CS4028: SECURITY (2021-2022)

The course provides a solid foundation in computer and information security. It will cover the following topics:

• Information and Risk,

• including models such as confidentiality, integrity and availability (CIA); concepts such as probability, consequence, harm, risk identification, assessment and mitigation; and the relationship between information and system risk;

• Threats and Attacks,

• including threats, how they materialise, typical attacks and how those attacks exploit vulnerabilities;    

• Cybersecurity Architecture and Operations, 

• including physical and process controls that can be implemented across an organisation to reduce information and systems risk, identify and mitigate vulnerability, and ensure organisational compliance;    

• Secure Systems and Products, 

• including the concepts of design, defensive programming and testing and their application to build robust, resilient systems that are fit for purpose;

• Cybersecurity Management, 

• including understanding the personal, organisational and legal/regulatory context in which information systems could be used, the risks of such use and the constraints (such as time, finance and people) that may affect how cybersecurity is implemented;    

• Trustworthy Software, 

• being the enhancement of the overall software and systems culture, with the objective that software should be designed, implemented and maintained in a trustworthy manner, and including the British Standards Institution PAS 754 Software trustworthiness.

• It may cover other topics if time allows.

Information on contact teaching time is available from the course guide.

More Information about Week Numbers

Alternative Assessment

Report evaluating a piece of security technology (50%)

Exam (50%)

Alternative Resit Assessment

Where a student fails the course overall they will be afforded the opportunity to resit those parts of the course that they failed (pass marks will be carried forward).

There are no assessments for this course.