Implementing Linux Operating System Security

Implementing Linux Operating System Security CISS 342 Orientation

Instructor: Buddy Spisak • Office Hours: • Mondays 6:30-7:30 p.m. in BS-143 (Oct. 19th to Dec. 14th, 2009) • I am also available through email, or you can chat with me using Microsoft’s Windows Messenger (when I am available). • Phone: (916) 568-3100 x14162 or (800) 486-8162 x14162 • Email:spisakj@crc.losrios.edu (put “CISS342” in the subject line). The turn around time for most email is about one to two days. Be sure to include your name in each email so that I can identify who you are and what the email is about. • Course Web page:https://d2l.losrios.edu/ • Instructor Web page:http://crc.losrios.edu/~spisakj/ • Microsoft Messenger: You can also add me to you contact list for Windows Messenger. You can use my email address to find me.

Course Details • Class Credits: 3 units • Prerequisite: CISC 323 • Advisory: CISS 310 • Lecture: Online • Lab Hours: • Wednesday 6:00 to 8:05 p.m. • Accepted for Credit: CSU

Required Textbook: Advanced Guide to Linux Networking and Security Authors: Ed Sawicki and Nicholas Wells Publisher: Thomson Course Technology ISBN10: 1-4188-3539-0 ISBN13: 978-1-4188-3539-2

Optional Materials: • 3-1/2” floppies or a flash drive to store your work for the class.

Course Description: • The UNIX family of operating systems is prized by developers and other IT professionals for their flexibility and openness. Vulnerabilities in standard configurations, however, can make UNIX systems susceptible to security threats. For the many organizations that depend upon UNIX systems, protection against intrusion is an absolute requirement. This course provides the knowledge and skills you need to establish security for the Linux platform. It will present in-depth explanations of operating system security features as well as step-by-step configuration guides for proper operating system configuration. This course also will cover the knowledge and skills students will need to maintain the integrity, authenticity, availability and privacy of data.

Student Learning Outcomes and Course Objectives: As a result of completing this course, you will be able to: • Define networking security fundamentals in terms of the Linux operating system. • Demonstrate how to make data secure using a Linux operating system • Identify the tools to configure client services. • Configure simple network services. • Configure file sharing services. • Examine the relationships between major network services. • Understand security, ethics, and privacy issues. • Demonstrate knowledge of user and file security.

Student Obligations: • It is important that you understand what is expected of you in this course. • Refer to the syllabus if you have any questions.

Attendance: • Since this course is an online-hybrid class, attending the on-campus orientation on October 21, 2009 and taking the on-campus final exam on December 16, 2009 are required. There will be weekly lab time on campus, and it is up to you to complete the lab assignments during the lab time or at home. • Doing the labs themselves is not optional, but doing them at the college is. • I will be giving credit for students attending the lab on campus. • Typically each week we will be covering 1-2 chapters in your textbook. • Attendance for the on-campus final exam is required. Photo identification is required at the time of the exam to verify your identity.

Quizzes: • Each week there will be a quiz that will test you on the material covered. • It is open book and open notes. • You can take the quiz multiple times to improve your score, but be aware that the questions may change each time you take quiz and that your last quiz score will be the one counted as your grade. • Each quiz is worth 30 points.

Discussions: • I want everyone to take a pro-active approach to learning this material. This includes using the discussion area of d2l to ask questions and also answer other students’ questions. I will be posting questions to further your understanding of the material. • I expect each student to post at least two times per discussion item. • You can accomplish this task by asking questions about the current discussion topic or by responding to existing questions. • My expectation from you is that you will write at least two- to three-sentence responses that add substance to the discussion. • Each discussion item is worth 20 points.

Labs: • We will be spending a lot of time working on lab activities. Each lab assignment has review questions that you will need to answer in d2l in order for you to receive points for that assignment. • You are responsible for making sure that your instructor receives your lab review. • Each lab assignment is worth 50 points.

Final Exam: • The final exam will consist of two parts. One part will be a hands-on practical demonstration of assigned tasks and the other part will be an exam taken in d2l. • The final exam will be on Wednesday, December 16, 2009. • I will be having a review session the week before to help you.

Due Dates: • Unless noted, all assignments will be submitted in d2l under the “Dropbox” link. • If, for any reason, you cannot access d2l or are unable to submit the assignment on time, please email it to me instead so that you are not penalized for being late. • Quizzes and the discussion items cannot be taken past their due date. • If you miss a quiz and you want to make up points, you can take advantage of the extra credit assignments posted in d2l. • Everyone is welcome to work on the extra credit assignments. Typically, they are five to ten points each, depending on the difficulty of the assignment.

Late Work: • Unless noted all assignments are due on Monday by midnight each week. • I have identified the due dates in the course schedule. • Late work will be accepted ONLY if you have contacted me prior to the due date either by email or voice mail. • In general, late work is due the next week, and no late assignments may be turned in after one week from the original due date regardless of the reason. • For every day an assignment is late, you will lose 10% of its grade.

Plagiarism Policy/Cheating: Plagiarism: • It is inappropriate, and a violation of academic policy, to copy information from any source (including, but not limited to, textbooks, magazine articles, newspaper articles and internet articles) without giving proper credit to the author by using standard quotation procedures such as in-line quotes, footnotes, endnotes, etc. Quotes may not exceed 25% of the assignment’s total length. • You will receive no credit (0 points) for any assignment that copies any material from any other source without giving proper credit to the author(s). Repeated offenders of this policy are subject to academic discipline as outlined in the polices published by the college. Cheating: • Students who cheat will receive a failing grade for the course. (See CRC 2009-2010 College Catalog, p. 34.)

Dropping: • Students are responsible for dropping the course.

Email/Discussion Etiquette: • Every student will be required to have an email account. A free email account is provided to all CRC students (iMail). To activate it, click on the iMail link on the college home page and follow the instructions provided. • I will not tolerate rude and demeaning comments or emails to anyone in this class. Please keep your comments and emails topic-related. • If I determine that a comment or email to anyone else in the class is rude or demeaning, I will warn you once. If your behavior continues to be unacceptable, I will refer you to the administration of the college for disciplinary action.

Personal Belongings: • No food or drinks are allowed in the classroom. • All cell phones, beepers, and pagers, etc. should be turned off or set to vibrate. • Any telephone calls need to be taken outside.

Disabilities: • If you have a documented disability and wish to discuss academic accommodations, please contact me after class or contact the Office of Disable Student Programs and Services at 691-7275 as soon as possible.

Campus Police • You can call 691-7777 to request a safety escort.

Online Course Responsibilities: • This course requires significant self-motivation. You must not get behind. Labs and weekly assignments can take up to eight hours to finish. Please don’t try to finish them in one day. Not all activities are created equal. Some may take a bit longer than others. • You would normally spend 3 hours per week in class for this course: total of 54 hours. Allow yourself at least 8 hours per week to complete the activities online, including the time spent writing for the postings to the class discussion area. You should plan additional time to read the textbook and study for the quizzes. • Some people believe this is a much easier way to study this subject than an on-campus framework because they love to read and avoid the parking problems. Others feel very intimidated at first. Be patient as you work your way through the activities.

Using Desire 2 Learn: • How to log in: • You will not be able to participate in the online portion of your class using Los Rios Online until you have enrolled in your course through your college's registration system. • Students registered as of the first day of the term should already have Los Rios Online accounts and be linked to the classes in which they are enrolled. • To log on to your d2l account, open your web browser and go to the following URL: https://d2l.losrios.edu/ • Your User Name is the letter w followed by your Student ID# Example: w0123456 • Your default password is your e-Services password.

Grading: Point System: There are 750 total assigned points. Grade Ranges: A= 675-750, B=600-674, C=525-599, D=450-524, F=0-449

Sample Schedule:

Conclusion: • Log into Blackboard and take the Orientation Quiz. It is due on Monday, March 31, 2008. • Go to the Orientation Discussion Board and introduce yourself to the class. • Registered students for the class have access to Blackboard and can log into the campus network. • Email any questions you might have to me.

Implementing Linux Operating System Security