JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Course Objectives:

• Compile, analyze, and assess the applicability of best practices in addressing information security issues relevant to the cyber security community
• Evaluate the impact of business constraints and processes on the implementation of network security programs
• Integrate principles and techniques of risk analysis, project planning and change management in the development of network security strategies
• Demonstrate secondary research skills in the investigation and selection of best practice solutions to address network security challenges
• Demonstrate mastery of theory, concepts and skills in addressing specialized aspects of network security Applications

UNIT - I

Introduction to Information Security: Introduction, Critical Characteristics, threats to information Security, Attacks on Information Security, Security Professionals and the Organization, Information Security Policies, Standards and Practices, Frameworks for Industry Standards in Information Security.

UNIT - II

Auditing, Monitoring, and Logging: Monitoring Network Systems, Configuration and Change Management, Introduction to security audits, need for security audits, organizational roles, Auditor’s roles, Types of security audits, Audit approaches, Technology based audits ,Auditing (Formal Reviews), Systems Certification, Accreditation and Authorization,

UNIT - III

Contingency Planning and Networking Incident Response: Introduction, What is Contingency Planning?, Incedent Response Plan, Network Authentication and Remote Access Using VPN: Introduction, Access Control, Virtual Private Networks.

UNIT - IV

Network Monitoring and Intrusion Detection and Prevention Systems: Introduction, Network monitoring Software : Packet Sniffing, Intrusion Detection and Prevention Systems, Honeypots and Honeynets.

UNIT - V

Wireless Network Security: Introduction, Wireless Technologies and Standards, Wireless Architectures and Topologies, Wireless Security Protocols, WLAN Security Concerns, Bluetooth

TEXT BOOKS:

• 1. Guide to Network Security by Michael Whitman, Herb Mattord,David Mackey, Andrew Green Cengage Learinng
• 2. Information Systems Security, Nina Godbole, Wiley India, 2009
• 3. Principles and Practices of Information Security. Michael E. Whitman, Herbert J. Mattord, Cengage Learning,

REFERENCES:

• 1. Microsoft Security Risk Management Guide
• 2. Risk Management Guide for Information Technology Systems http://csrc.nist.gov/publications/nistpubs/800-30/sp800-30.pdf
• 3. OCTAVE approach http://www.cert.org/octave/
• 4. COBIT http://www.isaca.org/
• 5. Guide to Firewalls and Policies (Unit 3) http://csrc.nist.gov/publications/nistpubs/800- 41/sp800-41.pdf
• 6. Firewalls and Network Security, Micheal E.Whitman, et al. Cengage Learning, 2008
• 7. Audit Trails (Unit 7) http://csrc.nist.gov/publications/nistpubs/800-12/800-12- html/chapter18.html
• 8. Information Security Management Handook, Harold F. Tipton, CRC Press, 2012 nd
• 9. Information Security Policies and Procedures, 2 Edition, Thomas R. Peltier, Auerbach, 2004 M.Tech – CN/CNIS - I Year - II Sem