IT2042 INFORMATION SECURITY Syllabus

IT2042                              INFORMATION SECURITY                      L  T  P  C   
                                                                                                                    3   0  0  3
UNIT I    INTRODUCTION                       9
History, What  is  Information Security?, Critical Characteristics of  Information, NSTISSC
Security  Model,  Components  of  an  Information  System,  Securing  the  Components,
Balancing Security and Access, The SDLC, The Security SDLC

UNIT II   SECURITY INVESTIGATION                   9
Need  for  Security, Business Needs,  Threats, Attacks,  Legal, Ethical  and Professional
Issues

UNIT III   SECURITY ANALYSIS                     9
Risk Management: Identifying and Assessing Risk, Assessing and Controlling Risk

UNIT IV   LOGICAL DESIGN                       9
Blueprint  for  Security,  Information  Security  Poicy,  Standards  and  Practices,  ISO
17799/BS  7799, NIST Models,  VISA  International  Security Model, Design  of  Security
Architecture, Planning for Continuity

UNIT V   PHYSICAL DESIGN                       9
Security Technology,  IDS, Scanning and Analysis Tools, Cryptography, Access Control
Devices, Physical Security, Security and Personnel

                 TOTAL: 45 PERIODS
TEXT BOOK:
1.  Michael E Whitman and Herbert J Mattord, “Principles of Information Security”, Vikas
Publishing House, New Delhi, 2003

REFERENCES:
1.  Micki Krause, Harold F. Tipton, “ Handbook of Information Security Management”,
Vol 1-3 CRC Press LLC, 2004.
2.  Stuart Mc Clure, Joel Scrambray, George Kurtz, “Hacking Exposed”, Tata McGraw-
Hill, 2003
3.  Matt Bishop, “ Computer Security Art and Science”, Pearson/PHI, 2002.