Featured Programs
-
Engineering
See details
-
Pre-Health Seminar & Shadowing
See details
-
International Business
See details
Experiential Learning Opportunities
Security Engineering
Engineering & Social Sciences Program
Madrid, Spain
Dates: 1/16/20 - 5/30/20
Security Engineering
OVERVIEW
CEA CAPA Partner Institution: Universidad Carlos III de Madrid
Location: Madrid, Spain
Primary Subject Area: Computer Engineering
Instruction in: English
Transcript Source: Partner Institution
Course Details: Level 400
Recommended Semester Credits: 3
Contact Hours: 42
Prerequisites: Criptography and Computer Security.
Computer Networks.
DESCRIPTION
The course consists of five main parts:
FIRST PART
This first module introduces principles and prudent practices for the development of secure systems, together with the main classes of information system vulnerabilities and attack tools and tactics. It concludes with an overview of security measures and mechanisms and their applicability.
SECOND PART
The second module covers the malware and types. Finally introduce the current malware: ransomware, APT´s...
THIRD PART
This module covers access control models and systems, including multilevel and multilateral security systems, using a number of real-world systems as examples. It concludes with an introduction to ISO standards for the security assessment and certification of information systems and products.
FOURTH PART
Introduces threats to distributed systems and countermeasures, both at the service and mechanism level. A number of established security protocols are then studied in detail, including SSL/TLS, IPsec, and Kerberos.
FIFTH PART
This part covers physical threats against information systems, including floodings, fires, blackouts, and electromagnetic emanations, and also protection measures against them.
SIXTH PART
This module present, at first, the standardisation institutions at international, european and national level. Then, covers the security information management (ISO/IEC 27000 family) and the development of security plans, giving a detail account of all their phases, requirements and design guidelines. It also introduces methodologies for risk analysis and management, mainly MAGERIT
SEVEN PART
This final module presents the regulatory framework associated with information security, with a special emphasis on laws related to privacy rights and protection of personal data.
FIRST PART
This first module introduces principles and prudent practices for the development of secure systems, together with the main classes of information system vulnerabilities and attack tools and tactics. It concludes with an overview of security measures and mechanisms and their applicability.
SECOND PART
The second module covers the malware and types. Finally introduce the current malware: ransomware, APT´s...
THIRD PART
This module covers access control models and systems, including multilevel and multilateral security systems, using a number of real-world systems as examples. It concludes with an introduction to ISO standards for the security assessment and certification of information systems and products.
FOURTH PART
Introduces threats to distributed systems and countermeasures, both at the service and mechanism level. A number of established security protocols are then studied in detail, including SSL/TLS, IPsec, and Kerberos.
FIFTH PART
This part covers physical threats against information systems, including floodings, fires, blackouts, and electromagnetic emanations, and also protection measures against them.
SIXTH PART
This module present, at first, the standardisation institutions at international, european and national level. Then, covers the security information management (ISO/IEC 27000 family) and the development of security plans, giving a detail account of all their phases, requirements and design guidelines. It also introduces methodologies for risk analysis and management, mainly MAGERIT
SEVEN PART
This final module presents the regulatory framework associated with information security, with a special emphasis on laws related to privacy rights and protection of personal data.