INFORMATION SECURITY AND ASSURANCE
- Course
- ITSE271 - INFORMATION SECURITY AND ASSURANCE
- Department
- Information Technology Security - English - Undergraduate
- Course Type
- Course
- Status
- Required
- Language
- Turkish
- Credit
- 3
- ECTS
- 7
- T+P+L
- 3 + 0 + 0
- Course Coordinator(s)
- Asst. Prof. Dr. Sara SALEHI
- Prerequisite
- -
Course Description
The main objective of this course is to provide students with the fundamental concept of Information security models and practices that can help in planning, developing and performing security tasks. This course covers security in a broader term that encompasses information security, computer security, communications security, operations security and physical security. The course will address the security issues relating to hardware, software, processes, communications, applications, policies and procedures with respect to organizational IT security and risk management. Topics to be covered include physical security, VPN, SSL, cryptography, digital signature, cyber- security and internet security. Upon the completion of this course, students will be able to understand the various threats and mitigating techniques to information asset.
INFORMATION SECURITY AND ASSURANCE
Evaluation Tools (Active Term)
| Item | Type | Weight (%) |
|---|---|---|
| Midterm Exam | Midterm | 35 |
| Quiz | Quiz | 20 |
| Final Exam | Final | 45 |
| Total | 100 | |
Course outcomes
No course outcomes have been defined yet.
Course Syllabus
| Week | Topic |
|---|---|
| Week 1 | Bilgi güvenliğine giriş |
| Week 2 | Güvenlik ihtiyaçları, tehditler ve saldırılar |
| Week 3 | Risk Yönetimi |
| Week 4 | Trend olan saldırılar |
| Week 5 | Saldırı önleme ve azaltma teknikleri |
| Week 6 | Erişim kontrolü, Biyometri, Filigran |
| Week 7 | Ara sınav |
| Week 8 | Kriptografi |
| Week 9 | Fiziksel güvenlik |
| Week 10 | Güvenlik modelleri ve çerçeveleri |
| Week 11 | Digital Forencis |
| Week 12 | Project presentation |
| Week 13 | Project presentation |
| Week 14 | Revision |
| Week 15 | Final Exam |
Reference Books & Course Materials
- 01 Principles of Information Security, 7th Edition by Micheal Whitman and Herbert Mattord
- 02 Security in Computing, 3rd Edition by Charles P. Pfleeger and Shari Lawrence Pfleeger
Learning Outcomes
- L01 To Identify and examine the foundational theory behind information security SOLO 3.5
- L02 To identify and assess the common threats faced by organizations SOLO 3.5
- L03 To design and develop the basic principle and technique to mitigate security issues SOLO 5
- L04 To examine the basic security principles and techniques when designing a system SOLO 3
- L05 To demonstrate how today's attacks and defenses work in practice SOLO 4
- L06 To evaluate the key concepts of information security and how they work SOLO 5
- L07 Apply the principles of cryptography, including encryption and hashing techniques, to protect digital information SOLO 4
- L08 Evaluate secure communication protocols, including Firewall, VPN and SSL, and demonstrate how they ensure data integrity and confidentiality SOLO 4.5
- L09 Analyze security models and frameworks to plan and develop effective information security strategies. SOLO 4.7
- L10 Examine the fundamentals of digital forensics and its role in identifying and resolving security breaches SOLO 3
Program Outcomes
- P01 Be able to understand and apply security protocol and tools to security challenges faced in organizations
- P02 Be able to design security software to combat security issues
- P03 Be able to identify, categorize, and develop security solutions for computer orientated challenges.
- P04 Be able to demonstrate autonomy and responsibility in managing computer security projects
- P05 Be able to follow the state of the arts concepts in computer technology security
- P06 Be able to design, implement, and evaluate a computational system to meet desired security needs within realistic constraints
- P07 Be able to use appropriate security techniques, protocols, skills, and tools necessary for securing computer systems
- P08 Be able to apply effective communication skills consistent with the professional environment
- P09 Be able to apply effective collaboration skills in teamwork consistent with the professional environment
- P10 Be able to apply appropriate security technology and techniques to facilitate a safe operation in an organization
Po-Lo Matrix
| LO | P01 | P02 | P03 | P04 | P05 | P06 | P07 | P08 | P09 | P10 | Average |
|---|---|---|---|---|---|---|---|---|---|---|---|
| L01 | 4 | 3 | 3 | 3 | 4 | 3 | 2 | 2 | 2 | 3 | 2.9 |
| L02 | 3 | 3 | 2 | 3 | 2 | 3 | 3 | 2 | 2 | 3 | 2.6 |
| L03 | 4 | 5 | 5 | 4 | 4 | 4 | 5 | 4 | 4 | 5 | 4.4 |
| L04 | 5 | 5 | 5 | 4 | 4 | 4 | 4 | 3 | 3 | 4 | 4.1 |
| L05 | 3 | 3 | 4 | 3 | 4 | 4 | 4 | 3 | 3 | 4 | 3.5 |
| L06 | 3 | 3 | 4 | 4 | 3 | 4 | 3 | 3 | 3 | 4 | 3.4 |
| L07 | 4 | 4 | 4 | 3 | 4 | 3 | 4 | 3 | 3 | 5 | 3.7 |
| L08 | 4 | 4 | 4 | 4 | 4 | 4 | 4 | 3 | 3 | 4 | 3.8 |
| L09 | 5 | 5 | 4 | 4 | 4 | 4 | 4 | 3 | 3 | 5 | 4.1 |
| L10 | 4 | 3 | 3 | 4 | 3 | 4 | 4 | 3 | 3 | 4 | 3.5 |