UMUC-EUROPE GRADUATE PROGRAMS
BOWIE STATE UNIVERSITY

INSS635 Syllabus

Course Title Information Systems Security
Term TERM 3, 2003/2004
Education Center SIGONELLA-GRAD__NAS_2
Faculty Member Dale Stachurski - dstachurski@faculty.ed.umuc.edu

Faculty Contact Information:

Dale Stachurski
dstachurski@faculty.ed.umuc.edu

Consultation:

Office Hours: 30 minutes before/after class or by appointment.
I usually check my email once a day and respond within two days.

Required Texts and Readings:

Whitman, M.and Mattord, J.  (2003).  Principles of Information Security.  Boston, MA:  Thompson - Course Technology.

Supplementary Readings:

The standard for papers in the graduate program is the APA style. All participants in this course and all graduate INSS, MGMT, PUAD, and ECON courses should have a copy of the style guide:
American Psychological Association. (2001). Publication Manual of the American Psychological Association, 5th Edition. Washington DC: Author. All graduate students should be prepared to utilize the UMUC online library at http://www.umuc.edu/library/.  The library contains a large number of full text academic journals that are free of charge and immediately available.  The library homepage also contains a number of links related to improving students' research and writing skills.

Recommended Journals:

Publications of the various professional societies (such as ACM -- the Association for Computing Machinery, the IEEE Computing Society, and the various management professional societies) are strongly recommended.  In addition, there are many trade journals (such as eWEEK, Network World Fusion, Linux Magazine, CIO, MCP/Windows Magazine, etc.) that MIS professionals should become familiar with, many of these being published both weekly and on-line.

Course Description:

3 semester hours credit.  Prerequisites: Either INSS 510, INSS 520, INSS 530,  or permission of the Program Director.  Explores security policies, models, and mechanics for secrecy, integrity, and availability.  Topics include operating systems models and mechanisms for mandatory and discretionary controls;  data models, concepts, and mechanisms for database security;  basic cryptography and its applications;  security in computer networks and distributed systems;  as well as control and prevention of viruses and other malicious programs.

Course Goals:

Upon completion of the course, participants should:
1. Understand the threats, vulnerabilities and risks with an information system infrastructure
2. Understand the security issues in network systems
3. Have a basic understanding of cryptography
4. Be familiar with cryptographic technologies including symmetric key cryptosystem and asymmetric key cryptosystem
5. Have a basic understanding of firewalls, routers and protocols in communication systems
6. Be familiar with Risk Management practices
7. Be able to distinguish between business continuity and disaster recovery
8. Develop an understanding of laws and ethics regarding information systems security

Course Objectives:

At the conclusion of this course the student will be able to:
1. Identify the resources of an information system that must be protected
2. Distinguish information security from operations and physical security
3. List potential security threats, vulnerabilities and risks of information systems, particularly on the network
4. Define and discuss the role of cryptography
5. Evaluate various data encryption methods
6. Identify various control mechanisms used to prevent, detect and correct error in an information system
7. Define the responsibilities of Security Administrators
8. Be able to develop a disaster recovery plan for an information system
9. Develop standards, guidelines and procedures to implement security policy in an information system

Grading Information:

Grades for this course will be assigned as follows:
 
    A     90%
    B     80 – 89%
    C     70 – 79%
    F     Below 70%
 
Please note that Bowie State University does not use "D" for graduate students. The grade F(a) is used to designate academic failure. F(n) is used to designate failure for non-completion.  Grades of Incomplete or Withdrawal are governed by UMUC-Europe policies. For further details, please refer to the UMUC-Europe Graduate Catalog, available in your local Education Center or online at http://www.ed.umuc.edu/general_info/publications/catalogs.

Course Requirements:

Graduate school focuses on helping students obtain the education needed for success as professionals in their chosen fields. Thus, UMUC-Europe Graduate Programs and Bowie State University share the common goals of promoting excellence in academic scholarship through thoughtful inquiry and the skillful application of knowledge and theory for the betterment of society.
 
In order to maximize your graduate educational experience in general and this course in particular, you are required to:
 
20% - Weekly Assignments (Participation is included)
25%  -  Complete graduate level projects, papers or case studies
15%  -  Orally/visually present prepared material
40%  -  Written examination(s) - Mid-Term and Final 20% each

Important Notice:
Assignments (quizzes/homework/projects/exams) will not be accepted after the scheduled due date. No exceptions. With adequate advance, assignments may be turned in in advance of the original due date. The Final exam grade will count twice if - with advanced notice - the Mid-Term exam is missed (final decision at the discretion of the instructor). The Final exam must be completed.

Description of Course Requirements:

Participate in classroom discussions: You are expected to come to class prepared to engage in all discussions in a professional and informed manner. Usually this requires two to three hours for every hour of a face-to-face class.
 
Complete graduate level projects, papers or case studies:  You are required to conduct professional-level research, including appropriately citing works of others and avoiding plagiarism. Plan on committing approximately 75 hours over the duration of this course to producing professional level deliverables, to include programs, projects, papers, and/or case studies.
 
Orally/visually present prepared material: You are required to present your results in a professional manner. In a face-to-face course, this typically means an oral presentation (approximate length - 15 minutes) accompanied by appropriate visual material.
 
Complete one or more written examination(s): The examination process in this class will assist you in developing the writing and critical thinking skills necessary for successfully passing the comprehensive exam required of all graduate students. The examination questions used for this course will either be taken directly from past comprehensive exams or written as though to be included on a comprehensive exam.

Course Schedule:

This schedule presents 16 units or modules, with each unit corresponding to a regular three-hour weekday meeting.
 
Initial meeting:
      Introductions
      Review of syllabus
      Clarification of goals, objectives and requirements
      Orientation to subject
Chapter 1: Introduction to Information Security
 
Second meeting:
  Chapter 2: Security Investigation Phase
Homework Assigned (Article Review and/or Case Studies)
Projects Discussed - Topic Due Third Meeting

Third meeting:
Homework Review/Submitted
Project Topic Submitted
Chapter 3:  Legal, Ethical and Professional Issues

Fourth meeting:
Chapter 4: Risk Management - Identifying and Assessing Risk
Homework Assigned (Article Review and/or Case Studies)

Fifth meeting:
Homework Review/Submitted
Chapter 5: Risk Management - Assessing and Controlling

Sixth meeting:
Chapter 6: Blueprint for Security
Homework Assigned (Article Review and/or Case Studies)

Seventh meeting:
  Homework Review/Submitted
Chapter 7: Planning for Continuity

Eighth meeting:
Mid-Term Exam Chapters 1 - 7
 
Ninth meeting:
  Chapter 8: Security Technology
Appendix: Cryptography

Tenth meeting:
Chapter 9: Physical Security
Homework Assigned (Article Review and/or Case Studies) 

Eleventh meeting:
Homework Review/Submitted
Chapter 10: Implementing Security

Twelfth meeting:
Chapter 11: Security and Personnel
Homework Assigned (Article Review and/or Case Studies) 

Thirteenth meeting:
Homework Review/Submitted
Chapter 12: Information Security Maintenance
 
Fourteenth meeting:
Projects/Papers Due
Student Presentations
 
Fifteenth meeting:
      Review
       
Sixteenth meeting:
      Final Exam Chapters 8 - 12

As always, course schedule may change at the discretion of the instructor.

Academic Policies:

Please refer to the UMUC - Europe Graduate Catalog, available online at http://www.ed.umuc.edu/general_info/publications/catalogs/index.html or from your local Education Center, for information on the following:
        Academic Integrity
        Course Load
        Exception to Policy
        Grade Appeal Process
        Make-up Examinations
        Nondiscrimination
        Students with Disabilities

Faculty Bio:

Who I am: I am UMUC educated earning a degree in Business and Management and a Masters in Computer Systems Management. You can add those degrees to more than 15 years of government and commercial experience primarily in the field of Management Information Systems. Somewhere along the way I picked up a Microsoft Certification for Windows 2000 (MCSE). The rest you will hear about over the duration of the course.


Last updated by Dale Stachurski: December 3, 2003, 4:00 pm
Find this syllabus linked from the schedule at: http://www.ed.umuc.edu/schedule