Practical Information Security: A Competency-Based Education Course
Izzat Alsmadi, Robert Burdwell, Ahmed Aleroud, Abdallah Wahbeh, Mahmoud Al-Qudah, Ahmad Al-Omari
相關主題
商品描述
This textbook presents a practical introduction to information security using the Competency Based Education (CBE) method of teaching. The content and ancillary assessment methods explicitly measure student progress in the three core categories: Knowledge, Skills, and Experience, giving students a balance between background knowledge, context, and skills they can put to work. Students will learn both the foundations and applications of information systems security; safeguarding from malicious attacks, threats, and vulnerabilities; auditing, testing, and monitoring; risk, response, and recovery; networks and telecommunications security; source code security; information security standards; and compliance laws. The book can be used in introductory courses in security (information, cyber, network or computer security), including classes that don’t specifically use the CBE method, as instructors can adjust methods and ancillaries based on their own preferences. The book content is also aligned with the Cybersecurity Competency Model, proposed by department of homeland security. The author is an active member of The National Initiative for Cybersecurity Education (NICE), which is led by the National Institute of Standards and Technology (NIST). NICE is a partnership between government, academia, and the private sector focused on cybersecurity education, training, and workforce development.
商品描述(中文翻譯)
本教科書以能力為本的教育(Competency Based Education, CBE)教學方法,實務性地介紹資訊安全。內容及附加評估方法明確衡量學生在三個核心類別中的進展:知識、技能和經驗,讓學生在背景知識、情境和可應用技能之間取得平衡。學生將學習資訊系統安全的基礎和應用;防範惡意攻擊、威脅和漏洞;審計、測試和監控;風險、應對和恢復;網路和電信安全;源代碼安全;資訊安全標準;以及合規法律。本書可用於安全(資訊、安全、網路或計算機安全)的入門課程,包括不特別使用CBE方法的課程,因為教師可以根據自己的偏好調整方法和附加內容。本書內容也與國土安全部提出的網路安全能力模型相符。作者是全國網路安全教育倡議(National Initiative for Cybersecurity Education, NICE)的活躍成員,該倡議由國家標準與技術研究所(National Institute of Standards and Technology, NIST)主導。NICE是政府、學術界和私營部門之間的夥伴關係,專注於網路安全教育、訓練和人力資源發展。