INFORMATION SECURITY AND ASSURANCE
- Course
- COMP172 - INFORMATION SECURITY AND ASSURANCE
- Department
- Computer Programming - English - Associate
- Course Type
- Course
- Status
- Required
- Language
- English
- Credit
- 3
- ECTS
- 7
- T+P+L
- 3 + 0 + 0
- Course Coordinator(s)
- Asst. Prof. Dr. Sara SALEHI
- Prerequisite
- -
Course Description
Information security is the state of being free from danger while Information Assurance (IA) is act of managing risks and keeping information safe from harm. Both information security and information assurance encompasses computer security, communications security, operations security and physical security. The main objective of these course is to learn the fundamental concept of Information security models and practices that can help in planning, developing and performing security tasks. The course will address hardware, software, processes, communications, applications, policies and procedures with respect to organizational IT Security and Risk Management. Topics to be covered include Physical security, VPN, SSL, Cryptography, Digital Forensics, digital signature.
INFORMATION SECURITY AND ASSURANCE
Evaluation Tools (Active Term)
| Item | Type | Weight (%) |
|---|---|---|
| Midterm Exam | Midterm | 35 |
| Quiz | Quiz | 20 |
| Final Exam | Final | 45 |
| Total | 100 | |
Course outcomes
No course outcomes have been defined yet.
Course Syllabus
| Week | Topic |
|---|---|
| Week 1 | Introduction to Information security |
| Week 2 | Security needs, threats and attacks |
| Week 3 | Risk Management |
| Week 4 | Trending attacks |
| Week 5 | Attack prevention and mitigation Techniques |
| Week 6 | Access control, Biometrics, Watermarking |
| Week 7 | Midterm exam |
| Week 8 | Cryptography |
| Week 9 | SSL, Firewalls, VPN, |
| Week 10 | Security models and frameworks |
| Week 11 | Digital Forensics |
| Week 12 | Project presentation |
| Week 13 | Project presentation |
| Week 14 | Revision |
| Week 15 | Final Exam |
Reference Books & Course Materials
- 01 Principles of Information Security, 7th Edition by Micheal Whitman and Herbert Mattord
- 02 Security in Computing, 3rd Edition by Charles P. Pfleeger and Shari Lawrence Pfleeger
Learning Outcomes
- L01 To Identify and examine the foundational theory behind information security SOLO 3.5
- L02 To identify and assess the common threats faced by organizations SOLO 3.5
- L03 To design and develop the basic principle and technique to mitigate security issues SOLO 5
- L04 To examine the basic security principles and techniques when designing a system SOLO 3
- L05 To demonstrate how today's attacks and defenses work in practice SOLO 4
- L06 To evaluate the key concepts of information security and how they work SOLO 5
- L07 Apply the principles of cryptography, including encryption and hashing techniques, to protect digital information SOLO 4
- L08 Evaluate secure communication protocols, including Firewall, VPN and SSL, and demonstrate how they ensure data integrity and confidentiality SOLO 4.5
- L09 Analyze security models and frameworks to plan and develop effective information security strategies. SOLO 4.7
- L10 Examine the fundamentals of digital forensics and its role in identifying and resolving security breaches SOLO 3
Program Outcomes
- P01 Knowledge of mathematics, natural sciences, basic engineering, computer-based computation, and topics specific to the relevant engineering discipline.
- P02 Ability to apply knowledge of mathematics, natural sciences, basic engineering, computer-based computation, and topics specific to the relevant engineering discipline to the solution of complex engineering problems.
- P03 Ability to define complex engineering problems by using knowledge of basic sciences, mathematics, and engineering, while considering the relevant United Nations Sustainable Development Goals (SDGs) related to the problem addressed.
- P04 Ability to formulate complex engineering problems using knowledge of basic sciences, mathematics, and engineering, while considering the relevant United Nations Sustainable Development Goals (SDGs) associated with the problem addressed.
- P05 Ability to analyse and solve complex engineering problems using knowledge of basic sciences, mathematics, and engineering, while considering the relevant United Nations Sustainable Development Goals (SDGs) associated with the problem addressed.
- P06 Ability to design creative solutions to complex engineering problems.
- P07 Ability to design complex systems, processes, devices, or products in a way that meets present and future needs while considering realistic constraints and conditions.
- P08 Ability to select and use appropriate techniques and resources—including estimation and modelling—for the analysis and solution of complex engineering problems, while being aware of their limitations.
- P09 Ability to select and use modern engineering and computational tools—including estimation and modelling—for the analysis and solution of complex engineering problems, while being aware of their limitations.
- P10 Ability to conduct literature research and use appropriate research methods for the investigation of complex engineering problems.
- P11 Ability to design experiments for the investigation of complex engineering problems.
- P12 Ability to conduct experiments, collect data, analyse results, and interpret findings for the investigation of complex engineering problems.
- P13 Knowledge of the impacts of engineering practices on society, health and safety, the economy, sustainability, and the environment within the framework of the United Nations Sustainable Development Goals (SDGs).
- P14 Awareness of the legal implications of engineering solutions within the framework of the United Nations Sustainable Development Goals (SDGs).
- P15 Knowledge of ethical responsibility and adherence to the principles of professional engineering conduct.
- P16 Awareness of acting impartially without discrimination in any matter and of being inclusive of diversity.
- P17 Ability to work effectively as an individual.
- P18 Ability to work effectively as a team member or leader in intra-disciplinary teams (face-to-face, remote, or hybrid).
- P19 Ability to work effectively as a team member or leader in multidisciplinary teams (face-to-face, remote, or hybrid).
- P20 Ability to communicate effectively in spoken form on technical matters, taking into account the diverse characteristics of the target audience (such as education, language, and profession).
- P21 Ability to communicate effectively in written form on technical matters, taking into account the diverse characteristics of the target audience (such as education, language, and profession).
- P22 Knowledge of professional practices such as project management and economic feasibility analysis.
- P23 Awareness of entrepreneurship and innovation.
- P24 Ability for independent and lifelong learning.
- P25 Ability to adapt to new and emerging technologies.
- P26 Lifelong learning ability that includes the capacity to think critically about technological changes.
Po-Lo Matrix
| LO | P01 | P02 | P03 | P04 | P05 | P06 | P07 | P08 | P09 | P10 | P11 | P12 | P13 | P14 | P15 | P16 | P17 | P18 | P19 | P20 | P21 | P22 | P23 | P24 | P25 | P26 | Average |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| L01 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
| L02 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
| L03 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
| L04 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
| L05 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
| L06 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
| L07 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
| L08 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
| L09 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |
| L10 | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - |