Scribd Logo
Upload

Welcome to Scribd!

  • 41 views

    Pis Syllabus

    Uploaded by

    M.K Bhai

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Pis Syllabus

    Uploaded by

    M.K Bhai
    41 views2 pages

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    41 views2 pages

    Pis Syllabus

    Uploaded by

    M.K Bhai

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 2

    19ECS704 : Pragmatics of Information Security

    M. Tech (CF&IS)
    L T P C
    3 0 2 4

    The goal of this course is to provide an up-to-date survey of developments in computer security.
    Central problems that confront security designers and security administrators include defining the
    threats to computer and network systems, evaluating the relative risks of these threats, and
    developing cost-effective and user-friendly countermeasures.

    Course objectives:
    1. Understanding the basic security concepts and learn about Intrusion detection and
    prevention systems.
    2. Demonstrate various issues relating to authentication and access control mechanisms.
    3. Demonstrate approaches to meet specific computer security requirements such as message
    integrity and confidentiality.
    4. Design and configure Internet protocol security mechanisms.
    5. An understanding of the current status and future direction of threats and technology in
    information security.
    Module I: Number of hours(LTP) 9 0 6
    Overview: Computer Security Concepts, Requirements, Architecture, Trends, Strategy Perimeter
    Security: Firewalls, Intrusion Detection, Intrusion Prevention systems, Honeypots Case Study:
    Readings, Intrusion and intrusion detection by John McHugh.
    Learning Outcomes:
    After completion of this unit, the student will be able to:
    1. describe the key security requirements of confidentiality, integrity, and availability.(L2)
    2. understand the types of security threats and attacks that must be dealt with different
    categories of computer and network assets. (L2)
    3. understand the basic principles of and requirements for intrusion detection and prevention
    systems. (L2)

    Module II: Number of hours(LTP) 9 0 6


    User Authentication: Password, Password-based, token based, Biometric, Remote User
    authentication. Access Control: Principles, Access Rights, Discretionary Access Control, Unix File
    Access Control, Role Based Access Control Internet Authentication Applications: Kerberos, X.509,
    PKI, Federated Identity Management.

    Learning Outcomes:
    After completion of this unit, the student will be able to:
    1. discuss the four general means of authenticating a user’s identity. (L6)
    2. explain how access control fits into the broader context that includes authentication,
    authorization, and audit. (L2)
    3. summarize the basic operation of Kerberos. (L2)

    Module III: Number of hours(LTP) 10 0 6


    Cryptographic Tools: Confidentiality with symmetric encryption, Message Authentication & Hash
    Functions, Digital Signatures, Random Numbers. Symmetric Encryption and Message confidentiality:
    DES, AES, Stream Ciphers, Cipher Block Modes of Operation, Key Distribution

    Learning Outcomes:
    After completion of this unit, the student will be able to:

    80
    1. explain the basic operation of symmetric block encryption algorithms. (L2)
    2. discuss the use of secure hash functions for message authentication. (L6)
    3. discuss the issues involved in key distribution. (L2)

    Module IV: Number of hours(LTP) 9 0 6


    Internet Security Protocols: SSL, TLS, IPSEC, S/ MIME. Public Key Cryptography and Message
    Authentication: Secure Hash Functions, HMAC, RSA, Diffie Hellman key exchange Algorithm.
    Case Study: Readings, Programming Satan's Computer Ross Anderson and Roger Needham.

    Learning Outcomes:
    After completion of this unit, the student will be able to:
    1. understand the functionality of S/MIME and the security threats it addresses. (L2)
    2. present an overview of the use of HMAC for message authentication. (L2)
    3. describe the RSA algorithm and Diffie-Hellman algorithm. (L2)
    Module V: Number of hours(LTP) 8 0 6
    Malicious Software: Types of Malware, Viruses & Counter Measures, Worms, Bots, Rootkits
    Software Security: Buffer Overflows, Stack overflows, Defence, Other overflow attacks Case Study.
    Readings: Smashing The Stack For Fun And Profit, Aleph One
    http://www.phrack.com/issues.html?issue=49&id=14#article

    Learning Outcomes:
    After completion of this unit, the student will be able to:
    1. describe three broad mechanisms malware uses to propagate. (L2)
    2. understand the different threats posed by bots, spyware, and root kits. (L2)
    3. describe some malware countermeasure elements. (L4)

    Text Books(s)
    1. William Stalling, Lawrie Brown, Computer Security: Principles and Practice, Pearson, 4th
    Edition, 2017.
    2. William Stallings, Cryptography and Network Security: Principles and Practice, 7th edition,
    2017.
    Reference Book(s)
    1. Behrouz A Fourozen and DebdeepMukhopadhyaya, Cryptography and Network Security,
    3/e, McGraw Hill, 2015.
    2. Atul Kahate, Cryptography and Network Security, 4/e, McGraw Hill, 2019.
    3. Buchmann, Introduction to Cryptography, Springer, 2004
    4. Bruce Schneier, Applied Cryptography: Protocols, Algorithms, and Source Code in C (cloth),
    2/e, Publisher: John Wiley & Sons, Inc., 1996.
    5. Chwan-Hwa(John) Wu, Introduction to Computer Networks and Cybersecurity, CRC Press,
    2013.
    Course Outcomes:
    1. distinguish among various types of intruder behaviour patterns(L4)
    2. describe the key security requirements of confidentiality, integrity, and availability(L1)
    3. explain how access control fits into the broader context that includes authentication,
    authorization, and audit(L5)
    4. describe the structure and function of DES and AES. (L2)
    5. describe the broad categories of malware payloads. (L4)

    81

    You might also like