IBE321 Information Security and Risk Management (Autumn 2022)

About the course

Security concepts and principles. Cryptography basics. User authentication. Malicious code/malware. Principles of security design. Access control. Attacks and threats. Find and fix vulnerabilities. Risk assessment and management. Intrusion detection. Event response. Forensics. Accountability. Security and privacy.

The course is connected to the following study programs

• Individual Study Courses/Part- time studies
• Bachelor in IT and Digitalization
• Exchange programme - Bachelor's level

The student's learning outcomes after completing the course

After completion of the course, the student will have acquired the following learning outcomes, defined as knowledge, skills and general competency:

Knowledge

• has general knowledge on different types of malware, how confidential information can be compromised and have an overview of relevant categories of unwanted incidents.

• understands important concepts such as confidentiality, integrity and availability, authorization, authentication and accountability.

• has general knowledge on how to analyze attacks and use security protocols.

Skills

The student:

• is able to implement effective countermeasures against viruses, worms, hacking, eavesdropping and computer vandalism on key resources.

• can formulate a security policy and a risk assessment.

Competence

• can contribute to the ICT security health of an organization.

Forms of teaching and learning

You have for each week:

• 2 hours of recording video lectures

• 2 practice hours with lecturer

In the practice lessons, practical use of the theory is illustrated and exemplified, so it is assumed that the student has knowledge of the associated theory in advance through the subject material. Interactive practice classes are planned where the students will develop activities together with the lecturer.It is recommended that students show up in the classroom or digitally when the practice lessons are held.

Coursework requirements - conditions for taking the exam

• Mandatory coursework: Assignment(s)

• Courseworks given: 8

• Courseworks required: 6

• Presence: Not required

• Comment:

Examination

Form of assessment: Home assessment:

• Proportion: 40%

• Duration: 1.5 hours

• Grouping: Individual

• Grading scale: Letter (A - F)

• Supported material: - All printed and written supporting material

Form of assessment: Home assessment:

• Proportion: 60%

• Duration: 2.5 hours

• Grouping: Individual

• Grading scale: Letter (A - F)

• Supported material: -All printed and written supporting material

Note: A partial fail does not automatically imply a fail as the final grade. Instead, the final grade will be determined as the average of all the partial assessments.

Syllabus

Pensumoversikt

• IBE321 Informasjonssikkerhet og risikohåndtering