DSP776 Information Systems Security Engineering

Code DSP776
Name Information Systems Security Engineering
Status Compulsory/Courses of Limited Choice; Courses of Free Choice
Level and type Post-graduate Studies, Academic
Field of study Computer Science
Faculty
Academic staff Mārīte Kirikova
Credit points 4.0 (6.0 ECTS)
Parts 1
Annotation Topics covered by the course include: security risk management, security modeling languages and models, security threats and security requirements, security controls (role-based access control, introduction to cryptography), secure software processes, security patterns, and social engineering. The course is delivered by Ph.D. Raimundas Matulevicius, University of Tartu, Estonia.
Goals and objectives
of the course in terms
of competences and skills
This course will provide for students an overview of the principles for information systems security engineering. The participants will learn how to ensure confidentiality, integrity, and availability of secure assets. The course will also analyze how to engineer and model security requirements and how to use the major security controls, like role-based access control. The course also includes the overview of the principles for the model driven security. A number of lectures will be given to understand what are the principles of security development processes and what the security patterns are. During the practical seminars, there will be a number of exercises for deepening of knowledge.
Learning outcomes
and assessment
Is able to identify causes and consequences of (lack of) system and software security - Performed practical exercises; exam with theoretical and practical parts
Masters essential techniques to reduce and avoid system and software security problems; is able to introduce and reason on security requirements and controls - Performed practical exercises; exam with theoretical and practical parts
Is able to apply advanced modeling techniques (notations, tools, and processes) to build secure systems and software - Performed practical exercises
Course prerequisites Computer networks basics, Database basics

[Extended course information PDF]