Computer Security, 7.5 Credits

Contents

This course gives an overview of security aspects of computer systems. It introduces basic building blocks such as cryptographic algorithms and hashing, and presents the main security architectures of operating systems and modern mobile software stacks such as Android. The course presents defense mechanisms but also describe attacks in the following contexts: system security (e.g., memory corruption vulnerabilities), web security (e.g., SQL injection, XSS) and mobile security. The course discusses approaches to find software vulnerabilities (e.g., fuzzing), to test and validate software (e.g., program analysis), to harden software but also to exploit vulnerabilities. The course presents different families of malware, and how to reverse engineer them to understand their behavior. Hardware security attacks (e.g., cold-boot attacks), network communication security, as well as attacks on anonymity networks such as Tor are also explained.

Expected learning outcomes

Knowledge and understanding
After completing the course, the student should be able to:

• (FSR 1) understand security concepts and terminology
• (FSR 2) understand different types of malware

Competence and skills
After completing the course, the student should be able to:

• (FSR 3) identify and exploit basic security vulnerabilities in code, design, protocol
• (FSR 4) reverse engineer basic malware
• (FSR 5) use tools and/or system configurations to prevent basic attacks
• (FSR 6) comprehend literature on computer security

Judgement and approach
After completing the course, the student should be able to:

• (FSR 7) have a critical mind (in regards to security) when analyzing, designing, implementing, configuring or using a computer system

Required Knowledge

Eligibility requires 60 ECTS in Computing Science as well as
- 7.5 ECTS introductory programming in C
- 7.5 ECTS datastructures and algorithms
- 7.5 ECTS systems programming
- 7.5 ECTS databases
- 7.5 ECTS discrete mathematics

Form of instruction

The course is taught by lectures and computer labs. In addition to scheduled activities, independent work with the material is required.

Examination modes

The grade scale is Fail (U), Pass (G), or Pass with distinction (VG). The examination consists of written assignments, oral presentations, and a written exam in halls.

Support due to disability
Deviations from the syllabus' modes of assessment can be made for a student who has a decision on pedagogical support due to a disability. Individual adaptation of modes of assessment must be considered based on the student's needs. The mode of assessment is adapted within the framework of the syllabus' expected learning outcomes. At the request of the student, the course coordinator, in consultation with the examiner, shall promptly decide on an adapted mode of assessment. The decision must then be notified to the student.

Change of examiner
A student who, without receiving a passing grade, has participated in two tests for a course or part of a course, has the right to have another examiner appointed, unless special reasons militate against it (Högskoleförordningen 6 kap. 22 §). A request for a new examiner is made to the head of the Department of Computing Science.

Other regulations

This course may not be included in a degree, in whole or in part, at the same time as another course with similar content. In case of doubt, the student should consult the study counsellor at the Department of Computing Science and/or the programme coordinator for their degree programme.

If the syllabus has expired or the course has been discontinued, a student who at some point registered for the course is guaranteed at least three examinations (including the regular examination) according to this syllabus for a maximum period of two years from the syllabus expiring or the course being discontinued.