USF Sarasota-Manatee CIS 4368 Database Security and Auditing Summer Office Hours: By Appointment

Transcription

1 USF Sarasota-Manatee CIS 4368 Database Security and Auditing Summer 2014 Instructor: John Collins Office: N/A Office Hours: By Appointment Canvas will be used in this class for all sessions. Group chat rooms, assignments, announcements, etc. will be handled via this application and the tools listed on it. Classes are Asynchronous and students are not required to attend live classes but are required to view the classes. Students must attend the first class or they will be automatically dropped. PREREQUISITES COP 3718 Intermediate Database Systems COURSE DESCRIPTION AND PURPOSE: In this course, we will take an in depth look at database security concepts and auditing techniques. We will examine theoretical concepts that make the world of security unique. Also, this course will adopt a practical hands-on approach when examining security techniques. Along with examining different security strategies, this course will explore the advancement of security implementation, as well as, timeless problem solving strategies. This course is broken into three sections: Security, Auditing and Implementation. Students will fully understand how to implement database security on modern business databases using practical scenarios and step-by-step examples that are presented throughout the text. Hands-on projects and case projects are used to reinforce and showcase the topics learned. The final chapter of the book allows the students to apply their knowledge in a presentation of four real-world cases using security and auditing. Specific topic coverage includes: Security Architecture Operating System Security Fundamentals Administration of Users Profiles, Password Policies, Privileges, and Roles Database Applications Security Models Virtual Private Databases

2 Database Auditing Models Application and Data Auditing Auditing Database Activities Security and Auditing Cases Project Security TEXT AND MATERIALS: Required Texts: Database Security and Auditing: Protecting Data Integrity and Accessibility (Paperback) by Hassan A. Afyouni Published by Course Technology; 1 edition (April 6, 2005) ISBN-10: ISBN-13: Optional text (for those that want a much more technical dive): Implementing Database Security and Auditing: Includes Examples for Oracle, SQL Server, DB2 UDB, Sybase (Paperback) by Ron Ben Natan Published by Digital Press (April 18, 2005) ISBN-10: ISBN-13: GRADING, EVALUATION AND ATTENDANCE POLICIES: The relative weights for each of these components in determining the final grade are as follows: Mid Term 50% Final or Penetration Test 50% A grade will be determined based on the total of possible points earned, as follows: A A

3 A B B B C C C D D D F Notice: permission to sell or redistribute notes or tapes of class lectures is forbidden. Do not replicate or pass along any items related to this course. COURSE SCHEDULE: Week Topics/Activities Chapters Covered 1 Security Architecture Afyoui 1 Natan 2 2 Operating Systems Security Fundamentals Afyoui 2 3 Administration of Users Afyoui 3 Natan 4 4 SQL Injection, Profiles, Password Policies, Privileges, and Roles Afyoui 4 5 Database Application Security Models Afyoui 5 Natan 5 6 Virtual Private Databases Afyoui 6

4 ** MID TERMS RELEASED *** 7 Database Auditing Models Afyoui 7 ** MID TERMS DUE ** Natan 13 ** Last day to drop with a 'W' is June XX. ** 8 Application Data Auditing Afyoui 8 Natan 12 9 Auditing Database Activities ** FINAL RELEASED ** Afyoui 9 Natan 1 10 ** PENETRATION TEST OR FINAL DUE ** RELIGIOUS OBSERVANCES: The University recognizes the right of students and faculty to observe major religious holidays. Students who anticipate the necessity of being absent from class for a major religious observance must provide notice of the date(s) to the instructor, in writing, by the second week of classes. DISABILITIES ACCOMMODATION: Students are responsible for registering with the Office of Students with Disabilities Services (SDS) in order to receive academic accommodations. Reasonable notice must be given to the SDS office (typically 5 working days) for accommodations to be arranged. It is the responsibility of the student to provide each instructor with a copy of the official Memo of Accommodation. Contact Information: Pat Lakey, Coordinator ACADEMIC DISHONESTY: The University considers any form of plagiarism or cheating on exams, projects, or papers to be unacceptable behavior. Please be sure to review the university s

5 policy in the catalog, USFSM Undergraduate Catalog or USFSM Graduate Catalog and the USF Student Code of Conduct. Undergraduate: gs/ Graduate: Catalogs/ USF Student Code of Conduct: ACADEMIC DISRUPTION: The University does not tolerate behavior that disrupts the learning process. The policy for addressing academic disruption is included with Academic Dishonesty in the catalog:, USFSM Undergraduate Catalog or USFSM Graduate Catalog and the USF Student Code of Conduct. Undergraduate: Graduate: USF Student Code of Conduct: CONTINGENCY PLANS: In the event of an emergency, it may be necessary for USFSM to suspend normal operations. During this time, USFSM may opt to continue delivery of instruction through methods that include but are not limited to: CANVAS, Elluminate, Skype, and messaging and/or an alternate schedule. It s the responsibility of the student to monitor the class site for each class for course specific communication, and the main USFSM and College websites, s, and MoBull messages for important general information. The USF hotline at 1 (800) is updated with pre-recorded information during an emergency. EMERGENCY PREPAREDNESS: It is strongly recommended that you become familiar with the USF Sarasota- Manatee Emergency Action Plan on the Safety Preparedness site FIRE ALARM INSTRUCTIONS: At the beginning of each semester please note the emergency exit maps posted in each classroom. These signs are marked with the primary evacuation route (red) and secondary evacuation route (orange) in case the building needs to be evacuated.