Advanced Information Security

Faculty: Sangram Routray

Course Name :
ADVANCED INFORMATION SECURITY



Code(Credit) : CUTM1624(4-0-0)


Course Objectives

• The objective of this course is to focus on the models, tools, and techniques for enforcement of security.
• Students will learn security from multiple perspectives.

Learning Outcomes

• Will gain familiarity with computer network, defences against them, and forensics to investigate the aftermath.
• Develop a basic understanding of Risk assessment
• Develop an understanding of security policies as well as protocols to implement such policies

Course Syllabus

MODULE (I):                                                                                            
Digital Rights Management- Meaning of Digital Rights Management (DRM) - Need for DRM and preventing illegal file sharing on the Internet - DRM schemes - Microsoft DRM 2.0, and the Content Scrambling System.
MODULE (II):                                                                                           
DRM Schemes–Advantages and disadvantages of DRM schemes - Requirements for a good DRM scheme- secure hardware, secure software, and an efficient legal system.
 
MODULE (III):                                                                                          
Operating System Security-Cryptology-Classical Encryption Techniques - Substitution Techniques - Transposition Techniques–-Permutation Methods - Confidentiality using conventional encryption - Placement of Encryption -Symmetric and Asymmetric crypto systems–common crypto standards and applications - Traffic Confidentiality – Key Distribution - Random Number Generation - Key Management - Generating Keys - Nonlinear Key spaces -Transferring Keys - Verifying Keys - Using Keys - Updating Keys - Storing Keys - Backup Keys – Compromised Keys - Lifetime of Keys - Destroying Keys - Public-Key Key infrastructure - Criminal Code Systems Analysis -Sports Bookmaking Codes - Horse Race Bookmaking Codes - Number Bookmaking Codes - Drug Codes – Pager Codes- Steganography.
 
MODULE (IV):                                                                                          
Database Security-Overview of Database - Database application security models-Data base auditing models-Application data auditing-Practices of database auditing. Data Loss prevention – Content Filtering - Device Control - Network DLP - Host DLP.

Session Plan

Session 1
Digital Rights Management
https://www.youtube.com/watch?v=l5DJPv-tvdc
Session 2
Meaning of Digital Rights Management
https://www.youtube.com/watch?v=4sbhzLh9XDE
Session 3
Need for DRM
https://www.youtube.com/watch?v=8NCRmhVmqB0
Session 4
preventing illegal file sharing on the Internet
Session 5
DRM schemes
Session 6
Microsoft DRM 2.0
Session 7
Content Scrambling System
Session 8
DRM Schemes
Session 9
Content Scrambling System
Session 10
Advantages and disadvantages of DRM schemes
Session 11
Requirements for a good DRM scheme
Session 12
secure hardware
Session 13
secure software
Session 14
an efficient legal system
Session 15
Cryptology
Session 16
Classical Encryption Techniques
Session 17
Substitution Techniques - Transposition Techniques
Session 18
Permutation Methods
Session 19
Confidentiality using conventional encryption
Session 20
Placement of Encryption
Session 21
Symmetric and Asymmetric crypto systems
Session 22
common crypto standards and applications
Session 23
Traffic Confidentiality
Session 24
Random Number Generation
Session 25
Key Management - Generating Keys
Session 26
Nonlinear Key spaces -Transferring Keys
Session 27
Verifying Keys - Using Keys
Session 28
Updating Keys - Storing Keys
Session 29
Backup Keys – Compromised Keys
Session 30
Lifetime of Keys - Destroying Keys
Session 31
Public-Key Key infrastructure
Session 32
Criminal Code Systems Analysis
Session 33
Sports Bookmaking Codes - Horse Race Bookmaking Codes
Session 34
Number Bookmaking Codes - Drug Codes
Session 35
Pager Codes- Steganography
Session 36
Database Security-Overview of Database
Session 37
Database application security models
Session 38
Data base auditing models
Session 39
Application data auditing,Practices of database auditing
Session 40
Data Loss Prevention, Content Filtering, Device Control, Network DLP,Host DLP

Case Studies


Case Studies