CSCI 3500

Presents critical concepts and skills that are related to protecting information assets from harm. Topics include the history of information security, basic security-related terminology and concepts, major classes of threats to information security, model strategies for protecting against those threats, computer forensics, and best practices in information assurance.

Any one of these:

• CSCI 1260 and CSCI 2020, each with a C or better
• Permission of instructor

• Demonstrate an understanding of the critical concerns that need to be addressed by an organization to secure its information assets, including issues related to the facilities and resources that an organization uses, and its standard operating protocols.
• Demonstrate an understanding of the fundamentals and basic principles of infrastructure security and the impact of physical security on network security. ( Student Outcome CY1 )
• Demonstrate an understanding of the role of people and policy in information security.
• Demonstrate an understanding of different kinds of threats to and attacks on information security, including standard forms of malware.
• Demonstrate a basic understanding of intrusion detection systems and security baselines.
• Discuss risk management, disaster recovery, business continuity, and organizational policies.
• Demonstrate an understanding of the basic concepts of computer forensics. ( Student Outcome GSO1 )
• Discuss ethical issues in information security. ( Student Outcome GSO4 )

• Introduction to Information Security + Cryptography
• Key Distribution
• Web & Data Security
• Risk management
• Security Models (Bell-La Padula, Biba, etc)
• Access Control Models
• Security Mechanisms
• Hash Functions & MAC
• Firewalls
• Physical Security
• Digital Forensics
• Intrusion Detection & Prevention
• IoT Security
• Legal & Ethical Issues