Information system security 1
- Predavanje 30
- Vježbe 30
- Samostalni rad 90
Naziv predmeta
Information system security 1
Tip predmeta
Obligatory
Oznaka predmeta
22-00-514
Semestar
4
ECTS
5
Nastavnici i suradnici
Sadržaj i cilj
This module is designed to provide students with the knowledge and understanding of the principles of information security that is necessary to develop more skills in the Cyber security field. This module is the foundation for all the Cyber security related modules and combines both theoretical and practical components.
Students will learn foundational knowledge required for all the Cyber security modules and the ISO standard for information security and the most important areas of information security:
• risk management
• authentication and authorization
• cryptography
• vulnerability management
• network security
• protection against malicious software
• business continuity
The module will also provide students with a detailed explanation of advanced security attacks and protection mechanisms and enable them to apply this theoretical knowledge into practice.
Sadržaj
Students will learn foundational knowledge required for all the Cyber security modules and the ISO standard for information security and the most important areas of information security:
• risk management
• authentication and authorization
• cryptography
• vulnerability management
• network security
• protection against malicious software
• business continuity
The module will also provide students with a detailed explanation of advanced security attacks and protection mechanisms and enable them to apply this theoretical knowledge into practice.
Literatura
Essential reading:
1. Andress, J., (2015). The basics of information security. Waltham: Syngress.
Recommended reading:
1. Brooks, C., Grow, C., Craig, P. and Short, D., (2018). Cybersecurity Essentials. Hoboken: John Wiley and Sons.
Professional Master in Computer Engineering, sub-specialization in Software Engineering
Minimalni ishodi učenja
- Objasniti osnovne koncepte, metode i tehnike informacijske sigurnosti.
- Predložiti optimalan način pristupanja organizaciji zaštite informacijskog sustava.
- Opisati načine na koje se može kompromitirati sigurnost informacijskog sustava.
- Odrediti metode za procese upravljanja ranjivošću, sigurnost web aplikacija te metode za upravljanje zapisima dnevnika.
- Razumijeti kategoriju zlonamjernih programa i tehnike njihova korištenja, kontrole mrežne sigurnosti, napredne trajne prijetnje i kontinuiteta poslovanja.
Željeni ishodi učenja
- Analizirati osnovnu metodu upravljanja rizicima.
- Procijeniti upotrebu različitih mehanizama za provjeru autentičnosti i autorizaciju te njihove razlike.
- Ocijeniti različite asimetrične i simetrične algoritme kriptiranja te algoritme sažiamnja.
- Ocijeniti važnost penetracijskog testiranja, sigurne prakse kodiranja i korištenja SIEM sustava.
- Procijeniti primjenjivost inovativnih mehanizama zaštite od zlonamjernih programa i neovlaštenih aktivnosti.