Skip to main content

Information and Network Security

Overview

  • Credit value: 15 credits at Level 7
  • Convenor: Dr Igor Razgon
  • Assessment: problem-solving worksheets (20%) and a two-hour examination (80%)

Module description

In this module we provide broad coverage of the field of information security, including the technical as well as the management side of security in information systems.

Despite being an essential part of security, technical methods such as cryptography are not enough to guarantee a high level of security. They have to be embedded into a wider context in order to make them more effective. Users of technology have to understand the underlying principles and follow certain policies to avoid security breaches. We will introduce you to the fundamental approaches to security engineering and have a detailed look at some important applications.

Indicative syllabus

  • Overview of information security
  • Access Control Matrix Model
  • Security policies
  • Social engineering
  • Basic cryptography
  • Identity management
  • Access control mechanisms
  • Confinement
  • Assurance and trust
  • Network intruders and intrusion detection
  • Firewalls and malicious software
  • Cryptographic protocol concepts
  • Authentication
  • Key exchange
  • Economics of information security

    Learning objectives

    By the end of this module, you will be able to:

    • understand facts, concepts and principles of information security, such as security policies and cryptographic protocols
    • understand basic principles of cryptography, highlighting strengths and weaknesses of (historical) and current cryptosystems
    • understand basic concepts of risk management in the context of information security
    • discuss and explain the extent of security-related policies
    • explain examples of network security applications
    • understand the basic issues surrounding the economics of information security
    • see how cryptography fits into the wider context of information security
    • critically analyse and evaluate arguments and evidence
    • analyse, evaluate and select between different security policies
    • understand the difficulty in detecting intruders.