Information system security curricula development

ABSTRACT

In this paper, we survey current literature concerning Information Systems Security Training and Education. This paper also describes current Information System Security Training and Education dynamics. Finally, this paper presents a graduate level information system security specialization that was developed using this information.

REFERENCES

• 1: Matt Bishop, Teaching Computer Security, Proceedings of the IFIP TC11, Ninth International Conference on Information Security: Computer Security, p.65-74, May 12-14, 1993
• 2: Bishop, M., "Computer Security Education: Training, Scholarship, and Research," IEEE Computer 35 (4) Privacy and Security Supplement pp. 30--32 (Apr. 2002).
• 3: Bishop, M., "What Do We Mean By 'Computer Security Education'?," Proceedings of the 22nd National Information Systems Security Conference p. 604 (Oct. 1999).
• 4: Bishop, M., "Academia and Education in Information Security: Four Years Later," Fourth National Colloquium on Information System Security Education (May 2000).
• 5: D. L. Brinkley and Schell, R. R., Concepts and Terminology for Computer Security, in Information Security: An Integrated Collection of Essays, ed. Abrams and Jajodia and Podell, IEEE Computer Society Press, Los Alamitos, CA, 1995, pp. 40--97.
• 6: Chin, S.-K., Irvine, C. E., and Frinke, D., "An Information Security Education Initiative for Engineering and Computer Science," Technical Report NPSCS-97-003 ,Naval Postgraduate School, Monterey, CA, December 1997.
• 7: Dark, M., and Davis, J., "Report on Information Assurance Curriculum Development", June 2002.
• 8: Davis, J. and Dark, M., "Defining a curriculum framework in Information Assurance and Security", 2003 ASEE Annual Conference, Nashville, TN, June 2003.
• 9: Davis, J., "Building an IA Program: A Few First Steps," NCISSE Boot Camp, June 2002.
• 10: Fundaburk, A. (in review) Assessing the Need for Teaching Information Security in an Office Information Systems Curriculum. Information Technology, Learning, and Performance Journal.
• 11: Irvine, C.E., Warren, D. F., and Clark, P. C. The NPS CISR Graduate Program in INFOSEC: Six Years of Experience. In Proceedings of the 20thNational InformationSystems Security Conference, pp. 22--30, Baltimore, MD, October 1997.
• 12: Laswell, B., Simmel, D., and Behrens, S. "Information Assurance Curriculum and Certification: State of the Practice," CMU/SEI-99-TR-021, Software Engineering Institute, Carnegie Mellon, Pittsburg, PA, Sept. 1999.
• 13: Maconachy, V., Schou, C., Ragsdale, D., and Welch. D., "A Model for Information Assurance: an Integrated Approach," Proceedings of the 2001 IEEE Workshop on Information Assurance and Security, (West Point, NY), 2001.
• 14: NSTISSI, "No. 4011 - National Training Standard for Information Systems Security (INFOSEC) Professionals," 1994.
• 15: Spaford, E., "Teaching the Big Picture of InfoSec," National Colloquium For Informationsystems Security Education (NCISSE), VA. 1998.
• 16: Vaughn R., "Ware to Start?," National Colloquium For Informationsystems Security Education (NCISSE), 2001.
• 17: Rayford B. Vaughn, Jr. , Ronda Henning , Kevin Fox, An empirical study of industrial security-engineering practices, Journal of Systems and Software, v.61 n.3, p.225-232, April 2002 [doi>10.1016/S0164-1212(01)00150-9]
• 18: Wilson, Mark, ed. Information Technology Security Training Requirements: A Role- and Performance-Based Model, NIST Special Publication 800-16, National Institute of Standards and Technology, U.S. Department of Commerce, 1998.
• 19: Yasinsac, A. Information Security Curricula in Computer Science Departments: Theory and Practice. Manuscript, 2001.
• 20: Yurcik, W. and Doss, D., "Different Approaches in the Teaching of Information Systems Security," Information Systems Education Conference (ISECON), Cincinnati, OH, 2001.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education
          Subjects: Information systems education

General Terms:
Security

Keywords:
information technology curricula, information technology security