ENTERPRISE INFORMATION SECURITY: THREATS

Competition, espionage, theft, sabotage, and warfare, traditionally carried out “in the field” have erupted online. State-sponsored cyber-attacks target critical infrastructure, financial systems, government agencies, political adversaries, retail, and consumer databases, and the intellectual property of technology firms. This course covers the defensive techniques that address perimeter and data security. Business model relationships to security architecture are examined, in particular managing vulnerability introduced through mergers and acquisitions, and Active Directory migrations. Service and Administrative account management and other aspects of network design will be analyzed. Students will investigate recent newsworthy cases and devise countermeasures aimed at both incident prevention and effective CIRT (Cyber Incident Response) management.