ITEC 345 2013spring ibarland

home—lects—exams—hws
D2L—breeze (snow day)

ITEC345: Intro to Info Security

• research paper assignment posted (and, a sample format file)

ITEC345 covers the fundamentals of information security. Lectures focus on providing a broad overview of principles, policies and procedures in security. Topics include:

• Security Goals and Fundamentals.
• Personnel and physical security.
• Administering security.
• Cryptography fundamentals.
• Fundamentals of Application security.
• Fundamentals of Network security.
• Privacy and legal issues.
• Ethics.
• Introduction to Digital Forensics.

• Describe the common goals of security (confidentiality, integrity, availability, authentication and non-repudiation).
• Enumerate the different types of vulnerabilities, threats and exploits to computing and networking infrastructure.
• Describe some common administrative, physical and technological security controls.
• Develop security plans, policies and procedures similar to those used in government and corporations.
• Define risk management and explain aspects of risk management.
• Describe privacy and ethical issues.
• Describe the various laws that protect computer based systems and digital objects.

Course Information, 2013 spring

• Time/Place: MoWeFr 09:00–09:50, Davis 212.
• Instructor info Ian Barland, , Davis 230.
  Announcements (including clarifications or changes to homeworks or course policies) will be made on the D2L discussion boards; check them every few days.
  Posting your questions there (w/o posting solutions) is preferred over sending me email (though you can email me after posting, to alert me that a question is waiting).

• Office hours: You don't need an appointment to drop by during scheduled office hours: These hours are subject to change; see the class web page for the most up-to-date times.
  Dr. Ian Barland,
  Davis 230
  

  Mo,We,Fr	10:00-10:50
  Mo,We,Fr	13:00-14:30
  Th	12:30-14:00
  or by appointment

• Texts:

  Required		Security in Computing Pfleeger and Pfleeger (3rd edition) ISBN 978-0-132-39077-4
  Recommended		Practical UNIX and Internet Security, Simson Garfinkel, Gene Spafford, and Alan Schwartz (3rd edition) ISBN 978-0-596-00323-4
  Recommended		Introduction to Computer Security Matt Bishop ISBN 978-0-321-24744-5

  The above three texts are all available electronically from McConnell Library, via their Safari Electronic Books. (They require authenticating with your RU password. They may not always be available: only a limited number of licenses have been purchased by the commonwealth.)
  Between the library's e-book, the posted lecture slides, and web searches you should have all the materials you need. However, many students (and, your prof) still find a physical copy of the book better for both studying and referencing.

• Other Material

  • Software: You will need to install VMPlayer (Windows/Linux: free from www.vmware.com/products/player/) or VMWare Fusion (Mac OS X: it requires a license; send me an email after Jan.28, for a free license).
  • Hardware: You will need 8GB to 16GB of free disk space. If you don't have your own computer, or are low on disk space, you might consider purchasing a 16GB USB drive. Some projects will involve disk images which can run from 3 to 6 GB.

• Class Courtesy Please refrain from texting during lecture, and use a computer only for taking notes and looking up material related to lecture (e.g. looking up Wikipedia's definition of “asymmetric encryption”). Please do not: check email, browse other sites, check your phone, etc.. Other students can be distracted by your screen, and your inattentiveness detracts from the classroom experience for all.

• Evaluation:

  Assignments and Quizzes	50%
  Class Presentation / Report	10%
  Midterm Exams (2)	25%
  Final Exams	15%

  Clarity counts in all work for this class (including spelling, grammar, and layout). All submitted material (hardcopy or electronic) must contain both your name and the hw/quiz/exam-number near the top. Any hardcopy submitted must be stapled. If something is due both on-line and hardcopy, the hardcopy must be turned in by the start of first lecture on/after the deadline.

  Quizzes

  There will frequent summary-quizzes and occasional pop quizzes in class; fair game for these quizzes include applying concepts from recent lecture topics or reading, as well as any previous quizzes. (Note: “recent” lectures includes lecture material given earlier in the same class!)

  Final Exam: May.08 (Wed) 08:00, as per the final exam schedule.

  Attendence

  Although there are no attendence points per se, short in-class quizzes are factored into your grade.

• Campus Closings In the event of a University-wide emergency or unscheduled close (as for inclement weather¹), we may instead hold class virtually via Breeze (link at top of class pages). In the case of a multi-day emergency or closure, the course policies on this page are subject to change. Monitor D2L and this course web page for any announcements.

• Late Policy: Late homeworks will be accepted up to 48hrs late with a penalty of 15% of points-possible. (Homeworks between 0 and 3hrs late might be accepted for only a 5% penalty, at discretion of the teacher.) If turning in hardcopy late, you must include the due-date and the time you turn it in. Do not submit late homeworks intermingled with currently-due homeworks.

  If you know in advance you won't be able to turn in homework on time (e.g. participating in university sports) you must get permission in advance to turn the homework in late. For significant illness or family crisis without advance notice (but with later documentation), contact the professor as soon as possible to arrange to catch up on the work. You cannot make up missed quizzes; however your one lowest quiz score will be dropped.

• Honor Policy: As with all your RU classes, the university honor code governs all work done for the course.

  You are encouraged to discuss and interpret the homeworks and general approaches to solutions with your fellow students. However, You must be the direct author of all your submitted work. (For example, sharing (sending or receiving) a hw solution with others is a clear honor code violation.) If you had worked through a homework problem while talking with a friend, you must re-write it on your own, without referring to your draft version. If you got significant advice which you'd like to credit somebody for, cite them in your work.

  Allowing other students

• Other University Resources: Radford has many resources to help you in different ways, including the student counseling services (x5226), and the Learning Assistance Resource Center (“LARC”, x7704, www.radford.edu/~larc, ). If you need any special accomodations for a class, and have registered with the Disability Resource Office (x6350, Tyler Hall Suite 64), please contact the professor at the start of the semester.

• Syllabus (tentative)

  Week#	Topics	Reading / resources
  1–2 Jan.22–Feb.01	Overview of threats, vulnerabilities, exploits, and controls. Unix basics.	Chpt.01; OWASP.org; cwe.mitre.org www.ee.surrey.ac.uk/Teaching/Unix/unix1.html
  3–4 Feb.04–15	Fundamentals of Cryptography (symmetric vs. asymmetric); one-way hash functions	Chpt.02
  5–7 Feb.18–Mar.08	Software Application Security; first midterm (Mar.01, tentative)	Chpt.03; buildsecurityin.us-cert.gov/bsi/articles/knowledge/principles/358-BSI.html (Secure Design principles)
  (Mar.11-15: Spring Break)
  8–9 Mar.18–29	Network Security: Fundamentals	Chpt.07
  10–11 Apr.01–12	Administering security; law and ethics	Chpt.08
  12 Apr.15-19	(schedule catch-up); second midterm (Apr.19, tentative)	your noodle
  13 Apr.22-26	Introduction to Forensics	slides
  14 Apr.29–May.03	Class Presentations	y'all

home—lects—exams—hws
D2L—breeze (snow day)

©2012, Ian Barland, Radford University Last modified 2013.Apr.25 (Thu)

Please mail any suggestions (incl. typos, broken links) to ibarlandradford.edu