BCA Semester VI - Information Security

UNIT-I Introduction:

 History, Critical characteristics of information, NSTISSC security model, Components 

of an information system, Securing the components, Balancing security and access, The SDLC, The 

security SDLC. Need for Security: Business needs, Threats, Attacks- secure software development. 

UNIT-II Legal, Ethical and professional Issues:  

Law and ethics in information security, Relevant U.S 

laws international laws and legal bodies, Ethics and information security.

Risk Management: Overview, Risk identification, Risk assessment, Risk control strategies, selecting 

a risk control strategy, Quantities versus qualitative risk control practices, Risk management 

discussion points, Recommended risk control practices.

UNIT-III Planning for Security:  

Security policy, Standards and practices, Security blue print, Security 

education, Continuity strategies. Security Technology Firewalls and VPNs: Physicaldesign, 

Firewalls, Protecting remote connections

UNIT-IV

Security Technology: Intrusion detection, access control and other security tolls: Intrusion detection 

and prevention systems, Scanning and analysis tools, Access control devices.

Cryptography: Foundations of cryptology, Cipher methods, Cryptographic Algorithms, 

Cryptographic tools, Protocols for secure communications, Attacks on cryptosystems. 

UNIT- IV Implementing Information Security: 

Information security project management, Technical topics of 

implementation, Non technical aspects of implementation, Security certification and accreditation. 

Security and Personnel: Positioning and staffing security function, Employment policies and 

practices, Internal control strategies. Information security maintenance : Security management 

models, The maintenance model, Digital forensics