Hands-On Information Security Lab Manual

Hands-On Information Security Lab Manual provides instructors with detailed, hands-on exercises in information security management and practice. This lab text addresses the need for a quality, general-purpose, laboratory-exercises manual in information security. This text allows the students to see firsthand the challenges of securing and managing information networks. The manual has both simple introductory exercises, to technical, information-security specific exercises. Technical exercises are designed with great consideration to the fine line between information security professional and hacker. The manual also includes several minicase and full-case exercises, providing students with sample analysis outlines and criteria for evaluation. The minicases are vignettes outlining issues (like the use of ant virus software in their lab); are short-term projects by design, for individual or group use; and provide feedback for in-class discussion. The full-scale cases are suitable for a semester-long analysis of a presented organization, of varying scope and size by student teams. The text also addresses other security and network issues information-security professionals encounter.

About the Author :
Michael Whitman, Ph.D., CISM, CISSP, is Professor of Information Security at Kennesaw State University, Kennesaw, Georgia. He also serves as the Executive Director of the Center for Information Security Education, Coles College of Business. In 2004, 2007, 2012 and 2015, under his direction the Center for Information Security Education spearheaded KSU's successful bid for the prestigious National Center of Academic Excellence recognitions (CAE/IAE and CAE IA/CDE), awarded jointly by the Department of Homeland Security and the National Security Agency. Dr. Whitman is also the Editor-in-Chief of the Journal of Cybersecurity Education, Research and Practice, and is Director of the Southeast Collegiate Cyber Defense Competition. Dr. Whitman is an active researcher and author in Information Security Policy, Threats, Curriculum Development, and Ethical Computing. He currently teaches graduate and undergraduate courses in Information Security. Dr. Whitman has several information security textbooks currently in print, including PRINCIPLES OF INFORMATION SECURITY; MANAGEMENT OF INFORMATION SECURITY; READINGS AND CASES IN THE MANAGEMENT OF INFORMATION SECURITY, VOLUMES I AND II; THE HANDS-ON INFORMATION SECURITY LAB MANUAL; PRINCIPLES OF INCIDENT RESPONSE AND DISASTER RECOVERY; and THE GUIDE TO NETWORK SECURITY AND THE GUIDE TO FIREWALLS AND NETWORK SECURITY. He has published articles in Information Systems Research, the Communications of the ACM, the Journal of International Business Studies, Information and Management, and the Journal of Computer Information Systems. Dr. Whitman is a member of the Association for Computing Machinery, the Information Systems Security Association, ISACA and the Association for Information Systems. Previously, Dr. Whitman served the U.S. Army as an Automated Data Processing System Security Officer (ADPSSO). Dave M. Shackleford has been involved in Information Technology, particularly the arenas of networking and security, for more than 8 years. He is currently the owner of B3 Enterprises, an IT consulting firm based in Atlanta, Georgia, that specializes in networking and information security for small and medium-sized businesses. He is also employed by TRW Systems as a consultant to a large Federal agency, and has previously worked for several small firms as well as a Fortune 100 company with one of the most advanced Information Security divisions in the world. Dave currently holds degrees in both Psychology and Information Systems, and is working to complete an MBA.