This course focuses on practical applications of Information Assurance (IA) and cybersecurity policies and technologies in enterprise network environments. The course is designed around virtual lab environments and exercise scenarios that provide for robust and realistic hands-on experiences within a broad range of IA topic areas. Students are provided numerous practical opportunities to apply cybersecurity best practices to solve real-world IA problems.

Syllabus

https://www.andrew.cmu.edu/course/14-761/S21_AIA_Syllabus.pdf

Class format

Lecture and project-based

Home department

INI

Target audience

INI students 

Background required

None

Learning objectives

At the end of the course, students should be able to:

• Define Defense-in Depth as it applies to Information Assurance
• List and describe nine Foundations of Information Assurance
• Identify and execute common threats to IT Enterprises
• List common host security best practices and implement controls
• List common network security best practices and implement controls
• Identify common network monitoring best practices, implement same on IT networks, and analyze collected data for anomalous behavior
• Compare common cryptosystems, implement and evaluate data encryption/integrity approaches on IT systems and networks
• Recognize and describe technical benefits and challenges encryption has on information assurance and cyber forensics
• Describe the incident response process and apply process during live and simulated cyber security events
• Correctly use common incident response tools to identify, collect and analyze data in search of malicious activities on IT networks
• Describe the digital forensic process and apply this during live and simulated cyber investigations
• Correctly use common digital forensics tools to acquire and analyze forensic evidence

Faculty and instructors who have taught this course in the past

Matthew Kaar, Christopher Herr