Course Description

Course Objective

Upon successful completion of this course, students should be able to:

Course Requirements

The course requirements are as follows:

Exams. There may be up to two exams (open book and open notes) designed to help students improve their understanding of the concepts discussed in the course.

Research Paper. Five teams will be chosen. Group research papers are required.Teams may choose their own topic or I can assign them an ID Attack / Defense Scenario on an enterprise target.

Projects. Students will keep a journal of their experiences with one intrusion detection or computer forensics security penetration tool.

Participation. Students are expected to prepare for each class meeting and participate in the conference discussions on specific ID issues. A defining rubric for participation may be found in the WT course content area.

Kruse II, W.G., & Heiser, J.G. (2002). Computer Forensics: Incident Response Essentials. New York: Addison-Wesley. ISBN 0-201-70719-5

Proctor, P. E. (2001). The Practical Intrusion Detection Handbook. Upper Saddle River, NJ: Prentice Hall. ISBN 0-13-025960-8

American Psychological Association. (2001). Publication manual of the American Psychological Association (5th ed.). Washington, D.C.: APA. ISBN: 1-55798-791-2

Note: Textbooks are available and ready to ship, online, at the MBS (Missouri Book Store), which can be accessed at www.umuc.edu/bookstore.

Format, Group Projects, Journal, Exams and Grading.

Deliverables

There are two deliverables in this course, the Student Team Research Paper and the Student Journal. The former is a major undertaking and requires team resources and collaborative effort. The latter is easy to do with a little effort on a weekly basis.

The Team paper is a hypothetical but complete ID attack and defense scenario developed on an enterprise network target. Equal weight must be addressed by teams for both attack and defense preparations. An after action summary must be part of the team paper and PowerPoint Presentation.

Student Team Research Paper

Student Journal

On-Line Format

Grading

The final grade will be determined as follows:

Midterm Exam/Special Projects -- 25% each
Final Exam/Group Research Paper and PowerPoint Presentation -- 35%
Weekly Discussion Participation -- 20%
Student Journal -- 10%

Bullets - regular submissions of "Bullets" or webliography are required and worth 10% credit on overall grade.

Administrative

Contact Information:

10:00AM - 10:00 PM EST
717-329-9836
717-258-5693
cto@infosec-technologies.com
profrknichols@comcast.net
www.infosec-technologies.com

Virtual Hours

Participation

I expect students to participate regularly to conferences, e.g., 2-3 times a week. You should plan on participating just as though you are having an ongoing conversation. This means that you may want to check the conference a few times a week and respond to what you see there and engage others in a simulated dialog. Use the sort by Date and Author features as well as the "Read All Notes" button to help you speed through the new postings. Please "talk" to one another during the week as well as to me when you are addressing any topical discussions we have. It's impossible to have much of a thoughtful conversation if everyone saves participation in the discussion for late Sunday night.

As part of your participation and response, you may hyperlink websites or materials from your own web page if they enhance your participation. I evaluate participation on its thoughtfulness, engagement, and insight and web-courtesy. Flames are not an appropriate response to genuine interest or questions.

Submitting Assignments

Please submit your assignments in HTML, RTF, or plain text when they are due. You may post them to the Assignment Area (or send them as attachments to email). You will lose 10% of the assignment grade for an assignment for each day late.

Please keep copies of all assignments that you send to me and all that I return to you with my comments. If you revise an assignment, please send your original with my comments, along with the revised assignment, in the same email. Note that you have revised the assignment and what you think you did to improve the original.

Getting Help

Summing Up a Successful Online WebTycho Student

A successful WebTycho student is one who reads the materials thoroughly before responding, participates regularly, engages the material and others with enthusiasm and courtesy, schedules time to do the work, asks for help when it is needed, interacts with others in the class, is self-motivated, turns in well-drafted, proofed assignments, and keeps copies of all work and my responses in case of an emergency.

Okay, now that we gone over the basics, ask me about anything that may be unclear, and good luck on a successful course! I look forward to working with you all.

Course Schedule

• Chris Prosise and Kevin Mandia, Incident Response and Computer Forensics,
  McGraw-Hill, 2001.
• Chris Prosise, Incident Response: Investigating Computer Crime, McGraw-Hill,
  2001.
• Eugene Schultz, Jim Mellander and Carl F Endorf, Intrusion Detection,
  McGraw-Hill, 2003.
• Rebecca Gurley Bace, Intrusion Detection, Que, 1999.
• Mark Cooper, Intrusion Signatures and Analysis, Que, 2001.
• Kenneth R. Van Wyk and Richard Forno, Incident Response, O'Reilly, 2001.
• Edward Amoroso, Intrusion Detection: An Introduction To Internet Surveillance,
  Correlation, Trace back, Traps and Response, Intrusion.Net Books, 2000.
• The HoneyNet Project, Know Your Enemy: Revealing the Security Tools, Tactics,
  and Motives of the Blackhat Community, Addison Wesley, 2001.
• Aviel D. Rubin, White-Hat Security Arsenal: Tackling the Threats, Addison
  Wesley, 2001.
• Stephen Northcutt, Inside Network Perimeter Security: The Definitive Guide to
  Firewalls, Virtual Private Networks (VPNs), Routers, and Intrusion Detection Systems, Que, 2002.
• Brian Caswell, et al, Snort 2.0 Intrusion Detection, Syngress, 2003.
• Keith J Jones, et al, Anti-Hacker Toolkit, McGraw-Hill, 2002.

• Warren G Kruse II and Jay G. Heiser, Computer Forensics: Incident Response
  Essentials, Addison Wesley, 2002.
• Tony Sammes and Brian Jenkinson, Forensic Computing: A Practitioner?s Guide,
  Springer, 2000.
• Michael A. Caloyannides, Computer Forensics and Privacy, Artech House, 2001.
  Proctor, P. E. The Practical Intrusion Detection Handbook. Prentice Hall,
  2001.

• Eogham Casey (ed), Handbook of Computer Crime Investigation: Forensic Tools and
  Technology, Academic Press, 2002.
• Bruce Middleton, Cyber Crime Investigator?s Field Guide, Auerbauch, 2001.
  John R. Vacca, Computer Forensics: Computer Crime Scene Investigation, Charles
  River Media, 2003.
• Eogham Casey (ed), Digital Evidence and Computer Crime, Academic Press, 2000.
  Kenneth S. Rosenblatt, High-Technology Crime: Investigating Cases Involving
  Computers, KSK, 1996.
• Gerald L Kovacich and William C Boni, High-Technology Crime Investigators
  Handbook: Working In the Global Information Environment, B&H, 2000.

• Dan Verton, Black Ice: The Invisible Threat of Cyber-Terrorism, Osborne, 2003.
  Alan D. Campen, et.al, Cyberwar: Security, Strategy and Conflict in the
  Information Age, AFCEA, 1996.
• James Adams, The Next World War: Computers are the Weapons & The Front Line is
  Everywhere, Simon & Schuster, 2001.
• Peter Pitorri, Counter-Espionage for Business, BH, 1998.

• John R. Vacca, Identity Theft, PTR, 2003
• Sheldon Charrett, The Modern Identity Changer: How To Create a New Identity for
  Privacy and Personal Freedom, Paladin, 2002.
• Ragner Benson, Acquiring New ID: How To Easily Use the Latest Computer
  Technology to Drop Out, Start Over, and Get on with your Life, Paladin, 2002.
• Anonymous, New ID in America: How To Create a Foolproof New Identity, Paladin,
  1983.
• Joseph J Culligan, You Too Can Find Anybody, self-published, 1999.

• Joel McNamara, Secrets of Computer Espionage: Tactics and Countermeasures,
  Wiley, 2003.

• Jon Erickson, Hacking: The Art of Exploitation, No Starch Press, 2003.
• Rob Flickenger, Wireless Hacks, O?Reilly, 2003.
• Stuart McClure, et.al, Web Hacking: Attacks and Defense, Addison Wesley, 2003.
• Joel Scambray, Stuart McClure, George Kurtz, Hacking Exposed, 2nd ed, Osborne,
  2001.
• Christian Barnes, et.al, Hack Proofing Your Wireless Network, Syngress, 2002.
• Wallace Wang, Steal This Computer Book 3, No Starch Press, 2003.
• Ryan Russel, et.al, Stealing the Network: How To Own the Box, Syngress, 2003.
• Michael O'Dea, Hack Notes: Windows Security, Osborne, 2003.

• Carl A. Roper, Risk Management for Security Professionals, B&H, 1999.
• Randall K Nichols, Daniel J Ryan and Julie JCH Ryan, Defending Your Digital
  Assets Against Hackers, Crackers, Spies and Thieves, McGraw-Hill, 2000.
• Edward Yourdon, Byte Wars: The Impact of September 11 on Information
  Technology, PH, 2002.
• Bruce Schneier, Beyond Fear: Thinking Sensibly about Security in an Uncertain
  World, Copernicus, 2003.
• Mitch Tulloch, Microsoft Encyclopedia of Security, Microsoft, 2003.
  Michael Cross, et.al, Security +, Syngress, 2003.
• Mark G Graff & Kenneth R van Wyk, Secure Coding: Principles and Practices,
  O'Reilly, 2003.
• Randall K Nichols and Panos C. Lekkas, Wireless Security: Models Threats and
  Solutions, McGraw-Hill, 2002.
• Merritt Maxim & David Pollino, Wireless Security, RSA Press, 2002.

• John Chirillo and Scott Blaul, Implementing Biometric Security, Wiley, 2003.
• Anil Jain, Ruud Bolle and Sharath Pankanti, Biometrics: Personal Identification
  in Networked Society, KAP, 1999.

• Ed Skoudis and Lenny Zeltser, Malware: Fighting Malicious Code, PH, 2004.
• Roger A Grimes, Malicious Mobile Code: Virus Protection for Windows, O'Reilly,
  2003.

• Panos C. Lekkas, Network Processors: Architectures, Protocols and Platforms,
  McGraw-Hill, 2003.
• Matt Bishop, Computer Security: Art and Science, Addison Wesley, 2002.
• Gregory B White, et.al, Computer System and Network Security, CRC, 1997.
• Frederick Cooper, et.al, Implementing Internet Security, New Riders, 1996.
• Vijay Ahuja, Network & Internet Security, Academic Press, 1996.
• Charles Pfleeger and Shari Lawrence Pfleeger, Security in Computing, 3rd ed,
  PTR, 2003.