Academics
Dr. Michael E. Whitman

  

 

This page provides information about the various courses I teach, as well as links to the supporting course materials. While I do not restrict access to these materials, please be aware that many of these materials are copyrighted, by various publishers, or myself, and distribution and use is restricted. Please contact me if you have any additional questions.

Overview of Courses I teach:

  • ISA 3100. Principles of Information Security and Assurance.
    Prerequisite: CSIS 2300 or permission of the department.An introduction to the various technical and administrative aspects of Information Security and Assurance. This course provides the foundation for understanding the key issues associated with protecting information assets, determining the levels of protection and response to security incidents, and designing a consistent, reasonable information security system, with appropriate intrusion detection and reporting features.
  • ISA 3200. Applications in Information Security and Assurance.
    Prerequisite: ISA 3100 or permission of the department.Detailed examinations of the tools, techniques and technologies used in the technical securing of information assets. This course is designed to provide in-depth information on the software and hardware components of Information Security and Assurance. Topics covered include: firewall configurations, hardening Unix and NT servers, Web and distributed systems security, and specific implementation of security models and architectures.
  • ISA 3300. Policy & Administration in Information Security and Assurance.
    Prerequisite: ISA 3100 or permission of the department.Detailed examinations of a systems-wide perspective of information security, beginning with a strategic planning process for security. Includes an examination of the policies, procedures and staffing functions necessary to organize and administrate ongoing security functions in the organization. Subjects include security practices, security architecture and models, continuity planning and disaster recovery planning.
  • ISA 4350. Computer Forensics.
    Prerequisite:ISA 4210.This course focuses on the detection, isolation and response to security breaches and attacks. It provides a detailed examination of the entire computer forensic process and presents specific procedures required to respond to a computer crime incident. Subjects include recognizing unauthorized access, identifying file anomalies, and traffic monitoring.
  • ISA 4330. Incident Response and Contingency Planning
    Prerequisite: ISA 3200 AND ISA 3300. An examination of the detailed aspects of incident response and contingency planning consisting of incident response planning, disaster recovery planning, and business continuity planning.  Developing and executing plans to deal with incidents in the organization is a critical function in information security.  This course focuses on the planning processes for all three areas of contingency planning – incident response, disaster recovery and business continuity, and the execution of response to human and non-human incidents in compliance with these policies.
  • IS 8040 Data Communication Theory and Practice.
    Prerequisite: Admission to the MSIS program or permission of the graduate program director. Overview of the principles of data communication including protocols, communication software, switching, networks design and management practices, and network implementation projects.
  • IS 8070. Legal and Ethical Issues in Information Systems.
    Prerequisite: MSIS 8005.This course is a case-based survey of contemporary legal and ethical issues faced by IS professionals. Topics include a review of applicable statutes and regulations that impact the IS organization. Students will conduct on-line research and explore ethical issues at the leading edge of the organization's technology frontiers.
  • IS 8110 Information Security Administration.
    Prerequisite: Admission to the MSIS program or permission of the graduate program director.Examination of current Standards of Due Care and Best Business Practices in Information Security. Includes examination of security technologies, methodologies and practices. Focus is on evaluation and selection of optimal security posture. Topics include evaluation of security models, risk assessment, threat analysis, organizational technology evaluation, security implementation, disaster recovery planning and security policy formulation and implementation.
  • IS 8112 Information Security Technologies.
    Prerequisite: IS 8040. Detailed examinations of the application of technical controls to protect the confidentiality, integrity and availability of information and information assets. Includes tools, techniques and technologies in the protection of information from internal and external threats. Topics covered include: firewall configurations, hardening operating systems, intrusion detection systems and virtual private networks.

FOR INFORMATION ON IMPORTANT SECURITY LINKS CLICK HERE

I also sponsor and conduct internships, cooperative studies, directed studies and special projects at the graduate and undergraduate level.