To print: Right-click and choose “Print,” then follow your browser’s print settings.
To download: Right-click and choose “Print,” then select “Save as PDF.”
Enterprise Hall 4400 University Drive, MS 1B1
Fairfax, Virginia 22030
Phone: (703) 993-1880
Fax: (703) 993-1867
Managing Network and Data Security – ISM 650
(This syllabus is tentative and subject to change.)
Instructor:
George Mason Email:
Course Website: https://info.canvas.gmu.edu/
Class Meeting Times & Location:
Recitation Meeting Times:
Office Hours:
Office Location:
Course Materials
This class uses open educational resources. There is no textbook to purchase. All course materials are posted via Canvas course website.
Programs
Graduate Certificate in Information Security Management
Catalog Course Description
The course covers principles and practices of assessing network and data security needs, and implementation of the necessary security plan for communication networks and organizational data. The course addresses databases as well as unstructured data in files, including securing cloud infrastructure. More specifically, the course will focus on database security principles, database auditing, database reliability and implementation of database controls and security. In context of CIA triad of information security, threat classifications to the communication networks are discussed: eavesdropping (confidentiality), man-in-the-middle (integrity), and denial-of-service (availability). Real world examples of attack methods and cases of database breaches are discussed, as well as attacks on communication networks and networked applications are discussed to translate principles into reality. May not be repeated for credit.
Schedule Type
Lecture
Grading
This course is graded on the Graduate Regular scale.
Learning Objectives
Upon completion of this course, students will be able to:
-
Describe the principles and significance of network and data security.
-
Evaluate security risks faced by network and connected database applications.
-
Explain how various network security technologies and protocols work.
-
Develop a plan for monitoring network and database activities to identify security breaches, and associated response plan.
-
Translate organizational requirements to security policy and controls as part of network and data security needs of an organization.
Assurance of Learning
None
Approach to Learning
This course is geared for the student who intends to be an information security management professional engaged in business, government, or the non-profit sector. The delivery will be in the form of class-lectures, discussions, and hand-on lab exercises. Discussions on the subject matter will be motivated through case studies, current/recent security incidents, and guest speakers. Competency with hands-on exercises to reinforce class lectures, and critical analysis will be particularly emphasized for successful learning.
Mason Core Learning Outcomes
-
Students will understand the principles of information storage, exchange, security, and privacy.
-
Students will become critical consumers of digital information; they will be capable of selecting and evaluating appropriate, relevant, and trustworthy sources of information.
-
Students can use appropriate information technologies to organize and analyze information and use it to guide decision-making.
-
Students will be able to choose and apply appropriate algorithmic methods to solve a problem.
ISOM Learning Goals
-
Apply knowledge of information technology, operations, and business functions to assess, design and improve business processes.
-
Develop data organization, storage, and processing solutions to support organizational needs for information management. Also develop skills in the area of business intelligence.
-
Use knowledge of computer networks as part of IT solutions for improving business processes.
Required Computers and Software
The Costello College of Business undergraduate program requires every student to have access to a computing device that satisfies the requirements listed below. Note that as technology changes rapidly, these requirements may change during a student’s time in the Costello College of Business. While most students have a computer or access to one, some courses require specific requirements due to the use of specific applications during class. To address these requirements, a list of standard minimum requirements has been determined and will be reviewed annually. View the standard minimum requirements.
Grading Policy (All assignments are closed at the listed due date and will not be accepted late.)
| Assignment | Value |
| Discussions (4) | 20 points |
| Case Study (4) | 40 points |
| Exam (1) | 20 points |
| Course Project (1) | 20 points |
| Total | 100 points |
Grade Scale (No curve will be applied.)
| Letter Grade | Grade Scale |
| A | 93 to 100 points |
| A- | 90 to 92.99 points |
| B+ | 87 to 89.99 points |
| B | 83 to 86.99 points |
| B- | 80 to 82.99 points |
| C+ | 77 to 79.99 points |
| C | 70 to 76.99 points |
Course Requirements
-
Participation/Online Discussion (20 points; 5 point each)
There are 4 discussions. You need to submit your initial posting and reply to at least one posting from your classmates before the deadline. -
Case Study (40 points; 10 points each)
-
Exam (20 points)
You are only allowed to take the exam one time. You must complete the exam in one sitting. There is a time limit. -
Course Project (20 points)
You are expected to start working on the Course Project in week 1. You are only allowed one submission.
Student Responsibilities
Students are responsible for keeping themselves updated on any changes on the course website. In case of absence, it is the student’s responsibility to catch up with the material covered. Without advance notice and approval, no extension, or options to retake if you miss any quiz or exam.
Methods of Student Evaluation
Participation, quizzes, exam, and project.
Honor Code
Students must strict adherence to the University honor system and code, as described in the current George Mason University catalog 2009-2010. Submitted assignments may be checked for honor code violations using electronic tools and other means. All violations will be notified to the Honor Code Committee for enforcement of academic integrity.
Communications
For privacy and confidentiality, you must use your George Mason email account to communicate with me. Your email will be answered within 24 hours.
Disability Accommodations
If you are a student with a disability and you require academic accommodations, please contact the Office of Disability Services (ODS) at (703) 993-2474 (ods@gmu.edu) and me, at the beginning of the semester. All academic accommodation due to disability must be arranged through the ODS and should be made during the first two weeks of the semester.
FERPA
All student records are protected by the Family Educational Rights & Privacy Act of 1974 (FERPA). Portions of this course may be audio-visually recorded so students who cannot attend a particular session or who wish to review material can access the full content. Students who participate orally, visually, via chat/discussion board agree to be recorded. The content of this recording may not be shared with anyone who is not registered in this class without written permission, as it is an educational record.
Academic Integrity and Standards
George Mason University has the following clearly described University Honor Code administered by the Office for Academic Integrity: “To promote a stronger sense of mutual responsibility, respect, trust, and fairness among all members of the George Mason University community and with the desire for greater academic and personal achievement, we, the student members of the University Community have set forth this: Student members of the George Mason University community pledge not to cheat, plagiarize, steal, or lie in matters related to their academic work.
The Honor System and Code adopted by George Mason University will be enforced for this class: http://oai.gmu.edu/mason-honor-code/full-honor-code-document/.
Link to Academic standards: https://academicstandards.gmu.edu/academic-standards-code/
As a student you are responsible for upholding these standards for this course. It is your responsibility to be aware of the consequences of cheating, fabrication, facilitation, and plagiarism. In your work on all written assignments, keep in mind that you may not present as your own the words, the work, or the opinions of someone else without proper acknowledgement. You also may not borrow the sequence of ideas, the arrangement of material, or the pattern of thought of someone else without proper acknowledgement. Faculty are obligated to submit any Honor Code violations or suspected violations to the Honor Committee without exception. Any suspected case of honor code violation will be reported to the Office of Academic Integrity immediately. In such a case, I will withhold from grading your assignments until after the case is cleared by the Office of Academic Integrity. All students are expected to adhere to this code. All acts of academic dishonesty will be dealt with in accordance with the provisions of this code.
George Mason Common Course Policies
Please check this link for Common Policies Addendum: https://stearnscenter.gmu.edu/home/gmu-common-course-policies/
Costello College of Business Standards of Behavior
The mission of the Costello College of Business at George Mason University is to create and deliver high-quality educational programs and research. Students, faculty, staff, and alumni who participate in these educational programs contribute to the well-being of society. High-quality educational programs require an environment of trust and mutual respect, free expression and inquiry, and a commitment to truth, excellence, and lifelong learning. Students, program participants, faculty, staff, and alumni accept these principles when they join the Costello College of Business community. In doing so, they agree to abide by the following standards of behavior:
-
Respect for the rights, differences, and dignity of others
-
Honesty and integrity in dealing with all members of the community
-
Accountability for personal behavior
Integrity is an essential ingredient of a successful learning community. Ethical standards of behavior help promote a safe and productive community environment and ensure every member the opportunity to pursue excellence. The Costello College of Business can and should be a living model of these behavioral standards. To this end, community members have a personal responsibility to integrate these standards into every aspect of their experience at the Costello College of Business. Through our personal commitment to these Community Standards of Behavior, we can create an environment in which all can achieve their full potential. Honor Code Statement: By choosing to take this course, you agree to uphold the George Mason University Honor Code. Please refer to the Office of Academic Integrity for further details. George Mason University Honor Code: To promote a stronger sense of mutual responsibility, respect, trust, and fairness among all members of the George Mason University community and with the desire for greater academic and personal achievement, we, the student members of the University Community have set forth this: Student members of the George Mason University community pledge not to cheat, plagiarize, steal, and/or lie in matters related to academic work. In your work on all written assignments, keep in mind that you may not present as your own the words, work, or the opinions of someone else without proper acknowledgement. You also may not borrow the sequence of ideas, the arrangement of material, or the pattern of thought of someone else without proper acknowledgement.
Academic and Educational Sanctions
Violations of Academic Standards are sanctioned according to a common matrix. Sanctions include both educational and administrative components. Student violations of Academic Standards are sanctioned according to following matrix:
| Finding | Sanction |
| Level 1 |
|
| Level 2 |
|
* Education Interventions may include online learning modules, visits to the writing center, or other programs to assist the student in understanding and remediating the violation.
Suspension, Dismissal, and Termination
In some cases, violations of Academic Standards rise to the level that merits a pause or removal from studies. Suspension, Dismissal, and Academic Termination decisions are based on the program level of the student, the number of previous offenses, and the severity of the offense. The decision to refer a violation for potential suspension or dismissal consideration is made in accordance with the sanctioning matrix. Where there is discretion to recommend a student for suspension or dismissal, Academic Standards Staff will decide. For undergraduates, the timing and process of suspensions follow the Academic Suspension process as listed in AP5.2.6. Graduate Students can be suspended or terminated from their program. If a student is found in violation, the outcomes are adjudicated through the matrix below:
| Student Program Level | 1st Referral to ASO | 2nd Referral to ASO | 3rd Referral to ASO | 4th Referral to ASO |
| Undergraduate | Potential Recommendation for Academic Suspension OR Permanent Dismissal | Automatic Recommendation Academic Suspension OR Potential Recommended for Permanent Dismissal | Automatic Academic Suspension OR Automatic Recommendation for Permanent Dismissal | Automatic Recommendation for Permanent Dismissal |
| Graduate | Automatic Recommendation for Academic Suspension AND Potential Recommended for Program Termination | Automatic Academic Suspension AND Automatic Recommended for Program Termination | Automatic Program Termination |
Topical Outline
Expect to work 8-10 hours per week for this course.
Unless otherwise stated, all assignments are due by the end of the week in which they are assigned. For the purposes of this course, a week is defined as beginning at 12:01 am each Monday and ending at 11:59 pm on the following Sunday.
To help you manage your schedule and time to complete the assignments in this course, please follow the recommended timeline below. If you have a question or concern or encounter a problem about an assignment, please contact me immediately so we can discuss and work out a resolution.
| Weeks | Modules | Assignments | Due Dates |
|
Module 0 Introduction to Computer Networks Introduction to Database Management Systems |
|
||
| 1 |
Module 1 Security Defense Models Systems Hardening Hardening Operating System |
|
Due Date: XX/XX Discussion
|
| 2 |
Module 2 Network Security Overview Vulnerabilities Network Assessment |
|
Due Date: XX/XX Discussion
|
| 3 |
Module 3 Network Services Storage Security |
|
Due Date: XX/XX |
| 4 |
Module 4 Network Security Monitoring Network Protection |
|
Due Date: XX/XX |
| 5 |
Module 5 Application Security Web Application Security |
|
Due Date: XX/XX Discussion
|
| 6 |
Module 6 Database Security Data Security |
|
Due Date: XX/XX Discussion
|
| 7 |
Module 7 Harden Database Security Harden Data Security |
|
Due Date: XX/XX |
| 8 |
Module 8 Course Project |
|
Due Date: XX/XX |