Building An Undergraduate Security Curriculum
Taz Daughtrey, Edgar H. Sibley, Anne Marchant · 2020
JMU) in Virginia are collaborating on a project to develop a model for an undergraduate Information Security curriculum to be implemented beginning in the fall of 2004 at both institutions.The curriculum will include coursework in programming, operating systems, and networking as a basis for the major courses in security.Security coursework will include topics such as security technologies, forensics and auditing, network security and intrusion detection, risk management, security policy, modeling and authentication.Throughout the curriculum, modules in ethics and social responsibility will be woven into the coursework.A capstone course including cyberdefense exercises, such as those performed at the US Military Academy at West Point and the George Washington University in DC will be employed to challenge and motivate students.The cyberdefense exercises will also serve as a tool to assess the effectiveness of the curriculum.GMU is currently developing the curriculum as part of its BS in IT degree and JMU is integrating it into their BS in CS program.The goal of these joint endeavors is to develop a set of courses that will produce students qualified to perform security engineering roles and to prepare them for graduate coursework in Information Security Assurance.By combining the assets of faculty and students at two state institutions in parallel efforts, resources can be used to best advantage.Not only is duplication of effort avoided, but also the final curriculum will benefit from the cross-pollination of ideas and best practices.By starting with graduate level prototypes for teaching Security and then implementing these prototypes into both traditional CS and interdisciplinary IT undergraduate streams, we abstract a curriculum that can be replicated to meet the needs of programs nationwide as one strategy to help improve our nation's overall information security defense.