INFO 333 Introduction to Information Security Spring 2014

Professor: "#mai!: )ime and C!assroom Office and P one: Office 1ours: C ris Carro!! c$c334%dre&e!'edu P!ease inc!ude course num(er in su($ect' )uesdays and ) ursdays 2:00 P* 3:20 P* +ecture ,us ,oom 0,us 134. 21/#/01#430)uesdays 10:30 2* 12:00 noon ) ursdays: 1:00 P* 2:00 P* Fridays: 1:00 P* 2:30 P* or (y appointment Princip!es of Information Security. Fourt "dition 3y *ic ae! "' 4 itman. 1er(ert 5' *attord Pu(!is ed (y Cenage +earning IS3N#13: 607#1#111#13721#6 IS3N#10: 1#111#13721#4 2ny course materia!. assignments and !a(s 9i!! (e posted in t e "!ectronic 3!ac8(oard used for t e course'

)e&t:

"!ectronic 3!ac8(oard

COURSE OVERVIEW ) e course presents introduction to t e :arious tec nica! and administrati:e aspects of information security and assurance' ) is course pro:ides t e foundation for understanding t e 8ey issues associated 9it protecting information assets. determining t e !e:e!s of protection and response to security incidents. and designing a consistent. reasona(!e information security system. 9it appropriate intrusion detection and reporting features' ) e purpose of t e course is to pro:ide t e student 9it an o:er:ie9 of t e fie!d of information security and assurance' Students 9i!! (e e&posed to t e spectrum of security acti:ities. met ods. met odo!ogies. and procedures' Co:erage 9i!! inc!ude inspection and protection of information assets. detection of and reaction to t reats to information assets. and e&amination of pre and post incident procedures. tec nica! and manageria! responses. and an o:er:ie9 of t e information security p!anning and staffing functions' COURSE OBJECTIVES

Identify and prioriti;e information assets Identify and prioriti;e t reats to information assets <escri(e !ega! and pu(!ic re!ations imp!ications of security and pri:acy issues <efine an information security strategy and arc itecture P!an for and respond to intruders in an information system Present a disaster reco:ery p!an for reco:ery of information assets after an incident Create cip er te&t using an encryption a!gorit m

ADDITIONAL COURSE MATERIALS

This outline is tentative, and topics may change or be reorganized due to the direction and flow of the class.

+ecture s!ides !a(s 9i!! (e posted eac 9ee8 in 3!ac8(oard +"2,N' ,eading and discussion assignments 9i!! (e posted on +"2,N and 9i!! focus on app!ying 9 at you !earn from t e te&t and !ectures' <iscussion topics 9i!! inc!ude e&amining and discussing documented security incidents in:o!:ing go:ernments and industry' GRADES =our fina! grade 9i!! (e (ased on your grades on ome9or8 assignments. c!ass participation and t9o e&ams' ) ere 9i!! (e 4#- ome9or8 assignments a!ong 9it a 9ritten report and t ese 9i!! count to9ards your fina! grade' I may ad$ust fina! assignment grades (ased on c!ass attendance' 1ome9or8 assignments are due as posted in +"2,N' >n!ess ot er9ise stated ome9or8 assignments 9i!! (e due at t e (eginning of c!ass printed on paper' Written Report Suggested papers for t e report 9i!! (e p!aced on#!ine' 1o9e:er. as !ong as t e papers you c oose are from I""". 2C*. 3!ac8 at. or SPI" conferences or $ourna!s and are re!ated to information security t ey 9i!! (e accepta(!e' 2ssignments anded in !ate 9i!! recei:e deductions as fo!!o9s: 24 ours !ate 10 ? deduction @I": a 100 point assignment 9i!! recei:e a 10 point deductionA 47 ours !ate 2/ ? deduction @I": a 100 point assignment 9i!! recei:e a 2/ point deductionA *ore t an 47 ours !ate t e assignment 9i!! recei:e an F or ;ero for t e assignment' In t e e:ent t at an assignment is permitted to (e anded in e!ectronica!!y. t e time stamp on 9 en I recei:e t e assignment in 3!ac8(oard. @not t e time t at you sent it outA. 9i!! (e used to determine if t e assignment 9as anded in on time' Fina! grades 9i!! (e computed as fo!!o9s: *id#term "&am 20 ? 1ome9or8 2ssignments 30 ? C!ass Participation 10 ? 4ritten Pro$ect 20 ? Fina! "&am 20 ? Fina! grades 9i!! (e recorded according to t e ru(ric (e!o9: 2B 60#100. 2 63#6-. 2# 60#62 3B 70#76. 3 73#7-. 3# 70#72. CB 00#06. C 03#0-. C# 00#02 <B -0#-6. < -3#-F: 0#-2 EXPECTATIONS I e&pect students to attend a!! sc edu!ed !ecture sessions' ) e !ectures 9i!! emp asi;e t e important topics t at 9i!! most !i8e!y appear on tests' Ce!!CSmart p ones must (e p!aced on :i(rate or DstunE mode during a!! sessions' C!ass disruptions of any sort 9i!! a:e an impact on your grade' I e&pect students to come to c!ass prepared and ready to pay attentionF t is inc!udes
This outline is tentative, and topics may change or be reorganized due to the direction and flow of the class.

a:oiding distractions suc as !ogging into Face(oo8 9 i!e in c!ass' In t e e:ent t at I need to emai! t e entire c!ass or an indi:idua! student I 9i!! on!y use <re&e! emai! addresses' ACADEMIC DISHONESTY <re&e! >ni:ersity is committed to a !earning en:ironment t at em(races onesty' <re&e! as :ery strict po!icies on copying ot er peop!eGs 9or8 and su(mitting it as your o9n' 2n e&p!anation of 9 at constitutes academic dis onesty can (e found on t e Pro:ostGs 9e(site at: ttp:CC999'dre&e!'eduCpro:ostCpo!iciesCacademicHdis onesty'asp 2n e&p!anation of t e sanctions gi:en for academic dis onesty can (e found in your Student 1and(oo8 and on t e 9e(site of t e Office of Conduct and Community Standards at ttp:CC999'dre&e!'eduCstudent!ifeC$udicia!C onesty' tm! STUDENTS WITH DISABILITIES If you a:e any type of disa(i!ity t at 9i!! interfere 9it your participation and compre ension in t is c!ass. or 9it comp!etion of assignments. p!ease contact t e Office of <isa(i!ity Ser:ices as soon as possi(!e' Student 9it disa(i!ities reIuesting accommodations and ser:ices at <re&e! >ni:ersity need to present a current accommodation :erification !etter @2J+A to facu!ty (efore accommodations can (e made' 2J+Ks are issued (y t e Office of <isa(i!ity Ser:ices @O<SA' For additiona! information. contact t e O<S at ttp:CC999'dre&e!'eduCO<S. 3201 2rc St'. Ste' 210. P i!ade!p ia. P2 16104. P one 21/#76/#1401' COURSE OUTLINE Week D te!"# 1 2 3 4 / 0 7 6 10 11 4C1. 4C3 4C7. 4C10 4C1/. 4C10 4C22. 4C24 4C26. /C1 /C-. /C7 /C13. /C1/ /C20. /C22 /C20. /C26 -C3. -C/ Topi$" Introduction ) e Need for Security +ega! . "t ica!. and Professiona! Issues ,is8 *anagement *id )erm "&amF P!anning for Security P!anning for Security Security )ec no!ogy: Fire9a!!s Security )ec no!ogy: JPNGs. I<S. IPS. and ot er )oo!s Cryptograp y Cryptograp y F P ysica! Security Imp!ementing Security F ,e:ei9 for Fina! &in ' E( ) C% pter 1 2 3 4 "&am 1#4. Start / /C-C0 7 6 10 -#10

This outline is tentative, and topics may change or be reorganized due to the direction and flow of the class.

2ssignments are due as fo!!o9s: Week A$ti*it+ D,e D ,r in 4ee8 2 4ee8 3 4ee8 4

1 2 3 4 / 6

1ome9or8 2ssignment 1 1ome9or8 2ssignment 2 1ome9or8 2ssignment 3 # 1ome9or8 2ssignment 4 4ee8 4ritten ,eport 2ssignment 4ee8 7 1ome9or8 2ssignment / 4ee8 10

IST $o,r"e" ) + .e re$or/e/ n/ "tre )e/ 0or e/,$ tion ' ,"e1 C!ass !ectures @not !a(sA 9i!! (e recorded using t e "c o 3-0 capture system' ,ecorded c!asses may (e :ie9ed on 3!ac8(oard @ ttp:CCdre&e!'(!ac8(oard'comCA under t e C!ass Capture !in8'

This outline is tentative, and topics may change or be reorganized due to the direction and flow of the class.