ITEC 345 2014fall ibarland

home—lects—hws
D2L—breeze (snow day)

course-info
ITEC345: Intro to Info Security
2014fall-ibarland

• Welcome to 2014fall!
• See (and bookmark) D2L for: news, discussions, dropbox, quizzes, grades. This web page's navbar links are intended for all handouts: mostly lectures and homework files.

ITEC345 covers the fundamentals of information security. Lectures focus on providing a broad overview of principles, policies and procedures in security. Topics include:

• Security Goals and Fundamentals.
• Personnel and physical security.
• Administering security.
• Cryptography fundamentals.
• Fundamentals of Application security.
• Fundamentals of Network security.
• Privacy and legal issues.
• Ethics.
• Introduction to Digital Forensics.

• Describe the common goals of security (confidentiality, integrity, availability, authentication and non-repudiation).
• Enumerate the different types of vulnerabilities, threats and exploits to computing and networking infrastructure.
• Describe some common administrative, physical and technological security controls.
• Develop security plans, policies and procedures similar to those used in government and corporations.
• Define risk management and explain aspects of risk management.
• Describe privacy and ethical issues.
• Describe the various laws that protect computer based systems and digital objects.

Course Information, 2014 fall

• Time/Place: MoWeFr 14:00–14:50, Davis 043.
• Instructor info Ian Barland, , Davis 230.
  Announcements (including clarifications or changes to homeworks or course policies) will be made on the D2L discussion boards; check them every few days.
  Posting your questions there (w/o posting solutions) is preferred over sending me email (though you can email me after posting, to alert me that a question is waiting).

• Office hours: You don't need an appointment to drop by during scheduled office hours. These hours are subject to change; see the class web page for the most up-to-date times.
  Davis 230
  

  Mo,We,Fr	10:00-11:00
  Mo	11:00-12:00
  Th	13:15-14:30
  or by appointment

  You are encouraged to post (and, answer) questions on the D2L discussion board, since you might get another student's ideas within a few minutes, instead of my response perhaps a day or more later. If your question requires giving away part the answer (e.g. part of your solution), feel free to email me; please include “ITEC345” in the subject.

• Texts:

  Required		Security in Computing Pfleeger and Pfleeger (4th edition) ISBN 978-0-132-39077-4
  Recommended		Practical UNIX and Internet Security, Simson Garfinkel, Gene Spafford, and Alan Schwartz (3rd edition) ISBN 978-0-596-00323-4
  Recommended		Introduction to Computer Security Matt Bishop ISBN 978-0-321-24744-5

  The above three texts are all available electronically from McConnell Library, via their Safari Electronic Books. (They require authenticating with your RU password. They may not always be available: only a limited number of licenses have been purchased by the commonwealth.)
  Between the library's e-book, the posted lecture slides, and web searches you should have all the materials you need. However, many students (and, your prof) still find a physical copy of the book better for both studying and referencing. (Compare your total cost of textbooks compared to the $80,000+ cost of your 4-year degree, as compared to the extra edge that a physical book can give you, in addition to electronic.)

• Other Material

  • Software: You will need to install VMPlayer (Windows/Linux: free from www.vmware.com/products/player/) or VMWare Fusion (Mac OS X: it requires a license; send me an email after Jan.28, for a free license).
  • Hardware: You will need 8GB to 16GB of free disk space. If you don't have your own computer, or are low on disk space, you might consider purchasing a 16GB USB drive. Some projects will involve disk images which can run from 3 to 6 GB.

• Class Courtesy Please refrain from texting during lecture, and use a computer only for taking notes and looking up material related to lecture (e.g. looking up Wikipedia's definition of “asymmetric encryption”). Please do not: check email, browse other sites, check your phone, etc.. Other students can be distracted by your screen, and your inattentiveness detracts from the classroom experience for all.

• Evaluation:

  Assignments and Quizzes	50%
  Report	10%
  Midterm Exams (2)	20%
  Final Exam	15%
  Attendence	5%

  Clarity counts in all work for this class (including spelling, grammar, and layout). All submitted material (hardcopy or electronic) must contain both your name and the hw/quiz/exam-number near the top. Any hardcopy submitted must be stapled. If something is due both on-line and hardcopy, the hardcopy must be turned in by the start of first lecture on/after the deadline.

  Quizzes

  There will frequent summary-quizzes and occasional pop quizzes in class; fair game for these quizzes include applying concepts from recent lecture topics or reading, as well as any previous quizzes. (Note: “recent” lectures includes lecture material given earlier in the same class!)

  Final Exam: Dec.08 (Mon) 14:45, as per the final exam schedule.

  Attendence

  Attendence will be taken indirectly, via taking a quiz or turning in homework. If you don't have a homework to submit on a day it is due, turn in one sheet of paper with your name and “no homework #n, but present on date”. Of course, quiz/hw points are in addition to attendence points. You may be considered absent if you miss the start of class.

• Campus Closings In the event of a University-wide emergency or unscheduled close (as for inclement weather¹), we may instead hold class virtually via Breeze (link at top of class pages). In the case of a multi-day emergency or closure, the course policies on this page are subject to change. Monitor D2L and this course web page for any announcements.

• Late Policy: No late homework is accepted. We may discuss solutions in class the day the assignment is due. If you know in advance you won't be able to turn in homework on time (e.g. participating in university sports) you must get permission in advance to turn the homework in late. For significant illness or family crisis without advance notice (but with later documentation), contact the professor as soon as possible to arrange to catch up on the work. You cannot make up missed in-class quizzes.

• Honor Policy: As with all your RU classes, the university honor code governs all work done for the course. (For some specifics, see page 7, items 1-9.) Copying from internet sources (including Wikipedia) is plagiarism. Allow other students to copy your work (either knowingly, or due to not taking proper measures to secure your work — e.g. printing to a lab printer but not picking up the hardcopy promptly, or making your files readable to others on a filesystem that others have access to.

  You are encouraged to discuss and interpret the homeworks and general approaches to solutions with your fellow students. However, You must be the direct author of all your submitted work. (For example, sharing (sending or receiving) a hw solution with others is a clear honor code violation.)

• Other University Resources: Radford has many resources to help you in different ways, including the student counseling services (x5226), and the Learning Assistance Resource Center (“LARC”, x7704, www.radford.edu/~larc, ).

  If you need any special accomodations for a class, and have registered with the Disability Resource Office (x6350, Tyler Hall Suite 64), please contact the professor at the start of the semester. (more info If you are seeking academic accommodations under the Americans with Disabilities Act at Radford University, you are required to register with the Disability Resource Office (DRO). To receive academic accommodations for this class, please submit your documentation to the DRO in the lower level of Tyler Hall Suites 54-69, by fax to 540-831-6525, or by email to dro@radford.edu. After submitting documentation to our office, you will set up an interview with a Disability Services Specialist to discuss accommodations. You will be notified via email once your accommodation package is complete and ready to be picked up. Once you have picked up your accommodation package, you will need to meet with each course professor during their office hours to review and discuss your package. For more information and/or for documentation guidelines, visit www.radford.edu/dro or call 540-831-6350. )

home—lects—hws
D2L—breeze (snow day)

©2014, Ian Barland, Radford University Last modified 2014.Aug.25 (Mon)

Please mail any suggestions (incl. typos, broken links) to ibarlandradford.edu