Computer Security
About the course
The course can be taken as a singular course. The course is given every spring semester.
The course will provide an introduction to the general principles of computer security from an applied viewpoint. Topics include common cyber-attacks, techniques for identifying and defending against vulnerabilities in computers and networks, the fundamental building blocks of secure systems, security principles for commonly used items, and human, social, and economic aspects of computer security. The course will focus on security issues related to software exposed to network communication, particular in modern web applications.
Admission requirements
Objectives of the course
Knowledge - The candidate has knowledge of
- general principles, goals, and abstractions for cybersecurity (e.g., confidentiality, availability, integrity, assurance, anonymity, authenticity);
- concepts of risk, threats, vulnerabilities, and attack vectors;
- basic cryptography and cipher types;
- basic authentication and key exchange protocols, including Diffie-Hellman;
- the access control matrix;
- public-key infrastructures, digital signatures, and certificates;
- web authentication protocols; and
- cross-site scripting vulnerabilities and the same-origin policy for JavaScript executing in browsers.
Skills - The candidate can
- analyze software artifacts in terms of confidentiality, integrity, and availability;
- use cryptographic tools to send and receive messages over the Internet;
- use digital signatures;
- authenticate remote principals in web servers; and
- identify and avoid common security vulnerabilities.
General competence - The candidate can
- analyze and document computer systems and protocols;
- participate actively in professional discussions (oral or written);
- develop robust and secure software systems; and
- apply security-by-design principles.
Prerequisites
Recommended prerequisites
INF-1101 Data structures and algorithms, INF-2300 Computer Communication
Credit reduction
If you pass the examination in this course, you will get an reduction in credits (as stated below), if you previously have passed the following courses:
- INF-2301 Computer communication and security 5 ects
- INF-2310 Security in distributed systems 5 ects
- MIK-1013 Cyber Security Fundamentals 2.5 ects
Teaching methods
Language of instruction and examination
The language of instruction is English, and the syllabus material is in English. The examinations will also be in English but can be answered either in English or a Scandinavian language.Schedule
The schedules are normally finalized and published well in advance of the start of the semester, often a few weeks beforehand. This gives students the opportunity to organize their studies and prepare for upcoming activities.
It is recommended to check the schedule regularly, as changes may occur.
Information to incoming exchange students
This course is open to incoming exchange students.
Study level: Bachelor's
Admission prerequisites:This course has admission prerequisites, which are listed under the Admission requirements section. Please review this information carefully before adding the course to your Learning Agreement.
For details on how to apply for exchange, course selection guidelines, or to contact the Incoming Admissions Team, please visit: Admissions for Student Exchange.
Examination
| School exam | Duration: 4 Hours |
Grade: A–E, fail F |
To take an examination, the student must have passed the following coursework requirements
| Written assignments | Grade: Approved – not approved |
Everything you need to know about before, during, and after the exam; registration, absence, appeals, and diplomas: UiT Exams homepage