SOFTWARE DEVELOPMENT LIFE CYCLE in INFORMATION SECURITY - IT2042

Software Development Life Cycle 

SDLC stands for Software Development Life Cycle. SDLC is the process consisting of a series of planned activities to develop or alter the software products.

This tutorial will give you an overview of the SDLC basics, SDLC models available and their application in the industry. This tutorial also elaborates on the other related methodologies like Agile, RAD and Prototyping.

SDLC, Software Development Life Cycle is a process used by software industry to design, develop and test high quality softwares. The SDLC aims to produce a high quality software that meets or exceeds customer expectations, reaches completion within times and cost estimates.

• SDLC is the acronym of Software Development Life Cycle.
• It is also called as Software development process.
• The software development life cycle (SDLC) is a framework defining tasks performed at each step in the software development process.
• ISO/IEC 12207 is an international standard for software life-cycle processes. It aims to be the standard that defines all the tasks required for developing and maintaining software.

IT2042 Information Security - SDLC Notes

Software Development Life Cycle 

SDLC stands for Software Development Life Cycle. SDLC is the process consisting of a series of planned activities to develop or alter the software products.

This tutorial will give you an overview of the SDLC basics, SDLC models available and their application in the industry. This tutorial also elaborates on the other related methodologies like Agile, RAD and Prototyping.

SDLC, Software Development Life Cycle is a process used by software industry to design, develop and test high quality softwares. The SDLC aims to produce a high quality software that meets or exceeds customer expectations, reaches completion within times and cost estimates.

• SDLC is the acronym of Software Development Life Cycle.
• It is also called as Software development process.
• The software development life cycle (SDLC) is a framework defining tasks performed at each step in the software development process.
• ISO/IEC 12207 is an international standard for software life-cycle processes. It aims to be the standard that defines all the tasks required for developing and maintaining software.

IT2042 INFORMATION SECURITY - EXPECTED QUESTION FOR NOV/DEC 2013

IT DEPARTMENT

FINAL YEAR

UNIT I

1. NSTISSC Security Model.

2. The SDLC

3. The Security SDLC

UNIT II

1. Write brief notes on Business Needs.

2. Explain Threats.

3. Explain Attacks

UNIT III

1. Risk Management.

2. Identifying risk and accessing risk.

UNIT IV

1.  NIST model.

2. VISA Internet Security Model.

3. Blueprint for Security.

UNIT V

1. Explain IDS.

2. Write about Cryptography in IS.

3. Security and Personnel in IS.

ALL THE BEST :)

IT2042 Information Security Important Questions / Expected Questions for NOV/DEC 2013

IT DEPARTMENT

FINAL YEAR

UNIT I

1. NSTISSC Security Model.

2. The SDLC

3. The Security SDLC

UNIT II

1. Write brief notes on Business Needs.

2. Explain Threats.

3. Explain Attacks

UNIT III

1. Risk Management.

2. Identifying risk and accessing risk.

UNIT IV

1.  NIST model.

2. VISA Internet Security Model.

3. Blueprint for Security.

UNIT V

1. Explain IDS.

2. Write about Cryptography in IS.

3. Security and Personnel in IS.

ALL THE BEST :)

IT2042 Information Security Syllabus - Final Year - IT Department

IT2042 INFORMATION SECURITY L T P C

3 0 0 3

UNIT I INTRODUCTION 9

History, what is Information Security, Critical Characteristics of Information, NSTISSC

Security Model, Components of an Information System, Securing the Components,

Balancing Security and Access, The SDLC, The Security SDLC

UNIT II SECURITY INVESTIGATION 9

Need for Security, Business Needs, Threats, Attacks, Legal, Ethical and Professional

Issues

UNIT III SECURITY ANALYSIS 9

Risk Management : Identifying and Assessing Risk, Assessing and Controlling Risk

UNIT IV LOGICAL DESIGN 9

Blueprint for Security, Information Security Poicy, Standards and Practices, ISO

17799/BS 7799, NIST Models, VISA International Security Model, Design of Security

Architecture, Planning for Continuity

UNIT V PHYSICAL DESIGN 9

Security Technology, IDS, Scanning and Analysis Tools, Cryptography, Access Control

Devices, Physical Security, Security and Personnel

TOTAL : 45 PERIODS

TEXT BOOK:

1. Michael E Whitman and Herbert J Mattord, “Principles of Information Security”, Vikas

Publishing House, New Delhi, 2003

IT2042 INFORMATION SECURITY - VII Semester - Final Year - IT Department (ELECTIVE)

IT2042 INFORMATION SECURITY (ELECTIVE)

UNIT I INTRODUCTION

History, what is Information Security, Critical Characteristics of Information, NSTISSC

Security Model, Components of an Information System, Securing the Components,

Balancing Security and Access, The SDLC, The Security SDLC

UNIT II SECURITY INVESTIGATION

Need for Security, Business Needs, Threats, Attacks, Legal, Ethical and Professional

Issues

UNIT III SECURITY ANALYSIS

Risk Management : Identifying and Assessing Risk, Assessing and Controlling Risk

UNIT IV LOGICAL DESIGN

Blueprint for Security, Information Security Poicy, Standards and Practices, ISO

17799/BS 7799, NIST Models, VISA International Security Model, Design of Security

Architecture, Planning for Continuity

UNIT V PHYSICAL DESIGN

Security Technology, IDS, Scanning and Analysis Tools, Cryptography, Access Control

Devices, Physical Security, Security and Personnel

TOTAL : 45 PERIODS

TEXT BOOK:

1. Michael E Whitman and Herbert J Mattord, “Principles of Information Security”, Vikas

Publishing House, New Delhi, 2003

76

REFERENCES:

1. Micki Krause, Harold F. Tipton, “ Handbook of Information Security Management”,

Vol 1-3 CRC Press LLC, 2004.

2. Stuart Mc Clure, Joel Scrambray, George Kurtz, “Hacking Exposed”, Tata McGraw-

Hill, 2003

3. Matt Bishop, “ Computer Security Art and Science”, Pearson/PHI, 2002.