Course Descriptions

Security

SEC 210
Principles and Practice of Information Security
3 credits

This course provides the latest security tips and techniques on Internet and computer security best practices. Topics include: important privacy legislation, case studies of infamous hackers, how to develop an effective security system, selection of IT security products, firewall benefits and limitations, intruder detection, correct ways to configure your computer, browser settings, virus settings, operating system vulnerabilities, strong password techniques, parasite detection, and encryption techniques.

SEC 220
Introduction to Computer Forensics
3 credits

This hands-on introductory course provides students with the knowledge and skills necessary to begin a computer-based investigation. The course begins with an overview of computer forensics and then proceeds to introduce forensics tools, concepts, and documentation of evidence/procedures. The course uses common and accepted Incident Response Policies and Procedures for previewing and securing digital evidence. Topics include: (1) Learn "What exactly are computer forensics and computer evidence?" (2) Learn basic forensic methodology: a) how to acquire the evidence without altering or damaging the original, b) how to authenticate the recovered evidence, and c) how to analyze the data without modifying it.

SEC 310
Cryptography: Algorithms and Applications
3 credits

Algorithms and theory and how they are used in everyday web and computer applications are studied. The theory behind the algorithms is included, as well as application of those theories. Some of the topics explored include the following: Cryptography (encompassing private and public key cryptography; digital signatures; and encryption methods such as Rijdael, RSA, and Kerberos); Data Compression (MPEG/JPEG); Indexing/Traversing methodologies.

Prerequisite(s): IRM 330, MIS 320 and SSD 101

SEC 330
Operating System and Computer Systems Security
3 credits

This course expands upon the material studied in SEC 210. The following topics are covered: Security Principles (Windows 2000 Security Architecture, Linux Security), Account Security (Securing Accounts, Passwords, Password Aging, and Verification of System State), File System Security (Windows 2000, XP File Security, NAS Storage Security), Accessing Risk (Key loggers, Sniffers, Port Scanning), Risk Analysis (Viruses, Patches, Packaging Techniques), and Encryption (applying topics from SEC 310 to Web Sites and applications). The student's basic network and operating system skills will be expanded to include planning, implementation, and auditing of a system's security package.

Prerequisite(s): IRM 320

SEC 410
Web and Data Security
3 credits

This course will help students build a security policy and SOP for an organization which is implementing a new network and web infrastructure. Topics include the following: Security Education and Advisory, Risk Management, Threats to IT Assets, Encryption (an expansion of SEC 310), Standards and Compliance, and Security Testing and Implementation.

Prerequisite(s): SEC 330

SEC 420
Data Integrity and Disaster Recovery
3 credits

This course will expand upon SEC 330 and will leave a student with a complete understanding of the steps necessary to protect an organization from an attack or disaster. Topics include the following: Data Backup and archiving, Retrieval methods, Log Analysis, Error Checking and Integrity Analysis. Also covered in this course is Disaster Recovery. Students will be asked to develop a Disaster Recovery Plan keeping in mind the Risk assessment, location, network, computer, financial and power constraints necessary to develop an efficient DRP for an organization.

Prerequisite(s): SEC 330

SEC 450
Protecting Your Network: Firewall and Perimeter Security
3 credits

This is the ultimate security course on protecting company assets through network security. Topics include Firewall, Perimeter Security, Intrusion Detection Systems (IDS), Edge Devices, and Assessment. Students will learn how to develop a set of firewall rules that will keep hackers out, how to look at all possible ways in which unauthorized users might gain access to network assets, and how an IDS can provide an analysis showing who has access to the system. Students will develop a security plan and monitor ongoing activities to determine effectiveness of a security model.

Prerequisite(s): IRM 320

SEC 490
Information Resource Management Security Internship
6 credits

Students in the final year of the program who have completed the program's core requirements will be offered the option, as an elective, to receive academic credit of up to six credit hours for a supervised field experience.

Prerequisite(s): Permission of the Program Coordinator

SEC 6010
Planning for Information Security
3 credits

This course addresses the necessity of developing accurate Business Continuity Plans. Within this scope, emergency response, business resumption, and disaster recovery will be evaluated as critical components to the process. Through review of the planning process, a variety of methods and models will be considered to assist in business impact assessment as well as RISK planning assessment.

SEC 6020
Security Issues Concerning RFID (Radio Frequency Identification System) Technology Applications
3 credits

Radio Frequency Identification is an automatic identification methodology relying on the storage and remote retrieval of subject-specific data using devices called RFID "tags" or "transponders". The use of RFID technology is proliferating and emerging as an ubiquitous and sensitive informational asset within today's global enterprise. This course will help students better understand the role that RFID plays in various applications to include: product distribution, tracking, education, and government. Security of applicable resources as well as the technology employed. Ethical issues will be discussed in detail. As a result, students will be better prepared to identify when and where and to employ RFID technology as a busisness solution.

SEC 6030
Operating System and Computer Systems Security
3 credits

The student's basic network and operating system skills will be expanded to include planning, implementation, and auditing of a system's security package. The following topics are covered: Security Principles (Windows 2000 Security Architecture, Linux Security), Account Security (Securing Accounts, Passwords, Password Aging, and Verification of System State), File System Security (Windows 2000, XP File Security, NAS Storage Security), Accessing Risk (Key loggers, Sniffers, Port Scanning), Risk Analysis (Viruses, Patches, Packaging Techniques), and Encryption.

SEC 6040
Web and Data Security
3 credits

This course will help students build a security policy and SOP for an organization which is implementing a new network and web infrastructure. Topics include the following: Security Education and Advisory, Risk Management, Threats to IT Assets, Encryption, Standards and Compliance, and Security Testing and Implementation.

Prerequisite(s): SEC 6030

SEC 6090
Topics in Information Assurance
3 credits

This course is an intensive study of selected contemporary topics in Information Assurance. Emphasis is placed on research in areas pertinent to the current IT environment. Given the rapidly changing landscape of present day information systems and technology, it is entirely appropriate to focus on recent and novel developments in the field. The focus for each section will vary, and in a "Directed Study" format, will be tailored specifically to the career and vocational interests of the student. When scheduled in lecture/seminar form, the topical subject matter will change at each offering; students should refer to the course listing bulletin for the current topic.