Advanced Information Security

Teacher

Sangram Routray

Category

Core Courses

Course Attendees

Still no participant

Course Reviews

Still no reviews

Course Name :ADVANCED INFORMATION SECURITY

 

Code(Credit) : CUTM1624(4-0-0)

Course Objectives

Understand the Technical Aspects & Legal Aspects related to cyber crime and information security

Course Outcomes

  • SNO DESCRIPTION PO MAPPING
    CO1 able to learn investigation tools and techniques PO1, PO2, PO5, PO6, PO11, PO12
    CO2 analysis of data to identify evidence PO1, PO2, PO4, PO5, PO11
    CO3 Understand the Technical Aspects & Legal Aspects related to cyber crime PO1,PO2, PO5, PO6, PO7

Course Syllabus

MODULE (I):                                                                                            

 

Digital Rights Management- Meaning of Digital Rights Management (DRM) - Need for DRM and preventing illegal file sharing on the Internet - DRM schemes - Microsoft DRM 2.0, and the Content Scrambling System.

 

MODULE (II):                                                                                           

 

DRM Schemes–Advantages and disadvantages of DRM schemes - Requirements for a good DRM scheme- secure hardware, secure software, and an efficient legal system.

 

MODULE (III):                                                                                          

 

Operating System Security-Cryptology-Classical Encryption Techniques - Substitution Techniques - Transposition Techniques–-Permutation Methods - Confidentiality using conventional encryption - Placement of Encryption -Symmetric and Asymmetric crypto systems–common crypto standards and applications - Traffic Confidentiality – Key Distribution - Random Number Generation - Key Management - Generating Keys - Nonlinear Key spaces -Transferring Keys - Verifying Keys - Using Keys - Updating Keys - Storing Keys - Backup Keys – Compromised Keys - Lifetime of Keys - Destroying Keys - Public-Key Key infrastructure - Criminal Code Systems Analysis -Sports Bookmaking Codes - Horse Race Bookmaking Codes - Number Bookmaking Codes - Drug Codes – Pager Codes- Steganography.

 

MODULE (IV):                                                                                          

Database Security-Overview of Database - Database application security models-Data base auditing models-Application data auditing-Practices of database auditing. Data Loss prevention – Content Filtering - Device Control - Network DLP - Host DLP.

 

TEXT BOOK:

  • CISSP All-in-One Exam Guide by Shon Harris and Fernando Maymi, 7th Edition, McGraw-Hill Education, 1 June 2016.
  • Information Security Management handbook, 6th Edition, Harold F Tipton, Micki Krause, Auerbach Publications, 5 April 2012.
  • The World Beyond Digital Rights Management by Jude Umeh, 1st edition, BCS - The Chartered Institute for IT, 2009.

Cryptography and Network Security by Dr. William Stallings, 6th Edition, Pearson Education Publication, 01 Jan 2013.

 

REFERENCE BOOK:

 

  • The CISSP Prep Guide: Gold Edition by Ronald L. Krutz, Russel Dean Vines, Gold Edition, Wiley Publication, 31 Oct 2002.

Certified Information Systems Security Professional, Study Guide by Ed Tittle, Mike Chapple, James Michael Stewart, 6th Edition, Sybex Publication, 06 July 2012.

 

 

Session Plan

Session 1

Session 2

preventing illegal file sharing on the Internet

illigal file sharing

Session 3

Content Scrambling System and DRM Schemes-

Content Scramble System

Session 4

Advantages and disadvantages of DRM schemes-

Advantages and disadvantages of DRM schemes

Session 5

Requirements for a good DRM scheme

Requirements for a good DRM scheme

Session 6

secure hardware and Software

secure hardware and Software

Session 7

An efficient legal system

An efficient legal system

Session 8

Session 9

Classical Encryption Techniques

Classical Encryption Techniques

Session 10

Substitution Techniques - Transposition Techniques

Classical Encryption Techniques

Substitution techniques

Session 11

Permutation Methods

Permutation Methods

Session 12

Confidentiality using conventional encryption

Confidentiality using conventional encryption

Session 13

Placement of Encryption

Placement of Encryption

Session 14

Symmetric and Asymmetric crypto systems

Symmetric and Asymmetric crypto systems

Session 15

common crypto standards and applications

common crypto standards and applications

Session 16

Traffic Confidentiality

Traffic confidentiality

Session 17

Random Number Generation

Random Number Generation

Session 18

Key Management - Generating Keys

Key Management

Session 19

Nonlinear Key spaces -Transferring Keys

Nonlinear Key spaces

Session 20

Verifying Keys - Using Keys

Transferring Keys

Session 21

Updating Keys - Storing Keys

Updating Keys

Session 22

Backup Keys – Compromised Keys

Backup Keys

Session 23

Lifetime of Keys - Destroying Keys; Public key infrastucture

Lifetime of Keys

Session 24

Criminal Code Systems Analysis

Criminal Code Systems Analysis

Session 25

Sports Bookmaking Codes - Horse Race Bookmaking Codes

Sports Bookmaking Codes

Session 26

Number Bookmaking Codes - Drug Codes

Bookmaking codes

Session 27

Pager Codes- Steganography

Pager Codes

Session 28

Database Security-Overview of Database  and Database Application security model 

Database Security

Session 29

Data base auditing models

Data base auditing models

Session 30

Application data auditing, Practices of database auditing-

Application data auditing

Session 31

Data Loss Prevention, Content Filtering, Device Control, Network DLP, Host DLP-

Data Loss Prevention

Case Studies

Case Studies

Our Main Teachers

Sangram Routray

Assistant Professor
VIEW PROFILE