Knowledge of the major information security techniques. Ability to assess the security level of some common software systems.
Course Prerequisites
Basic knowledge of computer science, computers and networks operation
Teaching Methods
Classroom lectures
Assessment Methods
Written test
Texts
- "Sicurezza dei computer e delle reti (con MyLab)"; William Stallings, Giuseppe Lo Re, Alessandra De Paola; Pearson. - "CompTIA Security+ Guida alla certificazione"; Ian Neil; Apogeo. - Lecture notes and online references provided by the instructors.
Contents
Introduction Security vs. Safety. Physical security. Information security: privacy, avaliability, integrity, authenticity. Information security threats and countermeasures.
Basic Cryptography Introduction. Historical developement. Symmetric and asymmetric ciphers. Hash functions. Digital certificates.
Digital Signature Digital documents and digital signatures. Creation, preservation and validation of digital documents. Digital documents as court evidence. Public key infrastructures. Italian and EU laws concerning digital signatures.
Communication Protection Information communication and diffusion. Synchronous and asynchronous communication. E-mail. Communication privacy protection. Phishing.
Systems and Networks Protection Access control: authentication, authorization and accounting. Physical and logical information protection. Networks protection. Firewalls. Threats to systems and communication networks. Malware.
Incident Response e Digital Forensics Incident detection and response. System audit and log analysis.
