Cyber threats analysis

Cyber threats analysis

1.

Subject title

Cyber threats analysis

Анализа на сајбер закани

2.

Code

IT-Z-01

3.

Study program

Internet Technologies and cyber security, Data science in computer science and engineering, IT management, Security, Cryptography and Coding, Cloud Computing, Bioinformatics, Еducation with ICT, Eco-informatics, Inteligent Systems, Computer Science, Software for embedded systems, Software Engineering, Cloud Computing, IT management, Bioinformatics, Security, Cryptography and Coding, Software Engineering, Statistics and Data Analytics, Statistics and Data Analytics,

4.

Organizer of the study program (unit, institute, department, division)

Faculty of Information Sciences and Computer Engineering

5.

Study cycle (first, second, third)

Втор циклус

6.

Academic year / semester

5 / Зимски

7. Number of ECTS credits

6.0

8.

Instructor

проф. д-р Анастас Мишев проф. д-р Соња Филипоска

9.

Prerequisites for enrollment

10.

Subject goals and competencies:


The course will enable students to become familiar with the fundamental concepts and tools of modern cyber threat analysis. Students will gain knowledge of the life cycle of cyber threat analysis, the identification, collection and integration of threat information and information recording formats.

11.

Subject content:


Understanding threat analysis. Traditional life cycle and structured analytical techniques. SIEM. Defining threats, understanding the associated risks. Threat detection methods. Consumption of threat information for various purposes. Building a team for cyber threat analysis, planning, directing, developing requirements and objectives. Kill chain model. Diamond model. Information collection sources:: domains, external datasets, TLS/SSL certificates, open source intelligence. Data storage and structuring. Structured analysis techniques. Hypothesis research. Building campaigns. Tactical and operational dissemination. Standard technologies for cyber threat analysis (eg, CIF servers, TAXII servers, SIEM`s and others). Uncovering the culprit.

12.

Learning methods:


Предавања поддржани со презентации преку слајдови, интерактивни предавања, вежби (користење на опрема и софтверски пакети), тимска работа, пример случаи, поканети гости предавачи, самостојна изработка и одбрана на проектна задача и семинарска работа, учење во електронско опкружување (форуми, консултации).

13.

Total available time fund

6.0 ECTS x 30 hours = 180 hours

14.

Time distribution

45 + 15 + 30 + 50 + 40 = 180 hours

15.

Forms of teaching activities

15.1.

Lectures - theoretical teaching

45 hours

15.2.

Exercises (laboratory, classroom), seminars, team work

15 hours

16.

Other forms of activities

16.1.

Project tasks

50 hours

16.2.

Independent tasks

30 hours

16.3.

Homework

40 hours

17.

Grading method

17.1.

Tests

45 points

17.2.

Seminar work / project (presentation: written and oral)

50 points

17.3.

Activities and learning

10 points

17.4.

Final exam

0 points

18.

Grading criteria (points / grade)

up to 50 points

5 (five) (F)

from 51 to 60 points

6 (six) (E)

from 61 to 70 points

7 (seven) (D)

from 71 to 80 points

8 (eight) (C)

from 81 to 90 points

9 (nine) (B)

from 91 to 100 points

10 (ten) (A)

19.

Condition for signature and taking final exam

реализирани активности

20.

Language of instruction

македонски и англиски

21.

Quality assurance method

Механизам на интерна евалуација и анкети

22.

Literature

22.1.

Mandatory literature

No.

Author

Title

Publisher

Year

6889

Kyle Wilhoit, Joseph Opacki

Operationalizing Threat Intelligence: A guide to developing and operationalizing cyber threat intelligence programs

Packt Publishing

2022

6890

Aaron Roberts

Cyber Threat Intelligence: The No-Nonsense Guide for CISOs and Security Managers

Apress

2021

6891

Valentina Costa-Gazcón

Practical Threat Intelligence and Data-Driven Threat Hunting: A hands-on guide to threat hunting with the ATT&CK™ Framework and open source tools

Packt Publishing

2021

22.2.

Additional literature

No.

Author

Title

Publisher

Year