Module Details
The information contained in this module specification was correct at the time of publication but may be subject to change, either during the session because of unforeseen circumstances, or following review of the module at the end of the session. Queries about the module should be directed to the member of staff with responsibility for the module.
Title INFORMATION SECURITY ENGINEERING
Code CKIT511
Coordinator Prof FP Coenen
Computer Science
Coenen@liverpool.ac.uk
Year CATS Level Semester CATS Value
Session 2016-17 Level 7 FHEQ Whole Session 15

Aims

  1. To provide students with a core understanding of the principles and practice of building secure distributed systems. 

  2. To provide students with experience of how to address practical security problems.


Learning Outcomes

A critical understanding of the technology underpinning intrusion detection and firewalls, secure networking and internetworking, and digital content protection.

A critical understanding of cryptology.

 
An understanding of issues concerning physical security and biometrics.

 
An understanding of issues concerning wireless security.
An ability to build secure protocols.  
An ability to recognise distributed denial of service attacks. 

 

Syllabus
1 

Week 1:  Introduction

Basics of information security engineering through studying several examples. The Open System Interconnection (OSI) security architecture that provides a common framework for both security protocols development and analysis.

 

Week 2:  Password, Access Controls and Distributed Systems

Password and social engineering issues, technical protection of passwords, operating system access control, Role Based Access Control (RBAC), distributed systems security, fault-tolerance and failure recovery.

 

Week 3:  Basic Cryptology

Symmetr ic encryption: DES, TDES, AES; symmetric authentication; asymmetric encryption and digital signature: RSA, DSA; key management, Public Key Infrastructure and related standards and practical examples.

 

Week 4:  Security policy models, Nuclear command and control

The Reference Monitor (RM) concept, Multilevel Security (MLS), security policy models, Trusted Computing Platform Architecture (TCPA), nuclear command and control.

 

Week 5:  Physical security and biometrics

Biometrics, physical tamper resistance, smart cards, Identity Based Cryptography (IBC), monitoring systems, emission security.

 

Week 6:  Network and Internetworking security, digital content protection

The most common attacks on Internet systems, Distributed Denial of Service (DDoS) attacks, antivirus tools, intrusion detection, firewall, IETF protocols (TLS/SSL, IPSec, VPN, PKI, S/MIME), host-to-host and end-to-end security, XML digital signature, XML encryption.

 

Week 7:  eCommerce Security, Copyright, and Privacy

Technology for eCommerce, payment systems, copyright and privacy.

 

Week 8:  Management Issues, and System Evaluation and Assurance

Security management, security controls, security development lifecycle, system evaluation and assurance.

Teaching and Learning Strategies

Virtual classroom hours (for online modules) -

Number of hours per week, per student expected in the virtual classroom in discussion, dedicated to group work and individual assessment is 8.75.

Non-classroom hours (for online modules) -

Number of hours per week, per student expected for reading, research and other individual work to support engagement in the classroom is 10.

Teaching Schedule
  Lectures Seminars Tutorials Lab Practicals Fieldwork Placement Other TOTAL
Study Hours           70

80

 150
Timetable (if known)           Number of hours per week, per student expected in the virtual classroom in discussion, dedicated to group work and individual assessment is 8.75.
Number of hours per week, per student expected for reading, research and other individual work to support engagement in the classroom is 10.
  		 
Private Study 0
TOTAL HOURS 150

Assessment
EXAM Duration Timing
(Semester)		 % of
final
mark		 Resit/resubmission
opportunity		 Penalty for late
submission		 Notes
             
CONTINUOUS Duration Timing
(Semester)		 % of
final
mark		 Resit/resubmission
opportunity		 Penalty for late
submission		 Notes
Coursework  Weekly Discussion Qu  Whole Session  40  Yes  Standard UoL penalty applies  Assessment 1 
Coursework  Weekly Coursework As  Whole Session  20  Yes  Standard UoL penalty applies  Assessment 2 
Coursework  6 weeks Group Projec  Whole Session  40  Yes  Standard UoL penalty applies  Assessment 3 Notes (applying to all assessments) 1) Due to nature of the on-line mode of instruction this work is not marked anonymously. 2) Students who fail the module have the opportunity to repeat the entire module, thus all failed assessments. 3) The "Standard UoL Penalty" for late submission that applies is the "Standard UoL Penalty" agreed with respect to online programmes offered in collaboration with Laureate Online Education.  

Recommended Texts
Reading lists are managed at readinglists.liverpool.ac.uk. Click here to access the reading lists for this module.
Explanation of Reading List: