Information security

1.

Subject title

Information security

Информациска безбедност

2.

Code

F23L3W043

3.

Study program

Примена на информациски технологии, Софтверско инженерство и информациски системи, Компјутерски науки, Software engineering and information systems, Компјутерско инженерство, Примена на информациски технологии, Софтверско инженерство и информациски системи, Компјутерски науки, Информатичка едукација, Software engineering and information systems, Компјутерско инженерство, Стручни студии за програмирање, Стручни студии за програмирање, Security, Cryptography and Coding, Cloud Computing,

4.

Organizer of the study program (unit, institute, department, division)

Faculty of Information Sciences and Computer Engineering

5.

Study cycle (first, second, third)

Прв циклус

6.

Academic year / semester

3 / Зимски

7. Number of ECTS credits

6.0

8.

Instructor

ворн. проф. д-р Христина Михајлоска проф. д-р Весна Димитрова

9.

Prerequisites for enrollment

Компјутерски мрежи или Компјутерски мрежи и безбедност

10.

Subject goals and competencies:

Studying concepts related to information security; procedures and mechanisms for protection of computer systems from security aspect; methods applied to raise the level of security against unauthorized access.

11.

Subject content:

Lectures: 1. Introduction to information security (Basic terms and definitions related to information security). 2. Basic cryptographic terms (symmetric cryptography, public key cryptography, xesh functions). 3. Cryptographic algorithms (Types of cryptographic algorithms, Diffie-Hellman key exchange, authentication encryption schemes). 4. Basic authentication terms (Authentication, authentication methods, passwords). 5. Biometric technologies (Biometrics, basic terms and types, two-factor authentication). 6. Basic authorization terms (Authorization, access control matrices). 7. Authentication models (Multilevel security models, covert channels, firewalls, IDS-systems). 8. Protocols (Simple protocols, key exchange protocols with symmetric cryptography, attacks, Kerberos). 9. Authentication protocols (Examples with attacks, Otway-Rees, Needham-Schroeder, public key infrastructure). 10. Real Protocols (SSH, SSL/TLS) 11. Malware (Types of Malware, Software Attacks). 12. Security of operating systems (OS security features, trusted OS). Exercises: 1. Introduction 2. Symmetric cryptography 3. Authentication encryption 4. Key exchange for symmetric cryptography 5. Authentication (two-factor authentication, single sign-on, web cookies) 6. Authorization (access control) 7. Authorization (firewalls, IDS) 8. Authentication protocols - tasks 9. Zero-knowledge protocols 10. Public Key Infrastructure (PKI) 11. Using the OpenSSL library for PKI 12. Reverse engineering

12.

Learning methods:

Предавања со користење на презентации, интерактивни предавања, вежби (користење на опрема и софтверски пакети), тимска работа, пример случаи, поканети гости предавачи, самостојна изработка и одбрана на проектна задача и семинарска работа.

13.

Total available time fund

6.0 ECTS x 30 hours = 180 hours

14.

Time distribution

30 + 45 + 15 + 15 + 75 = 180 hours

15.

Forms of teaching activities

15.1.

Lectures - theoretical teaching

30 hours

15.2.

Exercises (laboratory, classroom), seminars, team work

45 hours

16.

Other forms of activities

16.1.

Project tasks

15 hours

16.2.

Independent tasks

15 hours

16.3.

Homework

75 hours

17.

Grading method

17.1.

Tests

10 points

17.2.

Seminar work / project (presentation: written and oral)

15 points

17.3.

Activities and learning

10 points

17.4.

Final exam

70 points

18.

Grading criteria (points / grade)

up to 50 points

5 (five) (F)

from 51 to 60 points

6 (six) (E)

from 61 to 70 points

7 (seven) (D)

from 71 to 80 points

8 (eight) (C)

from 81 to 90 points

9 (nine) (B)

from 91 to 100 points

10 (ten) (A)

19.

Condition for signature and taking final exam

Реализирани актибвности 15.2 и 16.1

20.

Language of instruction

Македонски и англиски

21.

Quality assurance method

механизам на интерна евалуација и анкети

22.

Literature

22.1.

Mandatory literature

22.2.

Additional literature