Home - Academics - Business & Information Technology - Degree Programs - Cyber Security - Information Security Certificate Program

Information Security Certificate Program

The Networking and Cyber Security department at Rose State college offers a certificate program in Information Security at all federal training levels. The program certifies the students satisfying program requirements are trained to the federal NSTISSI/CNSSI 4011, 4012, 4013, 4014, 4015, and 4016 standards for Information Systems Security Professionals, Designated Approving Authorities, Information System Security Officers, Systems Certifiers, and Risk Analyst respectively.

Incoming Student Policies:

Declared major in Networking or Computer Information Technology or related area and proficiency in either C, C++, or Java programming Languages
Significant industrial, military, or government experience in information technology and/or computer security.

Contact:
Ken Dewey
Professor Networking / Cyber Security
Director of Cyber Security
Rose State College
kdewey@rose.edu
(405) 733-7977
or
Eileen Dewey
Professor Networking / Cyber Security
Rose State College
edewey@rose.edu
(405) 733-7510

NSTISSI 4011
CNSSI 4012
CNSSI 4013
CNSSI 4014
NSTISSI 4015
CNSSI 4016

Systems Courses
CIT 2183
CIT 2403
CIT 2583
CIT 2673

IA Core Courses
CIT 2513
CIT 2523
CIT 2563
CIT 2573
CIT 2603

IA Electives
CIT 2323
CIT 2533
CIT 2543
CIT 2553
CIT 2603

Supporting Courses
CIT 2033
CIT 2023
CIT 2053
CIT 2243
CIT 2353
CIT 2423
CIT 2613

Network Systems Courses
CIT 2053
CIT 2243
CIT 2323
CIT 2353
CIT 2423
CIT 2643

NSTISSI 4011: Information System Security Professional

This 18 hour certificate program is available to undergraduates and non-traditional students. The core of the program includes CIT 2563 (Computer Security), CIT 2513 (Secure Electronic Commerce), CIT 2403 Advanced Networking Concepts, CIT 2543 (Information Security Assurance).

Beyond the core, students take two Information Assurance (IA) electives. Students participating in the program must register as such for each Systems course to receive specialized INFOSEC training/assignments in these courses. (An option for working non-traditional students is to demonstrate proficiency in systems areas by passing comprehensive examinations in those areas.)

4011 Certificate Curriculum

CIT 2563 Computer Security	3 hours
CIT 2513 Secure Electronic Commerce	3 hours
CIT 2403 Advanced Networking Concepts	3 hours
CIT 2543 Information Security Assurance	3 hours
Information Assurance Elective 1 (not listed above)	3 hours
Information Assurance Elective 2 (not listed above)	3 hours
Total	18 hours

CNSSI 4012: Senior System Managers

The 4012 certificate program, aimed at Senior System Managers (SSMs), extends the 4011 certificate with an additional course, CIT 2523 (Enterprise Security Management). This course provides the additional body of knowledge required by SSMs to accredit, extend and operate enterprise information systems in a secure mode.

4012 Certificate Curriculum

CIT 2563 Computer Security	3 hours
CIT 2513 Secure Electronic Commerce	3 hours
CIT 2523 Enterprise Security Management	3 hours
CIT 2403 Advanced Networking Concepts	3 hours
CIT 2543 Information Security Assurance	3 hours
Information Assurance Elective 1 (not listed above)	3 hours
Information Assurance Elective 2 (not listed above)	3 hours
Total	21 hours

CNSSI 4013: System Administrators

The 4013 certificate program, aimed at System Administrators (SAs), extends the 4011 program with an additional course, CIT 2573 (Secure System Administration and Certification). This course provides the additional body of knowledge required to accredit, extend and operate as administrators of information systems in a secure mode.

4013 Certificate Curriculum

CIT 2563 Computer Security	3 hours
CIT 2513 Secure Electronic Commerce	3 hours
CIT 2573 Secure System Administration and Certification	3 hours
CIT 2583 CIT 2643 Wireless Networking	3 hours
CIT 2183 CIT 2323 Network Security	3 hours
Network Systems Course (not listed above)	3 hours
Information Assurance Elective 1 (not listed above)	3 hours
Information Assurance Elective 2 (not listed above)	3 hours
Total	24 hours

CNSSI 4014: Information System Security Officer

The 4014 certificate program, aimed at certifying Information Systems Security Officers, extends the 4011 program with an additional course, CIT 2523 (Enterprise Security Management). This course provides the additional body of knowledge required to accredit, extend and operate enterprise information systems in a secure mode. Moreover, proficiency in operating systems, databases and networks must be demonstrated.

4014 Certificate Curriculum

CIT 2563 Computer Security	3 hours
CIT 2513 Secure Electronic Commerce	3 hours
CIT 2523 Enterprise Security Management	3 hours
CIT 2583 Operating Systems	3 hours
CIT 2183 Advanced Databases	3 hours
Network Systems Course (not listed above)	3 hours
Information Assurance Elective 1 (not listed above)	3 hours
Information Assurance Elective 2 (not listed above)	3 hours
Total	24 hours

NSTISSI 4015: Systems Certifier

The 4015 certificate program, aimed at certifying systems certifiers, extends the 4011 program with additional courses, CIT 2523 (Enterprise Security Management) and CIT 2573 (Secure System Administration and Certification). This course provides the additional body of knowledge required to accredit, extend and operate as systems certifiers in a secure mode. Moreover, proficiency in operating systems, databases and networks must be demonstrated.

4015 Certificate Curriculum

CIT 2563 Computer Security	3 hours
CIT 2513 Secure Electronic Commerce	3 hours
CIT 2523 Enterprise Security Management	3 hours
CIT 2573 Secure System Administration and Certification	3 hours
CIT 2583 Operating Systems	3 hours
CIT 2183 Advanced Databases	3 hours
Network Systems Course (not listed above)	3 hours
Information Assurance Elective 1 (not listed above)	3 hours
Information Assurance Elective 2 (not listed above)	3 hours
Total	27 hours

CNSSI 4016: Risk Analyst

The 4016 certificate program, aimed at training individuals performing risk analyst function for national security systems and unclassified systems. This standard presents an in-depth analysis of the range of skills required for persons performing RA function.

4016 Certificate Curriculum

CIT 2563 Computer Security	3 hours
CIT 2513 Secure Electronic Commerce	3 hours
CIT 2523 Enterprise Security Management	3 hours
CIT 2573 Secure System Administration and Certification	3 hours
CIT 2603 Security Auditing and Penetration Testing	3 hours
CIT 2583 Operating Systems	3 hours
CIT 2323 Network Security	3 hours
Network Systems Course (not listed above)	3 hours
Information Assurance Elective 1 (not listed above)	3 hours
Total	27 hours

CIT 2183 - Advanced Database Design

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 2 times the amount of contact hours for an additional 80 hours bringing the estimated total class hours to 120.

Course Description: This course will include a study of the principles and theory of database management and design to include network, hierarchical, and relational. Industry stand software applications such as SQL or Oracle will be used to enforce the concepts learned.

Course Prerequisites: CIT 1183

Course Learning Objectives / Expected Outcomes: Upon completion of this course, students should be proficient in the following database topics:

Data Modeling
Database Design
Query construction
Normalization
Transaction Processing
Concurrency
Backup/Recovery
Optimization

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material. These scores will be equated to a semester score between 0 and 100. The final grade will be based on the standard A-F scale. Borderline scores will be considered for equating the next higher grade by the instructor, based on attendance, participation, and demonstrated effort.

IA Mapping: Special Lectures and projects on database security concepts, access control, concurrency, transaction processing, and inference analysis

CIT 2243 - Unix/Linux

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 1 times the amount of contact hours for an additional 40 hours bringing the estimated total class hours to 80.

Course Description: This course is an in-dept study of the Unix/Linux operating system and how these operating systems are incorporated in today's networks.

Course Prerequisites: CIT 1503

Course Learning Objectives: The objective of this course is to better prepare students for a position in the networking field by demonstrating the use of Unix/Linux operating systems. This course includes practical applications of previously studied material using the Unix/Linux software system. These applications are necessary for a better understanding of the complex world of networking.

Major Topics: Upon completion of this course, the students will be able to:

Describe and utilize Unix/Linux file systems.
Describe and utilize Unix/Linux editors.
Describe and utilize Unix/Linux shell programming.
Utilize proper access control techniques
Set permissions pertaining to information protection and access control
Configure access control lists

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Two Examinations 45%
Homework 20%
Individual Projects 10%
Computer Based Labs 10%
Attendance / Participation 15%

These scores will be equated to a semester score between 0 and 100. The final grade will be based on the standard A-F scale. Borderline scores will be considered for equating the next higher grade by the instructor, based on attendance, participation, and demonstrated effort.

IA Mapping: Special Lectures and projects on access control, concurrency, information protection, access control lists, authentication.

CIT 2353 - Advanced Routing

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 1 times the amount of contact hours for an additional 40 hours bringing the estimated total class hours to 80.

Course Description: This course will expand the students knowledge of the physical and logical aspects of routing. This course will expose students to building and maintaining scalable networks.

Course Prerequisites: CIT 2343

Course Learning Objectives: The objective of this course is to expand on the students understanding of routing and routing technologies. This class is designed to prepare the students for the CCNA certification.

Major Topics: Upon completion of this course the student will be able to:

describe network scalability
identify IP addressing and broadcasts
identify routing protocols
examine route filtering
evaluate computer forensics software
identify redistribution
configure access control lists
evaluate protocol configuration

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Two Examinations 45%
Homework 20%
Individual Projects 10%
Computer Based Labs 10%

Attendance / Participation 15%

IA Mapping: Special Lectures and projects on access control, concurrency, information protection, access control lists, authentication.

CIT 2403 - Advanced Networking Concepts

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 1 times the amount of contact hours for an additional 40 hours bringing the estimated total class hours to 80.

Course Description: An in depth study is conducted of network topologies, standards, protocols, design, management, and troubleshooting.

Course Prerequisites: CIT 1513, CIT 2053

Course Learning Objectives: To better prepare students for a position in Network Administration. This course includes practical applications of previously studied material. These applications are necessary for a better understanding of the complex world of
networking.

Major Topics: Upon completion of Advanced Networking Concepts the student will be able to:

history of the Internet starting from ARPANET
discuss the different types of computers such as micro, mini, and mainframe computers
discuss the different Microsoft Operating Systems and their usages
discuss the different networking topologies bus, star and ring including access methods and bandwidth issues
discuss the pros and cons of sharing of data and devices
discuss various Operating System file servers
use various Network administrator tools through practical applications
describe and utilize network management essentials
describe and utilize network-troubleshooting techniques
configure Virtual Private Networks
evaluate and configure a broad range of Tunneling techniques
configure Public Key Infrastructure
configure multiple authentication techniques
study TCP/IP and other network protocols
discuss Bandwidth, Multilink, Asynchronous-Synchronous, Digital-Analog, Dedicated Lines, Packet Switched and Circuit Switched
discuss Infrared, Microwave, Line of Sight, Radio, Satellite, Baseband and Broadband technologies
describe and utilize DNS
discuss developing protocols such as IPv6
study the mapping of the OSI and Internetworking (TCP/IP) models
external and internal storage devices are discussed
discuss fault tolerance of storage devices
discuss and instruct in the proper configuration of RAID
discuss managing domain and enterprise systems
examine RAM and ROM including the volatile nature of RAM
discuss and compare sequential access to random access
discuss different storage media including storage criteria, handling, and data disposal
discuss magnetic and optical remanence

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.
Course uses the hand on approach to learning, students will install, configure, administer, and troubleshoot various network configurations and applications.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Two Examinations 45%
Homework 20%
Computer Based Labs 20%
    VPN Configuration
    DNS Configuration
    PKI Configuration
    Domain Configuration
    IPSec Configuration
Attendance / Participation 15%

IA Mapping: Special Lectures and projects on authentication, security transmissions, Public Key Infrastructure, Encryption, VPNs, and Tunneling

CIT 2423 - Network Management and Design

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 3 times the amount of contact hours for an additional 120 hours bringing the estimated total class hours to 180.

Course Description: This course is a study of the overall design and configuration of a network. Proper design, implementation, and techniques are evaluated. Configuration management, security, access control and network fault tolerance are discussed.

Course Prerequisites: CIT 2403, 2053, 2083

Course Learning Objectives: Students will utilize proper network techniques to design a network. Students must include all aspects from the logical design, physical layout, file systems and their configuration, backup and recovery methods, authentication mechanisms and data protection.

Major Topics: Upon completion of this course, students will have a working knowledge of the following concepts:

Proper network management techniques
Industry standards and their application
Proper network design techniques
Authentication Concepts
Bandwidth utilization
Concurrent Access
Backup / Recovery
Information Assurance / Protection
Micro / Mini / Mainframe computers

Method of Instruction: Lectures, class discussion, individual or group hands on project. Instructor lead project will have Students completing network design project including all aspects as specified in the objectives above.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Network Design Project 90%
    Logical Design
    Physical Design
    Feasibility
    Creativity
    Administrative Component
    OS Component
    Software Licensing
    Authentication
    Budget
    Backup/Recovery
Attendance / Participation 10%

IA Mapping: Special Lectures and projects on network design, security, Information Assurance, content protection, backup/recover, authentication, access control, and concurrent access.

CIT 2583 - Operating Systems

Course Description: This course will examine the fundamental concepts that are applicable to a variety of systems. Various systems that support threads at the kernel and user levels, symmetric multiprocessing and real-time scheduling will be included in the topic manner.

Course Prerequisites: CIT 1613, CIT 1523, MATH 1513

Course Learning Objectives: Students will gain an understanding of different operating systems, their behaviors, pros and cons. Students will be able to determine optimum configurations and conditions of both hardware and software.

Major Topics: Upon completion of this course, students will have a working knowledge of the following concepts:

1. describe process management
2. evaluate memory and storage management
3. identify I/O systems
4. describe distributed systems
5. operating systems security features
6. distributed systems
7. multi-processor systems
8. multi-threaded systems
9. single/multiple user mode
10. describe agency policy for redeploying classified systems to the SA, SSM, CIO, DAA and CTO.

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Two Examinations 45%
Individual Projects 25%
Research Project 15%
Attendance / Participation 15%

IA Mapping: Lectures and a project on secure/safe system programming and secure system administration/configuration. Implementation of system security mechanisms for authorization, authentication and audit.

CIT 2613 - Advanced Java Programming

Course Description: This course is designed to provide students an in-depth look at Java programming. The student will learn advanced topics in this object-oriented programming language. The student will also incorporate multimedia, networking and input/output techniques.

Course Prerequisites: CIT 1113 and CIT 1613

Course Learning Objectives: Students will gain an understanding of advanced java programming to include memory handling, proper coding techniques as pertaining to static and global variables. Students will also be presented with the idea of "Secure Coding" techniques.

Major Topics: Upon completion of this course, students will have a basic understanding of the following topics:

1. Object oriented programming
2. Synchronization
3. Proper programming techniques
4. Type checking
5. Memory management
6. Network programming
7. Input / Output techniques

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Two Examinations 45%
Programming Projects 45%
Attendance / Participation 10%

IA Mapping: Lectures and a project on secure/safe system programming and memory management. Enforcement of proper OOP programming concepts and type checking.

CIT 2513 - Secure Electronic Commerce

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 1.5 times the amount of contact hours for an additional 60 hours bringing the estimated total class hours to 100.

Course Description: This course is an in depth study of secure electronic commerce, cryptography, passwords, certification authorities, public key infrastructure, biometrics, digital signatures and PKI. Legal and national policy secure electronic commerce issues will be discussed.

Course Prerequisites: CIT 1503

Course Learning Objectives: Upon completion of Secure E- Commerce the student will have an understanding of secure electronic commerce architectures and proficiency with related technologies. Students will gain an appreciation for legislative and regulatory issues of secure electronic commerce and the role of public policy in shaping a global digital economy. An introduction to security architectures for secure electronic commerce including digital signatures, certificates, and public key infrastructure (PKI) will be presented. Legal and national policy secure electronic commerce issues will be examined.

Major Topics: Upon completion of this course, students will have an understanding of the following topics:

Web technology
Privacy and security for users
Web server security
Security for content providers
system development and how the system is maintained
National COMSEC policy
Digital signatures
Public Key Infrastructure (PKI)
Electronic Key Management Systems (EKMS)
EKMS policy and procedures
EDI
Symmetric and asymmetric systems
Risk management and assessment
Roles and responsibilities of organizational personnel
Cryptography
Utilize telnet and xml
Utilize Unix in an automated trading environment
RSA
SSL
Certificates
Credit Card Transactions
Basic Encryption
TEMPEST schemes and theory
Have an understanding of legal and national policies pertaining to ecommerce
Cyber Law and ethics
Uniform laws, UETA, UCITA, and ESIGN
Digital and non-digital evidence
Hardware, software, input, output and multi-user environments vulnerabilities are discussed
Concurrent access to storage devices
Utilizing multiple drives for redundancy purposes
Pros and cons of distributed and stand alone systems are discussed
Information warfare (INFOWAR)
Database applications as pertaining to distributed systems
Operations security and information security
Contingency planning and disaster recovery
Communications security
Classification and destruction of information is examined
Security clearances and managing of classified data is discussed
Threat identification, prioritization, vulnerabilities and countermeasures
Policy creation, enforcement and management
Discretionary, mandatory and non-discretionary access control methods
Role-based and task-based control methods
System life cycles, trusts and modes
AIS security, accountability and information protection
NSTISS planning and management
Coordinating policy for redeploying systems to the SA, SSM, CIO, DAA, CTO...

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects. A digital economy simulation will be used to reinforce the understanding of EDI, RSA, and secure transactions.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
2 Examinations 45%
Homework 20%
Individual Projects 10%
Group Projects 10%
Attendance / Participation 15%

CIT 2523 - Enterprise Security Management

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 1.5 times the amount of contact hours for an additional 60 hours bringing the estimated total class hours to 100.

Course Description: This course examines managerial aspects of computer security and risk management for enterprises. The student will acquire information for accreditation, procurement, extension and operation principles for secure computing systems.

Course Prerequisites: CIT 2503

Course Learning Objectives: An understanding of core concepts and methodologies for enterprise security management as described in the major topics listed below

Major Topics: Upon completion of Enterprise Security Management the student will be able to:

describe inspection.
evaluate protection.
describe detection.
identify reaction.
Security policies
Security Plan development
Contingency planning
Continuity planning
Disaster planning
Incident handling and response.
explain information warfare (INFOWAR) concepts
identify Computer Emergency Response Team

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

2 Examinations 45%
Homework 20%
Individual Projects 10%
Group Projects 10%
Attendance / Participation 15%

CIT 2563 - Computer Security

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 1.5 times the amount of contact hours for an additional 60 hours bringing the estimated total class hours to 100.

Course Description: Students will be introduced to security problems in computer, basic encryption and decryption techniques. Secure encryption systems and cryptographic protocols and practices will also be presented.

Course Prerequisites: CIT 1613

Course Learning Objective: An understanding of basic concepts of computer security. Emphasis on encryption and decryption, and cryptographic protocols and practices.

Major Topics Covered: Upon completion of Computer Security the student will be able to:

define security
communication security
modes of operation
discuss compartmented and partitioned security aspects
identify threats, vulnerabilities, risks and the major categories and impact of threats
describe aspects of countermeasures
describe methods of defense
examine encryption and decryption
examine cryptography techniques and concepts
discuss the crypto elements of interruption, interception, modification and fabrication
discuss key management as it pertains to crypto systems
electronic key management system (EKMS) policy and procedure
evaluate secure programs
verify contents of user registries and access control tables
examine different transmission techniques and security
identify protection in Operating Systems
evaluate database security
data protection via passwords, physical, encryption and biometrics
intrusion methods and countermeasures
identify risk analysis
appraise identification and authentication mechanisms
policy management and risk management
DITSCAP and certification/accreditation
life cycles, trusts, modes, and NSTISS
personnel roles and responsibilities
implement RSA
discuss TEMPEST
evaluate emanation security
access controls
Mandatory Access control lists
Discretionary Access control lists
Vulnerability analysis

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.
Grades for the course will be based on the following:
Two Examinations 45%
Homework 20%
Individual Projects 10%
Group Projects 10%
Attendance / Participation 15%

CIT 2573 - Secure System Administration / Certification

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 2 times the amount of contact hours for an additional 60 hours bringing the estimated total class hours to 120.

Course Description: Students will be exposed to provisioning, procurement and installation of network, hardware and software systems for mission critical enterprises. System configuration, maintenance, incident handling and response along with system certification, testing and validation will also be covered.

Course Prerequisites: CIT 2053 or CIT 2243

Course Learning Objective: The student will be presented with the proper way to create and evaluate policies. System configuration and Accreditation will be discussed. The students will be able to explain the DITSCAP and Certification/Accreditation in detail.

Major Topics Covered: Upon completion of Secure System Administration/Certification, the student will have an understanding of the following topics:

describe security practices
identify physical security needs
identifying physical security protection against unauthorized access
identify techniques for securing servers and workstations
training users' on threats and how to protect information
describe securing public web servers
evaluate deploying firewalls
system development and how the system is maintained
discuss vendor cooperation
explain security implementations
explain security requirements for ST&E development
explain DITSCAP and Certification/Accreditation
explain NIACAP process
describe risk management and policies
describe policy requirements for Telecommunication systems
discuss appraising the maintenance of configuration documents
discuss comparing the maintenance of configuration documents for conformance to the SSAA
discuss roles and responsibilities
discuss points of contact and references
discuss skills need to perform analysis
identify conditions under which certification activities were accomplished
personnel selection
WAN security policies
identify national COMSEC policy and procedures
discuss verifying identified tools are compliant with current accreditation
verification and validation
testing
describe agency policy for redeploying classified systems to the SA, CIO, and DAA
TEMPEST policies and procedures
Red/Black
Shielding
OPSEC
INFOSEC
Network Security Policies
Operating System Integrity
FAX policies and procedures
Internet Security policies and procedures
zone of control
workstation security policies
introduce INFOWAR
Computer Emergency Response Team
Education, Training and Awareness
Performance of vulnerability analysis
Define Accountability
Define Accreditation
Define Security Architecture
Discuss Availability/Integrity/Confidentiality/Authentication/Non-repudiation
Resource Custodians role
Defense in depth
Security Domains
Wireless security Policy
Emanations Security
Describe/Define Aggregation
Discuss the rainbow series
Housekeeping

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Two Examinations 35%
Individual Projects 25%
Group Projects 25%
Attendance / Participation 15%

CIT 2323 - Network Security

Course Description: The student will learn the fundamentals of network security. Students will study security design and development.

Course Learning Objectives: The student will learn the fundamentals of network security. Students will study security design and development. The proper use of access control lists, firewalls, VPNs, and Intrusion Detection Systems.

Major Topics: Upon completion of Network Security, the student will be able to:

Demonstrate a basic knowledge of Network Security.
Demonstrate the ability to design and implement a secure network.
Demonstrate the ability to analysis and assess security breeches.
Configure access control lists
Verify audit log overflow policy
Secure audit trails from unauthorized alteration and/or deletion
Discuss requirements reporting alternative means to satisfy audit collections
Verify criteria for generating alerts provided by audit tools
Demonstrate proper host hardening techniques
Discuss documenting results of any change in security processing mode
Configure security policies
Configure and evaluate Virtual Private Networks
Configure and evaluate Firewalls
Understand dialup, dedicated connections, public vs. private networks and the different security issues associated with each
Segment and configure networks to include DMZs
Configure and evaluate various Intrusion Detection Systems
Different Encryption methods - pros and cons
Demonstrate a basic knowledge of asynchronous vs. synchronous
Analyze network traffic
Identify and fingerprint various different network protocols

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Two Examinations 45%
Homework 20%
Individual Projects 20%
Analyzing network traffic
Fingerprinting - Identifying network protocols
Attendance / Participation 15%

CIT 2533 - Cyber Law

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 1 times the amount of contact hours for an additional 40 hours bringing the estimated total class hours to 80.

Course Description: This course will be a study of legal issues, applicable court decisions, federal and state statutes, administrative rulings, legal literature, and ethical considerations relating to Internet law.

Course Prerequisites: None

Course Learning Objectives: The student will learn the fundamentals of Law as it pertains to the Internet and the Cyber Environment. Ethics is also discussed in great detail. Students will be presented with and evaluate current and past case students to determine the impact on today's world.

Major Topics: Upon completion of CyberLaw, the student will be able to:

describe e-business and cyberlaw
evaluate property issues in cyberspace
describe business issues in cyberspace
identify internet and computer crime

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

Course Assessment: The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Two Examinations 45%
Individual Projects 30%
Attendance / Participation 25%

CIT 2543 - Information Security Assurance

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 1.5 times the amount of contact hours for an additional 60 hours bringing the estimated total class hours to 100.

Course Description: This class will focus on design and analysis methods for high assurance information systems. Safety, reliability and security will also be taught over the period of this course. The specification of mission-critical system properties will be discussed along with software and hardware validation, verification and certification.

Course Prerequisites: CIT 2503

Course Learning Objectives: Understanding of information assurance specification and analysis models and technologies. Ability to craft suitable information assurance policies for a variety of systems.

Major Topics: Upon completion of Information Systems Assurance the student will be able to:

describe secure design principles.
evaluate assurance and evaluation methodologies
describe information flow
discuss transmission security
identify malicious logic
discuss documenting results of any change in security processing mode
discuss incident identification and containment
describe physical security measures
identify access controls to include authentication/verification
discuss software security
discuss media handling, backups, recovery and destruction
discuss confidentiality, integrity, classification, repudiation and non-repudiation
describe and discuss agency policy for redeploying classified systems to the SA, CIO, and DAA
describe ethical issues including copyrighting and licensing
evaluate auditing and monitoring
discuss national COMSEC policy and procedures
Security Testing and evaluation.
Security Management
Records Management to include retention, policies, and destruction

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

Course Assessment:

The basic means of evaluation will be student scores on tests, lab assignments, projects and other assignments relating to the course material.

Grades for the course will be based on the following:
Two Examinations 45%
Individual Projects 30%
Attendance / Participation 25%

CIT 2553 - Computer and Networking Forensics

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours. Projects assigned during the course will require an estimated 3 times the amount of contact hours for an additional 120 hours bringing the estimated total class hours to 160.

Course Description: Students will gain practical knowledge on how to conduct digital investigations and preserve evidence that stands up to inquiries. Procedures for the identification and extraction of electronic evidence from computers and networks will be discussed. Forensic tools and resources for systems administrators and information systems will be utilized and evaluated.

Course Prerequisites: CIT 1503 and CIT 1523

Expected Course Outcomes: Upon completion of Computer and Networking Forensics the student will have competence in using established forensic methods to the handling of electronic evidence. Appreciation for rigorous audit/logging and data archival practices and be able to:

describe computer forensics
identify file systems.
describe data recovery.
examine data structures.
evaluate computer forensics software
identify digital evidence
evaluate data-hiding techniques
identify image files
describe investigation reporting
stegonography
password protection/exploitation
Windows security measures
Linux/Unix security measures

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

CIT 2603 - Security Auditing and Penetration Testing

Course Description: Aimed at both information-security professionals and network administrators, Security Auditing and Penetration Testing will examine how to tap the best computer-security practices and industry standards to deter attacks and better defend networks.

Course Prerequisites: CIT 2553

Expected Course Outcomes: Upon completion of Security Auditing and Penetration Testing the student will be able to:

describe and utilize security auditing and penetration testing tools
recognize HIPAA security regulations
differentiate virus outbreaks
recognize Cyber Extortion
discuss and explain incident reconstruction
explain network architecture
differentiate port scanners
diagram incident discovery
explain wireless approaches
describe and recognize existing security
design an assessment process
create and maintain policies
define industrial espionage
discuss executive fraud
demonstrate how to secure audit trails from unauthorized alteration and deletion

CIT 1503 - Introduction to Networks

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours.

Course Description: An introductory course which covers the fundamental hardware and software concepts involved in a basic network. The standard open systems interconnect model, popular LAN topologies and network administration will be discussed.

Major Topics: Upon completion of Introduction to Networks the student will be introduced to:

1.    Networking standards
2.    OSI model
3.    Network protocols
4.    Transmission basics and media
5.    Physical and logical topologies
6.    Networking hardware
7.    WANs and remote connectivity
8.    Network OS
9.    Netware
10. Networking with UNIX
11. TCP/IP and the Internet
12. Troubleshooting
13. Maintaining and upgrading a network
14. Integrity and availability
15. Network security

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

CIT 1523 - Micro Hardware and Operating Systems

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours.

Major Topics: Upon completion of Introduction to Networks the student will be introduced to:

1.    Introducing Hardware
2.    How Hardware and Software Work Together
3.    Understanding the Boot Process and Command Line
4.    Electricity and Power Supplies
5.    The Motherboard
6.    Managing Memory
7.    Floppy Drives
8.    Understanding and Installing Hard Drives
9.    Optimizing and Protection Hard Drives
10. Supporting I/O Devices
11. Multimedia Devices and Mass Storage
12. Supporting Windows 9x
13. Understanding and Installing Windows 2000 and Windows NT
14. Managing and Troubleshooting Windows 2000
15. Installing and Using Windows XP Professional
16. Managing and Supporting Windows XP Professional
17. Supporting Modems
18. PCs on a Network
19. PCs on the Internet
20. Notebooks, Tablet PCs, and PDAs
21. Supporting Printers

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

CIT 2053 - Network Administration 1

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours.

Course Description: An introductory course in the installation and use of a local area network. After installing the hardware and network software, the student will then utilize various application programs on the network. Network terminology, security, and management issues will be studied.

Major Topics: Upon completion of Network Administration I the student will be introduced to:

1.    Introduction to server software
2.    Managing hardware devices
3.    Creating and managing user accounts
4.    Implementing and managing group and computer accounts
5.    Managing file access
6.    Managing disk and data storage
7.    Advanced File System Management
8.    Implementing and managing printers
9.    Implement and using group policy
10.    Server administration
11. Monitor server performance
12. Backup and disaster recovery
13. Administering web resources
14. Server security features

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

CIT 2083 - Network Administration 2

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours.

Course Description: An in-depth course in the administration of a local area network. The student will utilize the network operating system to customize a printing environment, create login scripts, design and create menu systems, install and use the Message Handling Service, manage the file server, and maintain the network. A comprehensive network project will be implemented to give the student experience in the application of the topics covered.

Major Topics: Upon completion of Network Administration II the student will be introduced to:

1.    Active directory
2.    Name resolution and DNS
3.    Active directory design philosophy
4.    Active directory physical and logical design
5.    Replication
6.    Operations Masters
7.    Authentication and security
8.    Managing users, groups, computers and resources
9.    Group policy for corporate policy
10. Deploying and managing software with group policy
11. Monitoring and optimizing active directory
12. Disaster Recovery

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

CIT 2413 - Network Troubleshooting and Performance

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours.

Course Description: This course will cover basic network troubleshooting approaches. Students will learn to isolate network problems and understand how network-troubleshooting equipment is used.

Major Topics: Upon completion of Network Troubleshooting and Performance the student will be introduced to:

1.    Network monitoring
2.    Baselines
3.    Alert thresholds
4.    Network problems
5.    Device configuration / re-configuration
6.    Port enumeration
7.    Connectivity
8.    Timeouts
9.    Performance issues / problems
10. Network utilization
11. Network monitoring and testing tools and applications
12. Network layout physical / logical
13. Network segmentation

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects.

CIT 2603 - Secure Auditing and Penetration Testing

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours.

Course Description: This class covers best computer-security practices and industry standards to deter attacks and better defend networks.

Major Topics: Upon completion of Network Troubleshooting and Performance the student will be introduced to:

1.    Security Auditing Tools and Techniques
2.    Penetration testing tools and techniques
3.    HIPPA Security regulations
4.    Detect and defend against virus outbreaks
5.    Recognize Cyber Extortion
6.    Network Architecture
7.    Port Scanning
8.    Incident Respond / Reconstruction
9.    Network Discovery
10. Wireless network analysis
11. Existing Security measures
12. Assessment process
13. Perimeter Defense / IDSs

Method of Instruction: Lectures, class discussion, hands on projects for both individuals and groups, tests covering text and projects. Numerous lab exercises will be utilized to illustrate the topics above.

CIT 2673 - Risk Management

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours.

Course Description: This class covers best computer-security practices and industry standards to deter attacks and better defend networks.

Major Topics: Upon completion of Network Troubleshooting and Performance the student will be introduced to:

CIT 2643 - Wireless Networking

Course Length: This 3 credit hour undergraduate course runs for 16 weeks with 2.5 contact hours per week totaling 40 contact hours.

Course Description: This course is a study of wireless networking. Management, design, deployment and security of Wireless Local Area Networks (WLANs) will be topics covered in this course.

Major Topics: Upon completion of Wireless Networking, the student will have an understanding of the following topics:

1. Identify different wireless technologies
2. Describe WLAN devices
3. Describe wireless standards
4. Describe types of wireless LANs
5. Define radio wave transmission principles
6. Differentiate analog and digital transmissions
7. Define antenna transmissions
8. Evaluate WLANs
9. Assess the need for a wireless LAN
10. Evaluate benefits of a wireless LAN
11. Describe wireless LAN design
12. Evaluate access point management
13. Identify security principles
14. Evaluate wireless attacks
15. Describe categories of attackers
16. Identify wireless security solutions
17. Evaluate security models
18. Describe WEP encryption and other encryption methods
19. Identify WLAN monitoring tools
20. Evaluate network monitoring tools
21. Describe wireless security policies
22. Threats to electronic emanations
23. Vulnerabilities in wireless technologies
24. Importance of wireless technologies
25. Risks associated with wireless networking and wireless devices
26. Wireless Security protocols
27. Wireless topologies

Method of Instruction:
Lectures
Class discussion
Hands-on training in computer lab environment
Case Projects
Classroom tests covering the text and training exercises

Certificate Program Course Offerings

Systems Courses: (Grade Required for Certificates)
CIT 2183 --Advanced Database Design (SQL/Oracle) - C
CIT 2403 --Advanced Networking Concepts - B
CIT 2583 --Operating Systems - C

IA Core Courses: (Grade Required for Certificates)
CIT 2513 --Secure Electronic Commerce - B
CIT 2523 --Enterprise Security Management - B
CIT 2563 --Computer Security - B
CIT 2573 --Secure System Administration and Certification - B

IA Electives: (Grade Required for Certificates)
CIT 2323 --Network Security - C
CIT 2533 --Cyber Law - C
CIT 2543 --Information Security Assurance - B
CIT 2553 --Computer and Network Forensics - B
CIT 2603 --Secure Auditing and Penetration Testing - C
CIT 2593 --Advanced Forensics - B
CIT 2633 --Biometrics - C

Supporting Courses: (Grade Required for Certificates)
CIT 2023 --Micro Hardware and Operating Systems - C
CIT 2033 --Introduction to Networks - C
CIT 2053 --Network Administration - B
CIT 2243 --Unix / Linux - C
CIT 2353 --Advanced Routing - B
CIT 2423 --Network Troubleshooting & Management Design - B
CIT 2613 --Advanced Java Programming - C

Network System Courses: (Grade Required for Certificates)
CIT 2053 --Network Administration - B
CIT 2323 --Network Security - C
CIT 2243 --Unix / Linux - C
CIT 2353 --Advanced Routing - B
CIT 2423 --Network Troubleshooting & Management Design - B
CIT 2643 --Wireless Networking - C

Networking/CyberSecurity Home