INFORMATION SECURITY AND ASSURANCE

Course Description

Information security is the state of being free from danger while Information Assurance (IA) is act of managing risks and keeping information safe from harm. Both information security and information assurance encompasses computer security, communications security, operations security and physical security. The main objective of these course is to learn the fundamental concept of Information security models and practices that can help in planning, developing and performing security tasks. The course will address hardware, software, processes, communications, applications, policies and procedures with respect to organizational IT Security and Risk Management. Topics to be covered include Physical security, VPN, SSL, Cryptography, Digital Forensics, digital signature.

INFORMATION SECURITY AND ASSURANCE

Evaluation Tools (Active Term)

Course outcomes

No course outcomes have been defined yet.

Course Syllabus

Reference Books & Course Materials

1. 01 Principles of Information Security, 7th Edition by Micheal Whitman and Herbert Mattord
2. 02 Security in Computing, 3rd Edition by Charles P. Pfleeger and Shari Lawrence Pfleeger

Learning Outcomes

1. L01 To Identify and examine the foundational theory behind information security To identify and assess the common threats faced by organizations To design and develop the basic principle and technique to mitigate security issues To examine the basic security principles and techniques when designing a system To demonstrate how today's attacks and defenses work in practice To evaluate the key concepts of information security and how they work SOLO 4.6

Program Outcomes

1. P01 Adequate knowledge in mathematics, science and engineering subjects pertaining to the relevant discipline; ability to use theoretical and applied knowledge in these areas in complex engineering problems.
2. P02 Ability to identify, formulate, and solve complex engineering problems; ability to select and apply proper analysis and modelling methods for this purpose.
3. P03 Ability to design a complex system, process, device or product under realistic constraints and conditions, in such a way as to meet the desired result; ability to apply modern design methods for this purpose.
4. P04 Ability to devise, select, and use modern techniques and tools needed for analysing and solving complex problems encountered in engineering practice; ability to employ information technologies effectively
5. P05 Ability to design and conduct experiments, gather data, analyse and interpret results for investigating complex engineering problems or discipline specific research questions
6. P06 Ability to work efficiently in intra-disciplinary and multi-disciplinary teams; ability to work individually.
7. P07 Ability to communicate effectively in Turkish, both orally and in writing; knowledge of a minimum of one foreign language; ability to write effective reports and comprehend written reports, prepare design and production reports, make effective presentations, and give and receive clear and intelligible instructions.
8. P08 Recognition of the need for lifelong learning ; ability to access information, to follow developments in science and technology, and to continue to educate him/herself
9. P09 Consciousness to behave according to ethical principles and professional and ethical responsibility; knowledge on standards used in engineering practice.
10. P10 Knowledge about business life practices such as project management, risk management, and change management; awareness in entrepreneurship, innovation; knowledge about sustainable development.
11. P11 Knowledge about the global and social effects of engineering practices on health, environment, and safety, and contemporary issues of the century reflected into the field of engineering; awareness of the legal consequences of engineering solutions.

Po-Lo Matrix