Information Security syllabus

Information Security

• 1 Introduction (5 LHs)

  • Security concepts, threats, attacks and assets
  • Security requirements, principles, attack surfaces and trees
  • Discretionary, role-based and attribute-based access
  • Identity and credential management
  • Bell-LaPadula and Biba models
• 2 Symmetric and Asymmetric Cryptographic Algorithms (13 LHs)

  • Substitution/transposition, block and stream ciphers
  • Feistel, DES and AES
  • Modular arithmetic and Galois fields
  • Prime numbers, primality and Euclidean algorithms
  • Diffie-Hellman and RSA
• 3 Message Authentication and Hash Functions (6 LHs)

  • Message authentication and digests
  • MD4, MD5, SHA-1 and SHA-2
  • HMAC and digital signatures
• 4 User Authentication (5 LHs)

  • Password, token, biometric and two-factor authentication
  • Kerberos and Kerberos 5
  • Authentication security issues
• 5 Intrusion Detection and Prevention (5 LHs)

  • Intruders and detection approaches
  • Host-, network- and hybrid-based detection
  • Honeypots and prevention systems
• 6 Malicious Software (4 LHs)

  • Viruses, worms, Trojans, spyware and rootkits
  • APT, bots, phishing, spam and keyloggers
  • Malware countermeasures
• 7 Network Security (5 LHs)

  • Certificates, X.509 and PKI/PKIX
  • SSL, TLS and IP security
  • Email security and PGP
  • Firewalls and VPNs
• 8 IT Security Management, Risk Assessment and Security Auditing (5 LHs)

  • Security policy and organizational context
  • Risk assessment and analysis
  • Audit architecture, trails, logging and analysis
• 9 Laboratory work

  • Classical ciphers, DES and AES
  • Primality, Euclidean algorithms, Diffie-Hellman and RSA
  • MD5, SHA-1 and SHA-2
  • Password, token and two-factor authentication