CP3404 - Information Security

This subject introduces current challenges in computer security and why security is difficult to achieve. It explores the importance of information security, and looks at the fundamental attacks (i.e. malware and social engineering attacks) including how to defend against them. It also covers the study of basic and advance cryptography, mobile devices security, access control and identity management, compliance and operational security.

Learning Outcomes

• define information security, and describe the challenges of securing information;
• describe payloads of malware and types of social engineering psychological attacks;
• analyse different types of networking-based attacks and how network technologies can enhance security;
• Describe symmetric/asymmetric cryptography, and different transport encryption protocols;
• analyse different types of wireless network attacks; risk associated with mobile devices; and the ways to secure a mobile device;
• describe different types of authentication services/credentials, and how awareness and training can provide increased security.

Subject Assessment

• Invigilated > End of semester exam - (50%)
• Assignment 1 - (30%)
• Practicals - (20%).

Note: Minor variations might occur due to the continuous Subject quality improvement process, and in case of minor variation(s) in assessment details, the Subject Outline represents the latest official information.