Practical Connection Assignment

1

School of Computer & Information Sciences

COURSE SYLLABUS

Course Name: ISOL536 – Security Architecture & Design Section – 31004.202030 Summer 2020 – First Bi-Term - Asynchronous Online Course

Professor: Dr. Charles DeSassure

Contact Information:

Office Hours: By appointment Email: [email protected]

Online Support (IT) and I-Learn Policy:

All members of the University of the Cumberlands’ community who use the University’s computing, information or communication resources must act responsibly. http://www.ucumberlands.edu/it/downloads/terms.pdf

Course Website: Access to the course website is required via the iLearn portal on the University of the Cumberlands website: http://www.ucumberlands.edu/ilearn/

Course Description:

This course discusses useful model used to address potential threats in software systems and how to apply such models in developing secure software and systems. Areas of study focus on threat modeling strategies, including finding threats, addressing threats, and threat modeling technologies.

Course Objectives/ Learner Outcomes:

Course Objectives/Learner Outcomes: Upon completion of this course, the student will:

• Recognize the components of the basic information system architecture and their functionality, and differentiate between hardware, software, and firmware.

• Differentiate between machine types and recognize the functions of network protocols and the resource manager.

• Distinguish between types of storage devices and how they are used.

2

• Determine which system resources can be found at the different protection rings and how the rings control subject access to objects.

• Differentiate between key security concepts, recognize the roles of TCB, reference monitor, and security kernel in protecting the operating system.

• Differentiate between the various criteria and standards used to evaluate security in a networking environment.

• Specify the security level that should be assigned to various objects and determine how to implement the standard.

• Recognize the logistics of various security models used to enforce rules and protection mechanisms.

Major Instructional Areas 1. Understanding threat modeling 2. Strategies for finding threats 3. Techniques for managing threats 4. Validating threat handling activities 5. Understanding environment-specific threats

Prerequisites: There are no prerequisites for this course.

Books and Resources:

Required Text Schoenfield, Brook S. E., Securing Systems: Applied Security Architecture and Threat Models, 2015. CRC Press: ISBN: 9781482233971

3

Recommended Materials/Resources Shostack, Adam. Threat Modeling: Designing for Security, Indianapolis, IN: Wiley, 2014 Professional Associations • International Association of Privacy Professionals (IAPP) - This Web site provides an opportunity to interact with a community of privacy professionals and to learn from their experiences. This Web site also provides valuable career advice. https://www.privacyassociation.org/ • International Information Systems Security Certification Consortium, Inc., (ISC)²® - This Web site provides access to current industry information. It also provides opportunities in networking and contains valuable career tools. http://www.isc2.org/ • ISACA - This Web site provides access to original research, practical education, career-enhancing certification, industry-leading standards, and best practices. It also provides a network of likeminded colleagues and contains professional resources and technical/managerial publications. https://www.isaca.org/Pages/default.aspx

Course Expectations

Course Activities and Experiences:

Students are expected to: • Review any assigned reading material, complementary materials, and weekly lectures and prepare responses to homework assigned. • Actively participate in activities, assignments, and discussions. • Evaluate and react to each other’s work in a supportive, constructive manner. • Complete specific assignments and exams when specified and in a professional manner. • Utilize learned technologies for class assignments. • Connect content knowledge from core courses to practical training placement and activities.

Academic Integrity:

At a Christian liberal arts university committed to the pursuit of truth and understanding, any act of academic dishonesty is especially distressing and cannot be tolerated. In general, academic dishonesty involves the abuse and misuse of information or people to gain an undeserved academic advantage or evaluation. The common forms of academic dishonesty include:

4

• Cheating – using deception in the taking of tests or the preparation of written work, using unauthorized materials, copying another person’s work with or without consent, or assisting another in such activities.

• Lying – falsifying, fabricating, or forging information in either written, spoken, or video presentations.

• Plagiarism—using the published writings, data, interpretations, or ideas of another without proper documentation

Plagiarism includes copying and pasting material from the internet into assignments without properly citing the source of the material. Episodes of academic dishonesty are reported to the Vice President for Academic Affairs. The potential penalty for academic dishonesty includes a failing grade on a particular assignment, a failing grade for the entire course, or charges against the student with the appropriate disciplinary body.

Attendance Policy: When any student has exceeded 20% of the time prescribed for any class, that student will be automatically dropped from that particular class with the grade of “F.” This grade is placed on the official transcript of the student and is treated as a failing grade in calculating the grade point average. The definition of a class absence is a student’s failure to attend class for any reason. Instructors may count three times tardy or leaving early to be equal to one class absence. There are no excused absences, regardless of the reason for the class having been missed. However, faculty will make reasonable provisions to allow students to make up work if the absence is due to a university-sponsored function or a medical or family emergency that is documented in a timely manner. Allowance for students to make up work for other reasons is at each instructor’s discretion. A class absence does not excuse the student from being responsible for course work missed; the student is responsible for contacting the faculty member in order to make up class assignments. The Vice President for Academic Affairs is the authorized agent to consider any exceptions to the above regulations. (Undergraduate Catalog) . Residency Attendance: No Residency required for this course.

Disability Accommodations:

The University of the Cumberlands accepts students with certified disabilities and provides reasonable accommodations for their certified needs in the classroom, in housing, in food service or in other areas. For accommodations to be awarded, a student must submit a completed

5

Accommodations Application form and provide documentation of the disability to the Disability Services Coordinator (Mr. Jacob Ratliff, Boswell Campus Center, Student Services Office Suite, [email protected]). When all paperwork is on file, a meeting between the student and the Coordinator will be arranged to discuss possible accommodations before accommodations are formally approved. Students must then meet with the Coordinator at the beginning of each semester before any academic accommodations can be certified for that term. Certifications for other accommodations are normally reviewed annually.

Student Responsibilities:

• The only authorized electronic means of academic, administrative, and co-curricular communication between University of the Cumberlands and its students is through the UCumberlands email system (i.e. Webmail). Each student is responsible for monitoring his/her University email account frequently. This is the primary email account used to correspond with you directly by the University; imperative program information is sent to this email account specifically from campus and program office.

• Students should check for email and class announcements using iLearn (primary) and University of the Cumberlands webmail (secondary).

• Students are expected to find out class assignments for missed classes and make up missed work.

• Students are expected to find out if any changes have been made in the class or assignment schedule.

• Written work must be presented in a professional manner. Work that is not submitted in a professional manner will not be evaluated and will be returned as unacceptable.

o There is a craft to writing. Spelling, grammar, punctuation and diction (word usage) are all tools of that craft. Writing at the collegiate level will show careful attention to these elements of craft. Work that does not exhibit care with regard to these elements will be considered as inadequate for college writing and graded accordingly.

6

• Students are expected to take the examinations on the designated dates. If you are unable to take the exam on the scheduled date and know in advance, you are to make arrangements with your professor before the designated date. If you miss the exam, you must have a legitimate reason as determined by your professor.

Deadlines and Dues Dates:

Recognizing that a large part of professional life is meeting deadlines, it is necessary to develop time management and organizational skills. Failure to meet the course deadlines may result in penalties. Keep in mind that all deadlines are set using Eastern Standard Time (EST). Late assignments will NOT be accepted.

Writing Expectations:

Learning outcomes for candidates’ writing competencies include clarity of thought, discernment in planning and organization, and integration of evidence and criteria.

• The instructor expects that students will have knowledge of appropriate forms of documentation and use it where appropriate. APA format is required and style of notation to credit all sources that are not your own.

• There is a craft to writing. Spelling, grammar, punctuation and diction (word usage) are all tools of that craft. Writing at the collegiate level will show careful attention to these elements of craft. Work that does not exhibit care with regard to these elements will be considered as inadequate for college writing and graded accordingly.

• All assignments, unless otherwise instructed, should be submitted in APA format.

Participation Policy:

Study after study has linked successful academic performance with good class participation. Those who assume positions of responsibility must “show up” in order to be effective. Therefore, students are expected to actively participate in intelligent discussion of assigned topics in all areas (Discussion Board Activities, Synchronous Sessions, Forums, Shared Papers, etc.) to help process course material and/or to demonstrate understanding of course content. Point adjustments will be taken for non- participation.

7

Academic Appeals: Both undergraduate and graduate students have the right to challenge a grade. If discussions with the course instructor and department chair do not lead to a satisfactory conclusion, students may file a formal written appeal with the Vice President for Academic Affairs, who will forward the appeal to the chair of the Academic Appeals Committee. This formal written appeal must be filed by the end of the 4th week of classes in the next regular term following the term in which the course in question was taken. The Academic Appeals Committee then gathers information from the student, the instructor, and any other relevant parties. The Committee will deliver its recommendation on the complaint to the Vice President for Academic Affairs. After reviewing this recommendation and concurring or amending it, the Vice President for Academic Affairs will inform the student and instructor of the disposition of the complaint no later than the last day of classes of the term in which the complaint was filed. Records of all actions regarding academic grade appeals, including their final disposition, are maintained by the Vice President for Academic Affairs and the Academic Appeals Committee. (Undergraduate Catalog/Graduate Catalog).

Links to Support: Orientation to I-Learn: Student training course on I-Learn, https://ucumberlands.blackboard.com/webapps/portal/frameset.jsp Book Store: http://cumber.bncollege.com/webapp/wcs/stores/servlet/BNCBHomePag e?storeId=50059&catalogId=10001&langId=-1 Library: http://www.ucumberlands.edu/library/

Course Assignments and Evaluation

Evaluation Method:

Graded work will receive a numeric score reflecting the quality of performance. Relative weights assigned to graded work are as follows:

Category Weight

Individual Assignments 10% Group Project 30%

Portfolio Project 15%

Mid-Term 10% Discussion Board/Labs 15%

Final Exam 20% TOTAL 100

8

Course Evaluation

Students will be evaluated on: 1. Individual Assignments - Assignments varies and normally will consist

of APA writing requirements. The Practical Connection Assignment will be an Individual assignment where students will reflect on course concepts and their practical connection to a working environment.

2. Group Project – Students will work to complete a group project. 3. Portfolio Project – Students will complete a case study project or a

similar project. 4. Mid-term – Students will complete questions over the first few

chapters. A study guide will be provided. 5. Discussion Board/Labs - Discussions Board questions will come from

the course lectures, materials, and required reading assignments. Studnets will also complete hands-on labs.

6. Final Exam – The Final Exam may consist of multiple-choice, multiple answers, matching, and True/False questions. Exam items derived primarily from lectures and readings. Exams will be available through iLearn and completed independently.

Grading Scale: Graded work will receive a numeric score reflecting the quality of performance as given above in evaluation methods. The overall course grade will be determined according to the following scale: A= 90 – 100 (90% - 100%) B= 80 – 89 (80% - 89%) C = 70 – 79 (70% - 79%) F < 69 (Below 69%)

Course Expectations

Reading – Students are expected to read the weekly assigned Chapters thoroughly for a better understanding of the course material.

Weekly (Videos) – Students are expected to review the weekly videos. Last Assignment Policy – No late assignments will be accepted in this course. Weekly assignments are due on Sunday midnight of that week. Do not wait until the last minute to submit your assignments. Emergency - The professor will work with all students if there is an emergency. Please communicate with the professor. Grading – All weekly assignments will be graded seven days from the submission date. The grading process may take longer (depending on the assignment).

9

Communication – There are many options for students to communicate with the professor. Email: Students may email the professor: [email protected]. The professor will reply to emails with 24 hours. Conference call: Students may arrange a conference calls with the professor. Please contact the professor to make arrangements.

Zoom Live meeting: Students may arrange for a live meeting with

the professor. Please contact the professor to make arrangements.

Remind: Students may text the professor using the Remind system. Setup information is located on the course web site.

10

Syllabus Disclaimer:

This syllabus is intended as a set of guidelines for this course and the professor reserves the right to make modifications in content, schedule, and requirements as necessary to promote the best education possible within conditions affecting this course. Any changes to the syllabus will be discussed with the students.

Class Schedule – Summer 2020

Category Activity/Due Date

Week 1

Chapter 1: Introduction

Chapter 2: The Art of Security Assessment

(May 4 – 10, 2020)

Reading Week 1: Introduction to Information Security. Study key terms for a Lab quiz.

Reading Week 1: Read Chapter 1 and Chapter 2

Reading Week 1: A Security Assessment Methodology for Critical Infrastructures.

Video Week 1: Review weekly videos

Lecture Week 1: Instructor’s lecture

Assignment Week 1: Discussion Board Question 1 15% Due: 5/10

midnight

Assignment Week 1: Lab 1 15% Due: 5/10

midnight

Assignment Week 1: Individual Assignment 1 10% Due: 5/10

midnight

11

Week 2

Chapter 3: Security Architecture of Systems

Chapter 4: Information Security Risk

(May 11 – 17, 2020)

Reading Week 2: Read Chapter 3 and Chapter 4

Videos Week 2: Review weekly videos

Lecture Week 2: Instructor’s lecture

Assignment Week 2: Lab 2 15% Due: 5/17

midnight

Assignment Week 2: Individual Assignment 2 10% Due: 5/17

midnight

Week 3 Chapter 5: Prepare for Assessment

Chapter 6: eCommerce Website (May 18 – 24, 2020)

Reading Week 3: Read Chapter 5 and Chapter 6

Videos Week 3: Review weekly videos

Lecture Week 3: Instructor’s lecture

Assignment Week 3: Discussion Board Question 2 15% Due: 5/24

midnight

Assignment Week 3: Lab 3 10% Due: 5/24

midnight

Week 4

Chapter 7: Enterprise Architecture

Chapter 8: Business Analytics

(May 25 – 31, 2020)

Readings Week 4: Read Chapter 7 and Chapter 8

Videos Week 4: Review weekly videos

Lecture Week 4: Instructor’s lecture

Assignment Week 4: Lab 4 15% Due: 5/31

midnight

Assignment Week 4: Individual Assignment 3 10% Due: 5/31

midnight

Assignment Week 4: Lab 5: Need Assessment 15% Due: 5/31

midnight

12

Week 5

Chapter 9: Endpoint Anti-Malware Chapter 10: Mobile Security Software with Cloud Management

(June 1 – 7, 2020)

Readings Week 5: Read Chapter 9 and Chapter 10

Videos Week 5: Review weekly videos

Lecture Week 5: Instructor’s lecture

Assignment Week 5: Lab 5 10% Due: 6/7

midnight

Assignment Week 5: Discussion Board Question 3 15% Due: 6/7

midnight

Week 6

Chapter 11: Cloud Software as a Service (SaaS) Chapter 12: Patterns and Governance Deliver Economies of Scale

(June 8 – 14, 2020)

Reading Week 6: Read Chapter 11 and Chapter 12

Videos Week 6: Review weekly videos

Lecture Week 6: Instructor’s lecture

Assignment Week 6: Lab 15% Due: 6/14

midnight

Assignment Week 6: Individual Assignment 4 10% Due: 6/14

midnight

Week 7 Chapter 13: Building as Assessment Program

(June 15 – 21, 2020)

Reading Week 7: Read Chapter 13

Videos Week 7: Review weekly videos

Lecture Week 7: Instructor’s lecture

Assignment Week 7: Lab 6 - Questions/Hands-on 15% Due: 6/12

midnight

Assignment Week 7: Group Project due 30% Due: 6/21

midnight

Assignment Week 7: Discussion Board Question 4 15% Due: 6/21

midnight

13

Week 8

Final Exam - Comprehensive

(June 22 – 24, 2020)

Final Exam

Week 8: Complete the Final Exam. End of the semester.

20% Due: 6/24

midnight