Information Security

Understanding risk and identifying the threats organizations face are essential skills for today's information security professionals. In this course that introduces students to the graduate degree program, students learn to compute impact scores for vulnerabilities, classify data, and use Champlain College Online's virtual environment to explore how to use IOCs (Indicators of Compromise).

Security controls are used to maintain confidentiality, integrity and availability of systems and typically enterprise architectures are built using frameworks. Students move beyond defense in depth and breadth strategies and "learn by doing" in this course, working in the virtual environment with tools like Nmap, Open-AduIT, Splunk, and more.

Hands-on labs and assignments using Kali Linux, Metasploitable, Nessus and Armitage build on previously acquired knowledge of threat and vulnerability classification in this course that allows students to use the knowledge of a vulnerability to perform threat analysis. Vulnerability and patch management processes are also addressed.

It's not a question of if an incident will take place, but when. Organizations must assume they will suffer a breach, data loss or other security event that will impact operations. Students learn to prioritize events, develop and document an incident response plan, and identify the role of forensic investigations in incident response as well as use tools to perform USB and memory forensics exercises.

Game theory provides a framework for understanding complicated problems and predicting outcomes. In this course, students evaluate security threats and vulnerabilities using game theory principles. Discussions, quizzes and assignments introduce students to concepts and strategies like Nash Equilibrium and strict dominance.

Scripting languages like Python can help security professionals extend available tools but also create new tools to address specific needs. Extensive labs in this course have students attacking MD5 hashes, web scraping, parsing security logs and breaking a cipher.

An excellent primer for the capstone, this course is jam-packed with hands-on activities! Students use the virtual environment to test open source software, compare Nmap, netcat and Angry IP Scanner, test WordPress vulnerability scanners, and experiment with Armitage attacks on Metasploitable. Also, students learn to document findings with reporting tools in Kali Linux and even write a test plan.

This exciting capstone class is where students get to "talk the talk and walk the walk" of information security professionals. Broken into two virtual teams that must defend and attack multiple devices on two networks, students spend three weeks working in a virtual environment. They must configure firewalls, patch systems, maintain services and exploit vulnerabilities in an attempt to gain access and then persistence. Opportunities to reflect and assess performance are also part of the WarGames Capstone experience.

Students will gain an understanding and respect for emerging technology by exploring current trends in security and examining topics such as artificial intelligence, machine learning, blockchain and behavior analytics. Students will analyze the science behind these technologies as well as the ethical and privacy concerns and implications that may hinder their widespread adoption.

Students will learn to differentiate privacy from security and how international, federal and state regulations impact organizations and govern the security of information systems and data. They will also identify security standards, survey compliance frameworks, measure return on security investment and assess the effectiveness of a security awareness program.

Are you ready for a challenge? This course teaches students to evaluate malware samples to determine their infection vector, identify strategies used by malware to remain present on systems, and recommend solutions to prevent and detect malware attacks. Students work with malware samples throughout the course on virtual machines. Use caution!

Today's adversaries are organized and well-funded which is why security professionals must understand their tactics and targets. Students in this course learn to distinguish cyberwarfare from cybercrime, and the differences between nation-states and APTs (Advanced Persistent Threats). The methods may differ but the target stays the same, especially when social engineering is involved.

This course is designed to introduce a systematic process for planning, organizing and controlling projects. The course will present a practical methodology for completing projects more quickly with fewer problems. Student work will consist of readings, research, class special-topic presentations, group activities, a project management journal, and participation in a real world IT business project. Students will be encouraged to apply project-management techniques to solve existing real-world technology-related business problems.

Self-leadership is defined by a developed sense of who you are, what you can do, and where you are going, coupled with the ability to affect your behavior and emotions and to communicate effectively through the process. Students will develop a sense of self-awareness to include the values and habits of mind that drive one's practie as an innovative and creative leader, in a global and diverse workplace.

This course provides the framework for understanding the dynamics of human interaction within an organizational context. It is built from the perspective that a key function of management is to negotiate for resources and build collaborative relationships with employees, vendors, suppliers and distributors.

Students will learn to differentiate privacy from security and how international, federal and state regulations impact organizations and govern the security of information systems and data. They will also identify security standards, survey compliance frameworks, measure return on security investment and assess the effectiveness of a security awareness program.

Students will demonstrate advanced understanding of information security concepts, including the ability to assess risk, classify vulnerabilities and threats, and respond/recover to/from security incidents. They will be expected to utilize appropriate written and oral communication skills to showcase their ability to analyze security strategies within organizations, and manage/lead compliance and awareness efforts. Successful completion of a Capstone Project is required.

Students will gain an understanding and respect for emerging technology by exploring current trends in security and examining topics such as artificial intelligence, machine learning, blockchain and behavior analytics. Students will analyze the science behind these technologies as well as the ethical and privacy concerns and implications that may hinder their widespread adoption.

Today's adversaries are organized and well-funded which is why security professionals must understand their tactics and targets. Students in this course learn to distinguish cyberwarfare from cybercrime, and the differences between nation-states and APTs (Advanced Persistent Threats). The methods may differ but the target stays the same, especially when social engineering is involved.