The most current schedule will be handed out in class with the syllabus. However, below is a tentative schedule.

• Security Fundamentals
  • Security Triad
  • Security Services
  • Acces Control Methodologies
  • Security Models
  • Security Principles (Defense in Depth, Separation of Privileges)
  • Types of Security
  • Security Policies
• Host Security
  • Trusted Computing Base/Secure Kernel
  • Securing Unix
  • Securing Windows
  • Server Security
  • Database Security/Secure Transactions
  • Covert Channels
• Application Security
  • Secure Design Principles
  • Buffer Overflows (shell code examples)
  • SQL Injection
  • Sandbox Concept
  • Scripting Abuse- PHP, CGI, Javascript
  • Signing Code
• Cryptography
  • Symmetric Algorithms
  • Asymmetric Algorithms
  • Digital Signatures/Certificates
• Network Security
  • Security Architectures
  • Threats to the network
  • Firewalls and Router Security
  • Securing Network Protocols
  • Intrusion Detection
  • Vulnerability Assessment and Penetration Testing
  • Cyber Security (Phishing, 419 Scams, Browser Settings)
• Malicious Code
  • Viruses and Worms
  • Trojan Horses
  • Spyware and Adware
  • Botnets
  • Rootkits
• Security Management and Ethics
  • Policies and Procedures
  • Security Evaluation Standards
  • Incident Handling/Disaster Recovery/Business Continuity
  • Risk Assessment
  • Compliance with the Law (HIPPA, Sarbanes-Oxley)
  • Privacy Issues