CS4028: SECURITY (2018-2019)

• The course provides a solid foundation in computer and information security. It will cover the following topics:

  • Information and Risk,
  • including models such as confidentiality, integrity and availability (CIA); concepts such as probability, consequence, harm, risk identification, assessment and mitigation; and the relationship between information and system risk;
  • Threats and Attacks,
  • including threats, how they materialise, typical attacks and how those attacks exploit vulnerabilities;    
  • Cybersecurity Architecture and Operations, 
  • including physical and process controls that can be implemented across an organisation to reduce information and systems risk, identify and mitigate vulnerability, and ensure organisational compliance;    
  • Secure Systems and Products, 
  • including the concepts of design, defensive programming and testing and their application to build robust, resilient systems that are fit for purpose;
  • Cybersecurity Management, 
  • including understanding the personal, organisational and legal/regulatory context in which information systems could be used, the risks of such use and the constraints (such as time, finance and people) that may affect how cybersecurity is implemented;    
  • Trustworthy Software, 
  • being the enhancement of the overall software and systems culture, with the objective that software should be designed, implemented and maintained in a trustworthy manner, and including the British Standards Institution PAS 754 Software trustworthiness.
  • It may cover other topics if time allows.

Assistive technologies may be required for any student who is unable to use a standard keyboard/mouse/computer monitor. Any students wishing to discuss this further should contact the School Disability Co-ordinator. This course will not be available in 2012/13.

Information on contact teaching time is available from the course guide.

More Information about Week Numbers

1st Attempt: 1 two hour written examination (75%); continuous assessment (25%).

During lectures, the Personal Response System and/or other ways of student interaction will be used for formative assessment. Additionally, practical sessions will provide students with practice opportunities and formative assessment.

Formative feedback for in-course assessments will be provided in written form. Additionally, formative feedback on performance will be provided informally during practical sessions.