Advanced Information Security


Sangram Routray


Core Courses

Course Attendees

Still no participant

Course Reviews

Still no reviews



Code(Credit) : CUTM1624(4-0-0)

Course Objectives

Understand the Technical Aspects & Legal Aspects related to cyber crime and information security

Course Outcomes

    CO1 able to learn investigation tools and techniques PO1, PO2, PO5, PO6, PO11, PO12
    CO2 analysis of data to identify evidence PO1, PO2, PO4, PO5, PO11
    CO3 Understand the Technical Aspects & Legal Aspects related to cyber crime PO1,PO2, PO5, PO6, PO7

Course Syllabus

MODULE (I):                                                                                            


Digital Rights Management- Meaning of Digital Rights Management (DRM) - Need for DRM and preventing illegal file sharing on the Internet - DRM schemes - Microsoft DRM 2.0, and the Content Scrambling System.


MODULE (II):                                                                                           


DRM Schemes–Advantages and disadvantages of DRM schemes - Requirements for a good DRM scheme- secure hardware, secure software, and an efficient legal system.


MODULE (III):                                                                                          


Operating System Security-Cryptology-Classical Encryption Techniques - Substitution Techniques - Transposition Techniques–-Permutation Methods - Confidentiality using conventional encryption - Placement of Encryption -Symmetric and Asymmetric crypto systems–common crypto standards and applications - Traffic Confidentiality – Key Distribution - Random Number Generation - Key Management - Generating Keys - Nonlinear Key spaces -Transferring Keys - Verifying Keys - Using Keys - Updating Keys - Storing Keys - Backup Keys – Compromised Keys - Lifetime of Keys - Destroying Keys - Public-Key Key infrastructure - Criminal Code Systems Analysis -Sports Bookmaking Codes - Horse Race Bookmaking Codes - Number Bookmaking Codes - Drug Codes – Pager Codes- Steganography.


MODULE (IV):                                                                                          

Database Security-Overview of Database - Database application security models-Data base auditing models-Application data auditing-Practices of database auditing. Data Loss prevention – Content Filtering - Device Control - Network DLP - Host DLP.



  • CISSP All-in-One Exam Guide by Shon Harris and Fernando Maymi, 7th Edition, McGraw-Hill Education, 1 June 2016.
  • Information Security Management handbook, 6th Edition, Harold F Tipton, Micki Krause, Auerbach Publications, 5 April 2012.
  • The World Beyond Digital Rights Management by Jude Umeh, 1st edition, BCS - The Chartered Institute for IT, 2009.

Cryptography and Network Security by Dr. William Stallings, 6th Edition, Pearson Education Publication, 01 Jan 2013.




  • The CISSP Prep Guide: Gold Edition by Ronald L. Krutz, Russel Dean Vines, Gold Edition, Wiley Publication, 31 Oct 2002.

Certified Information Systems Security Professional, Study Guide by Ed Tittle, Mike Chapple, James Michael Stewart, 6th Edition, Sybex Publication, 06 July 2012.



Session Plan

Session 1

Session 2

preventing illegal file sharing on the Internet

illigal file sharing

Session 3

Content Scrambling System and DRM Schemes-

Content Scramble System

Session 4

Advantages and disadvantages of DRM schemes-

Advantages and disadvantages of DRM schemes

Session 5

Requirements for a good DRM scheme

Session 6

secure hardware and Software

Session 7

An efficient legal system

Session 8


Session 9

Classical Encryption Techniques

Session 10

Substitution Techniques - Transposition Techniques

Session 11

Permutation Methods

Session 12

Confidentiality using conventional encryption

Session 13

Placement of Encryption

Session 14

Symmetric and Asymmetric crypto systems

Session 15

common crypto standards and applications

Session 16

Traffic Confidentiality

Session 17

Random Number Generation

Session 18

Key Management - Generating Keys

Session 19

Nonlinear Key spaces -Transferring Keys

Session 20

Verifying Keys - Using Keys

Session 21

Updating Keys - Storing Keys

Session 22

Backup Keys – Compromised Keys

Session 23

Lifetime of Keys - Destroying Keys; Public key infrastucture

Session 24

Criminal Code Systems Analysis

Session 25

Sports Bookmaking Codes - Horse Race Bookmaking Codes

Session 26

Number Bookmaking Codes - Drug Codes

Session 27

Pager Codes- Steganography

Session 28

Database Security-Overview of Database  and Database Application security model 

Session 29

Data base auditing models

Session 30

Application data auditing,Practices of database auditing

Session 31

Data Loss Prevention, Content Filtering, Device Control, Network DLP,Host DLP

Case Studies

Case Studies

Our Main Teachers

Sangram Routray

Assistant Professor