ITF15015 Introduction to Information Security (Spring 2016)

The course is connected to the following study programs

Compulsory course in:

• Bachelor in Computer Science

Elective course for other study programmes.

Prerequisites

Basic knowledge of programming, web technology and IT in general.

The student's learning outcomes after completing the course

Knowledge

On completion of the course, the student is capable of:

• describing the motivation of hackers
• explaining various security challenges and how they can be handled
• describing various technological and non-technological techniques used by hackers

Skills

On completion of the course, the student is capable of:

• carrying out simple attacks (in order to understand how to protect themselves against such attacks)
• identifying and limiting various security threats in a system
• managing and running security in an IT system

General competence

On completion of the course, the student is capable of:

• understanding why the security aspect is important
• locating and becoming acquainted with the necessary technical information

Content

• What is hacking, and why do people do it?
• Hacking and ethics
• Attack on web-based services
• Attack on applications, systems and infrastructure
• Various forms of malicious software (e.g. viruses, worms and trojans)
• Social engineering
• Review of known attacks

Forms of teaching and learning

Lectures and compulsory assignments.

Coursework requirements - conditions for taking the exam

Up to six projects will be carried out during the course period. All these projects must be submitted. Submission of one of the projects can be postponed by up to a week. Any other postponement requires a doctor's certificate.

The coursework requirements must be approved before students may sit the exam.

Examination

Individual written examination

Written exam lasting 4 hours. No support materials permitted.

Letter grading scale A?F.

Course evaluation

This course is evaluated as follows:

• Mid-semester evaluation (optional)
• Final evaluation (compulsory)

The course instructor prepares a course report on the basis of student feedback and on his/her own experiences of the course. Course reports are discussed with the Committee for Study Quality at the Faculty of Computer Sciences.

Literature

Updated 12. November 2015.

Nätt og Heide, "Datasikkerhet - Ikke bli svindlerens neste offer" (2015), ISBN: 978-82-05-48026-1

Web-based resources and distributed material that is made available on the course website.