95-752 Introduction to Information Security Management	

This course is concerned with fundamental principles of computer security. It covers privacy concerns, secrecy issues, operational security, physical security, hardware security, software security, communications security, and data security. 
	
Course Hours	Instructor	

Lecture:           Thursday 
                        5:30pm-8:20pm GHC4307
Laboratory:     No formal laboratory
	
Tim Shimeall (tjs@cert.org)
412-268-7611
Office Hours by Appointment ONLY
Web: http://www.andrew.cmu/course/95-752	
		
Text	
Required:	Optional:	
Security in Computing
Pfleeger, Charles P.
Fourth Edition, Prentice Hall, 2007. 
(Contact instructor if using Second or Third Edition)	
NONE	
Grading	
                          Midterm Exam        - 30%
                          Final Paper/project  - 40%      
                          Homework               - 30%      (2 graded assignments)	
Policies	

You are encouraged to study together and sample exams will be provided by me as a learning resource; topics on the sample exams are not guaranteed to be on the actual exam and vice versa.  All student homework and submitted examinations are expected to be the product of individual effort unless otherwise specified. This means that your submissions are expected to be in your own words and the product of your own effort – any detected copying will be considered plagiarism unless appropriate citations are given. Students are cautioned that much of the material available from Internet searches is of dubious quality in this area.  Examinations will be take-home and open-book. All e-mail submission of homework and exams will be acknowledged by the instructor soon after receipt. E-mail submission must occur prior to the due date or a grading penalty will be assessed. Physical submission may be done in class, or to the instructor by appointment.

This offering will not be using the blackboard system.	

	Topics by Week and Reading Assignments

Week	Chapter	Topic	
1		No Lecture: Instructor absent	
2 	Chapters 1, 11, 8.4	Introduction; Computer Terminology; Security Model & Definition; Physical Security	
3	Section 4.5	Access Control	
4	Sections 2.1-2.6	Encryption-1	
5		Security Strategy and Tactics	
6	Sections 2.7-2.8	Encryption-2
Homework 1 due
Term paper or project selection due	
7	Chapter 5	Security Economics (Guest Lecture)	
8	Sections 4.1-4.4	Operating System Security 
Take-home Midterm Exam Due	
9	Chapter 3	Application Security	
10	Chapter 7	Network Security-1	
11	Chapter 7	Network Security-2	
12		Incident Analysis 
Homework 2 Due 	
13 		Computer Forensics	
14 	N/A	Thanksgiving Holiday (No Lecture)	
15 	Sections 8.1. – 8.3	Security Policy	
Dec 8, 2009		Paper or Project Due