IS 672 Computer and Network Security (3 credits)

This course surveys threats to computer and network security and methods for preventing incursions at a graduate level. We study how vulnerabilities to these threats arise in the development and use of computer systems and survey the controls that can reduce or block these threats. The course will consist of weekly readings, homework questions, and hands-on labs.

Students must successfully complete IS 632 prior to enrolling for this course.

Example Syllabus - IS 672 Computer and Network Security

Each syllabus is an example of a course structure and assignments and is subject to change at any time by the course instructor or Program Director.

The most updated syllabus can be found at the following link: http://zaad.umbc.edu/class/672/672.syll.sp10.html

Course Schedule Spring 2009

The listed chapters in the text are to be read during the week. The Topics are links to the course web page for the week in the final version of the syllabus. This page includes all extra course material and homework questions that must be answered during that week (available under the assignments button). You are free to discuss the answers to these questions on the forums and to change your answers before the due date. The labs are hands-on exercises that require you to do certain tasks and post the results under Assignments on Blackboard. There is a lab due every few weeks. You should always start the lab in the first week and in some cases part of the lab is due in the first week as with lab1. Grading is as follows:

Examinations 1*25 points = 25%
Homework Questions 13*3 points = 39%
Homework Lab Exercises 6*6 points = 36%

The comprehensive examination is a timed test that is available in Blackboard. Once you start a test, you must complete it in the stated time limit. Once submitted, answers cannot be changed and you cannot repeat the test. These test is to be your own work and you are not to discuss or collaborate on them. The test will be similar but not identical to the homework. It is not intended to be difficult, but require a review of the major course material.

The text is: Security in Computing, 4/E, by C. Pfleeger and S. Pfleeger, Prentice Hall PTR, 2007.

Course Schedule (subject to minor changes):

Week Chapter Topic Lab
1 1 Introduction  
2 2a Cryptography  
3 2b/12 Cryptography LAB1 (Crypto)
4 3a Program Code  
5 3b Program Code  
6 4a Operating System Basics LAB2 (Viruses)
7 4b Operating System Basics  
8 5a Trusted Operating Systems LAB3 (OS)
9 5b Trusted Operating Systems  
10 6 Databases  
11 7a Networks LAB4 (DB)
12 7b Networks  
13 8, 11 Management Issues LAB5 (Port scans)
14 Readings XML Security  
15 Exam   LAB 6 (XML)