IKT447 Trust, Threats, Risk and Vulnerability
- ECTS Credits:
- 7.5
- Responsible department:
- Faculty of Engineering and Science
- Course Leader:
- Arne Øslebø
- Lecture Semester:
- Autumn
- Teaching language:
- Norwegian
- Duration:
- 1 term
The course is connected to the following study programs
- Cyber Security, Master’s Programme
Teaching language
NorwegianCourse contents
The main topics are:
- The core Cyber Security vocabulary (technical perspective)
- Trust and its properties
- Zero trust architecture
- Subjective Logic and its use in estimating trust
- The ETSI TVRA model and its use
- Risk and vulnerability assessments
- The STRIDE model, modelling strategies and methods
- Trust and threats related to privacy (PIA, Privacy-by-Design, GDPR)
- CIS Controls and its use
Learning outcomes
On successful completion of the course, the students should
- understand the core ICT security and privacy vocabulary
- understand the concepts of trust and be able to analyze a simple trust network with subjective logic
- understand the central concepts relating to threats, risk and vulnerability in ICT
- be able to do a simple risk and vulnerability assessment
- have an overview understanding of the ETSI TVRA model
- have an overview understanding of CIS Controls
- be well acquainted with the STRIDE model and methods
- be able to apply STRIDE on small projects
- be well acquainted with threats and risks associated with privacy
Examination requirements
Compulsory hand ins and presentations must be approved. Information about compulsory assignment will be given in Canvas at the start of the semester.
Teaching methods
Lectures, weekly exercises, and assignments.
The total expected workload is estimated to be approximately 200 hours for the average student. Students may find that they need to work more than this, especially if they target better grades.
Evaluation
The study programme manager, in consultation with the student representative, decides the method of evaluation and whether the courses will have a midterm- or end of term evaluation, see also the Quality System, section 4.1. Information about evaluation method for the course will be posted on Canvas.
Offered as Single Standing Module
Yes. Subject to availability or capacity.
Assessment methods and criteria
Written examination, 3 hours. Graded assessment.