of security logs.) M. Based on a specifications from a given security plan, the student will develop and follow his or her documented procedure for installing and configuring the firewall operating system using the recognized best practices and industry security standards, then test the firewall to create an audit report that shows compliance with the security plan. To facilitate mastery of the above-listed competencies, the instructor will be responsible for: 1) gaining student's attention 2) informing student of objectives 3) stimulating recall of prior knowledge 4) presenting new material 5) providing guided practice 6) eliciting performance 7) providing feedback 8) assessing performance 9) enhancing retention and transfer of knowledge.

4 Evaluation: To demonstrate mastery of the competencies listed above, the student will be responsible for: 1) ompleting class assignments using instructional material and lecture notes. 2) Maintaining complete written documentation of the lab activities. 3) Implementing a firewall plan 4) Submitting documents for an implementation plan 5) Attending class and participating in the discussion PROIIENY LEVELS OR SANS OMPETENIES: 1) Rarely performs task 2) task with moderate supervision 3) task with minimal supervision 4) task 5) task over and beyond designated task OMPETENY-BASED OUTOMES WITH WORKPLAE PROIIENY LEVELS Resources Information Interpersonal Skills Systems Technology A B D E G H I J K L M

5 OMPETENY-BASED OUTOMES WITH OUNDATION SKILLS LEVELS Basic Skills Thinking Skills Personal Qualities A B D E G H I J K L M rarely performs task task w/moderate supervision Routinely performs task w/minimal supervision task task over/ beyond designated task