JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Course Objectives:

• To understand the computer security issues
• To make secure system planning, policies

UNIT - I

Introduction to Computer Security: Definition, Threats to security, Government requirements, Information Protection and Access Controls, Computer security efforts, Standards, Computer Security mandates and legislation, Privacy considerations, International security activity.

UNIT - II

Secure System Planning and administration, Introduction to the orange book, Security policy requirements, accountability, assurance and documentation requirements, Network Security, The Red book and Government network evaluations.

UNIT - III

Information security policies and procedures: Corporate policies- Tier 1, Tier 2 and Tier3 policies - process management-planning and preparation-developing policies-asset classification policy- developing standards.

UNIT - IV

Information security: fundamentals-Employee responsibilities- information classification- Information handling- Tools of information security- Information processing-secure program administration.

UNIT - V

Organizational and Human Security: Adoption of Information Security Management Standards, Human Factors in Security- Role of information security professionals.

TEXT BOOK:

nd

• 1. Debby Russell and Sr. G. T Gangemi, "Computer Security Basics (Paperback)”, 2 Edition, O’ Reilly Media, 2006.

REFERENCES:

• 1. Thomas R. Peltier, “Information Security policies and procedures: A Practitioner’s Reference”, 2nd Edition Prentice Hall, 2004.
• 2. Kenneth J. Knapp, “Cyber Security and Global Information Assurance: Threat Analysis and Response Solutions”, IGI Global, 2009.
• 3. Thomas R Peltier, Justin Peltier and John blackley, ”Information Security Fundamentals”, 2nd Edition, Prentice Hall, 1996
• 4. Jonathan Rosenoer, “Cyber law: the Law of the Internet”, Springer-verlag, 1997
• 5. James Graham, “Cyber Security Essentials” Averbach Publication T & F Group. M.Tech - I Year – II Semester (Cyber Forensics /Cyber Security & Information Security)