BITM Information Security
bitmsemester 5
Unit 1:Introduction
Computer Security Concepts. Threats, Attacks and Assets. Security Functional Requirements. Security Design Principles. Attack Surfaces and Attack Trees. Computer Security Strategy. Access Control Principles. Subjects, Objects and Access Rights. Discretionary Access Control. Role Based Access Control. Attribute Based Access Control. Identity, Credential and Access Management. Trust Frameworks. Overview of the Bell-LaPadula Model and Biba integrity model.
Unit 2:Symmetric and Asymmetric Cryptographic Algorithms
Classical Cryptosystems: Substitution and Transposition Ciphers. Block Cipher Vs Stream Ciphers. Symmetric Encryption Principles. Fiestel Cipher Structure. Data Encryption Standards (DES). Basic concepts of fields. Modular Arithmetic. Galois Fields. Polynomial Arithmetic. Advanced Encryption Standards (AES). Prime Numbers. Fermat’s Theorem. Primality Testing: Miller-Rabin Algorithm. Euclidean Algorithm. Extended Euclidean Algorithm. Euler Totient Function. Asymmetric Encryption. Diffie-Hellman Protocol. RSA Algorithm.
Unit 3:Message Authentication and Hash Functions
Message Authentication. Hash Functions. Message Digests: MD4 and MD5. Secure Hash Algorithms: SHA-1, SHA-2. Hash Based MAC (HMAC). Digital Signature.
Unit 4:User Authentication
User Authentication Principles. Password-Based Authentication. Token-Based Authentication. Biometric Authentication. Two Factor Authentication. Kerberos Protocol. Kerberos 5. Security Issues for User Authentication.
Unit 5:Intrusion Detection and Prevention
Intruders. Intrusion Detection. Intrusion Detection Analysis Approaches. Host-Based Intrusion Detection. Network-Based Intrusion Detection. Hybrid Intrusion Detection. Intrusion Detection Exchange Format. Honeypots. Intrusion Prevention System.
Unit 6:Malicious Software
Malicious Software. Types of Malicious Software. Advanced Persistent Threat. Virus. Worms. Spam E-mail. Trojans. System Corruption. Zombie. Bots. Key loggers. Phishing. Spyware. Backdoors. Rootkits. Countermeasures for Malwares.
Unit 7:Network Security
Overview of Network Security. Digital Certificates and X.509 certificates. Certificate Life Cycle Management. PKI trust models. PKIX. Secure Socket Layer (SSL). Transport Layer Security (TLS). IP Security. Email Security. PGP and its Services. Firewalls its applications and types. VPN.
Unit 8:IT Security Management, Risk Assessment and Security Auditing
IT Security Management. Organizational Context and Security Policy. Security Risk Assessment. Security Risk Analysis. Security Auditing Architecture. Security Audit Trails. Implementing Logging Function. Audit Trail Analysis.