Download System Security: Principles and Practice for E-Business and more Lecture notes Cryptography and System Security in PDF only on Docsity!
COURSE OUTLINE
SYSTEM SECURITY
Faculty Faculty of Management Sciences - ITM Credit hours 3 Course level Graduate
BRIEF COURSE DESCRIPTION Welcome to the System Security Course. Provide a practical understanding of both the principles and practice of system security. In the digital age where a person can perform most of his/her duties using the technology one way or another. This also open up all the vulnerabilities comes with it. These vulnerabilities may be a virus, hacker, intruder, electronic eavesdropping, fraud or some other similar items. This course is designed to provide student a general knowledge and benchmark to start the process of securing the databases, network, system and internet. After completion of this course the students will be able to understand: Describe the basic security issues of e-business. Understand security services of confidentiality, authentication, integrity, and non-repudiation. Provide security requirements for a typical e-business. Understand security issues at the database, network, and transport level. Evaluate and estimate security risks associated with security. Design a protection ad detection strategy for resources of an e-business.
Course Introduction Computer and communication security has emerged as a central field of study, with the growing indispensability of the Internet in our day-to-day life. This course provides a broad introduction to host- based and Internet-based computer security. Topics covered include an introduction to cryptography, authentication protocols, and Internet vulnerabilities such as denial of service (DoS) attacks, worms and virus propagation, and techniques to secure the Internet such as firewalls, intrusion detection systems and Web and IP Security. Prior knowledge of TCP/IP networking protocols is not required and necessary background will be provided.
SECTION A – TEACHING, LEARNING AND ASSESSMENT
LEARNING OUTCOMES
At the end of the course, students should understand:
- DES - Data Encryption Standard
- AES (Rijndael) - Advanced Encryption Standard
- RC4 - Stream Cipher
- MD4, MD5 - Message Digest Algorithms
- SHS - Secure Hash Algorithm and Standard
- RSA - Public Key Algorithms
- Diffie Hellman - Key Exchange
- Authentication Systems for people and Computers
- Kerberos
- Electronic Mail Security o S/MIME - Secure/Multipurpose Internet Mail Extension o PGP - Pretty Good Privacy
- IP and Web Security o SSL - Secure Sockets Layer o TLS - Transport Layer Security
- Concepts of Digital Watermarking and Steganography
CONTENT, ORGANISATION AND TEACHING STRATEGIES The course will be presented in 2 x 1.5-hour seminars per week for the duration of the semester. The seminar will involve the presentation of material by the lecturer, throughout which student participation and involvement is encouraged. Depending on the nature of the topic, students will also be given the opportunity in class to work through selected topic both individually and in groups.
CONTENT SUMMARY Session Chapter Title Learning Objective 1 Overview 2 Digital Signature and Authentication (Ch 13) 3 Digital Signature and Authentication (Ch 13) 4 Authentication Applications (Ch 14) 5 Authentication Applications (Ch 14) 6 Electronic Mail Security (Ch 15) 7 Electronic Mail Security (Ch 15) 8 IP Security ( Ch 16) 9 IP Security ( Ch 16) 10 Web Security (Ch 17) 11 Web Security (Ch 17) 12 Intruders (Ch 18) 13 Intruders (Ch 18) 14 Malicious Software (Ch 19) 15 Malicious Software (Ch 19) 16 Firewalls ( Ch 20) 17 Firewalls ( Ch 20) 18 Database Security 19 Database Security 13 14 15
Assessment Item No. 3 (Assignments) These assignments will require students to apply knowledge gained to selected issues. The details will be distributed early in the semester. As required, the assignments may be individual as well as group. Ideally the group size will be 2 to 3 students. Larger group size is subject to the approval.
Assessment Item No. 4 (Group Project) This project will require students to apply knowledge gained to selected issues. The details will be distributed early in the semester. Ideally the group size will be 4 to 5 students.
Assessment Item No. 5 (Final Examination) It will be a 2-hour, closed textbook examination requiring students to answer a number of true false, multiple choice questions, short answer, essay and case study, which will test student’s understanding of concepts as well as their ability to solve practical issues. Further details will be given towards the end of the semester. This will be held in the formal examination period at the end of the semester as scheduled by IIUI - FMS University.
COURSE COMMUNICATIONS The lecturer will communicate with students through announcements in lectures and through email. Students requiring an appointment should email the lecturer.
TEXTS AND SUPPORTING MATERIALS Prescribed Text: Cryptography and Network Security Principles and Practices Third Edition William Stallings
ISECOM - Making sense of security.
ISECOM is an open, collaborative, security research community established in January 2001. In order to fulfill its mission focus to apply critical thinking and scientific methodology to all facets of security, ISECOM is chartered as a commercial-free and non-partisan organization. ISECOM is a non-profit organization registered in New York, USA, and Barcelona, Spain. The ISECOM Board of Directors reflects 6 countries representing thousands of members and volunteers from around the world. In a world of increasing commercial misrepresentation in security, I
the principles of hacking should be taught in schools, said Pete Herzog. It is the principles they need to learn to avoid from being victims on the Internet.
Herzog runs Hacker High school, a program to teach kids and teens security awareness and critical, Internet research skills. The program contains free security and privacy awareness teaching materials and back-end support for teachers of accredited elementary, junior high, and high schools. There are 12 workbooks, all available in Spanish and English. These are lessons that challenge teens to be as resourceful as hackers, including safe Internet use, web privacy, using the Internet for research, avoiding viruses and Trojans, legalities and ethics, and more.
This program has been developed to complement existing student course work or as part of after-school and club activities
SECTION B – ADDITIONAL COURSE INFORMATION
Scope of Course Evaluation A course evaluation questionnaire will be given to students at the end of the semester. The purpose of this evaluation is to provide feedback to teaching staff about their approaches to teaching and to inform changes to resources and course content.
Administration The FMS - DTM administers this course. 1.0 Rules Enrolment in this course is undertaken on the basis that prior assumed knowledge has been gained by the attainment of a grade of “pass” or above in the prerequisite course/s (if applicable). Failure to adhere to this recommendation may result in you having difficulty with the course and not being able to successfully complete it. Any additional support or special assistance cannot be expected or requested if you have not completed the recommended prerequisite course/s. To be eligible to pass FMS courses, students must demonstrate a reasonable degree of competence in the required course objectives as examined in each form of assessment. Non-submission of a piece of assessment will incur a fail grade for the FMS courses. Students are expected to spend time outside of supervised class periods developing skills and knowledge. Any dishonest assignments will be penalized. "Dishonest assignment" includes:
- Deliberate copying or attempting to copy the work of other students;
- use of or attempting to use information prohibited from use in that form of assessment;
- submitting the work of another person as your own;
- Plagiarism (i.e. taking and using the thoughts and writings of another person with the intent to claim the work as your own);
- Any student found knowingly to have helped another student to produce an assignment dishonestly will incur the same penalty as awarded to that student. Full and detailed acknowledgement (e.g. notation, and/or bibliography) must be provided if contributions are drawn from the literature in preparation of reports and assignments.
2.0 Submission and processing of assignments All submissions for assessment (unless otherwise directed by the Course Convenor ) must be word Processed with Times New Roman font 12 pt, 1.5 or double line spacing. Leave a margin of 3 cm on the left for marker comments. All students are required to keep a copy of their assessment item until it is marked and returned to them. Where this is not possible students should, at the very least, keep rough notes used in the preparation of the assignment. Marked assignments should be kept until the final grade has been awarded. Should a student wish to appeal against a grade awarded, all marked assignments must be presented to the Dean, FMS. Assignments submitted by email will be accepted only with prior approval of Course Convenor.
3.0 Extension to assignment submission dates 3.1 Submission of assignments after due dates Unless directed, all assignments are due at the start of the class in which they are due. The responsibility for submitting assessment items by the due date rests with the student. Any assignment received after the appropriate due date will be considered "late".
3.2 Requests for extensions Requests for extension must be submitted in writing with appropriate documentation, in advance of the specified submission date to the Course Convenor. Requests made after the assessment item is due will not be considered. Course Convenors can grant extensions for the submission of assessment items up to the date on which the item is due to be returned to students. Further extensions and any extension beyond the end of Week 15 can only be granted by the Dean, FMS.
