Cyber Security

This course explores network security basics, including how hackers access online networks and the use of Firewalls and VPNs to provide security countermeasures. Students focus on both managerial and technical aspects of security. Coverage includes packet filtering, authentication, proxy servers, encryption, bastion hosts, virtual private networks (VPNs), log file maintenance, and intrusion detection systems.

This course is designed to explore the evolving connection between information technology (IT) and legal, ethical and regulatory considerations. Students will acquire a thorough understanding of the critical legal and ethical challenges that arise in the context of IT usage and its impact on society.

Students will explore emerging security topics, including privacy rights, intellectual property, cybersecurity, data protection, digital governance, and social implications of emerging technologies. By exploring real-world case studies, existing legal frameworks, and ethical scenarios, students will develop the analytical skills required to critically evaluate and navigate the legal and ethical landscape of IT society. The course will foster critical thinking and trigger discussions on controversial issues, encouraging students to examine the broader societal implications of technological advancements.

By the end of the course, students will have built a solid foundation in the legal and ethical principles that govern modern IT society. Students will be able to analyze, evaluate, and articulate legal and ethical arguments related to IT issues, and make rational decisions that incorporate the diverse perspectives and potential consequences in the context of the digital landscape.

Student will recognize the significance of security policies in safeguarding the organization's assets, mitigating risks, and adhering to regulatory requirements. Students will explore the fundamental concepts, principles, methodologies, and techniques associated with developing, implementing, and enforcing security policies across an organization.

Preparing students to recognize and understand the inherent vulnerabilities of Windows systems by using and understanding tools and techniques to decrease the risks arising from vulnerabilities in Microsoft Operating Systems and applications, this course introduces defence strategies through understanding of system and file permissions, password and account security, the Windows Registry, Malware prevention, encryption, and Directory Service management via policies.

Students will acquire an understanding of the principles, techniques, and best practices for securing wireless networks and mobile devices. The swift evolution of wireless communication technologies and the prevalent use of mobile devices have given birth to new security challenges that need to be addressed to protect sensitive information from unauthorized exposure and modification and ensure availability of wireless networks.

Students will explore several wireless technologies, including Wi-Fi, Bluetooth, and cellular networks, and learn about the vulnerabilities and threats geared towards these technologies. Students will also learn about security protocols and mechanisms that are used to secure wireless networks and mobile devices, including authentication, encryption, access control, and intrusion detection systems.

This course provides students with concepts of discovering and exploiting flaws in mobile applications on the iOS, Android, Blackberry, and Windows Mobile platforms. Students are introduced to a proven methodology for approaching mobile application assessments and the techniques used to prevent, disrupt and remediate the various types of attacks. Coverage includes data storage, cryptography, transport layers, data leakage, injection attacks, runtime manipulation, security controls, and cross-platform apps, with vulnerabilities highlighted and detailed information on the methods hackers use to get around standard security.

This course prepares students to assess and then correct vulnerabilities present within information systems. Students are introduced to tools and penetration testing methodologies used by ethical hackers. What and who ethical hackers are and how they protect corporate and government data from cyber-attacks is discussed. Methods and tools used in attacks and their countermeasures as well as available security resources and attack "types" systems are also investigated.

Students will examine the realm of network security principles and techniques, as well as acquire hands-on experience in conducting penetration tests to discover vulnerabilities in computer networks. The course explores a wide range of security measures, tools, and methodologies used to protect network infrastructure from potential threats and attacks.

Students will explore network security concepts, including network architecture, protocols, encryption, access control, intrusion detection and prevention systems, firewalls, and virtual private networks (VPNs). Students will learn about different types of attacks and threats, such as malware, phishing, DoS (Denial of Service), and DDoS (Distributed Denial of Service), and study methods to detect, prevent, and mitigate these risks.

Students will explore various tools and techniques used by security professionals to conduct penetration tests, including reconnaissance, scanning, enumeration, exploitation, and post-exploitation. The course will also provide oversight into common penetration testing methodologies and frameworks, such as the Open Web Application Security Project (OWASP) Testing Guide and the Penetration Testing Execution Standard (PTES).

The objective of this course is to introduce computer forensics and methods of investigations. Students examine and discover information through computer forensics, triage and eDiscovery methods.. Students are introduced to digital forensic tools in order to acquire, preserve, and manage digital evidence to support investigations. They will also learn to analyze cyber intrusion, examine organizational policy violations and resolve disputes. Important concepts such as chain of custody and documentation of evidence/procedures are also covered. Students evaluate how to conduct a high-tech investigation, from acquiring digital evidence to reporting its findings.

This course integrates the knowledge and skills students have obtained throughout the program. Emphasis is placed on security policy, process planning, procedure definition, business continuity, and systems security architecture. Upon completion, students are able to design and implement comprehensive information security architecture from the planning and design phase through presentation of the final product.

Prerequisite(s):

• ISN-1103 Security Policies

This course provides students with a detailed exposure to the methods, tools, and strategies used by bad actors (i.e. hackers) to breach and compromise computer systems and networks. Students will explore various hacking techniques and acquire hands-on experience in incident handling and response.

Students will get into the mindset of hackers, gaining insights into their motives, methodologies, and techniques. They will learn about common attack vectors including network scanning, vulnerability exploitation, password cracking, social engineering, and malware deployment. By gaining exposure to the techniques employed by hackers, students will be equipped to defend and secure computer systems and networks against potential risks and threats.

The course covers a wide variety of tools and technologies used in both offensive and defensive security. Students will have opportunities to explore popular hacking tools, including network analyzers, vulnerability scanners, password-cracking utilities, and intrusion detection systems. Practical exercises and simulations will enable students to apply these tools in real-world scenarios, honing their skills in identifying, mitigating, and responding to security incidents.

The incident handling aspect of the course focuses on preparing students to effectively respond to security incidents. Students will develop incident response plans, and practice analyzing and containing security breaches within the boundaries of the law and respecting individual privacy rights.