IKT447 Trust, Threats, Risk and Vulnerability (Autumn 2020)
- ECTS Credits:
- 7.5
- Responsible department:
- Faculty of Engineering and Science
- Course Leader:
- Arne Øslebø
- Lecture Semester:
- Autumn
- Teaching language:
- Norwegian
- Duration:
- ½ year
Table of contents
The course is connected to the following study programs
- Cyber Security, Master’s Programme
- Artificial Intelligence and The Internet of Things, Master's Programme
- Master's Programme in Industrial Economics and Technology Management
Teaching language
Learning outcomes
On successful completion of the course, the students should
- understand the core ICT security and privacy vocabulary
- understand the concepts of trust and be able to analyze a simple trust network with subjective logic
- understand the central concepts relating to threats, risk and vulnerability in ICT
- be able to do a simple risk and vulnerability assessment
- have an overview understanding of the ETSI TVRA model
- have an overview understanding of CIS Controls
- be well acquainted with the STRIDE model and methods
- be able to apply STRIDE on small projects
- be well acquainted with threats and risks associated with privacy
Contents
The main topics are:
- The core Cyber Security vocabulary (technical perspective)
- Trust and its properties
- Zero trust architecture
- Subjective Logic and its use in estimating trust
- The ETSI TVRA model and its use
- Risk and vulnerability assessments
- The STRIDE model, modelling strategies and methods
- Trust and threats related to privacy (PIA, Privacy-by-Design, GDPR)
- CIS Controls and its use
Teaching and learning methods
Lectures, weekly exercises, and assignments.
The total expected workload is estimated to be approximately 200 hours for the average student. Students may find that they need to work more than this, especially if they target better grades.