PLEASE READ WHOLE QUESTION FIRST : 700 Words CPT Docuemnt (See attachment for current semester courses)

MSIS 534 – Application Security. This course discusses methods to increase the security of application development and thwart attacker attempts to manipulate code. It also explores the software lifecycle and change control to reduce the probability of poorly written applications that allows an attacker to exploit coding errors. Database development models will be introduced focusing on choosing the best model to increase security.

Upon completion of the course, students will be able to

 Match issues related to applications development with corresponding ways in which they create security vulnerabilities.

 Recognize types of attacks used in the enterprise environment.

 Determine the appropriate methods to counteract a given attack.

 Match types of computer attacks to their corresponding countermeasures.

 Match types of malicious code to their corresponding descriptions.

 Recognize the purpose of software forensics.

 Recognize characteristics of knowledge-based systems.

 Determine the appropriate development model to use for a given software development project

 Distinguish between various database models and technologies

MSIS 631 – Operations Security. The course examines controls over personnel, hardware, software, and systems. It also covers possible abuse channels and proper countermeasures.

Upon completion of the course, students will be able to

 Recognize the activities involved in securing the operations of an enterprise and identify the technologies used to maintain network and resource availability.

 Identify the effects of various hardware and software violations on the system, and recognize how different types of operational and life-cycle assurance are used to secure operations.

 Determine the effects of different attacks on the network and identify the consequences of those effects.

 Recognize how different auditing and monitoring techniques are used to identify and protect against system and network attacks.

 Recognize the need for resource protection, distinguish between e-mail protocols, and identify different types of e-mail vulnerability.

 Identify basic mechanisms and security issues associated with the Web, and recognize different technologies for transferring and sharing files over the Internet.

 Recognize key reconnaissance attack methods and identify different types of administrative management and media storage control.

 Identify the appropriate security measures and controls for creating a more secure workspace.