Course content

The way systems are developed and operated is changing. Professionals who, in the past, might have been regarded as conventional end-users, now play a role in the development and operation of information systems. Contemporary engineers and scientists are now expected to possess a range of information technology skills. However, we see many public examples of where these skills are not well equipped: security and privacy breaches are reported for information systems, medical devices, industrial control systems, and more.

The objective of this introductory course is to provide basic competence in a selection of contemporary information security and privacy topics. It is intended for students who expect to play a role in the development and operation of information systems. Through attempting at exercises and practical challenges, students are supposed to develop a comprehensive and balanced understanding of information security and privacy issues while practicing basic research skills of information security and privacy topics.      

Learning outcome

After having completed the course the student will have acquired the following learning outcomes in terms of knowledge, skills and general competence:

Knowledge:

• Has broad knowledge of important topics, theories, issues, processes, tools and methods within information security and privacy
• Is familiar with research and development work in information security and privacy
• Can update his/her knowledge in information security and privacy
• Has knowledge of the history, traditions, distinctive character and place in society of the academic field.
• Develop domain-related security and privacy knowledge closely related to the students’ own academic fields.

Skills:

• Can apply academic knowledge and relevant results of research and development work in information security and privacy to practical and theoretical problems within other domains and make well-founded choices
• Can reflect upon his/her own academic practice and adjust it under supervision
• Can find, evaluate and refer to information and scholarly subject matter and present it in a manner that sheds light on the problem
• Masters relevant scholarly tools, techniques and forms of communication
• Can choose suitable methodology to tackle a practical challenge

General Competence:

• Can analyse relevant academic, professional and research ethical problems
• Can apply his/her knowledge and skills in new areas in order to carry out advanced assignments and projects
• Can communicate extensive independent work and master language and terminology of the academic field
• Can communicate about academic issues, analyses and conclusions in the field, both with specialists and the general public
• Can contribute with perspectives related to information security and privacy in new thinking and innovation processes.
• Can attempt at specific security and privacy challenges in real life

Learning methods and activities

The course combines lectures, tutorials, domain-related exercises, a megagame, and challenge-based learning grounded in real-world problems. For both exercises and challenges, students are encouraged to work on topics aligned with their primary academic interests, as long as they relate to information security and privacy.

Canvas is used as the digital learning platform, and Teams is used for lectures and tutorials. The course consists of two modules:

Module I: Lectures and Self-Learning. Students engage with the course content through lectures, the megagame, provided learning materials, and independent study. Assessment is based on exercises that students select themselves, each tied to their own academic field. All exercises in this module must be completed individually.

Module II: Challenge-Based Learning. Students address real-world security and privacy challenges collected each year. Each student or team (up to three students) selects two challenges to work on and is evaluated based on the quality of their proposed solution.

All exercises and challenges have fixed deadlines.

This is a multi-campus course. All lectures, tutorials, and invited talks are delivered online. If needed, one in-person tutorial session may be arranged at each campus.

Recommended previous knowledge

Recommend as K-course for integrated 5 years master educations and elective course for 3 years engineering educations.

Required previous knowledge

none

Course materials

• M. Whitman og H. Mattord: Principles of Information Security, CENGAGE, 7. Utgave, 2021
• Distributed material

Credit reductions