Course Section 1 Content Section 1 Content Left Section 1 Content Right Credit Type: Course ACE ID: TEEX-0251 Version: 2 Organization's ID: CYB201 Organization: Texas A&M Engineering Extension Service Location: Online Length: 1 week (28 hours) Minimum Passing Score: 70 ACE Credit Recommendation Period: 11/1/2022 - 10/31/2025 12/1/2018 - 10/31/2022 9/1/2012 - 11/30/2018 Credit Recommendation & Competencies Section 2 Content Section 2 Content Left Section 2 Content Right Level Credits (SH) Subject Lower-Division Baccalaureate 3 Introduction to Computer Security, Digital Forensics, or Incident Response Students must complete TEEX-0280, TEEX-0281, TEEX-0282, and TEEX-0283 to receive credit for this course. Description Section 3 Content Section 3 Content Left Section 3 Content Right Objective: The course objective is to provide entry and mid-level IT staff the technological fundamentals of information security by covering the secure programming practices necessary to protect applications against attacks and exploits. Learning Outcomes: Summarize commonly utilized means of securing organization's networks, including firewalls, intrusion detection systems, and intrusion prevention systems Summarize policies and best practices that can be used to monitor and observe a network Describe forensics and discuss the specific role of digital forensics in forensic science Review basic terms found in a full discussion of information security Describe the study of confidentiality, integrity and access control and an introduction to several access control models Discuss layered architecture model used in the design and study of the TCP/IP protocol Summarize the common offensive techniques used by attackers targeting IT networks Identify vulnerabilities unique to operating systems and some solutions and best practices to guard against the exploitation of such vulnerabilities Describe the fundamental concepts of developing secure software Review concepts in secure software design and testing and emphasizes how these techniques are used to create more robust and reliable software Examine tools and utilities that can be used to monitor and observe a network Review computer technologies before introducing the associated challenges and advantages of these technologies to computer forensics Explain digital forensics by discussing methods of presenting question answers to a variety of audiences Review of the general concepts of cryptography, different types of cryptographic algorithms and the pros and cons of these different types Summarize commonly used software development methodologies and introduces a secure software development methodology for an in depth look at how a secure process typically occurs General Topics: Cryptographic standards used to protect data Best practices of logging and auditing, along with approaches to authentication and authorization Server and router security Forensics concepts and issues The process, procedures, and technologies for collecting evidence Expectations of evidentiary reports Four basic types of attacks the IT security professional most likely to be encountered Introduction to passwords and password security A summary of the Biba Integrity Model and the Bell-LaPadula Confidentiality Model Security issues associated with layered architecture model used in the design and study of the TCP/IP protocol Common attacks including denial of service and DNS tampering Defensive techniques and appliances available to the information security professional Wireless networks and the characteristics that can make them vulnerable to attack Operating system vulnerabilities Uses of encryption to include digital signatures and hardware encryption Common software traits, security requirements, vulnerability awareness, input validation, buffer overflows, common defensive programming techniques, and the basic principles of secure software development Secure design objectives and steps, coding standards, why it is important to 'think like an attacker,' the importance of carefully choosing compilers and languages, risk based testing and DREAD modeling, as well as static and dynamic testing techniques Waterfall model, agile development, extreme programming (XP), and the Microsoft security development lifecycle Instruction & Assessment Section 4 Content Section 4 Content Left Section 4 Content Right Instructional Strategies: Audio Visual Materials Computer Based Training Practical Exercises Methods of Assessment: Examinations Quizzes Supplemental Materials Section 5 Content Section 5 Content Left Section 5 Content Right Equivalencies Section 6 Content Section 6 Content Left Section 6 Content Right Button Content Rail Content 1 Other offerings from Texas A&M Engineering Extension Service View All Courses College Credit Opportunities Page Content