CSE 694X: Applied Information Security Project

Description

Team-based projects: solve information security challenges (host/network hardening, intrusion detection and vulnerability scanning, forensics) in virtual server environment; results communicated through report writing and presentation.

Level, Credits, Class Time Distribution, Prerequisites

Quarters Offered

• Au

General Information, Exclusions, Cross-listings, etc.

• Strong background in computer system, networks and security will be helpful.

Intended Learning Outcomes

• Master the use of VMWare to create flexible, complex virtual computer networks.
• Master techniques for hardening various operating systems (Linux and Windows) and services running on these systems (web, database, others).
• Be familiar with issues involved in the configuration and use of firewalls, intrusion detection/prevention, and vulnerability scanning/exploit tools.
• Be familiar with common software vulnerabilities and techniques for finding and fixing them.
• Be familiar with host security standards and laws such as HIPAA, PCI, Ohio House Bill 104, OWASP, NSA, CSI and so on.
• Be familiar with general goals of and issues pertaining to computer forensic analysis and incident response.
• Be exposed to a wide variety of computer security tools, especially forensics and investigation tools and scanning tools.

Texts and Other Course Materials

Topics

Representative Lab Assignments

• Project A: Host/Network Hardening
• Project B: Intrusion Detection and Vulnerability Scanning
• Project C: Computer Forensics

Grades

Relationship to BS-CSE Program Outcomes/EC 2000 Criterion 3 Outcomes