Course Objective
This course is a broad introduction to the managerial issues of information security. Because security is multifaceted, the topics of the class range widely, including technical (e.g., cryptography), managerial (e.g., policy compliance), physical (e.g., door locks), and psychological (e.g., social engineering) issues. A key objective of the class is to develop a security mindset, in which one learns to think like an attacker for ways to exploit a system.
Course Learning Goals
Develop a security mindset
- Learn to think like a security professional—how to identify threats like an attacker, and how to model and mitigate those
Gain a working knowledge of methods to protect data
- Gain a working knowledge of modern methods of protecting data: encryption, hashing, confidentiality, authentication, integrity, non-repudiation, certificates, and IP
Learn methods of attack and defense
- Learn methods of attacking systems and how to protect against those methods of attacks. Appreciate the broad disciplines required for IS security
- Appreciate the broad disciplines required for information security to work. We’ll cover subjects as comprehensive as cryptology, physical security, psychology, and management, based on based on the NIST Cybersecurity Framework Version 1.1 (https://www.nist.gov/cyberframework/framework) and the NIST Risk Management Framework (https://csrc.nist.gov/projects/risk-management/about-rmf).
Communicate security risks and responses effectively
- This course is a Temple-designated writing intensive course. As such, a substantial portion of the course will be devoted to practicing capable, proficient communication of cybersecurity risks, threats, mitigations, and responses to relevant stakeholders for their decision
Technology Requirements
Information Security Assignments
This course will use lab assignments and milestone projects at http://security-assignments.com/, developed by Dave Eargle and Anthony Vance. Access to the resources in this site will require subscription with a fee (https://security-assignments.com/store/). Details to be available.
Google Cloud Platform (GCP)
This course uses GCP to run tools and virtual machines necessary to complete assignments. New accounts on GCP receive a $300 credit for three months. Students should be able to complete this class without going over that cost. The instructor will have the students launch a Kali virtual machine instance on GCP from which they can complete class assignments. The students will be able to remotely connect to the instance using Chrome Remote Desktop, which works just like a browser tab.
Canvas
Canvas is the University’s learning management system (LMS).
- For resources and/or Canvas related questions or issues, please use the Help (?) feature in the Canvas Global Navigation for assistance via phone or a 24-hour Chat
- Canvas guides for students: https://community.canvaslms.com/docs/DOC-10701
Grading
Milestones |
Group or Individual |
40% |
Labs |
Individual |
25% |
Mid-Term Exam |
Individual |
15% |
Final Exam |
Individual |
20% |
Total |
|
100% |
Milestones (40%)
There are four milestone projects that will help students develop professional cybersecurity and communication skills.
- Milestone 1: Risk Assessment Draft
- Milestone 2: Final Risk Assessment Report
- Milestone 3: Penetration Test Report
- Milestone 4: Penetration Test with Mitigation Report
- These projects can be completed by individually or with a group of up to four. Students are free to form a group.
- A group can be made of students from both Section 002 and
- The milestones will be graded in the same manner whether it is completed individually or by a
- Late submissions are subject to a 10% deduction in points per 12 hours.
Labs (25%)
These are hands-on learning activities that will begin in class and completed outside of class.
- There are 14 labs. However, only the top 12 highest lab scores will be counted toward the lab (In other words, students can skip up to two labs.)
- All labs are due by 11:59 PM on Thursday, May 5. However, it is strongly encouraged to complete one lab a week throughout the No late submission will be accepted.
- Some lab assignments are necessary to be completed prior to exams or
Lab Peer Support
Students are encouraged to help each other complete lab assignments. When a student offers help to another to complete one lab assignment, he/she will receive a 5% extra credit to the lab assignment.
- For example, if Molly helps Michael for Lab #2, she will receive a 5% extra credit to her Lab #2 If Molly is reported to help two of her classmates, she will receive an 10% extra credit.
- The one who receives help must submit the helper’s name in Canvas submission. (In other words, Michael should report that he has received help from Molly.)
- A student can report help only from one student in one lab. (Michael cannot report help from both Molly and )
Mid-Term (15%) and Final Exams (20%)
- The mid-term and final exams will be open-book and open-note exams over
- The mid-term exam opens at Feb 23 and is due by Feb 27, 11:59 PM (subject to change).
- The final exam opens at Apr 28 and is due by May 4, 11:59 PM (subject to change). It is cumulative and covers the entire
- There will be no extension to completion of exams.
Certification Option for the Exams
- As an option, students seeking certification may replace both the mid-term and final exams by passing CompTIA Security+ certification (https://www.comptia.org/certifications/security) or other certification approved by the
- Students can substitute the score on the certification plus an adjustment (5% for the Security+) for the mid-term and final exams. For example, if a student receives an 85% on Security+, he/she receives 90% of the points for the two
- To receive credit for the certification, the student must show evidence of having taken the certification exam by April
Department Requirements for MIS Majors
- [Requirement 1] Those who are majoring or double-majoring MIS must earn at least 1,000 PRO points to pass this course by the end of the semester. (See https://community.mis.temple.edu/files/2020/04/MIS-Course-Structure-Updated-March- pdf) This requirement does not apply to non-MIS majors.
- [Requirement 2] MIS majors who are graduating at the end of this semester are required to register as an MIS alumnus – https://community.mis.temple.edu/professionalachievement/register-as-an-alum/. This requirement does not apply to those who are not
- A failure to meet the above requirement results in an Incomplete The department will inform the instructor in April-May 2022 of those failing to meet the above requirements, and the instructor will give them an Incomplete grade, which will be converted to a proper grade as soon as the two requirements are met.
Grade Scale
93% – 100% |
A |
90% – 92.99% |
A- |
87% – 89.99% |
B+ |
83% – 86.99% |
B |
80% – 82.99% |
B- |
77% – 79.99% |
C+ |
73% – 76.99% |
C |
70% – 72.99% |
C- |
67% – 69.99% |
D+ |
63% – 66.99% |
D |
60% – 62.99% |
D- |
< 59.99% |
F |
Other Course Policies
- Attendance and Participation: Attendance and participation are a key component of learning It is strongly encouraged to read/review all post materials (readings, videos, or others) prior attendance and actively take part in all class discussions and activities. Missing classes will make it difficult to successfully complete the milestones, labs, and exams, leading to a lower final grade.
- Email : Use @temple.edu email account for all correspondents with the instructor. Email messages sent from a non-Temple account may not be responded. The instructor does not prefer using Canvas
- Inclement Weather: Generally, in case of inclement weather, a class will not be canceled as long as the University is