Course Description
Prerequisites: COSC 110 or equivalent course, as approved by instructor
Provides an introduction to the theory and concepts of host computer security. Topics include security and policy guidelines, attack strategies and attacker profiles, users and groups security, file systems and security, integrity management, cryptography basics, back-up utilities, auditing and logging, and strategies for defending user accounts. Designed as a practical hands-on course.
Course Outcomes
Upon successful completion of this course, the students will:
- Write a suitable set of security policies for different scenarios.
- Apply various access control techniques.
- Compare the basic tools and techniques used to attack systems.
- Explain the different types of attacks.
- Specify procedures for password/username management.
- Explore the use of security tools in defending user/group accounts.
- Explore techniques for integrity management.
- Demonstrate the use of logging, auditing, and backup techniques for security.
- Explain the basic cryptography concepts.
Course Outline
| Topic |
Academic Hours |
- Overview of computer security
- Definition and discussion of computer security
- Security problems in computing
|
3 |
- Attacks to Host Computer Systems
- Attacker profiles (hackers, crackers, script kiddies, spies, employees)
- Attacking strategies (social engineering, spyware, software vulnerabilities, malware)
|
3 |
- Introduction to an operating system
- The operating system overview and functionality
- Operating system utilities
- Operating system user and administrative commands
|
3 |
- Identification and Authentication
- Managing username and passwords.
- Password management utilities
- Authentication techniques (biometrics, RFID devices, Smart cards, one-time passwords)
- Use of password cracking tools.
|
3 |
- File systems and access control
- File ownership and user groups.
- Strategies for defending group accounts
- Working with Files/directories
- Using File Manager
|
6 |
- Integrity Management
- Immutable and append only files
- Read only files
- Checksum and signatures
- Use of integrity checking tools
|
3 |
- File System and security
- Access control through file permissions
- Setting up access control lists
- Other file protection schemes
- Basic computer forensics methods
- Electronic records management
- Electronic evidence
|
3 |
- Auditing, logging, backup
- Log file utilities
- Rotating and tracking log files
- Protecting and viewing log files
- Operating system specific tools for auditing and logging
- Backing up file systems
- Linux tools for backup
|
4 |
- Encryption for Host System
- Symmetric encryption
- Cryptography and cryptanalysis
- Asymmetric encryption
- Public vs. private key encryption
- Digital certificates
- Encryption utilities
|
4 |
- Policies and guidelines
- Policy development
- Planning for security needs
- Outsourcing policy development
|
3 |
- Overview of physical security
- Physical controls vs. technical controls
- Coping with natural and artificial disasters
|
3 |
- Student presentation on security tools
|
2 |
- Two in-class exams
|
2 |
| Total |
42 |
Final exam (during final exam week)
Evaluation Methods
- Lab exercises (25%): Each student is expected to do the following hands on in-class exercises: user account security, user group account management, defending accounts, file security management, auditing and logging, cryptography, backup and recovery and integrity management. All exercises use free downloadable security tools.
- Tool Research project (15%): The objective of the project is to expose students to the array of other security tools available, not covered in the course. Students research on the tool, develop a tutorial for the tool, do a class presentation which includes a demonstration of how the tool works, and finally comment on their experience of using the tool.
- Assignments (15%): Students will have three assignments to complete, which are non-lab based.
- Exams (45%): Students will be evaluated on their understanding of the concepts presented using short essay questions on the readings and class material. There will be three exams: first exam (15%), a mid-term exam (15%), and a final exam (15%).
Grading Scale
The standard grading scale will be used. 90%+ =A; 80-89%=B; 70-79%=C; 60-69%=D; <60%=F.
Textbook
Garfinkel, S., Spafford, G., and Schwartz, A., Practical Unix and Internet Security, Third Edition, 2003, ISBN “0596-003234”
Attendance Policy
The policy will follow the guidelines as in the IUP Handbook.
Special Resource Requirements
None
