IKT701 Dynamics of Computer Security Incident Response Teams

The course is connected to the following study programs

• Information and Communication Technology, PhD Programme
• PhD Programme in Engineering and Science

Teaching language

English.

Recommended prerequisites

IKT624 or equivalent.

Course contents

The course will cover the following:

• In-depth review of current implementations of Computer Security Incident Response Teams (CSIRTs).

• Model-based analysis of selected CSIRTs based on cases from literature and/or organisations (if available).

• The role of CSIRTs as emergent Cyber Security Reporting Systems.

Learning outcomes

After completing the course, the student is expected to:

• have thorough insight into current research topics in CSIRTs

• be able to do research work related to incident response handling, CSIRTs and IDS (Intrusion Detection Systems)

Examination requirements

Approved project report.

Assessment methods and criteria

Oral examination. Pass/Fail.

Reduction of Credits

This course’s contents overlap with the following courses. A reduction of credits will occur if one of these courses is taken in addition:

Course	Reduction of Credits
IKT614 – Dynamics of Computer Security Incident Response Teams	5