NORTH CENTRAL TEXAS COLLEGE
COURSE SYLLABUS
The North Central Texas College (NCTC) Course Syllabus provides the following as required by the Texas Higher Education Coordinating Board (THECB): (1) a brief description of the course including each major course requirement, assignment and examination; (2) the learning objectives for the course; (3) a general description of the subject matter of each lecture or discussion; and (4) any required or recommended readings. Contact information for the instructor is also provided. The Course Syllabus also provides institutional information to indicate how this course supports NCTC’s purpose and mission. Information specific to a particular section of the course will be included in the Class Syllabus and distributed to enrolled students.
|
Course Title: Info Tech Security
|
|
Course Prefix & Number: ITSY2301
|
Section Number: 580
|
Term Code:
|
|
Semester Credit Hours: 3
|
Lecture Hours: 32
|
Lab Hours: 32
|
|
Course Description (WECM):
Identify elements of firewall design, types of security threats and responses to security attacks. Use Best Practices to design, implement, and monitor a network security plan. Examine security incident postmortem reporting and ongoing network security activities.
|
|
Course Prerequisite(s):
|
|
Course Type:
o - Academic General Education Course (from Academic Course Guide Manual but not in NCTC Core)
o- Academic NCTC Core Curriculum Course
n - WECM Course
|
|
Name of Instructor:
|
Ervin Frenzel
|
|
Campus/Office Location:
|
Seated only
|
|
Telephone Number:
|
806-570-7658
|
|
E-mail Address:
|
efrenzel@nctc.edu
|
|
Name of Chair/Coordinator:
|
Susan Svane
|
|
Office Location:
|
Room 232
|
|
Telephone Number:
|
940-498-6292
|
|
E-mail Address:
|
ssvane@nctc.edu
|
Instructors Statement
My contact information is available and if you are experiencing difficulty with any portion of this course, contact me immediately – I cannot help if I do not know there is a problem. I am available through email but may take longer to respond, if the contact is critical call me. My phone is on from 0700 to 2000 daily, but I may not be available to answer a phone call immediately (from 0700 to 1600 daily), I will return your call as soon as I can. Typically that is after 4:30 pm (Monday through Thursday), I am available during the day on Friday, Saturday, and Sunday.
Office Hours and Class schedule for this semester
|
Time
|
Mon
|
Location
|
Tues
|
Location
|
Wed
|
Location
|
Thurs
|
Location
|
Fri
|
|
09:00-11:50
|
|
|
ITSY-2359
|
FM
Rm 201
|
Office
hours
|
TBD
|
ITSY-2359
|
FM
Rm 201
|
|
|
11:00-13:50
|
Office
hours
|
Online
|
ITSY-2301
|
FM
Rm 201
|
Office
hours
|
TBD
|
ITSY-2301
|
FM
Rm 201
|
|
|
14:00-17:50
|
|
|
ITSY-2342
|
FM
Rm 201
|
Office
hours to 15:00
|
TBD
|
ITSY-2342
|
FM
Rm 201
|
|
|
18:00-
21:50
|
|
|
ITSY-2330
|
FM
Rm 201
|
|
|
ITSY-2330
|
FM
Rm 201
|
|
|
|
|
|
|
|
|
|
|
|
|
|
ITSY-2300
|
Online
Online
|
REQUIRED OR RECOMMENDED COURSE MATERIALS
(available at no charge from the provided links)
Others as identified in the weekly materials.
Required – Text(s):
Bowen, P., Hash, J., and Wilson, M. (2006). Information security handbook: A guide for managers (NIST SP 800-100). Retrieved July 1, 2017 from http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-94.pdf
Cichonski, P., Millar, T., Grance, T., and Scarfone, K. (2012). Computer security incident handling guide (NIST SP 800-61r2) Retrieved July 1, 2017, doi: http://dx.doi.org/10.6028/NIST.SP.800-61r2
Frankel, S., Graveman, R., Pearce, J., and Rooks, M. (2010). Secure deployment of ipv6 (NIST SP 800-119). Retrieved July 1, 2017 from http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-94.pdf
Kent, K. and Souppaya, M. (2006). Guide to computer security log management (NIST SP 800-92). Retrieved July 1, 2017 from http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-92.pdf
Kissel, R., (2013). Glossary of key information security terms (NISTIR 7298 R2). Retrieved July 1, 2017, doi: http://dx.doi.org/10.6028/NIST.IR.7298r2
Majewski, K. (2013). Advanced Evasion Techniques For Dummies, Special Edition. Available within the classroom environment. West Sussux, England. John Wiley & Sons, Ltd. This book will be available through the classroom.
Nieles, M., Dempsey, K., and Pillitteri, V,Y., (2017). An introduction to information security (NIST SP 800-12r1) Retrieved July 1, 2017 from https://doi.org/10.6028/NIST.SP.800-12r1
Scarfone, K., Jansen, W., and Tracy, M. (2008). Guide to general server security (NIST SP 800-123). Retrieved July 1, 2017 from http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-119.pdf
Scarfone, K. and Hoffman, P. (2009). Guidelines on firewalls and firewall policy (NIST SP 800-41r1) Retrieved July 1, 2017 from http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-41r1.pdf
Scarfone, K. and Mell, P. (2007). Guidelines to intrusion detection and prevention systems (IPDS) (NIST SP 800-94) Retrieved July 1, 2017 from http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-94.pdf
Scarfone, K., Souppaya, M., Cody, A., and Orebaugh, A. (2008). Technical guide to information security testing and assessment (NIST SP 800-115). Retrieved July 1, 2017 from http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-167.pdf
Sedgewick, A., Souppaya, M., and Scarfone, K. (2015). Guide to application whitelisting (NIST SP 800-167). Retrieved July 1, 2017 from http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-167.pdf
Notebook - you are required to create a lab manual and keep all lab work until the end of the semester.
Labs are posted in the online classroom and will primarily be worked on during designated classroom lab time. No additional purchase is required for these.
Other materials will be made available during the course at no cost to the student.
Recommended:
The definitive Guide to the pfSense Open Source Firewall and Router Distribution downloadable from http://cage.owltux.com/ebook/pfsense%20-%20The%20Definitive%20Guide.pdf
Flash Drive.
COURSE REQUIREMENTS, EVALUATION METHODS, and GRADING CRITERIA
|
# of Graded Course Elements
|
Graded Course Elements
|
Weighted Percentage Values
|
|
|
8
|
In Class Participation
|
10% of grade
|
|
8
|
Weekly discussion question and peer responses (primary response and two substantial peer response per week)
|
30% of grade
|
|
6
|
Labwork (average of all lab grades)
|
20% of grade
|
|
1
|
Lab manual
|
10% of grade
|
|
1
|
Team Presentation
|
30% of grade
|
| |
|
|
|
|
GRADING SCALE
|
A
|
>=90%
|
D
|
>=60%
|
|
B
|
>=80%
|
F
|
<60%
|
|
C
|
>=70%
|
|
|
STUDENT LEARNING OUTCOMES
WECM End-of-Course Outcomes:
- Demonstrate system security skills through firewall implementation and testing.
- Use system tools, practices, and relevant technologies to implement a security plan.
- Evaluate practices, tools, and technologies to identify security breaches, sources of attacks, and protect mission critical systems.
- Establish an appropriate level of security based on an analysis of security logs.
- Use relevant tools to secure a network, respond to and follow up on various types of attacks.
ATTENDANCE POLICY ________________________________________________________________
Attendance is based on participation in the class, so you are expected to actively participate in the assignments and the graded discussion forums on a weekly basis. I also expect you to check your email everyday on M-F for any additional content.
Exams are not allowed to be turned in late (exam integrity). Discussion questions are only allowed opened during the week in which they are due.
Last Day to Withdraw: For the Spring I semester, the last day to withdraw from a course with a “W” is February 21, 2020. If a student decides to officially drop this course, then it is the student’s responsibility to submit the required forms to the registrar. Students who cease attending and who do not complete a drop slip prior February 21, 2020 will earn a grade of “F”.
This semester all labs will be conducted by small teams, at the end of the semester the individual team will present their enterprise environment in a presentation for an end of course grade. Labs will not be accepted late, as they are being handled by a team (team members are responsible for identifying who will turn in assignments and if necessary who will turn in assignments if the designated team member is unavailable).
|
Student Rights & Responsibilities
NCTC Board policy FLB (Local) Student Rights and Responsibilities states that each student shall be charged with notice and knowledge of the contents and provisions of the rules and regulations concerning student conduct. These rules and regulations are published in the Student Handbook published in conjunction with the College Catalog.
Other Pertinent Information
Dropping Courses:
Last Day to Withdraw: For the Spring I semester, the last day to withdraw from a course with a “W” is February 21, 2020. If a student decides to officially drop this course, then it is the student’s responsibility to submit the required forms to the registrar. Students who cease attending and who do not complete a drop slip prior February 21, 2020 will earn a grade of “F”.
If a student’s personal circumstances dictate that he or she needs to reduce his/her academic load, that student should confer with his/her advisor for assistance in adjusting the number of courses being taken. A grade of “W” will be given to students who officially withdraw from a course, or “drop”, at least by Thursday of the 11th week of a Fall or Spring semester, or a proportional number of weeks prior to the end of a flex-entry course or summer session. Any drops after this will be made with the approval of the instructor and the Department Chair.
It is the student’s responsibility to initiate the action necessary to drop courses under the conditions outlined above. This requires the completion of a petition for course drop form available in the Registrar’s Office on any NCTC Campus or by going to the NCTC website at www.nctc.edu and clicking on Admissions and Registration. Choose the forms on-line option and follow directions for submission of form. This form must be submitted on or before the last day to drop with a “W” (see Academic Calendar in front of catalog for specific date) and it is not available until after the official date of record. Prior to the official date of record, a student should go to the Registrar’s Office and complete the required forms.
Students who register for courses are required to drop any courses they no longer wish to attend or a final grade will be assigned. Instructors may drop students from courses for non-attendance by completing a petition for course drop.
Certificate Programs:
If you are planning to complete a certificate, you must take the competency exam prior to graduation. Contact Susan Svane ssvane@nctc.edu within three weeks of graduation.
Scholastic Integrity
Scholastic dishonesty shall include, but not be limited to cheating on a test, plagiarism, and collusion. See Student Handbook “Student Rights & Responsibilities: Student Conduct [FLB (LOCAL)]” #20 on page 175.
Complaint Procedures
If the complaint involves a problem with an instructor, the student shall discuss the matter with the instructor before requesting a conference with the department chair… If the complaint involves a grade received, the student shall collect all tests, papers, daily assignments, class notes and other relevant material prior to the conference with the instructor in question. (See Student Handbook > Discussion of Complaint)
ADA Statement
North Central Texas College is committed to providing equal access to educational opportunities to its students with disabilities by providing assistance through “reasonable accommodations”; and a variety of services and resources through the Special Populations Office. The College does not discriminate on the basis of disabilities in admission or access to its programs. Students are responsible for notifying the office of their need for assistance at least two weeks prior to the beginning of a semester. Students with documented disabilities such as mobility, hearing or visual impairments, learning, and/or psychological disorders are eligible for services. The Special Populations Office on the Gainesville Campus is located in the Counseling/Testing Center room ASC 108 (next door to the bookstore). For assistance, call 940/668-4216 ext. 344.
Civil Rights
In compliance with Title VI of the Civil Rights Act of 1964 (P.L.88-352), Title IX of the Education Amendments of 1972 (P.L. 92-318). and the Age Discrimination Act of 1978 (P.L. 92-256), North Central Texas College does not discriminate against or exclude from participation in any of its programs or activities, either in the student body or the staff, any person on the grounds of sex, race, color, religion, age, handicap, national origin, or veteran status.
Web Page
Visit the North Central Texas College web page for information on registration, financial aid, counseling/advising, and cost of tuition and fees. You will also find information on the catalog and semester schedules as well as courses of study. You can keep up with what is happening on campus by checking the calendar of events and the sports news. The web has information on the library as well as links to other areas of interest. Check out our web page at http://www.nctc.edu .
Additional content for this course may be found in your Canvas account. Please check there for updates and news.
|
ITSY 2301 Weekly Schedule
|
|
Sunday
|
Due Date
|
Closes
|
Chapter
|
|
|
|
1
|
20-Jan
|
23-Jan
|
25-Jan
|
1
|
Read
|
Introduction to Info Security
|
|
|
|
23-Jan
|
25-Jan
|
|
NA
|
Lab Teams assignment (3 person teams)
|
|
|
|
23-Jan
|
25-Jan
|
|
Discussion
|
|
|
|
|
23-Jan
|
25-Jan
|
|
Quiz
|
|
|
2
|
26-Jan
|
30-Jan
|
1-Feb
|
2
|
Read
|
Managers and Firewalls
|
|
|
|
30-Jan
|
1-Feb
|
|
Lab - 1
|
Team Build - (Type I hosted in Type II)(perimeter firewall, 3 internal firewalls - one must be SOPHOS, basic rules for all)(all talk to internet through perimeter FW)(perimeter range: 172.16.0.0/16; internal firewalls outside edge: 172.17-19.1.0/24)
|
|
|
|
30-Jan
|
1-Feb
|
|
Discussion
|
|
|
|
|
30-Jan
|
1-Feb
|
|
Quiz
|
|
|
3
|
2-Feb
|
6-Feb
|
8-Feb
|
3
|
Read
|
Network Security Policy Design and Implementation & Physical Security
|
|
|
|
6-Feb
|
8-Feb
|
|
Lab -2
|
Team Build - (auditing environment and sheets) (Kali/Storm inside perimeter 172.16.0.0/16) - test against 3 firewalls - do not test against perimeter - fill out audit sheets on each of the firewalls - turn- in)
|
|
|
|
6-Feb
|
8-Feb
|
|
Discussion
|
|
|
|
|
6-Feb
|
8-Feb
|
|
Quiz
|
|
|
4
|
9-Feb
|
13-Feb
|
15-Feb
|
4
|
Read
|
Secure firewall Configuration and Management
|
|
|
|
13-Feb
|
15-Feb
|
|
Lab - 3
|
Team Build - (firewall tuning; apply big 4 rules from sheet; not all rules will apply to all firewalls)
|
|
|
|
13-Feb
|
15-Feb
|
|
Discussion
|
|
|
|
|
13-Feb
|
15-Feb
|
|
Quiz
|
|
|
5
|
16-Feb
|
20-Feb
|
22-Feb
|
5
|
Read
|
Host Security
|
|
|
|
20-Feb
|
22-Feb
|
|
Lab - 4
|
Team Build - testing results - audit sheets once FW's securely configured
|
|
|
|
20-Feb
|
22-Feb
|
|
Discussion
|
|
|
|
|
20-Feb
|
22-Feb
|
|
Quiz
|
|
|
5
|
16-Feb
|
20-Feb
|
22-Feb
|
5
|
Read
|
Setting up Malware Defenses
|
|
|
|
20-Feb
|
22-Feb
|
|
Lab
|
Team Build - set up Splunk - use a stand alone system (inside 172.16.0.0/16 range; ensure you can receive syslog from all internal FW's - if you cannot receive syslog - explain why with supporting documents). PROOF: logs from 3 devices shown in log. (Syslog)
|
|
|
|
20-Feb
|
22-Feb
|
|
Discussion
|
|
|
|
|
20-Feb
|
22-Feb
|
|
Quiz
|
|
|
6
|
23-Feb
|
27-Feb
|
29-Feb
|
6
|
Read
|
Understanding IPS/IDS
|
|
|
|
27-Feb
|
29-Feb
|
|
Lab
|
Team Build - set up SNORT - ensure you have a minimum of 3 devices reporting to it. PROOF: logs from 3 devices shown in log. (Security Logs)
|
|
|
|
27-Feb
|
29-Feb
|
|
Discussion
|
|
|
|
|
27-Feb
|
29-Feb
|
|
Quiz
|
|
|
6
|
23-Feb
|
27-Feb
|
29-Feb
|
7
|
Read
|
Network Traffic Monitoring and Analysis & Network Risk and Vulnerability Management
|
|
|
|
27-Feb
|
29-Feb
|
|
Lab
|
Team Build - Identify NetFlow logs that can attributed/aggregated to Splunk. PROOF: logs from 3 devices shown in log. (Netflow)
|
|
|
|
27-Feb
|
29-Feb
|
|
Discussion
|
|
|
|
|
27-Feb
|
29-Feb
|
|
Quiz
|
|
|
7
|
1-Mar
|
5-Mar
|
7-Mar
|
8
|
Read
|
Advanced log interpretation
|
|
|
|
5-Mar
|
7-Mar
|
|
Lab
|
Team Build - Identify SNMP logs and have them report to Splunk. PROOF: logs from 3 devices shown in log. (SNMP)
|
|
|
|
5-Mar
|
7-Mar
|
|
Discussion
|
|
|
|
|
5-Mar
|
7-Mar
|
|
Quiz
|
|
|
7
|
1-Mar
|
5-Mar
|
7-Mar
|
8
|
Read
|
Network Incident Response and Management
|
|
|
|
5-Mar
|
7-Mar
|
|
Lab
|
Team Build: Create incidence analysis plan.
|
|
|
|
5-Mar
|
7-Mar
|
|
Discussion
|
|
|
|
|
5-Mar
|
7-Mar
|
|
Quiz
|
|
|
8
|
8-Mar
|
10-Mar
|
12-Mar
|
10
|
Read
|
Data Backup and Recovery
|
|
|
|
10-Mar
|
12-Mar
|
|
Lab
|
Team Presentation of lab environment preparation;
|
|
|
|
10-Mar
|
12-Mar
|
|
Discussion
|
|
|
|
|
10-Mar
|
12-Mar
|
|
Quiz
|
|
|
8
|
8-Mar
|
9-Mar
|
12-Mar
|
|
Presentation
|
Team Presentation of lab environment (10 minutes - all team members must be present, participate, and present content).
|
Spring 2020 Semester
|
Important Dates for the Spring 2020 Semester
|
|
Event
|
Spring 2020
|
Spring 2020
|
Spring 2020
|
May
|
|
1st 8-Week
|
2nd 8-Week
|
Mini-Mester
|
|
Last Day of 100% Refund for Courses Dropped
|
19-Jan
|
19-Jan
|
22-Mar
|
17-May
|
|
Martin Luther King Holiday Observed
|
20-Jan
|
20-Jan
|
|
|
|
** College Closed **
|
|
Classes Begin
|
21-Jan
|
21-Jan
|
23-Mar
|
21-May
|
|
Official Date of Record
|
4-Feb
|
28-Jan
|
1-Apr
|
22-May
|
|
Spring Break
|
March 16-21
|
March 16-21
|
March 16-21
|
|
|
** College Closed **
|
|
Memorial Day Observed
|
|
|
|
#####
|
|
** College Closed **
|
|
Last day to withdraw from a class with ‘W’
|
3-Apr
|
21-Feb
|
24-Apr
|
1-Jun
|
|
Final Exams (see final exam schedule)
|
May 11-16
|
March 9-13
|
May 11-16
|
5-Jun
|
|
Commencement Ceremonies
|
15-May
|
|
|
|
|
Term Ends
|
16-May
|
13-Mar
|
16-May
|
5-Jun
|
|
Final Grades, Attendance Rosters & Grade Rolls due at Noon
|
16-May
|
14-Mar
|
16-May
|
6-Jun
|
|
Important Dates for the Summer I, II, and III Semesters
|
|
Event
|
Summer I 2020
|
Summer II 2020
|
Summer III 2020
|
|
|
5½-Week Session
|
5½-Week Session
|
10-Week Session
|
|
|
Last Day of 100% Refund for Courses Dropped
|
7-Jun
|
14-Jul
|
7-Jun
|
|
|
Classes Begin
|
8-Jun
|
15-Jul
|
8-Jun
|
|
|
Official Date of Record
|
17-Jun
|
27-Jul
|
23-Jun
|
|
|
Last day to withdraw from a class with ‘W’
|
30-Jun
|
6-Aug
|
16-Jul
|
|
|
Fourth of July Holiday Observed
|
4-Jul
|
4-Jul
|
4-Jul
|
|
|
** College Closed **
|
|
Final Exams (see final exam schedule)
|
14-Jul
|
20-Aug
|
13-Aug
|
|
|
Term Ends
|
14-Jul
|
20-Aug
|
13-Aug
|
|
|
Final Grades, Attendance Rosters & Grade Rolls due at Noon
|
15-Jul
|
21-Aug
|
14-Aug
|
|
STUDENT SUPPORT SERVICES
Disability Services (OSD)
The Office for Students with Disabilities (OSD) provides accommodations for students who have a documented disability. A disability is anything that can interfere with learning, such as a learning disability, psychological challenge, physical illness or injury. Accommodations may include extra time on tests, tests in a distraction reduced environment, volunteer note taker in class, etc.
On the Corinth Campus, go to room 170 or call 940-498-6207. On the Gainesville Campus, go to room 110 in the Administration (100) Building or call 940-668-4209. Students on the Bowie, Graham, Flower Mound, and online campuses should call 940-668-4209 to arrange for an intake appointment with OSD.
North Central Texas College is on record as being committed to both the spirit and letter of federal equal opportunity legislation, including the Americans with Disabilities Act (ADA) of 1990, ADA Amendments Act of 2009, and Section 504 of the Rehabilitation Act of 1973 (P.L. 93-112).
http://www.nctc.edu/StudentServices/SupportServices/Disabilityservices.aspx
Support Services
Counseling and Testing staff offer a variety of services to current and prospective students, such as College 101, placement testing, academic advising and course registration, transfer assistance, and College Success seminars (Time Management, Study Skills, Test Anxiety, Choosing a Major, Learning Style Strategies, Career Exploration), and much more. http://www.nctc.edu/StudentServices/CounselingTesting.aspx
Student Success offers academic coaching, tutoring, including a Writing Center, a Math Lab, free 24/7 online tutoring through Grade Results and assist new students acclimate to college by providing computer lab services for prospective students. First generation students can also participate in TRIO which offers specialized support services.
http://www.nctc.edu/StudentServices/SupportServices.aspx
Financial Aid offers financial resources for students that qualify, visit the financial aid offices for more information. http://www.nctc.edu/FInancialAidHome.aspx
EEOC Statement
North Central Texas College does not discriminate on the basis of race, color, national origin, gender, religion, age, or disability in the employment or the provision of services.
Early Alert and NCTC Cares
The NCTC Early Alert program has been established to assist students who are at risk of failing or withdrawing from a course. Your instructor may refer you to this program if you are missing assignments, failing tests, excessively absent, or have personal circumstances impacting your academic performance. If submitted as an Early Alert you will be notified via your NCTC e-mail address and then contacted by a Counseling and Testing advisor or counselor to discuss possible strategies for completing your course successfully.
The NCTC CARES (Campus Assessment Response Evaluation Services) Team addresses behavior which may be disruptive, harmful or pose a threat to the health and safety of the NCTC community-such as stalking, harassment, physical or emotional abuse, violent or threatening behavior, or self-harm. As a student, you have the ability to report concerning behavior which could impact your own safety or the safety of another NCTC student. Just click the NCTC CARES Team logo posted on MyNCTC, or send an e-mail to CARESTeam@nctc.edu. As always, if you feel there is an immediate threat to your own safety or welfare (or to another student), please call 911 immediately.
Student Success Center
The Student Success Center is designed to help all students at NCTC develop tools to achieve their academic goals. The center links students to FREE tutoring, including a Writing Center, a Math Lab, and free online tutoring in the evening. The program helps students acclimate to college by providing students free interactive workshops. For more information, please visit your nearest Student Success Center.
Tobacco-Free Campus
NCTC restricts the use of all tobacco products including cigarettes, cigars, pipes and smokeless tobacco on campus property.