PRINCIPLES OF INFORMATION SECURITY

Teacher

Sangram Routray

Category

Core Courses

Course Attendees

Still no participant

Course Reviews

Still no reviews

Course Name : Principles of Information Security

Code(Credit) :CUTM1676(4-0-0)

Course Objectives

This course focuses on two aspects of Cyber Security: analysis and assessment of risk plus how to minimize it, and, how to extract and use digital information from a wide range of systems and devices. The course is structured so that all students cover the same introductory material, but then choose to specialize in either Cyber Security or Digital Forensics. Any aforesaid science graduate who requires keen interest & knowledge of IT programming languages with basic knowledge of math beyond calculus

Learning Outcomes

After studying this unit, you should be able to:

  • Understand the concepts of security and its types.
  • Understand what information security is and how it plays an important role today.
  • Distinguish the meaning of computer security, information security and network Security.
  • Describe the key security requirements of confidentiality, integrity, and availability.
  • Discuss the types of security threats and attacks.

Course Syllabus

                          MSCS1101:PRICIPLES OF INFORMATION SECURITY

 

MODULE (I):                                                                                                                       

 

Overview of Information Security- Threats - Frauds, Thefts, Malicious Hackers, Malicious Code, Denial-of-Services Attacks and Social Engineering, Vulnerability–Types, Risk–an introduction -Business Requirements - Information Security Definitions - Security Policies–Tier-1 (Origination-Level),Tier-2(Function Level), Tier-3 (Application/Device Level)–Procedures -Standards–Guidelines–Baselines.

 

MODULE (II):                                                                                                                     

 

Information Asset Classification–Information system Asset inventory, Asset Classification criteria, roles and responsibilities–Methodology-Declassification or Reclassification-Retention and Disposal of Information, Assets-Provide Authorization for Access.

 

MODULE (III):                                                                                                                    

Risk Management–Need for the Risk Assessment, Risk Assessment Methodology, Risk Assessment Components, Risk Mitigation Techniques.

 

MODULE (IV):                                                                                                                    

Information Security& Domains–Fundamental Principles of Security–Security Definitions – Control types–Security Frameworks - Personnel Security. Application Security, Legal & Compliance, Business Continuity Management, Cryptography, Physical & Environmental Security and Security Operations.

Session Plan

Session 1:(module-1)

Overview of Information Security

INFORMATION SECURITY( session-1)

Session 2:

Threats - Frauds, Thefts, Malicious Hackers

Threats to Information Security

Session 3:

Malicious Code, Denial-of-Services Attacks

Extracted pages from DoS-3

Session 4:

Social Engineering

SocialEngineering

Session 5:

Session 6:

An introduction -Business Requirements - Information Security

sri-infosec-140214054553-phpapp01

Session 7:

Security Policies–Tier-1 (Origination-Level),Tier-2(Function Level)

securitypoliciesandstandards-160512144619

Session 8:

Tier-3 (Application/Device Level)–Procedures -Standards–Guidelines–Baselines

pis session-8

Session 9:(module-2)

Information Asset Classification

PIS SESSION-10

Session 10:

Information system Asset inventory

PIS SESSION-11

Session 11:

Asset Classification criteria

PIS SESSION-12

Session 12:

roles and responsibilities–Methodology

05HYDROPONICS SPINACH - Harvest and Post harvest

Session 13:

Declassification or Reclassification

riskmanagement-130215051514-phpapp01

Session 14:

Retention and Disposal of Information

rrdp-2015-150306153440-conversion-gate01

Session 15:

Risk Mitigation Techniques

riskmanagement-130215051514-phpapp01

Session 16:

Session 17:

Risk Assessment Methodology

PIS SESSION-14A,pdf

Session 18:

Session 19:(module-3)

Session 20:

Session 21:

Risk Mitigation Techniques

risksthreatsandvulnerabilities-160528074732

Session 22:(module-4)

Information Security& Domains

securitypoliciesandstandards-160512144619

Session 23:

Fundamental Principles of Security

rolebasedaccesscontrol-rbac-140910002632-phpapp02

Session 24:

Security Definitions – Control types

informationclassification-170130095901

Session 25:

Security Frameworks - Personnel Security

PIS SESSION-24,pdf

Session 26:

Application Security

PIS SESSION-25,pdf

Session 27:

Legal & Compliance

PIS SESSION-26

Session 28:

Business Continuity Management

PIS SESSION-29_files

Session 30:

Physical & Environmental Security and Security Operations

PIS SESSION-30_files

Case Studies

Recent Comments

    Our Main Teachers

    Sangram Routray

    Assistant Professor
    VIEW PROFILE