Computer Security, 6 credits

Learning outcomes

Knowledge and understanding
Upon course completion, the student will be able to

• describe the most common types of threats and attacks against IT systems, and explain the potential consequences and effects of such threats and attacks, and
• explain the principles of encryption, authentication and other security techniques and their uses.

Skills and Abilities
Upon course completion, the student will be able to

• identify and prevent common security threats, both caused by technical aspects and human factors.

Making judgements and attitudes
Upon course completion, the student will be able to

• critically evaluate information from different sources,
• consider ethical and legal aspects of computer intrusions and
• show a professional attitude towards their colleagues by actively contributing to the group’s results.

Content

The following topics are addressed in the course

• Introduction to computer security
• different types of malware (e.g., viruses, worms, and trojans)
• authentication, access control, and security models
• network attacks, weaknesses in network protocols, and intrusion detection
• operating systems security, for both desktop and mobile devices
• web systems security, sessions, and web attacks (e.g., cross-site scripting and SQL injection)
• introduction to cryptography
• ethical and legal aspects of computer intrusions, and
• human factors and social engineering.

Examinations and grades

Theory, 4.5 credits (Code: A001)
Grades used are Fail (F), Sufficient (E), Satisfactory (D), Good (C), Very Good (B) or Excellent (A).

Project Work, 1.5 credits (Code: A002)
Grades used are Fail (U) or Pass (G).

According to the Higher Education Ordinance, Chapter 6, Section 18, a grade is to be awarded on the completion of a course, unless otherwise prescribed by the university. The university may determine which grading system is to be used. The grade must be determined by a teacher specifically nominated by the university (the examiner).

In accordance with university regulations on grading systems for first and second-cycle courses and study programmes (Vice-Chancellor’s decision ORU 2018/00929), one of the following grades is to be used: fail (U), pass (G) or pass with distinction (VG). For courses included in an international master’s programme (60 or 120 credits) or offered to the university’s incoming exchange students, the A to F grading scale is to be used. The vice-chancellor, or a person appointed by them, may decide on exceptions from this provision for a specific course, if there are special grounds for doing so.

The grades used on this course are Fail (F), Sufficient (E), Satisfactory (D), Good (C), Very Good (B) or Excellent (A).

Comments on grades

As a grade for the course, the grade from exam code A001 is given given that exam code A002 is passed.

Modes of assessment

• Theory (exam code A001): Written exam
• Project work (test code A002): Written assignment and oral examination

The re-exam falls within eleven weeks of the regular exam.

For students with a documented disability, the university may approve applications for adapted or other modes of assessment.

For further information, see the university's local examination regulations.

Specific entry requirements

Operative Systems for MSc in Engineering, 4.5 Credits. The applicant must also have qualifications corresponding to the course "English B" or "English 6" from the Swedish Upper Secondary School.

For further information, see the university's admission regulations.

Other provisions

Students who have been admitted to and registered on a course have the right to receive tuition and/or supervision for the duration of the time period specified for the particular course to which they were accepted (see, the university's admission regulations (in Swedish)). After that, the right to receive tuition and/or supervision expires.

Reading list and other learning resources

Required Reading

William Stallings, Lawrie Brown (latest edition)
Computer Security: Principles and Practice
Pearson