UMUC-EUROPE GRADUATE PROGRAMS
BOWIE STATE UNIVERSITY

INSS635 Syllabus

Course Title Information Systems Security
Term TERM 3, 2003/2004
Education Center STUTTGART-VAIHINGEN-GRAD
Faculty Member Susan Helms - shelms@faculty.ed.umuc.edu

Faculty Contact Information:

Dr. Susan Helms
shelms@faculty.ed.umuc.edu

phone number (cell) 0174 6655990

Consultation:

The instructor will be available one half hour before and after class and by appointment at other times.

Required Texts and Readings:

Whitman, M.and Mattord, J.  (2003).  Principles of Information Security.  Boston, MA:  Thompson - Course Technology.

Supplementary Readings:

The standard for papers in the graduate program is the APA style. All participants in this course and all graduate INSS, MGMT, PUAD, and ECON courses should have a copy of the style guide:
American Psychological Association. (2001). Publication Manual of the American Psychological Association, 5th Edition. Washington DC: Author.All graduate students should be prepared to utilize the UMUC online library at http://www.umuc.edu/library/.  The library contains a large number of full text academic journals that are free of charge and immediately available.  The library homepage also contains a number of links related to improving students' research and writing skills.

Recommended Journals:

Publications of the various professional societies (such as ACM -- the Association for Computing Machinery, the IEEE Computing Society, and the various management professional societies) are strongly recommended.  In addition, there are many trade journals (such as eWEEK) that MIS professionals should become familiar with, many of these being published both weekly and on-line.

Course Description:

3 semester hours credit.  Prerequisites: Either INSS 510, INSS 520, INSS 530,  or permission of the Program Director.  Explores security policies, models, and mechanics for secrecy, integrity, and availability.  Topics include operating systems models and mechanisms for mandatory and discretionary controls;  data models, concepts, and mechanisms for database security;  basic cryptography and its applications;  security in computer networks and distributed systems;  as well as control and prevention of viruses and other malicious programs.

Course Goals:

Upon completion of the course, participants should:
1. Understand the threats, vulnerabilities and risks with an information system infrastructure
2. Understand the security issues in network systems
3. Have a basic understanding of cryptography
4. Be familiar with cryptographic technologies including symmetric key cryptosystem and asymmetric key cryptosystem
5. Have a basic understanding of firewalls, routers and protocols in communication systems
6. Be familiar with Risk Management practices
7. Be able to distinguish between business continuity and disaster recovery
8. Develop an understanding of laws and ethics regarding information systems security

Course Objectives:

At the conclusion of this course the student will be able to:
1. Identify the resources of an information system that must be protected
2. Distinguish information security from operations and physical security
3. List potential security threats, vulnerabilities and risks of information systems, particularly on the network
4. Define and discuss the role of cryptography
5. Evaluate various data encryption methods
6. Identify various control mechanisms used to prevent, detect and correct error in an information system
7. Define the responsibilities of Security Administrators
8. Be able to develop a disaster recovery plan for an information system
9. Develop standards, guidelines and procedures to implement security policy in an information system

Grading Information:

Grades for this course will be assigned as follows:
    A     92%
    B     80 – 91%
    C     70 – 79%
    F     Below 70%
 
Please note that Bowie State University does not use "D" for graduate students. The grade F(a) is used to designate academic failure. F(n) is used to designate failure for non-completion.  Grades of Incomplete or Withdrawal are governed by UMUC-Europe policies. For further details, please refer to the UMUC-Europe Graduate Catalog, available in your local Education Center or online at http://www.ed.umuc.edu/general_info/publications/catalogs.

Course Requirements:

Graduate school at the masters level focuses on helping students obtain the education needed for success as professionals in their chosen fields. Thus, UMUC-Europe Graduate Programs and Bowie State University share the common goals of promoting excellence in academic scholarship through thoughtful inquiry and the skillful application of knowledge and theory for the betterment of society.
 
In order to maximize your graduate educational experience in general and this course in particular, you are required to:
 
10%  -  Participate in classroom discussions
30%  -  Complete graduate level projects or programming assignments, write graduate level papers or case studies
20%  -  Orally/visually present prepared material
40%  -  Complete two written examination(s)

Description of Course Requirements:

Participate in classroom discussions: You are expected to come to class prepared to engage in all discussions in a professional and informed manner. Usually this requires two to three hours for every hour of a face-to-face class and approximately ten hours of preparation per week for a DE class.
 
Complete graduate level projects or programming assignments, write graduate level papers or case studies:  You are required to conduct professional-level research, including appropriately citing works of others and avoiding plagiarism. Plan on committing approximately 150 hours over the duration of this course to producing professional level deliverables, to include programs, projects, papers, and/or case studies.
 
Orally/visually present prepared material: You are required to present your results in a professional manner. In a face-to-face course, this typically means an oral presentation accompanied by appropriate visual material. Complete one or more written examination(s): The examination process in this class will assist you in developing the writing and critical thinking skills necessary for successfully passing the comprehensive exam required of all graduate students. Some of the examination questions used for this course will either be taken directly from past comprehensive exams or written as though to be included on a comprehensive exam.

Course Schedule:

Assignment due dates will be given in class. If you miss a session it is your responsibility to find out any due dates given.

This schedule presents 16 sessions corresponding to a half-day on weekends. The instructor may need to make minor modifications in the schedule as the course progresses. These modifications will be announced in class.
 
1.    Introductions
      Review of syllabus
      Clarification of goals, objectives and requirements
      Orientation to subject, Ch 1: Introduction to Info Security

2. Ch 2: The Need for Security

3. Ch 3: Legal, Ethical and Professional Issues in Information Security

4. Ch 4: Risk Management: Identifying and Assessing Risk

5. Ch 5: Risk Management: Accessing and Controlling Risk

6. Ch 6: Blueprint for Security

7. Ch 7: Planning for Continuity

8. Ch 8: Security Technology
Appendix: Cryptography pg 323-354

9. Mid-Term Exam (Chapters 1-8)

10. Ch 9: Physical Security

11. Ch 10: Implementing Security

12. Ch 11: Security and Personnel

13. Ch 12: Information Security Maintenance

14. Appendix: Cryptography pg 323-354

15. Review and Course Wrap-up

16. Final Exam (All chapters, with some emphasis on chapters since mid-term)
 

Academic Policies:

Please refer to the UMUC - Europe Graduate Catalog, available online at http://www.ed.umuc.edu/general_info/publications/catalogs/index.html or from your local Education Center, for information on the following:
        Academic Integrity
        Course Load
        Exception to Policy
        Grade Appeal Process
        Make-up Examinations
        Nondiscrimination
        Students with Disabilities

Faculty Bio:

Dr. Susan Helms

Ph.D. 1979, University of Texas, Austin
M.S. 1970, Purdue University
B.S. 1968, Texas Tech Univeristy

Certifications: CCNA, CNE, MCP, CSP

Professional Experience:

1993-2003 Professor of CIS, Metropolitan State College of Denver
1991-1993 Professor and Chair of CS/IS Department, St. Mary's College of Minnesota, Winona, MN
1970-1991 Instr, Assistant Professor, Associate Professor, Professor,
Hardin-Simmons University, Abilene, TX



Last updated by Susan Helms: December 4, 2003, 10:58 am
Find this syllabus linked from the schedule at: http://www.ed.umuc.edu/schedule