IS 672 Computer and Network Security (3 credits)

This course surveys threats to computer and network security and methods for preventing incursions at a graduate level. We study how vulnerabilities to these threats arise in the development and use of computer systems and survey the controls that can reduce or block these threats. The course will consist of weekly readings, homework questions, and hands-on labs.

Students must successfully complete IS 632 prior to enrolling for this course.

---

Example Syllabus - IS 672 Computer and Network Security

Each syllabus is an example of a course structure and assignments and is subject to change at any time by the course instructor or Program Director.

Academic Objectives

We specifically cover the following topics. Our objective is for each is conceptual understanding and practical application.

• Introduction- threats, vulnerabilities, and control
• Cryptography
• Security in programs
• Security in operating systems
• Security in networks
• Security Management
• Law, privacy, ethics

Required Text

The readings are all from the textbook Security in Computing, 3/E, by Charles P. Pfleeger and Shari Lawrence Pfleeger, Prentice Hall PTR, 2003.

References

• Computer Security, Matt Bishop, Addison-Wesley, 2003.
• Cryptography and Network Security, W. Stallings, Prentice-Hall, 2003.
• Network Security, Kaufman, Perlman, Spenciner, Prentice-Hall, 2003.
  

Grading

The course is graded based upon examinations, homework questions, and homework lab exercises with the following percentage contributions:

Examinations	2*20 points = 40%
Homework Questions	12*3 points = 36%
Homework Lab Exercises	6*4 points = 24%

The examinations are timed multiple choice tests that cover the readings. The homework questions are on-line questions that must be answered by the end of each week where they are recorded in a database and graded each Monday morning. They require critical reading of the text and understanding of the labs. The labs are hands-on exercises that allow us to experiment with security threats, prevention, and discovery using a special server at UMBC. All labs can be performed with a web browser, a terminal window, and access to the Internet.

Course Schedule

Week	Chapter	Topic	Homework Q’s	Lab Exercises
1	1	Introduction
2	2 and 10	Cryptography- symmetric	1 due	1 due
3	2	Cryptography- asymmetric	2 due
4	3	Program Code	3 due	2 due
5	3	Program Code	4 due
6	4	Operating System	5 due	3 due
7	4	Operating System	6 due
8	Exam 1
9	5	Operating System	7 due
10	5	Operating System	8 due	4 due
11	7	Network	9 due
12	7	Network	10 due	5 due
13	8	Management Issues	11 due
14	9	Legal and Ethical Issues	12 due	6 due
15	Exam2