DeVry Institute of Technology - California State University

advertisement
California State University Dominguez Hills
College of Business Administration and Public Policy
Department of Information Systems and Operations Management
CIS 478/476-2 Firewall and Networking Security
Fall 08
W 7:00- 9:45, Wh-F144
Instructor:
Name:
Mohammad Eyadat, Ph. D.
Office :
EAC-806
Office Hours: MW 10:00-11:00 am, W 6:00 –7:00 pm, by email, and by
appointment
Phone:
243-2132
Email:
meyadat@csudh.edu
Website:
www.csudh.edu/eyadat
Catalog Description
and Prerequisites:
This course provides an introduction to firewalls and other network security
components and elements that can work together to create an in-depth defensive
perimeter around a LAN. These include packet filtering, authentication, proxy, servers,
encryption, bastion, virtual private networks, log file maintenance, and intrusion
detection systems. Practical topics in network security include policy and mechanism,
malicious code; intrusion detection, prevention, response; cryptographic protocols for
privacy and integrity are also covered.
Prerequisites:
CIS275 or CIS475 and CIS378
Required Textbook:
1. Guide to Firewalls and Network Security: Second Edition,
Michael Whitman, Herbert Mattord, Richard Austin, Greg Holden
ISBN 13: 978-1-4354-2016-8 © 2009
ISBN 10: 1-4354-2016-0
Publish date: June 10, 2008
2. Security+ Web-Based Labs
ISBN 13: 978-1-4283-7695-3 © 2009
ISBN 10: 1-4283-7695-X
Publish date: February 12, 2008
1
Revised on 3/6/2016®Eyadat
Student Learning Objectives:
Upon completion of this course, students should be able to
 Describe various types of firewall protection
 Build and maintain firewall in a business environment
 Understand why a security policy is an important part of a firewall
implementation
 Employ method of adding functionality to a firewall
 Understand packets, packet filtering, and approaches to packet filtering
 Understand proxy servers and how they works
 Make decisions regarding proxy server configurations
 Identify common authentication protocols used by firewall
 Describe user, client, and session authentication
 Identify the role encryption on a firewall architecture
 Explore the general requirements for installing a bastion host
 Choose the right tunneling protocol for a VPN
 How to secure remote access for individual users via a VPN
 Explain how enterprise firewalls work
 Explore how to evolve a firewall to meet new needs and threats
 Describe the role of a firewall and its potential functions and analyze the pros
and cons of this form of security and its appropriateness to their organization
 Describe some of the incidents of network security breaches
 Explain how Denial of Service attacks are carried out and analyze the
potential threat to their organization from these types of intruders
Course Expectations and Policies:
 Course Expectations: Each student is expected to read the assigned material and
prepare the written assignments prior to class. The university standard for course
workload is two hours of outside work for every hour in class, i.e., a 3-unit course
requires 6 hours of work outside the classroom, or a total of 9 hrs/week.
 Attendance Policy: It is expected that students will attend class regularly and
participate in the class discussion throughout the term. Attendance and class
participation will be used in the final determination of grades and can alter your grade
up or down. Students are allowed two excused absences. More than two may result
in a lower grade or failure in the course
 Academic Integrity: Cheating or plagiarism in connection with an academic program
or class at a campus is subject to discipline as provided in Sections 41301 through
41304 of Title 5, California Code of Regulations. Please see the University Catalog
for further information.
 Due Dates/Make Up Work: Examinations must be taken as scheduled; Assignments
are due when scheduled. Make-ups will be allowed only if the student has contacted
the professor before the due date, detailing a serious problem.
2
Revised on 3/6/2016®Eyadat

Grading:
Participation
Quizzes
Midterm Exam
Final Exam
Online Lab
Exercise
Assignments
Final Project
Total
Grading Scale
Letter Grade
A
AB+
B
BC+
C
CD+
D
F
05%
10%
15%
25%
25%
10%
10%
100%
Percentage of Points
93% - 100%
90% - 92%
87% - 89%
83% - 86%
80% - 82%
77% - 79%
73% - 76%
70% - 72%
67% - 69%
60% - 66%
Below 60%
Evaluation criteria explained:
 Students are expected to be active participants in each class meeting. Full credit
for participation will be extended to students who regularly ask questions, share
observations, and contribute relevant personal experiences.
 The mid-term examination will consist of objective questions and will require a
technological comprehension that covers the lecture material and assigned
readings. Final exam is comprehensive.
 The projects will consist of a number of individual in class and homework tasks.
Students will be given specific guidance on the amount of collaboration permitted
for each assignment. Unless otherwise specified, all case projects are individual
assignments, and thus must be completely the original work of the student
submitting them and include proper citations to the published work of others.
Quizzes:
Quizzes will be given throughout the semester, at a rate of approximately 1 per
two chapters. Quizzes will always cover the material covered since the last Quiz
or Exam. The quizzes will be combinations of objective and short-answer
questions. Quizzes will be administered online. Makeup quizzes will not be given.
However, the lowest quiz grade will be dropped. Any class material missed by the
student is the student's responsibility to acquire.
Exams:
There will be two examinations – a midterm and a final exam. The content will
come from the text and other material presented in lecture sessions. Note that
material presented in class will supplement the assigned reading. Therefore, class
attendance and good note taking are essential tactics for success.
There will be no make-up examinations. It is the student’s responsibility to
arrange for an excused absence before the exam. A grade of zero will be assigned
for all exams missed without an excused absence. If an emergency arises on the
day of the midterm, and the instructor deems that the absence is excused, then the
weight of the final exam may be increased to replace the midterm.
3
Revised on 3/6/2016®Eyadat
Online Lab Exercises (Case Studies)
The case studies will be designed to implement the theoretical knowledge learned in
the class. All cases must be done by using a VIRTUAL LAB (VL). VL Detail
instruction will be given. It is a team work. For each lab exercise a team must email
the instructor one copy of the Lab results and submit a hard copy report which
states the lab exercise’s objectives and the lessons learned.
Final Project
The final project will be designed to take the knowledge learned in the class room
and put it into practice. It is a team project. Team members are responsible to
select a topic, get the instructor approval, and prepare oral presentation and
written report to be shared with other classmates. Details information and
evaluation criteria will be given
Guidelines for submitting work:
All homework assignments are to be submitted in class to the instructor. See
individual assignment requirements in the assignments sheet. All l assignments
must be submitted by the stated deadline. The following format must be used
when submitting assignments.
Student Full Name:
Subject: XXXXX
Assignment’s Objective
Course Title and Number
Assignment Title and Number
Disabled Students Services: Students with verified disabilities are eligible for a
variety of support services from the Disabled Services Office. If you have a
disability that may adversely affect your work in this class, I encourage you to
register with Disabled Student Services (DSS) and to talk with me about how I
can best help you. All disclosures of disabilities will be kept strictly
confidential. NOTE: no accommodation can be made until you register with
the DSS in WH B250. For information cal (310) 243-3660 or to use the
Telecommunications Device for the Deaf, call (310) 243-2028
Important Days
Saturday, Aug. 30
Classes Begin
Saturday, Aug. 30 - Thursday, Sep. 18 Late Registration, Add/Drop
(Fees Due at Time of Registration)
Monday, Sep. 1
Labor Day Holiday- No Classes; Campus Closed
Thursday, Sep. 18
Change of Program and Add/Drop Deadline
Thursday, Sep. 18
Credit/No Credit and Audit Grading Deadline
Thursday, Sep. 18
Drop Without Record of Enrollment Deadline
Thursday, Sep. 18
Last Day to drop from FT to PT status with refund
Friday, Sep. 19 - Thursday, Nov. 20 Serious and Compelling Reason
Required to Drop/Withdraw
Friday, Sep. 26
Student Census
4
Revised on 3/6/2016®Eyadat
Wednesday, Nov. 5
Last Day for Pro-rata Refund of Non Resident
Tuition and State University Fees
Tuesday, Nov. 11
Veterans Day Holiday - No Classes; Campus
Closed
Friday, Nov. 21-Thursday, Dec.12
Serious Accident/Illness Required to
Drop/Withdraw
Thursday, Nov. 27-Saturday, Nov. 29 Thanksgiving Holiday - No Classes; Campus
Closed
Friday, Dec. 12
Last Day of Scheduled Classes
Saturday, Dec. 13 - Friday, Dec. 19
Final Examination Week
5
Revised on 3/6/2016®Eyadat
Tentative Course Schedule - Subject To Change
Dates
Week 1
Week 2
Week 3
Week 4
Week 5
Week 6
Week 7
Week 8
Week 9
Week 10
Week 11
Week 12
Week 13
Week 14
Week 15
Final Exam Week
Topics
Reading
Assignments
Chapter 1
Introduction to the course
Introduction to Information Security:
An Introduction to Networking
Chapter 2
Security Policies, Standards, and Planning
Quiz # 1 (ch1 and ch2)
Security Policies, Standards, and Planning
(cont’d)
ONLINE
Finding Network Vulnerabilities
ONLINE
Finding Network Vulnerabilities (cont’d)
Chapter 3
Due Dates
Lab exercise 1
Assignment 1
Chapter 3
Lab exercise 2
Chapter 4
Chapter 4
Lab exercise 3
Assignment 2
Assignment 3
Firewall Planning and Design
Quiz # 2 (ch3 and ch4)
Firewall Planning and Design (cont’d)
ONLINE
Midterm Exam
Packet Filtering
Final Project Discussion
Packet Filtering (cont’d)
ONLINE
Working with Proxy Servers and ApplicationLevel Firewalls
Quiz # 3 (ch5 and ch6)
Working with Proxy Servers and ApplicationLevel Firewalls (cont’d)
ONLINE
Firewall Configuration and Administration
Chapter 5
Assignment 4
Encryption and Firewalls
Quiz #4 (ch7 and ch8)
Authenticating
Quiz # 5 (ch9)
Final Project Oral Presentation and
Written Report are Due
Chapter 9
Lab exercise 4
Chapter 5
Chapter 6
Assignment 5
Chapter 6
Lab exercise 5
Chapter 7
Assignment 6
Chapter 7
Lab exercise 6
Chapter 8
Lab exercise 7
Assignment 7
Lab exercise 8
Assignment 8
Lab exercise 9
Assignment 9
Lab exercise
10
Assignment 10
Chapter 10
The Final Exam is Comprehensive
Wednesday, Dec 17th ; 7:45- 9:45pm
NOTE:
 This syllabus is subject to change depending on class progress.
 The student will be informed if any change in the syllabus, exam dates, or any other
announcement. www.csudh.edu/eyadat
6
Revised on 3/6/2016®Eyadat
Download