Syllabus for CYB-420

CRITICAL INFRASTRUCTURE SECURITY

COURSE DESCRIPTION

Critical Infrastructure Security studies important cybersecurity principles and tools related to critical infrastructure. The course investigates and applies digital security frameworks to various types of utility networks and systems such as information technology (IT), industrial control systems (ICSs), supervisory control and data acquisition (SCADA) systems, grids, and distributed networks.

COURSE TOPICS

Definition and history of industrial control systems (ICSs) and supervisory control and data acquisition (SCADA) systems

Practical steps to protect ICSs and SCADA systems

Policy, procedures, and frameworks related to ICSs and SCADA systems

Threat actors specific to ICSs and SCADA systems

Practical application of security to ICS/SCADA

User authentication and authorization

Detecting cyberattacks on SCADA systems

Vulnerability assessment

COURSE OBJECTIVES

After completing this course, you should be able to:

CO1 Study the use and application of programmable logic controllers in automation.

CO2 Examine the components and applications of industrial control systems.

CO3 Compare various control schemes and their differences.

CO4 Evaluate and implement security functionality across an industrial network.

CO5 Analyze and interpret vulnerabilities associated with industrial control systems.

CO6 Scrutinize, discriminate, and recommend the best practices for different industrial control systems.

CO7 Critique industrial control system policies.

CO8 Formulate and hypothesize about the most credible threats to industrial control systems.

COURSE MATERIALS

You will need the following materials to complete your coursework. Some course materials may be free, open source, or available from other providers. You can access free or open-source materials by clicking the links provided below or in the module details documents. To purchase course materials, please visit the University's textbook supplier.

Required Textbook

Knapp, E. D., & Langill, J. T. (2015). Industrial network security: Securing critical infrastructure networks for smart grid, SCADA, and other industrial control systems (2nd ed.). Waltham, MA: Elsevier, Inc.

ISBN-13: 978-0124201149

COURSE STRUCTURE

Critical Infrastructure Security is a three-credit, online course consisting of six modules. Modules include an overview, topics, learning objectives, study materials, and activities. Module titles are listed below.

Module 1: History of ICSs and SCADA Systems
Course objectives covered in this module: CO1, CO2, CO3
Module 2: Policy, Procedures, and Standards Related to ICSs and SCADA Systems
Course objectives covered in this module: CO4, CO6, CO7
Module 3: Practical Steps to Protect ICSs and SCADA Systems
Course objectives covered in this module: CO5, CO8
Module 4: SCADA System/ICS Components
Course objective covered in this module: CO2
Module 5: Threat Actors
Course objective covered in this module: CO5
Module 6: Practical Application of Security to ICSs and SCADA Systems
Course objective covered in this module: CO5

ASSESSMENT METHODS

For your formal work in the course, you are required to participate in online discussion forums, complete written assignments, and complete a final project. See below for details.

Consult the Course Calendar for due dates.

Promoting Originality

One or more of your course activities may utilize a tool designed to promote original work and evaluate your submissions for plagiarism. More information about this tool is available in this document.

Discussion Forums

You are required to participate in seven discussion forums. Communication with your mentor and among fellow students is a critical component of online learning. Participation in online class discussions involves two distinct activities: an initial response to a discussion question and at least two subsequent comments on classmates' responses.

All of these responses must be substantial. Meaningful participation is relevant to the content, adds value, and advances the discussion. Comments such as "I agree" and "ditto" are not considered value-adding participation. Therefore, when you agree or disagree with a classmate or your mentor, state and support your position.

You will be evaluated on the quality and quantity of your participation, including your use of relevant course information to support your point of view, and your awareness of and responses to the postings of your classmates. Remember, these are discussions: responses and comments should be properly proofread and edited, mature, and respectful.

Written Assignments

You are required to complete six written assignments. The written assignments are on a variety of topics associated with the course modules.

Final Project

You are required to complete a final project, which consists of two parts: a written paper and a PowerPoint with webcam video presentation. The written paper focuses on using the system described in Module 1 and the three common ICS/SCADA vulnerabilities identified in Module 5. You must determine how to implement at least five NIST controls on the system, which will be countermeasures against the identified vulnerabilities. You will prepare and present your findings via PowerPoint with a webcam video presentation.

Please reference the Final Project area of the course website for full details and requirements. Consult the Course Calendar for due dates.

GRADING AND EVALUATION

Your grade in the course will be determined as follows:

Online discussions (7)—25 percent
Written assignments (6)—40 percent
Final project (2 parts)—35 percent

Written paper—20 percent
PowerPoint with webcam video presentation—15 percent

All activities will receive a numerical grade of 0–100. You will receive a score of 0 for any work not submitted. Your final grade in the course will be a letter grade. Letter grade equivalents for numerical grades are as follows:

A	=	93–100	C+	=	78–79
A–	=	90–92	C	=	73–77
B+	=	88–89	C–	=	70–72
B	=	83–87	D	=	60–69
B–	=	80–82	F	=	Below 60

To receive credit for the course, you must earn a letter grade of C or better (for an area of study course) or D or better (for a course not in your area of study), based on the weighted average of all assigned course work (e.g., exams, assignments, discussion postings).

STRATEGIES FOR SUCCESS

First Steps to Success

To succeed in this course, take the following first steps:

Read carefully the entire Syllabus, making sure that all aspects of the course are clear to you and that you have all the materials required for the course.
Take time to read the entire Online Student Handbook. The Handbook answers many questions about how to proceed through the course, and how to get the most from your educational experience at Thomas Edison State University.
Familiarize yourself with the learning management systems environment—how to navigate it and what the various course areas contain. If you know what to expect as you navigate the course, you can better pace yourself and complete the work on time.
If you are not familiar with web-based learning be sure to review the processes for posting responses online and submitting assignments before class begins.

Study Tips

Consider the following study tips for success:

To stay on track throughout the course, begin each week by consulting the Course Calendar. The Course Calendar provides an overview of the course and indicates due dates for submitting assignments, posting discussions, and scheduling and taking examinations.
Check Announcements regularly for new course information.

ACADEMIC POLICIES

To ensure success in all your academic endeavors and coursework at Thomas Edison State University, familiarize yourself with all administrative and academic policies including those related to academic integrity, course late submissions, course extensions, and grading policies.

For more, see: