Course Description:
Secure Systems Engineering is a capstone course of the information assurance area of specialization. This course will bring together and focus the various topics presented in the prerequisite classes on the development of system level security solutions. The objective of the course is to equip the student with a global view of the process of designing and developing and fielding secure information systems. The course will investigate a number of actual secure system solutions starting with the development of the organization’s security policy and tracing the development of the system through to deployment. This will be a case study process. Parallel to the case study the student will be presented with comparable secure system developments in varying degrees of completeness and challenged to complete the development. In some cases this will require the student to develop assurance evidence, in some cases the student may be expected to complete a penetration analysis, in some cases the student may be expected to identify some architectural component.
This course is intended for the graduate students with the following qualification: typically coming out of computer science, mathematics, computer engineering, or informatics; it is helpful to have a moderate to intermediate understanding of the fundamentals of information assurance, and distributed systems and network security. Knowledge and skill in programming is also useful for this course.
This class will be primarily individual study, with weekly assigned readings, six homework assignments, one take home quiz, one project, a midterm and a final. The course will also have nine laboratory assignments which will be separate from the lecture period and performed outside of the class time. Each lab assignment will take approximately four to six hours to complete. Students may work in teams on the lab assignments and on the semester project.
Objectives:
As with many information security courses, secure systems engineering is comprised of both theoretical/academic objectives, and also applied objectives that can be transferred into practice. It is vitally important for the student to obtain both an understanding of the course material, but also to be able to transition this into skill in engineering secure systems for future customers or research. A listing of high level objectives is:
List of performance objectives:
1. Understand the integrated process for achieving a secure information system
2. Understand the appropriate engineering utilization of technical countermeasures
3. Develop an appreciation for the choices and tradeoffs that confront the design and implementation of secure information systems
4. Able to critically analyze secure system designs
The student will apply the following:
1. Methods of Authentication
2. Awareness and Protection
3. Public Key Infrastructure and Distribution Models