JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Course Objectives:

• To understand about the data and security metrics and measurements of the data
• To know about the security operations, cost and values

UNIT - I

What Is a Security Metric? Metric and Measurement, Security Metrics Today, The Dissatisfying State of Security Metrics, Reassessing Our Ideas About Security Metrics. Designing Effective Security Metrics: Choosing Good Metrics, GQM for Better Security Metrics, More Security Uses for GQM, Summary.

UNIT - II

Understanding Data: What are Data? Data Sources for Security Metrics; We Have Metrics and Data -Now what, Summary, Case Study 1. The Security Process Management Framework: Managing Security as a Business Process, the SPM Framework, Before You Begin SPM, Summary. The Analyzing Security Metrics Data: The Most Important Step, Analysis Tools and Techniques, Summary. Designing the Security Measurement Project: Before the Project Begins, Phase One: Build a Project Plan and Assemble the Team, Phase two: Gather the Metrics Data, phase Three: Analyze the Metrics Data and Build Conclusions, phase Four: Present Results, Phase Five: Reuse the Results, Project Management Tools, Summary.

UNIT - III

Measurements Security Operations: Sample Metrics for Security Operations, Sample Measurement Project for Security Operations, Summary. Measuring Compliance and Conformance: The Challenges of Measuring Compliance, Sample Measurement Projects for Compliance and Conformance, Summary.

UNIT - IV

Measuring Security Cost and Value: Sample Measurement Projects for Compliance and Conformance, The Importance of Data to Measuring Cost and Value, Summary. Measuring People, Organizations, and Culture: Sample Measurement Projects for People, Organizations, and Culture, Summary.

UNIT - V

The Security Improvement Program: Moving from Projects to Programs, Managing Security Measurement with a Security, Requirements for a SIP, Measuring the SIP. Summary. Learning Security: Different Contexts for Security Process Management: Organizational Learning, Three Learning Styles for IT Security Metrics, Final Thoughts, Summary.

TEXT BOOKS:

• 1. IT Security Metrics, Lance Hayden, Tata Mcgraw-Hill.
• 2. Security Metrics, Caroline Wong, Tata Mcgraw-Hill. M.Tech - I Year – II Semester (Cyber Forensics /Cyber Security & Information Security)