Regional Information Systems Security Center: A consortium for security education, training and services

区域信息系统安全中心：安全教育、培训和服务联盟

• 批准号: 0302942
• 负责人: John Blyzka
• 金额: --
• 依托单位: Mount San Antonio College
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2003
• 资助国家: 美国
• 起止时间: 2003-07-01 至 2007-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0302942&HistoricalAwards=false
• 关键词: Regional; Information; Systems; Security; Center

This project cuts across disciplines in computer science, computer information system, networking technology, and criminal justice. This multi-disciplinary approach to information system security requires understanding, cooperation, and collaboration of faculty from these fields which itself is a significant intellectual challenge. The project partners are using a Common Body of Knowledge (CBK), which is a recognized international standard for practitioners of Information System Security (ISS). The CBK identifies ISS domains as defined by experts from major IS industries. These domains are being used to build a matrix of existing courses that have a security component for possible inclusion into certificate programs, Associate, Bachelor and even Master Degrees. This analysis includes the identification of possible gaps among the schools ISS curriculum. A result of this effort is curriculum development involving upgrading of existing courses and development of new courses in the following CBK domains on each campus: Access Control Systems and Methodology; Applications and Systems Development Security; Business Continuity and Disaster Recovery Planning; Cryptography; Cyberlaw, Investigations and Ethics; Operations Security; Security Architecture and Models; Telecommunications and Network Security.

该项目跨越计算机科学，计算机信息系统，网络技术和刑事司法等学科。这种多学科的信息系统安全方法需要理解，合作和教师从这些领域的合作，这本身就是一个重大的智力挑战。项目合作伙伴正在使用一个共同的知识体系（CBK），这是一个公认的国际标准，为从业人员的信息系统安全（ISS）。CBK确定了主要基础设施服务行业专家定义的基础设施服务领域。 这些域被用于构建现有课程的矩阵，这些课程具有安全组件，可以包含在证书课程，副学士，学士甚至硕士学位中。这项分析包括查明学校基础设施服务课程中可能存在的差距。这一努力的结果是课程开发，涉及每个校区以下CBK领域的现有课程升级和新课程开发：访问控制系统和方法;应用程序和系统开发安全;业务连续性和灾难恢复规划;密码学;网络法，调查和道德;运营安全;安全架构和模型;电信和网络安全。