Class Hours and Location: Tuesday
Instructor: Zach Tudor
Office: TBD
Email: ztudor at gmu dot edu (please prefix the subject of your message
with ISA 774)
Course Office Hours: By appointment; e-mail anytime encouraged
Teaching Assistant: Ram Krishnan
Office hours: TBD
Email address: rkrishna at gmu dot edu
DESCRIPTION (from the catalog):
The study of methodologies, techniques and tools for the monitoring of events in a computer system or a network, with the objective of preventing and detecting unwanted process activity and of recovering from malicious behavior. Topics include: types of threats, host-based and network-based information sources, vulnerability analysis, denial of service, deploying and managing intrusion detection systems, passive vs. active responses, designing recovery solutions.
COURSE PREREQUISITES:
ISA 662 and ISA 666, or permission by instructor
Must be internet, web and pdf (get Acrobat Reader here) capable.
GRADING POLICY:
· Grades will be based on Homework Assignments (20%), Exams (2) (20% each), Class Discussion Participation (10%), and Term Paper/Presentation (30%). (Subject to modification)
· The final grade is computed according to the following rules:
· A+: >=95%; A: [90%, 95%); A-: [85%, 90%);
· B+: [80%, 85%); B: [75%, 80%); B-: [70%, 75%);
· C+: [66%, 70%); C: [63%, 66%); C-: [60%, 63%);
· D+: [56%, 60%); D: [53%, 56%); D-: [50%, 53%);
· F: < 50%.
RESOURCES:
· Intrusion Detection by Rebecca Bace, Macmillan Technical Publishing, 2000
· Refer to Dr. Wang’s Reading List for other potential sources (click to see)
·
Other references will be identified during the
class, and may be used for assignments and projects.
The slides posted also include material by Dr X. Wang (George Mason U.). Other significant material use will be acknowledged.
Copies of the lectures slides and the Homework assignments will be provided as the course progresses.
The homework assignments are tentatively due on Mar 7 and April 18. Term paper is due no later than May 2.
SCHEDULE (UPDATED 5/5/2006):
|
Date |
Topics |
Reading Assignment |
Homework Assignment |
Handout |
|
Jan 24 |
Administrivia, Introduction |
|
|
|
|
Jan 31 |
The
History of Intrusion Detection Concepts
and Definitions |
Bace, Chapter 1 & 2 |
|
|
|
Feb 7 |
Information
Sources |
Bace, Chapter 3 |
|
|
|
Feb 14 |
Analysis
Schemes I |
Bace, Chapter 4 |
|
|
|
Feb 21 |
Analysis
Schemes II |
|
|
|
|
Feb 28 |
Responses
|
Bace, Chapter 5 |
|
|
|
Mar 7 |
Vulnerability
Analysis |
Bace, Chapter 6 |
HW 1 Due |
|
|
Mar 14 |
Spring Break |
|||
|
Mar 21 |
Midterm Exam |
|
|
|
|
Mar 28 |
Technical
Issues |
Bace, Chapter 7 |
|
|
|
Apr 4 |
No
Class |
|
|
|
|
Apr 11 |
Understanding
the Real World Challenge |
Bace, Chapter 8 & 9 |
|
|
|
Apr 18 |
Legal
Issues Evaluating
Intrusion Detection Systems |
Bace, Chapter 9 |
|
|
|
Apr 25 |
IDS
Considerations Mobile Network
IDS |
Bace, Chapter 10, 11, 12 |
HW 2 Due |
|
|
May 2 |
Review
for Final |
Bace, Chapter 13 |
Term Paper Due |
|
|
May 9 |
Final Exam |
|
|
|
IMPORTANT DATES:
First Day of this Class January 24, 2005.
Last
day to drop
Assignment
1
Spring
Break
Midterm
Assignment 2 April 25, 2005
Last
Day of this
Class
Final
Exam
Last updated: May 5, 2006.