CSIS 3756 Security Design Mr. Mark Welton Course

Transcript:CSIS 3756 Security Design Mr. Mark Welton Course:
CSIS 3756 Security Design Mr. Mark Welton Course Requirements Prerequisities: CSCI 5806 or CSIS 3755 CIS 1525 or CIS 3718 Books For Course: Material online, in class, and Safari Books Online will be used for this class What This Course IS NOT This is not a hacking course This is not an introduction course This is not a course where we will only deal will the operating system itself in isolation What This Course IS A course on operating system security concepts, techniques and applications including MS Windows and LINUX/UNIX platforms. Course Discription for CSIS 3756 In my opinion this can not be done by only looking at the operating system in isolation Today’s enterprise environments are comprised of multiple systems interconnected providing services to companies customers It is these interconnections that has changed the world of computing and security today It is all about the data! My opinion of what CSIS 3756 is… You can only learn how to design a security environment if you understand how it should be configured and how to determine what it is you are protecting You must understand risk and how it REALLY can be of use You need to understand how things REALLY work (theory is nice but you better know how to apply it) “A wise man walks with his head bowed, humble like the dust” Pilot episode of Kung Fu My opinion of what CSIS 3756 is… To be a security professional you must understand not only the previous concepts but you must understand that…. Lastly…. It is called penetration testing Penetration testers have permission to test the systems hackers don’t Security is the process of maintaining an acceptable level of perceived risk Dr. Mitch Kabay, wrote that “security is a process, not an end state.” So what is the process… What is Security? The Security Process Assessment is preparation for the other three components deals with policies, procedures, laws, regulations, budgeting, and other managerial duties, plus technical evaluation of one’s security posture Failure to account for any of these elements harms all of the operations that follow Why is this? Assessment Protection is the application of countermeasures to reduce the likelihood of compromise What are some of these countermeasures and why do we use them? Protection Detection is the process of identifying intrusions Intrusions are policy violations or computer security incidents Kevin Mandia and Chris Prosise define an incident