Skip to main content
TR

INFORMATION SECURITY AND ASSURANCE

Course
COMP172 - INFORMATION SECURITY AND ASSURANCE
Department
Computer Programming - English - Associate
Course Type
Course
Status
Required
Language
English
Credit
3
ECTS
7
T+P+L
3 + 0 + 0
Course Coordinator(s)
Asst. Prof. Dr. Sara SALEHI
Prerequisite
-
Keywords

Course Description

Information security is the state of being free from danger while Information Assurance (IA) is act of managing risks and keeping information safe from harm. Both information security and information assurance encompasses computer security, communications security, operations security and physical security. The main objective of these course is to learn the fundamental concept of Information security models and practices that can help in planning, developing and performing security tasks. The course will address hardware, software, processes, communications, applications, policies and procedures with respect to organizational IT Security and Risk Management. Topics to be covered include Physical security, VPN, SSL, Cryptography, Digital Forensics, digital signature.

INFORMATION SECURITY AND ASSURANCE

Evaluation Tools (Active Term)

Item Type Weight (%)
Midterm Exam Midterm 35
Quiz Quiz 20
Final Exam Final 45
Total 100

Course outcomes

No course outcomes have been defined yet.

Course Syllabus

Week Topic
Week 1 Introduction to Information security
Week 2 Security needs, threats and attacks
Week 3 Risk Management
Week 4 Trending attacks
Week 5 Attack prevention and mitigation Techniques
Week 6 Access control, Biometrics, Watermarking
Week 7 Midterm exam
Week 8 Cryptography
Week 9 SSL, Firewalls, VPN,
Week 10 Security models and frameworks
Week 11 Digital Forensics
Week 12 Project presentation
Week 13 Project presentation
Week 14 Revision
Week 15 Final Exam

Reference Books & Course Materials

  1. 01 Principles of Information Security, 7th Edition by Micheal Whitman and Herbert Mattord
  2. 02 Security in Computing, 3rd Edition by Charles P. Pfleeger and Shari Lawrence Pfleeger

Learning Outcomes

  1. L01 To Identify and examine the foundational theory behind information security SOLO 3.5
  2. L02 To identify and assess the common threats faced by organizations SOLO 3.5
  3. L03 To design and develop the basic principle and technique to mitigate security issues SOLO 5
  4. L04 To examine the basic security principles and techniques when designing a system SOLO 3
  5. L05 To demonstrate how today's attacks and defenses work in practice SOLO 4
  6. L06 To evaluate the key concepts of information security and how they work SOLO 5
  7. L07 Apply the principles of cryptography, including encryption and hashing techniques, to protect digital information SOLO 4
  8. L08 Evaluate secure communication protocols, including Firewall, VPN and SSL, and demonstrate how they ensure data integrity and confidentiality SOLO 4.5
  9. L09 Analyze security models and frameworks to plan and develop effective information security strategies. SOLO 4.7
  10. L10 Examine the fundamentals of digital forensics and its role in identifying and resolving security breaches SOLO 3

Program Outcomes

  1. P01 Knowledge of mathematics, natural sciences, basic engineering, computer-based computation, and topics specific to the relevant engineering discipline.
  2. P02 Ability to apply knowledge of mathematics, natural sciences, basic engineering, computer-based computation, and topics specific to the relevant engineering discipline to the solution of complex engineering problems.
  3. P03 Ability to define complex engineering problems by using knowledge of basic sciences, mathematics, and engineering, while considering the relevant United Nations Sustainable Development Goals (SDGs) related to the problem addressed.
  4. P04 Ability to formulate complex engineering problems using knowledge of basic sciences, mathematics, and engineering, while considering the relevant United Nations Sustainable Development Goals (SDGs) associated with the problem addressed.
  5. P05 Ability to analyse and solve complex engineering problems using knowledge of basic sciences, mathematics, and engineering, while considering the relevant United Nations Sustainable Development Goals (SDGs) associated with the problem addressed.
  6. P06 Ability to design creative solutions to complex engineering problems.
  7. P07 Ability to design complex systems, processes, devices, or products in a way that meets present and future needs while considering realistic constraints and conditions.
  8. P08 Ability to select and use appropriate techniques and resources—including estimation and modelling—for the analysis and solution of complex engineering problems, while being aware of their limitations.
  9. P09 Ability to select and use modern engineering and computational tools—including estimation and modelling—for the analysis and solution of complex engineering problems, while being aware of their limitations.
  10. P10 Ability to conduct literature research and use appropriate research methods for the investigation of complex engineering problems.
  11. P11 Ability to design experiments for the investigation of complex engineering problems.
  12. P12 Ability to conduct experiments, collect data, analyse results, and interpret findings for the investigation of complex engineering problems.
  13. P13 Knowledge of the impacts of engineering practices on society, health and safety, the economy, sustainability, and the environment within the framework of the United Nations Sustainable Development Goals (SDGs).
  14. P14 Awareness of the legal implications of engineering solutions within the framework of the United Nations Sustainable Development Goals (SDGs).
  15. P15 Knowledge of ethical responsibility and adherence to the principles of professional engineering conduct.
  16. P16 Awareness of acting impartially without discrimination in any matter and of being inclusive of diversity.
  17. P17 Ability to work effectively as an individual.
  18. P18 Ability to work effectively as a team member or leader in intra-disciplinary teams (face-to-face, remote, or hybrid).
  19. P19 Ability to work effectively as a team member or leader in multidisciplinary teams (face-to-face, remote, or hybrid).
  20. P20 Ability to communicate effectively in spoken form on technical matters, taking into account the diverse characteristics of the target audience (such as education, language, and profession).
  21. P21 Ability to communicate effectively in written form on technical matters, taking into account the diverse characteristics of the target audience (such as education, language, and profession).
  22. P22 Knowledge of professional practices such as project management and economic feasibility analysis.
  23. P23 Awareness of entrepreneurship and innovation.
  24. P24 Ability for independent and lifelong learning.
  25. P25 Ability to adapt to new and emerging technologies.
  26. P26 Lifelong learning ability that includes the capacity to think critically about technological changes.

Po-Lo Matrix

LO P01 P02 P03 P04 P05 P06 P07 P08 P09 P10 P11 P12 P13 P14 P15 P16 P17 P18 P19 P20 P21 P22 P23 P24 P25 P26 Average
L01 - - - - - - - - - - - - - - - - - - - - - - - - - - -
L02 - - - - - - - - - - - - - - - - - - - - - - - - - - -
L03 - - - - - - - - - - - - - - - - - - - - - - - - - - -
L04 - - - - - - - - - - - - - - - - - - - - - - - - - - -
L05 - - - - - - - - - - - - - - - - - - - - - - - - - - -
L06 - - - - - - - - - - - - - - - - - - - - - - - - - - -
L07 - - - - - - - - - - - - - - - - - - - - - - - - - - -
L08 - - - - - - - - - - - - - - - - - - - - - - - - - - -
L09 - - - - - - - - - - - - - - - - - - - - - - - - - - -
L10 - - - - - - - - - - - - - - - - - - - - - - - - - - -