CIS 193AB, UNIX/Linux Security Administration

Course Policy

This course is designed as two 8-week courses run back-to-back. The first 8 weeks covers securing a host system, whether it be a server or a workstation. The second 8-weeks will cover the network security in a LAN environment.

My goal is to provide a supportive learning environment for all interested students to explore and deepen their thinking about security risks in today's computing environments. We will assess the inherent vulnerabilities of systems and explore a variety of safeguards that can be applied to reduce the associated risks. You need the knowledge and experience obtained from CIS 90 to keep up in this class, e.g. familiarity with the shell, file management, and basic commands. You should also have some experience with administering a UNIX/Linux machine and be familiar with the "root" account. In the second half of the course, a grasp of the fundamentals of networking including the OSI model and associated technologies is important.

This is a "hands-on" course designed to give you skills in configuring and operating a wide range of security software both at the operating system level as well as the application level. The more time you can spend with the software, the better you will develop those skills, which are in high demand by todays IT employers. To work effectively in the classroom, you will need to practice the various skills we learn in a lab environment such as is provided in room 2504.

You'll notice that room 2501 has one computer per student, and is shared with other instructors teaching a variety of classes. To accommodate such a variety, we will be using virtual Linux machines in this class running in the VMware environment. Each of you will be responsible for your own virtual system(s). Some of the work we do will be on a common classroom network, and some will be done on virtual networks isolated from the other students in the class. I will do what I can to keep the room comfortable temperature wise and with minimal distractions. Towards that end, you can help me by turning off your pagers and cell phones when you enter the classroom and by not surfing the web or reading email from your workstation which may distract students sitting next to or near you.

Most of the course materials (including this syllabus) are located on my website. You are responsible for reviewing these documents as necessary throughout the semester.

Textbook Information

Required Textbook:

Linux Administration Handbook, 2nd edition by Evi Nemeth et. al.
This book is available at the college bookstore as well as from various websites
ISBN: 0-131-48004-9

Recommended Textbook:

Practical Unix & Internet Security, 3rd edition, by Simson Garfinkel et. al.
It is published by O'Reilly and has an ISBN number of 0-596-00323-4.
 

Recommended Textbook:

Hacking Linux Exposed, 2nd edition by Brian Hatch and James Lee
It is published by McGraw Hill and has an ISBN number of 9-780-07222564-8.
 

Recommended Textbook:

Linux Security Cookbook, by Daniel Barrrett et. al.
It is published by O'Reilly and has an ISBN number of 0-596-00391-9.
 

Grading Policy

Grades will be based on a combination of factors including attendance, classroom exercises, and exams. Each of the 2 unit A/B courses will be evaluated based upon your ability to demonstrate the skills taught in the course and outlined in the Student Learner Outcomes.
Exercises

The second half of each class will be devoted to classroom exercises that in involve installing security software and configuring it for attack and defense scenarios.

Journal/Log

You will keep a journal/log of the work you do in class. The journal aspect of this document will contain notes that you take in class as well as from the reading assignments. The log will be a record of all the changes you make to the computer systems to which you will be assigned. This log will document the successful completion of the inclass exercises that we do.

Final

The final exam will be comprehensive. It will test your knowledge and your ability to demonstrate what you have learned in the class.

The Credit / No Credit Option
By default you will get a letter grade (A, B, C, D, or F) for this class. However, you may choose to take the class for Credit / No Credit instead. If you take this class with the Credit / No Credit option, to receive a Credit you must complete this class with an average of 70% or more. A No Credit grade is not included on transcripts and is not factored into determining a student's GPA.

Missing Classes
From page 28 of the Cabrillo Catalog:

Absence from class in excess of two weeks will constitute reason for an instructor to withdraw a student from a full-term course. It is the student's responsibility to officially withdraw from classes.

Make a commitment to yourself to attend every class. The worst thing about missing a class is falling behind because you missed a week's worth of material. Missing class is not an acceptable excuse for missing any lecture material or assignments given during that time. Any work missed, must be made up on your time and within one week from the day that you missed. If you know you will be missing more than one class, I suggest you take the course for Credit/NoCredit. If you miss more than two classes, I will drop you from the course enrollment unless prior arrangements have been made and agreed to.

Help

We all have different study habits. Let me know if there is something I can do regarding the organization of this course that would help you learn the material better.
Please don't hesitate to see me if you need some help, have some questions, or just want to talk. You can speak with me after class or during my office hours. If you can't come during my scheduled hours I am happy to try to arrange another time for us to meet. You can call me at any time, my number is 477-3539. If I am not in, please leave a message letting me know what are the best times to call you back.

I encourage students with disabilities, including "invisible" disabilities such as chronic diseases, learning, and psychological disabilities, to explain their needs and appropriate accommodations to me during my office hours. Please bring a verification of your disability from the Learning Skills or DSP&S offices and a counselor or specialist's recommendations for accommodating your needs.
 

Other Places for Help

The Writing Center
A student who needs assistance in solving specific writing problems may drop in to receive individual help. Students should bring the paper or assignment with them. Interested persons may receive more information at the center, building 1000 (enter on opposite side of library), or by calling 479-6319.

Tutorial Center
The Tutorial Program offers individual and group assistance to students served by EOPS, Disabled Students Program and Services (DSPS), Migrant Education Teacher Preparation Program (METPP) or who are enrolled in certain vocational majors and have academic disadvantages. Interested persons may receive more information at the center, building 1000 (enter on opposite side of library), or by calling 479-6470 or 479-6126.

Disabled Students Program and Services
The Disabled Students Program and Services (DSPS) offers a variety of services to enable students with disabilities to function independently in the educational environment. The objective of DSPS services is integrate students with disabilities into general campus programs and activities. Interested persons may receive more information at the center, room 800, or by calling 479-6379 or 479-6370.

Learning Skills Program
The Learning Skills Program is designed to serve students with specific learning disabilities. After an initial interview, individual diagnostic testing is conducted to determine if the student is considered appropriate for this program. Interested persons may receive more information by calling 479-6220 or 479-6224.

Counseling
Counselors are committed to providing students with up-to-date information and informed advice regarding their educational and career goals. For more information or to set up an appointment, call 479-6274.