Intrusion Detection Syllabus for 2015-2016
Return to Syllabus List

Instructor Information

Office Location

Office Hours

Course Information

Recording Policy

Disability Statement

Any student who, because of a disabling condition, may require some special arrangements in order to meet course requirements should contact disAbility Services (Student Service Center room 119, phone 371-5436) as soon as possible.

Statement for Mental Health and Advocacy & Resource Center:

As a student you may experience a range of issues that can cause barriers to learning, such as strained relationships, increased anxiety, alcohol/drug problems, feeling down, difficulty concentrating and/or lack of motivation. These mental health concerns or stressful events may lead to diminished academic performance or reduce a student's ability to participate in daily activities. Amarillo College offers services to assist you with addressing these and other concerns you may be experiencing. If you or someone you know are suffering from any of the aforementioned conditions, you can learn more about the broad range of confidential mental health services available on campus by calling the AC Counseling Center at 806-371-5900. The AC Counseling Center website is https://www.actx.edu/counseling/ . Also, if you are in need of social services (affordable housing, utilities, transportation, food, clothing, childcare, medical/dental/vision, legal), please call the AC Advocacy & Resource Center at 806-371-5439. The AC Advocacy & Resource Center website is https://www.actx.edu/arc

Amarillo College Tutoring for Success Policy:

Administrative Drop Policy

N/A

Student Withdrawal Procedures

N/A

Privacy Statement

The Amarillo College Privacy Policy is found at https://www.actx.edu/-amarillo-college-privacy-notice , and applies to all Amarillo College students.  If you have questions about this privacy statement or you believe that your personal information has been released without your consent, send email to humanresources@actx.edu .

Course

ITSY-2330-001 Intrusion Detection

Prerequisites

Prerequisite: ITSY 2300

Course Description

Computer information systems security monitoring, intrusion detection and crisis management. Includes alarm management, signature configuration, sensor configuration and troubleshooting components. Emphasizes identifying, resolving and documenting network crises and activating the response team.

Student Resources Student Resources Website

Department Expectations

\N

Occupational License Disclaimer

Hours

(3 sem hrs; 2 lec, 4 lab)

Class Type

Online Course

Syllabus Information

Textbooks

Required text

Penetration Testing: Security Analysis, 1st Edition © 2011
ISBN: 978-1-4354-8366-8
 
Author: EC Council

Publisher: Cengage

These books may not be available through the Amarillo College bookstore and will have to be purchased/ordered online (have it in your possession by the 2nd week of class at the latest).

Additional texts (electronic format) will be made available throughout the course from the National Institute of Standards and Technology (NIST) homepage at no cost to the students.

Supplementals (no cost to students) downloaded from http://csrc.nist.gov/publications/PubsSPs.html

NIST SP 800-47 (Security Guide for Interconnecting Information Technology Systems)*

NIST SP 800-39 (Managing Information Security Risk: Organization, Mission, and Information System View)*

NIST SP 800-36  (Guide to Selecting Information Technology Security Products)

NIST SP 800-30 Rev. 1(Guide for Conducting Risk Assessments)*NIST SP 800-18 Rev.1 (Guide for Developing Security Plans for Federal Information Systems)*

 

NIST SP 800-14 (Generally Accepted Principles and Practices for Securing Information Technology Systems)*

NIST SP 800-12 (An Introduction to Computer Security: The NIST Handbook)*

 

Supplies

Students must have reliable access to a PC (personal computer) and the Internet. Computers are available in the CIS Department at Amarillo College and have reliable access to the Internet. Additionally students will need: Binder, pen, pencil, scratch p

Student Performance

End-of-Course Outcomes: Build IDS sensors and attach them to the network (hardware and software); install and manage a secure communication link between all sensors and the monitor; install and manage event database(s); analyze an event and trends; install, manage, and interpret syslog servers and system logs; identify legal and policy issues associated with system and network monitoring; and deploy, implement, and test IDS security plan.

Students Rights and Responsibilities

Student Rights and Responsibilities

Log in using the AC Connect Portal

In order to receive your AC Connect Email, you must log in through AC Connect at https://acconnect.actx.edu .

If you are an active staff or faculty member according to Human Resources, use "Exchange". All other students, use "AC Connect (Google) Email".

Expected Student Behavior

\ It is the policy of the Sciences and Engineering Division and the Electronics Technology Department that food and drink may be allowed in the classroom setting, at the instructor’s discretion, but food and drink are not allowed in labs. Additionally pagers and cell phones must be turned off or in silent mode in the classroom setting and pagers and cell phones must be turned off while in labs.

\

\ Students are expected to maintain a high standard of individual honor in their scholastic work. Students who are guilty of cheating, plagiarism, copying, or dishonesty may be excluded from class with a grade of F; or, in flagrant cases, may be suspended from the College.

\

\ The faculty of the CIS Department reserves the right to ask a student to verify any portion of a test by reproducing any specific section or the entire exam of the test in question. Any action that compromises the computer systems at Amarillo College, including but not limited to hacking or cracking, can result in a grade of "F" in this course and possible further disciplinary action.

Grading Criteria

A >90, B = 80 to 89, C = 70 to 79, D = 60 to 69, F < 60

 

Class Overall Grade

 

Successful completion of DHS, FEMA, and TEEX - Network Assurance – AWR 138 (20%) & Cyber Incident Analysis and Response AWR 169 (20%) 40%

In-Class Discussions - Discussed in virtual classroom during chapter in blackboard (introduced each week  – mandatory responses 1 primary reply & 3 peer replies) 

35%

Individual Notebook (scanned as PDF and turned in electronically)

25%

 

 

 

 

 

 

For Notebooks

 

Binder turned in on time & organized   5 points
Coversheet on binder (includes name, class, instructor name, date)   5 points
Table of contents listed to include:    
     Table of contents (Page #)  10 points
     Syllabus      (Page #)  10 points
     Lab book and completion report (as applicable from class) (Page #)  10 points
     NIST documentation (as applicable from class)   (Page #)  10 points
     Relevant Notes   (Page #)  10 points
     Turned in and graded reports   (Page #)  10 points
     Completed labs (ITSY 2330 - requires certificates of completion for FEMA courses) (Page #)  30 points
Turned in after due date (Not accepted after 3 late days)           -10 points/day

 

 

 

The opportunity to make-up an exam and/or lab will be determined by the circumstances of each individual, permitted at the discretion of the instructor.  It is understood that the student has no intention of making up missed work if more than five days have elapsed since assignment was due.  Communication is critical therefore notifiy the instuctor through email, text, or phone call immediately if you have an illness or absence that will affect your ability to complete any assignment prior to the completion date. 

The time and place for make-up test will be determined by the instructor.  No make-up work will be accepted after the close of the semester.

Students who miss gradable coursework due to an absence will be given the opportunity to make up the missed work, with the exception of the final exam provided they have made contact with the instructor and arranged a time to complete the work prior to the close of the semester.  The final exam may be taken early, if prior arrangements have been made. It is the responsibility of the student to contact the instructor as soon as possible after return to class to arrange to make up missed coursework. 

INSTRUCTOR'S STATEMENT: As your instructor, I am always willing to discuss your grades with you and explain how your grade was determined. If a grading error has been made on my part, I am always willing to correct the error.  No work will be accepted after the close of the semester if prior arrangements by individual assignment were not made.

Written work Rubric will be posted in the resource folder in class.

Attendance

Please remember the deadline for dropping a class at AC is published in the official Amarillo College Schedule of Classes. If you stop attending class and do not officially drop the course by this deadline, you will receive an F for the course. Attendance in class is regarded as requirement, and obligation for learning. Students will be counseled by the instructor after three (3) absences and warned and after two (2) absences. Four (4) absences in any one semester will be cause for student to be dropped one (1) letter grade.

Being tardy three (3) times will be considered one (1) absence.

It is the responsibility of the student to make up any work missed due to absences and to gain missed lecture notes through outside reading and/or note from classmates. Make up examinations (and other assignments) will be permitted at the discretion of the instructor. The time and place for make-up test will be determined by the instructor.

If you are going to be late or absent, please notify the instructor as soon as possible.

 

Calendar

The week starts on Monday morning at 00:01 and ends Sunday night at 23:59.  Due to brevity of course, there is no grace period for makeup work without prior approval.  Missed deadlines will count as zeros, unless prior approval is obtained or medically excused – must have medical documentation.

 

Spring 2016

ITSY 2330: Intrusion Detection

Week 1 – Starts 19 January 2016 - Chapter 1 – The Need for Security Analysis

               Discussion Questions to be initiated in class, then completed online.

Week 2 - Starts 25 January 2016 - Chapter 2 – TCP/IP Packet Analysis

         *Network Assurance (AWR138) due 31 January 2016 available from https://teex.org/Pages/Class.aspx?course=AWR138&courseTitle=Network+Assurance

Week 3 - Starts 1 February 2016 - Chapter 2 – TCP/IP Packet Analysis (cont.)

Week 4 - Starts 8 February 2016 -  Chapter 3 – Advanced Sniffing techniques

Week 5 - Starts 15 February 2016 - Chapter 4 – Vulnerability with Nessus

*Cyber Incident Analysis and Response (AWR169) due 21 February 2016 available from https://teex.org/Pages/Class.aspx?course=AWR169&courseTitle=Cyber%20Incident%20Analysis%20and%20Response

Week 6  - Starts 22 February 2016 - Chapter 5 – Designing a DMZ

Week 7  - Starts 29 February 2016 - Chapter 7 – Log Analysis

      Scanned notebook to be turned in No Later than 6 march 2016

Week 8 -  Starts 7 March 2016 - Chapter 7 – Log Analysis (cont.)

Material to be covered is subject to change.

The course content builds upon itself, missing classes will place you behind. Please inform me if you know in advance that you will be absent – it is up to you as a student to find out what was missed during previous classes. Much of this class will be team oriented and the final grade/project for the course will be a industry best-practice standardized team developed security program.  Use your time wisely - the online certification course can and must be completed prior to the due dates.  I do not give points, I simply record your efforts.

* Requires registration through FEMA, walking through the registration process begins at http://teex.com/teex.cfm?pageid=training&templateid=14&area=teex&browse=231

Additional Information

Important Dates to Remember

 Spring 2015

   

19 January 2016

Fall Classes Begin

19 January 2016

MLK Holiday – AC closed

24 January 2016

Census Day

11 March 2016

End of Spring I Semester

14 March to 18 March 2016

Spring Break

21 March 2016

Spring Too begins

 

 

   
   

 

 

This course requires work outside of the classroom to complete.  Additional training videos can be watched prior to attending class to improve your concept understanding for the scheduled section.  This helps to lay the foundation for the classroom discussion.  Contact the lab staff for further guidance and video sign-in roster.

Missing scheduled presentation days will automatically result in a zero for the individual absent for that assignment.  Team leaders who miss deadlines will be given a zero for their portion of the assignment (no exceptions), there is no grace for team projects.  Submitted papers will only be accepted through the inclass folder, no submissions to any other email address is allowed.  All documents will be submitted in an unlocked word document using a .doc or docx format. 

Syllabus Created on:

11/30/-1 12:00 AM

Last Edited on:

11/30/-1 12:00 AM