PRINCIPLES OF INFORMATION SECURITY

Teacher

Sangram Routray

Category

Core Courses

Course Attendees

Still no participant

Course Reviews

Still no reviews

Course Name : Principles of Information Security

Code(Credit) :CUTM1618(4-0-0)

Course Objectives

  • The objective of this course is to focus on the models, tools, and techniques for the enforcement of security.
  • Students will learn security from multiple perspectives.
  • Understand the concepts of security and its types.
  • Understand what information security is and how it plays an important role today.
  • Distinguish the meaning of computer security, information security and network Security.
  • Describe the key security requirements of confidentiality, integrity, and availability.
  • Discuss the types of security threats and attacks.

Course Outcomes

SNO DESCRIPTION PO MAPPING
CO1 Will gain familiarity with computer network, defences against them, and forensics to investigate the aftermath. PO1, PO2, PO3, PO6, PO8, PO10
CO2 Develop a basic understanding of Risk assessment PO1,  PO4, PO5, PO6,P11,P12
CO3 Develop an understanding of security policies as well as protocols to implement such policies PO1,PO2, PO4, PO6, PO7,P10

Course Syllabus

                          MSCS1101:PRICIPLES OF INFORMATION SECURITY

 

MODULE (I):                                                                                                                       

 

Overview of Information Security- Threats - Frauds, Thefts, Malicious Hackers, Malicious Code, Denial-of-Services Attacks and Social Engineering, Vulnerability–Types, Risk–an introduction -Business Requirements - Information Security Definitions - Security Policies–Tier-1 (Origination-Level),Tier-2(Function Level), Tier-3 (Application/Device Level)–Procedures -Standards–Guidelines–Baselines.

 

MODULE (II):                                                                                                                     

 

Information Asset Classification–Information system Asset inventory, Asset Classification criteria, roles and responsibilities–Methodology-Declassification or Reclassification-Retention and Disposal of Information, Assets-Provide Authorization for Access.

 

MODULE (III):                                                                                                                    

Risk Management–Need for the Risk Assessment, Risk Assessment Methodology, Risk Assessment Components, Risk Mitigation Techniques.

 

MODULE (IV):                                                                                                                    

Information Security& Domains–Fundamental Principles of Security–Security Definitions – Control types–Security Frameworks - Personnel Security. Application Security, Legal & Compliance, Business Continuity Management, Cryptography, Physical & Environmental Security and Security Operations.

Text Book:

  • CISSP All-in-One Exam Guide by Shon Harris and Fernando Maymi, 7 Edition, McGraw-Hill Education, 1 June 2016.
  • Information Security Management handbook, 6thEdition, Harold F Tipton, Micki Krause, Auerbach Publications, 5 April 2012.
  • The CISSP Prep Guide: Gold Edition by Ronald L. Krutz, Russel Dean Vines, Gold Edition, Wiley Publication, 31 Oct 2002.

 

Reference Book:

  • Certified Information Systems Security Professional, Study Guide by Ed Tittle, Mike Chapple, James Michael Stewart, 6th Edition, Sybex Publication, 06 July 2012.

Session Plan

Session 1:(module-1)

Overview of Information Security

INFORMATION SECURITY( session-1)

Session 2:

Threats - Frauds, Thefts, Malicious Hackers

Threats to Information Security

Session 3:

Malicious Code, Denial-of-Services Attacks

Extracted pages from DoS-3

Session 4:

Social Engineering

SocialEngineering

Session 5:

Session 6:

An introduction -Business Requirements - Information Security

sri-infosec-140214054553-phpapp01

Session 7:

Security Policies–Tier-1 (Origination-Level),Tier-2(Function Level)

securitypoliciesandstandards-160512144619

Session 8:

Tier-3 (Application/Device Level)–Procedures -Standards–Guidelines–Baselines

pis session-8

Session 9:(module-2)

Information Asset Classification

PIS SESSION-10

Session 10:

Information system Asset inventory

PIS SESSION-11

Session 11:

Asset Classification criteria

PIS SESSION-12

Session 12:

roles and responsibilities–Methodology

05HYDROPONICS SPINACH - Harvest and Post harvest

Session 13:

Declassification or Reclassification

riskmanagement-130215051514-phpapp01

Session 14:

Retention and Disposal of Information

rrdp-2015-150306153440-conversion-gate01

Session 15:

Risk Mitigation Techniques

riskmanagement-130215051514-phpapp01

Session 16:

Session 17:

Risk Assessment Methodology

PIS SESSION-14A,pdf

Session 18:

Session 19:(module-3)

Session 20:

Session 21:

Risk Mitigation Techniques

risksthreatsandvulnerabilities-160528074732

Session 22:(module-4)

Information Security& Domains

securitypoliciesandstandards-160512144619

Session 23:

Fundamental Principles of Security

rolebasedaccesscontrol-rbac-140910002632-phpapp02

Session 24:

Security Definitions – Control types

informationclassification-170130095901

Session 25:

Security Frameworks - Personnel Security

PIS SESSION-24,pdf

Session 26:

Application Security

PIS SESSION-25,pdf

Session 27:

Legal & Compliance

PIS SESSION-26

Session 28:

Business Continuity Management

PIS SESSION-29_files

Session 30:

Physical & Environmental Security and Security Operations

PIS SESSION-30_files

Our Main Teachers

Sangram Routray

Assistant Professor
VIEW PROFILE