ISA 562 Information Security Theory & Practice

Fall 2008

Check this page frequently for updated course materials!!!

---

Schedule of Classes (Subject to Change)

Date	Topics	Reading Assignment	Homework Assignment	Supplemental Material
08/25/08	Introduction to Course & Information Security Management	Read CISSP & Bishop Chapter 1	HW1 is out DUE 09/15	· NIST Publication · Security Policy
09/01/08	Labor Day Recess (No class!)
09/08/08	Access Control -1 (access control matrix)	Read Bishop    Chapter 2
09/15/08	Access Control -2 (foundational results)	Read Bishop Chapter 3	HW2 is out DUE 09/29
09/22/08	Access Control -3 (access control policies)	Read Bishop Chapter 4
09/29/08	Access Control-4 (MLS Systems) Access Control-5 (Biba and BLP)	Read Bishop Chapter 5, 6	HW3 is out Due 10/27 (postponed)
10/06/08	Access Control-6 Hybrid Polices Midterm1 Review	Read Bishop Chapter 7
10/14/08	Columbus Day Recess (Meeting on Tuesday) Midterm 1
10/20/08	RBAC			· Role-Based Access Control Models · Proposed NIST Standard for Role-Based Access Control · Administrative RBAC
10/27/08	Cryptography	Read Bishop Chapter 9, Chapter 10		· Why Cryptography Is Harder Than It Looks · Classical Cryptography · Des Animation · Rijndael Cipher Animation
11/03/08	PKI Key Management
11/10/08	Network Security: SSL and TLS Authentication	Read Bishop Chapter 11		The problem with multiple roots in Web browsers-certificate masquerading" by Hayes, J.M. Proceedings Seventh IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, IEEE 1998. (WET ICE '98) 17-19 June 1998 Page(s): 306 -311 Restricting access with certificate attributes in multiple root environments - a recipe for certificate masquerading" by Hayes, J.M. Proc. 15th Annual Computer Security Applications Conference, IEEE, 2001, Page(s): 386-390.
11/17/08	Security Architecture and evaluation Exam 2 review Business Continuity & Disaster Recovery planning	Read Chapter 5
11/24/08	Exam 2
12/01/08	Application Security  Operational Security  Legal, Regulations, Compliance, and investigations	Read Chapter 7,8, 9, 10
12/08/08	Reading day
12/15/08	Final	Closed Book Exam

---