IKT447 Trust, Threats, Risk and Vulnerability (Autumn 2025)

On successful completion of the course, the students should:

• understand the core cyber security and privacy vocabulary
• understand the central concepts relating to threats, risk and vulnerability in ICT
• understand the concepts of risk management in cyber security and be able to implement risk and threat assessments
• understand the concepts of Cyber Threat Intelligence (CTI) and have an overview of different information sources ad tools for CTI and how it can be used to lower risk and vulnerabilities. e.g. "Grunnprinsipper for IKT sikkerhet" by Norwegian National Security Authority (NSM) or ATT&CK MITRE TTP
• understand threat profiling/threat analysis frameworks such as STRIDE model and methods
• be well acquainted with threats and risks associated with privacy
• be well acquainted with threats to cloud and hybrid cloud infrastructure

The main topics are:

• The core Cyber Security vocabulary (technical perspective)
• Trust and its properties
• Risk and vulnerability assessments
• The STRIDE model, modelling strategies and methods
• Trust and threats related to privacy (PIA, Privacy-by-Design, GDPR)
• Secure-by-design and privacy-by-design concepts
• Common threats to cloud and hybrid cloud infrastructure
• and other emerging topics (e.g. AI security, LLMs, Industrial Control Systems-ICS, IoT security)

Lectures, weekly in-class exercises, and Obligatory assignments.

The total expected workload is estimated to be approximately 210 hours for the average student. Students may find that they need to work more than this, especially if they target better grades.