Course Name : Principles of Information Security

Code(Credit) :CUTM1618(4-0-0)

Course Objectives

The objective of this course is to focus on the models, tools, and techniques for the enforcement of security.
Students will learn security from multiple perspectives.
Understand the concepts of security and its types.
Understand what information security is and how it plays an important role today.
Distinguish the meaning of computer security, information security and network Security.
Describe the key security requirements of confidentiality, integrity, and availability.
Discuss the types of security threats and attacks.

Course Outcomes

SNO	DESCRIPTION	PO MAPPING
CO1	Will gain familiarity with computer network, defences against them, and forensics to investigate the aftermath.	PO1, PO2, PO3, PO6, PO8, PO10
CO2	Develop a basic understanding of Risk assessment	PO1, PO4, PO5, PO6,P11,P12
CO3	Develop an understanding of security policies as well as protocols to implement such policies	PO1,PO2, PO4, PO6, PO7,P10

Course Syllabus

MSCS1101:PRICIPLES OF INFORMATION SECURITY

MODULE (I):

Overview of Information Security- Threats - Frauds, Thefts, Malicious Hackers, Malicious Code, Denial-of-Services Attacks and Social Engineering, Vulnerability–Types, Risk–an introduction -Business Requirements - Information Security Definitions - Security Policies–Tier-1 (Origination-Level),Tier-2(Function Level), Tier-3 (Application/Device Level)–Procedures -Standards–Guidelines–Baselines.

MODULE (II):

Information Asset Classification–Information system Asset inventory, Asset Classification criteria, roles and responsibilities–Methodology-Declassification or Reclassification-Retention and Disposal of Information, Assets-Provide Authorization for Access.

MODULE (III):

Risk Management–Need for the Risk Assessment, Risk Assessment Methodology, Risk Assessment Components, Risk Mitigation Techniques.

MODULE (IV):

Information Security& Domains–Fundamental Principles of Security–Security Definitions – Control types–Security Frameworks - Personnel Security. Application Security, Legal & Compliance, Business Continuity Management, Cryptography, Physical & Environmental Security and Security Operations.

Text Book:

CISSP All-in-One Exam Guide by Shon Harris and Fernando Maymi, 7 Edition, McGraw-Hill Education, 1 June 2016.
Information Security Management handbook, 6thEdition, Harold F Tipton, Micki Krause, Auerbach Publications, 5 April 2012.
The CISSP Prep Guide: Gold Edition by Ronald L. Krutz, Russel Dean Vines, Gold Edition, Wiley Publication, 31 Oct 2002.

Reference Book:

Certified Information Systems Security Professional, Study Guide by Ed Tittle, Mike Chapple, James Michael Stewart, 6th Edition, Sybex Publication, 06 July 2012.