CIS 412 - Database Security and Audit

5 Credits

Data breaches are a common occurrence in today’s society. This course builds on the foundational knowledge from CIS 310 and the big data analytics course CIS 389. Students address design issues, along with user interface vulnerabilities and how these can be avoided, mitigated or detected. Learning modules will address web interfaces, cloud services and mobile application database vulnerabilities. Students will use tools to perform database audits and create policies and procedures to augment the same. The audits taught in this course pertain to both the database and operating system levels. Students also learn the challenges of big data security issues. Hands-on projects will take place in physical, virtual and cloud environments.

Pre-requisite(s) CIS 310 min 2.0 and CIS 389 min 2.0
Program Admission Required Yes Admitted Program BAS - CIS
FeesCF

Quarters Typically Offered
Fall Evening
Winter Evening
Designed to Serve For students admitted to the BAS program in CyberSecurity and Forensics.
Active Date 20200330T21:14:48

Grading System Decimal Grade
Class Limit 24
Contact Hours: Lecture 44 Lab 22
Total Contact Hours 66
Degree Distributions:
ProfTech Course Yes
Restricted Elective Yes
Course Outline

Define database audit
- Its use and purpose
- How to plan, implement and report on an audit
R, Python and RPY2
- Install
- Under basic constructs of languages
- How they work with big data
Install and harden SQL Server
- Plan audit
- Implement audit
- Audit report
Install and harden MySQL
- Plan audit
- Implement audit
- Audit report
Install Hadoop or Oracle
Review Statistical and Big Data Analysis
- Use in the security arena
- How to use in an audit
Traffic, load balancing, and nodes
User interface and design issues
Mobile applications and their impact
Cloud deployment of databases and security issues
- SQL server
- MySQL
- Hadoop or other
Creating policies and procedures for security audits
- Standard databases
- Hadoop and Big data
- Network and OS implications
Future issues

Student Learning Outcomes
Explain how to implement a database audit.

Perform an audit of a SQL Server installation utilizing proper procedures on items found.

Perform an audit of a MySQL Server installation utilizing proper procedures on items found.

Install MySQL and / or SQL Server in a Public Cloud.

Create policies and procedures for conducting a database security audit in any environment.

Explain how and when to use Statistical and Big Data Analysis in the security arena to determine actions to be taken.

Install and test a small Hadoop cluster.

Demonstrate traffic monitoring, load balancing and monitoring of nodes in a standard DB and big data installation.