Course Description
Building on IAE-201, this course provides learners with detailed and hands-on knowledge of computer and network security. The course emphasizes current topics such as network security, compliance and operational security, threats and vulnerabilities, application security, access control, as well as cryptography. Additionally, underlying theory and concepts are presented in order to extend learners’ understanding of computer and network security. Weekly laboratory exercises are utilized to reinforce practical, real-world security techniques. Classes are a mixture of lecture, current event discussions, and laboratory exercise review and will prepare learners for the CompTIA Security+ certification.
Learning Objectives
- Learn and understand basic security concepts and terminology associated with computer and information security.
- Determine various methods of implementing access controls
- Learn and understand about the various aspects of Operational Organizational Security including the identification and benefits of organizational security policies.
- Learn and understand the laws and rules concerning computer Legal Issues, Privacy and Ethics
- Learn and understand Cryptography and Public Key Infrastructure as well as the different standards and protocols implemented to support PKI.
- Learn and Understand Security in Infrastructure including Physical Security and Access Controls as well as the various network devices and topologies used to construct secure networks
- Learn and understand the methods and protocols for remote access to networks as well as vulnerabilities associate with remote access.
- Learn and understand about Security in Transmissions including Intrusion Detection Systems and Intrusion Prevention Systems.
- Learn and understand the various Security Baselines including the hardening of operating systems, network devices, and applications.
- Learn and understand the security implications of wireless networks including the various 802.11 versions and their security controls.
- Learn and identify the various types of computer and network attacks as well as the various types of malicious software.
- Learn and understand the security issues associated with e-mail and instant messaging.
- Learn and understand the various web components including the SSL/TLS protocol suite
- Learn and understand the policies and procedures associated with Disaster Recovery and Business Continuity.
- Identify the purpose of Risk Management and discover an approach to manage risk effectively.
- Learn and understand the importance of Change Management and segregation of duties.
- Learn and understand the importance of Privilege Management, including SSO, auditing, and rights and privileges.
- Learn and understand the basics of Computer Forensics including the rules of evidence, collection of evidence, and processing of evidence.
- Through the use of weekly labs, student will be proficient in the use of VMware, Server 2003, Metasploitable, and Wireshark.