Applied information Security (Autumn 2023)

Abstract

This is a hands-on course that teaches the basic principles of computer security. You will get in-depth experience with cyberattacks, and how to prevent them. The course projects enable you to personalize the course to match your unique background.

Description

In this course, you learn how to determine security requirements, and how to identify risks to these requirements. You get hands-on experience with concrete cyberattacks that realize these risks. You learn how to audit a system to determine that an attack has taken place. Most importantly, you get experience with many methods and tools that prevent cyberattacks, including cryptography, authentication, authorization, and isolation. Finally, you learn how to design a user experience such that users can conform to security requirements.

The projects in this course give you the opportunity to immerse yourself in your choice of the many disciplines that underpin computer security, including social sciences, computer systems, programming languages, and mathematics. 

This course provides a window into the activities of security analysts, penetration testers, forensic analysts, security architects, and security engineers. This course can thus function as a starting point for pursuing such careers.

Ultimately, the goal is to enable you to make appropriate security-related decisions. The course does so by teaching you how to think clearly about security, by focusing on basic principles.

Formal prerequisites

Before taking this course you must: 

1. Be able to design, implement, and test, medium-sized programs in Java, C# or other mainstream programming language.
   
2. Have implemented at least two medium-size programming projects.
   
3. Know basic algorithms and data structures.
4. Know basic discrete mathematics.

Third-semester K-SD students fulfill these requirements. These requirements can be satisfied by taking a course on Introductory Programming, Discrete Mathematics, Algorithms and Data Structures, and another course that has a programming project in it.

Finally, you must meet the admission requirements of ITU.

Intended learning outcomes

After the course, the student should be able to:

• Describe, relate, and discuss basic security principles.
• Identify and describe access control techniques.
• Identify, describe, and evaluate design approaches meeting specific security requirements
• Illustrate, analyse, and evaluate security standards.
• Identify and describe the proper use of cryptography in security.
• Describe and compare the most common cyberattack practices.
• Analyse an IT-system for security risks and reflect on potential improvements of the system.

Learning activities

Lectures and exercise sessions.

The lectures present the background, theory, and methods needed for achieving the intended learning outcomes, thus facilitating reflection and discussion. The exercise sessions are a mix of problem solving, group work, student presentations, debates, and peer-to-peer feedback, intended to foster active learning.

Mandatory activities

To be eligible for the examination, you must: 

1. submit and have approved 1 mandatory exercise set. 
2. submit and have approved 2 mini-projects. 
3. be present and participate actively in the course conclusion workshop. 

All deadlines will be announced on the course page on LearnIT. 

The student will receive the grade NA (not approved) at the ordinary exam, if the mandatory activities are not approved, which means that the student will use an exam attempt.

The mandatory activities will make sure that the students have the fundamental knowledge that enables them to progress with the subsequent lectures. Feedback will primarily be given by TAs. Students can get second attempts until the last lecture.

The student will receive the grade NA (not approved) at the ordinary exam, if the mandatory activities are not approved and the student will use an exam attempt.

The student will receive the grade NA (not approved) at the ordinary exam, if the mandatory activities are not approved and the student will use an exam attempt.

Course literature

The course literature is published in the course page in LearnIT.

Student Activity Budget

Estimated distribution of learning activities for the typical student

• Preparation for lectures and exercises: 10%
• Lectures: 25%
• Exercises: 25%
• Assignments: 15%
• Project work, supervision included: 15%
• Exam with preparation: 10%

Ordinary exam

Exam type:
B: Oral exam, External (7-point scale)
Exam variation:
B22: Oral exam with no time for preparation.

reexam

Exam type:
B: Oral exam, External (7-point scale)
Exam variation:
B22: Oral exam with no time for preparation.

Time and date

Ordinary Exam Mon, 22 Jan 2024, 09:00 - 21:00
Ordinary Exam Tue, 23 Jan 2024, 09:00 - 21:00
Ordinary Exam Wed, 24 Jan 2024, 09:00 - 21:00