Computer and = Network=20 Security

SEC-250 Course = Syllabus=20

Contact Information

Instructor

Chalmer Lowe

Email

mailto:chalmer.lowe@gmail.com = (preferred)
chalmer.lowe@gmail.com=20 (available, if necessary)

Office hours

Virtual Office hours: Thursday evening 7:30 PM-9:30 PM=20 EST
NOTE: If you need help outside these hours, don't = hesitate to=20 contact me.

Phone

Cell: 443.867.2715
Work: 410.694.3615 (I am = accessible=20 at work, if absolutely necessary)

Course Information

Course Title

Computer and Network Security

Course Number

SEC-250

Course Description

This course provides an introduction to computer and data = network=20 security. Students will examine the rationale and necessity for = securing=20 computer systems and data networks, as well as methodologies for=20 implementing security, security policies, best current practices, = testing=20 security, and incident response.

Course Dates

09/02/2008 - 12/18/2008

Student Centered Learning Outcomes =

Through the use of discussions, projects, written essays, = activities=20 and case studies, students will develop the abilities and = competencies=20 that will enable them to:

Classify and summarize the major = components of=20 computer and network security, and information assurance.=20
Analyze the impact of security policies = and user=20 security awareness to the "secure" operation of a network and = the=20 organization, in general.=20
Evaluate the security vulnerabilities of = common=20 operating systems and data protocols.=20
Design countermeasures and other ways to = mitigate=20 common security vulnerabilities.=20
Plan a security policy for a given = networking=20 environment. =20
Implement a plan by which you can keep = current on=20 security events and notices.=20
Describe the ethical and legal = considerations=20 associated with "attacking" computer systems and networks. =

This course will present varying levels of technical detail on = the=20 topics discussed, but won't dwell too much on theory or = mathematics. This=20 is intended to be a general, practical course.

It is expected that students coming into this course have a = basic=20 understanding of network access; LAN and WAN technologies; the OSI = protocol reference model; TCP/IP; the role of operating systems; = and at=20 least a passing familiarity with Windows and Unix/Linux. All of = these=20 topics will be discussed at some level of detail in this course = and it is=20 assumed that students have already had an introduction to these=20 topics.

Textbooks

Required Texts

Security in Computing, Charles Pfleeger and Shari = Pfleeger,=20 Prentice Hall PTR, 4th edition, 2006, ISBN: = 0132390779

Supplemental Texts

Network Security: The Complete = Reference,=20 Mark Rhodes-Ousley, Roberta Bragg and Keith Strassberg,=20 McGraw-Hill Osborne, 2004, ISBN: 0072226978

Security Engineering, Ross J. Anderson, Wiley, = 2008,=20 ISBN: 0470068523

Principles of Information Security, Third = Edition,=20 Michael E. Whitman and Herbert J. Mattord, Course = Technology, 2007,=20 ISBN: 1423901770

All-in-One CISSP Exam Guide, 4th Ed, Shon = Harris,=20 McGraw-Hill Osborne, 2007, ISBN: 0071497870

Other Supplementary Readings/Resources

Gary = Kessler's Web site,=20 GaryKessler.net, has a number of papers and = articles=20 on topics related to this course. In particular, his set of=20 Security-Related URLs at http://www.garykessler.net/library/securityurl.html=20 may be particularly useful.=20
Packet sniffers and protocol analyzers are = useful=20 tools for monitoring networks. We will have many examples using = one such=20 tool called tcpdump (and its Windows equivalent, WinDump). = Students are=20 encouraged to obtain tcpdump/WinDump and/or Wireshark/Analyzer. = You might=20 also find it useful to download this TCP/IP Pocket Reference Guide.

Topic Outline

The main objective of this course is to = provide you=20 with an understanding of the important security-related = considerations=20 when implementing computers, servers, and networks. To that end, = we will=20 cover a large set of topics, including:

Security architectures and models
TCP/IP basics
Cryptography
Information security tools and techniques
Malware
Attacks
Defenses
Operating system and application security
Network security
Physical security
Social engineering
Ethics =

Methods of Assessment

All assignments/exams/projects/discussions etc., are to be = submitted by=20 11:55 PM EST on the due = date shown=20 in the Course Schedule. The due date is last day of the class = week, as=20 defined in the Course Schedule.

Late assignments will NOT be=20 accepted unless you have the instructor's prior approval! = If you suspect that you will have a problem submitting = an=20 assignment, please contact me right away! Murphy's Law, = being what=20 it is, may cause network connectivity problems or other delays, = etc. so do=20 not procrastinate your submissions.

Participation and Engagement
Attendance = and=20 involvement is measured though your presence and participation in = all=20 aspects of the class. Your participation is extremely important to = the=20 learning experience for both you and your classmates.

Success in this course depends upon continuity so it is = critically=20 important for you to check in to the class regularly, ask = questions, and=20 participate regularly in discussions =97 in other words, stay=20 engaged!.

Grades
Your final grade will be determined = based=20 on these graded elements (a detailed description of each is = included later=20 in the syllabus):

Graded Elements

Weights

Weekly Assignments (Average)

25%

Midterm Exam

20%

Final Exam

20%

Project

20%

Discussions

15%

Total

100 pts.=20

All graded elements will be graded using the = grading=20 matrix below:

Action Learning=20 Grading System

Written Assignment Guidelines

Low=20 Score

Visual & Creative=20 Aspects

Technical Quality & Presentation =

Includes spelling errors, poor punctuation and sentence=20 structure. Sloppy presentation. Sentences and phrases are = difficult=20 to understand.

Care and attention to detail. Careful use of color, = layout,=20 titles etc.

Integration of Material

Important concepts missed or are not addressed fully. =

Concepts are explained, where approprite, using visual = aides=20 (pictures, graphs).

Expression: Quality & Organization =

Sentences lack expression and wouldn't generate any = interest in=20 the typical reader. Organization of thoughts is=20 unclear.

Visual aides are clean and = attractive and do=20 not detract from the message. Visual aides support the = message=20 in the text.

Creativity & Critical Thinking =

Reiterate course material with no interpretation or=20 self-expression. Use only short and hollow explanations. = Take the=20 safe way out.

Visual aides are=20 creative.

High=20 Score

Spelling, sentence structure and grammar are correct. = Material is=20 formatted/presented in manner that is easy to read. = Layout is=20 easy to follow.

Important concepts are included and addressed = fully. =20 Outside examples and/or research are included. Concepts are=20 explained in your own words.

Thoughts are well developed and laid out in a logical = sequence.=20 Sentences relate to each other with feeling.

Interpret concepts and find outside examples (statistics, = research, etc.) that support or contradict them. = Demonstrates the=20 ability to take risk.

Weekly Assignments:
Each assignment, includes one or more of the = following parts:
- Part 1: A question or questions to answer =
- Part 2: A security topic of the week = (STOW)=20
Assignments are posted in the Assignment Tool. The assignment = document has a place for your response to all of the assigned = parts that=20 are due that week. I will take the average of all of your grades = for=20 weekly assignments.

Part 1: The question(s) should be=20 self-explanatory. Your answers should be short and to the point, = however, if the question is multi-part, make absolutely = certain=20 you address each part! There is no minimum page = requirement for=20 this portion of the assignment.

Part 2: Your security topic of the = week (STOW)=20 should be a brief summary of some independent = research=20 that relates to the reading, and should = no more than 1 page in length. = Explore a=20 topic from the reading that interests you. Your goal here, is to = learn=20 something new. A creative way to achieve this = is to try=20 and find something about the topic that I don't know.
- In your write-up, tell me what you found important or = significant,=20 what interested you, etc. =97 and most importantly = why?=20
- Think critically about the issues and involve yourself in = your=20 writing=20
- Do not just regurgitate what you found on some web-site =
The STOW needs to relate to the reading but can come from = anywhere: a=20 mailing list that you monitor, some security-related site, a = friend, the=20 Burlington Free Press, an experience from your workplace, = etc.=20 Use your imagination.

When crafting your weekly assignments and responses to = discussions,=20 remember this quote from Herb Caen, former columnist for the = San=20 Francisco Chronicle: "Any clod can have the facts, but = having an=20 opinion is an art." Have an opinion, feel free to express it AND = be sure=20 to support it!
Mid-Term and Final Exams: =
The exam questions are typically short essay questions. The = exam=20 questions will be similar in nature to the Class Discussion = questions=20 and the Weekly Assignment questions. You will have approximately = 7 days=20 to complete each exam.
Projects:=20
You will produce a written paper and a powerpoint = presentation=20 related to an information security topic of your choice. More = detail=20 will be provided during the semester, along with the grading = rubric, but=20 you can start thinking about topics now!
Class Discussion Forums:=20
Class discussions, in which you willingly share your thoughts = and=20 ideas, are an integral part of the class and the learning = process. Your=20 discussion grade will be based on these guidelines. Note, the = guidelines=20 in RED are critical!
1. Did you answer the = question posed?=20 OR did you build on another's thinking? AND=20
2. Did you respond to at = least 2=20 other people's responses with questions or comments that = provoke=20 elaboration?=20
3. Did you bring in resources from outside = the class=20 materials (websites, readings from another class, work = experience,=20 etc)?=20
4. Did you link the comments of two people = in a very=20 explicit way that has not been expressed?=20
5. Did you demonstrate your interest with = an active=20 listening question to another?=20
6. Did you use the course materials, = including quotes=20 from readings, as "evidence" to support your thinking?=20
7. Did you avoid unsupported opinion? =
NOTE: Posts such as "I agree!" and = "Good=20 answer!" do not meet the minimum requirement for responding to = other's=20 posts.

Grade Calculation

The following scale will be used to determine letter = grades:

Grade

Range

93+

A-

90-92

B+

87-89

83-86

B-

80-82

C+

77-79

73-76

C-

70-72

D+

67-69

63-66

D-

60-62

Below = 60

Students With Special Needs

If you believe that you have a disability requiring = accommodations in=20 this class, please contact the Coordinator of Support Services for = Students with Disabilities as soon as possible. They will work = with you to=20 fill out an accommodation form. After you receive your approved=20 accommodation form, please see me so that I can work with you to = implement=20 an accommodations in a timely fashion.

Contact: Julie Reville, = Coordinator of Services for Students With Disabilities, Phone:=20 802-651-5961; Email: jreville@champlain.edu

Academic Honesty Policy

In the preparation and presentation of any assigned = work-including=20 examinations, tests, quizzes, term papers, reports, themes and = other=20 written or oral exercises-every student shall conform to a strict = standard=20 of academic honesty. Any attempt to deceive a faculty member or to = help=20 another student to do so will be considered a violation of this = standard.=20 In all assignments, students must acknowledge the words and/or = ideas of=20 others taken from print or electronic media, whether a direct = quotation or=20 a paraphrase; any omission of this is dishonest. Cheating on = examinations=20 or tests consists of knowingly giving, receiving or using-or = attempting to=20 give, receive or use-unauthorized assistance during an examination = or=20 test. A faculty member may record a grade of "zero" for any = assignment on=20 which a student has plagiarized or cheated. For repeat offenses = within a=20 single course, the faculty member may record a grade of "F" for = the=20 course. Violations of this policy in multiple courses may result = in=20 dismissal from the College. A student may appeal these decisions = according=20 to the Academic Grievance Procedure.

If you are having trouble during the = course of=20 this class, please contact me to discuss it. I will do all that I = can to=20 help you be successful.

Additional information

My Teaching = Philosophy

I am here to help you learn. My door is always open, = especially, if you=20 are having troubles. I expect hard work and I expect honesty and = respect=20 for me and for your fellow students. I will do my best to provide = the same=20 to you. I recognize that I am merely human and will on occasion, = make=20 mistakes...If something concerns you, please feel free to discuss = it with=20 me, so that I can try to serve you better.

Core Competencies

The Champlain = College faculty and administration = have=20 committed that our curricula will address these seven critical = core=20 competencies:

Technology=20
Critical and Creative Thinking=20
Global Studies=20
Oral Communication=20
Written Communication=20
Quantitative Literacy=20
Ethical Reasoning

This course addresses these competencies as outlined below.

Technology

Computer and network security is an important =97 and growing = =97 area of=20 concern by all segments of our society today, from business and = government=20 to education and recreation. By its nature, it is a technical = topic. This=20 course discusses a wide range of issues related to computer, = network, and=20 telecommunications technologies, including hardware, operating = systems,=20 software, network applications, communication protocols, local and = wide=20 area networks, and policies.

Students will be exposed to the myriad aspects of information = security=20 and the emerging field of "information assurance." Students will = learn=20 about defensive tools, policies, informational resources, and = strategies=20 as well as offensive tools and methods used by attackers. In = addition,=20 security-related policies and procedures are also described, and=20 discussion ranges from protecting personal systems to enterprise=20 security.

Critical and Creative Thinking

Due to the broad and highly technical nature of computer and = network=20 security, the ability to think critically must become second = nature to its=20 practitioners. When implementing, designing, or altering any = system,=20 security of the individual component as well as the system as a = whole must=20 be considered. When a security vulnerability is found in one = component of=20 the network, one must anticipate other possible exposures or=20 vulnerabilities. Policies and procedures must be defined that are = relevant=20 to an organization, functional, and useable =97 and enforceable. = Abnormal=20 computer and network events must be analyzed to determine if they = are=20 accidents, innocuous incidents, or purposeful attacks. The very = nature of=20 this business is critical thinking.

And there is more. An information security professional must = build=20 defensive systems while thinking like an attacker. All systems = have a weak=20 link from a security perspective; the infosec professional has to=20 determine and shore up those weak points =97 and that means being = able to=20 think like the Bad Guy.

Finally, all of this has to be kept in perspective. Just as = information=20 technology supports an organization, information security must = also be=20 applied in a rational way that fits in with the business and the = people.=20 There is no such thing as perfect security; all we can do is = mitigate the=20 risks. The infosec professional, then, has to determine just how = much=20 security is enough, recognizing that there may be several correct=20 solutions.

Critical thinking is reinforced by homework assignments and = classroom=20 discussions. Rather than focus on bare "facts," the homework and = class=20 meetings focus more on how the subject matter integrates with = other things=20 that students know and will learn in the future. We also examine = how a=20 student's attitudes may change as their level of knowledge =97 and = responsibility =97 changes.

Global Studies

International awareness is not a major focus of this course = and, in=20 fact, there are few aspects of information assurance that are=20 geography-specific. The technology is relatively universal and, = therefore,=20 the technical solutions are universal. Laws, however, vary=20 country-by-country so that actions that are illegal in some = countries are=20 legal in others (such as unleashing a virus). Although not = emphasized, the=20 course does describe some of the geographical, political, and = cultural=20 differences as they apply to legal aspects, privacy expectations, = and=20 acceptable use policies. The relationship between information = warfare and=20 geopolitics is also briefly examined.

Oral and Written Communication

To be successful in the business world, professionals must be = able to=20 communicate in both written and oral form. While this course = focuses on=20 the technical aspects of information security, that knowledge is = nearly=20 useless if it cannot be communicated.

The information security professional must be able to = communicate to=20 many audiences on many levels:

Communication with peers and managers at = the=20 technical level. This requires an understanding of computer, = networking,=20 and security concepts, as well as the proper vernacular.=20
Communication with users, generally at a=20 non-technical level. A successful technologist must be able to=20 communicate the technical solution to a user's problem or = business needs=20 in understandable terms. This is often the most challenging = portion of a=20 professional's development.=20
Communication with individuals at all = levels within=20 an organization with all levels of understanding. This includes = upper=20 management and supervisors to peers and subordinates, ranging = from the=20 technophobe to the technophile.

This course will provide students with ample opportunity to = practice=20 their communication skills through the weekly homework assignments = and=20 classroom discussions, but even more so through the research = project that=20 is part research paper and part presentation. All assignments = include=20 grammar and composition as a component of grading.

Quantitative Literacy

Information security professionals have to be able to analyze = patterns=20 of activity to differentiate between normal and abnormal activity. = Most of=20 the information on computers and networks involves numbers and = symbols,=20 and the infosec professional needs to be able to find the = connections=20 between events and form a response strategy. This course will = provide=20 students with ample opportunity to practice quantitative literacy = through=20 the weekly homework assignments and classroom discussions.

Ethical Reasoning

The use of networks and information often requires ethical=20 considerations -- e.g., how to employ individuals' private = information=20 that is stored on a server, appropriate use of corporate network=20 resources, and how to respond to a potentially unethical request = by a=20 supervisor. Furthermore, information security managers are = involved in the=20 creation of infosec policies and procedures for an organization, = generally=20 requiring that users' activities be given a framework, including = ethical=20 behaviors. Ethical reasoning is specifically addressed in this=20 course.