Computer Security

The course can be part of the following programmes:

1. Computer Science, Bachelor's Programme (N1COS)
2. Computer Science, Master's Programme (N2COS)
3. Applied Data Science Master's Programme (N2ADS)

The course is a also a single-subject course at Gothenburg University.

To be eligible for the course students should have successfully completed courses corresponding to 60 hec within the subject Computer Science or equivalent. A 7.5 hec course in Programming is required.

Applicants must prove knowledge of English: English 6/English level 2 or the equivalent level of an internationally recognized test, for example TOEFL, IELTS.

The course gives basic knowledge in the security area, i.e. how to protect your system against intrusions and attacks. The purpose of intrusions can be to change or delete resources (data, programs, hardware, etc), to get unauthorized access to confidential information or unauthorized use of the system's services. The course covers threats and vulnerabilities in the computer systems and networks, as well as rules, methods and mechanisms for protection. Modeling and assessment of security and dependability as well as metrication methods are covered. A holistic security approach is taken and organizational, business-related, social, human, legal and ethical aspects are treated.

The following topics will be covered, among others:

• Introduction to computer security
• Overview of security threats
• Introduction to cryptography
• Security in operating systems
• Security mechanisms including authentication, authorization, and access control
• Introduction to Network Security and Intrusion detection systems
• Security Models: Bell-LaPadula, Biba, Chinese wall etc.
• Security management, organization and ethics

After completing the course the student is expected to be able to:

Knowledge and understanding

• explain the fundamental goals of computer security,
  describe several security vulnerabilities and possible protection mechanisms,
• describe common methods for security assessment and evaluation as well as problems with current security metrication

Competence and skills

• analyze the security of different types of systems and suggest improvements
• use a few methods for security modeling
• demonstrate his or her skill in technical writing

Judgement and approach

• assess the advantages and disadvantages between different protection mechanisms
• judge the consequences of insecurity
• Keep an informed argument of the ethical and social aspects of computer security

The course consists of a series of lectures and exercises in a laboratory. Normally, one or two lectures are given by lecturers from industry, who give an application perspective on security.

The exercises in the laboratory focus on a few common security mechanisms.

Language of instruction: English

The course is examined by laboratory exercises done in groups and through individual mandatory assignments, where a voluntary test is included.

If a student who has been failed twice for the same examination element wishes to change examiner before the next examination session, such a request is to be granted unless there are specific reasons to the contrary (Chapter 6 Section 22 HF).

If a student has received a certificate of disability study support from the University of Gothenburg with a recommendation of adapted examination and/or adapted forms of assessment, an examiner may decide, if this is consistent with the course’s intended learning outcomes and provided that no unreasonable resources would be needed, to grant the student adapted examination and/or adapted forms of assessment.

If a course has been discontinued or undergone major changes, the student must be offered at least two examination sessions in addition to ordinary examination sessions. These sessions are to be spread over a period of at least one year but no more than two years after the course has been discontinued/changed. The same applies to placement and internship (VFU) except that this is restricted to only one further examination session.

If a student has been notified that they fulfil the requirements for being a student at Riksidrottsuniversitetet (RIU student), to combine elite sports activities with studies, the examiner is entitled to decide on adaptation of examinations if this is done in accordance with the Local rules regarding RIU students at the University of Gothenburg.

Sub-courses

1. Laboratory, 1.5 credits
   Grading scale: Pass (G) and Fail (U)
2. Assignments, 6 credits
   Grading scale: Pass with distinction (5), Pass with credit (4), Pass (3) and Fail (U)

The grading scale comprises: Pass with distinction (5), Pass with credit (4), Pass (3) and Fail (U).

In order to be awarded the grade 3 for the whole course, the student must pass the laboratory exercises and the mandatory assignments.
In order to be awarded the grade 4 or 5 for the whole course, the student must get the grade 4 respective 5 on the sub-course assignments and pass the other sub-courses.

The course is evaluated through meetings both during and after the course between teachers and student representatives. Further, an anonymous questionnaire is used to ensure written information. The outcome of the evaluations serves to improve the course by indication which parts could be added, improved, changed or removed.

The course is a joint course together with Chalmers.

The course replaces the course DIT641, 7.5 credits. The course cannot be included in a degree which contains DIT641. Neither can the course be included in a degree which is based on another degree in which the course DIT641 is included.