Credits: 3 (3-0-0) Prerequisites: None

This course introduces cybersecurity and provides students with essential computer and networking knowledge and skills, particularly those related to cybersecurity. This course also provides insight into the many variations of vulnerabilities, attack mechanisms, intrusion detection systems, and some methods to mitigate cybersecurity risks.

Credits: 3 (3-0-0) Prerequisites: None

It is often advantageous to adopt a holistic approach when dealing with organizational security. One of the main advantages is considering the behavior of individual components, the interactions between these components and the resulting behavior of the systems. This course tales a holistic system approach to introduce and present all topics related to information systems security. The course starts by introducing the basic security concepts and principles, then moves to provide a general overview of system security governance and management through security policies and strategies. The course then introduces the important security-by-design principles and explains how security requirements can be integrated in the systems at design time. After that the course provides a general overview of risks, threats, attacks and vulnerabilities. Once the basic principles and concepts are in place, the course moves to describe how the security of individual IT systems components can be handled using some examples. This covers all types of components from processors, memory up to large distributed systems. Next, the course introduces symmetric and public key cryptography. In the process, the PKI system is introduced using simple examples and applications. Now courses on information security without covering authentication and access control. Both topics are covered in some detail.

Credits: 3 (3-0-0) Prerequisites: None

The main purpose of this course is to describe how organizations can develop and implement effective cybersecurity defense strategies. The course starts by indicating how the threat landscape dynamics and evolving attacking types are impacting organizations’ security postures. It then moves to describe how organizations can develop effective cyber defense strategies taking into consideration the dynamics of the field and the emerging cyber defense approaches. The starting point in developing modern adaptive cyber defense strategies is modeling and simulating the tactics of modern attacks such as advanced persistent threats. The Cyber Kill Chain is one of the main models used to emulate the behavior of attackers. Based on the scenarios provided by the Cyber Kill Chain, the course describes sample pragmatic strategies that can be used to detect and handle advanced threats using threat intelligence and related attacker tactics/techniques.

Credits: 3 (3-0-0) Prerequisites: CYS533

This course introduces recent tools and techniques used by cybercriminals and malware authors. Investigation of cyber-security threats through an analysis of computer systems and communication methods. Develop skills for identifying potential attacks, analyzing problems, and implementing solutions. Students learn to minimize vulnerabilities and defend against attacks in the cyber world. Understanding cyber-attacks are also required in order to be able to implement the correct security controls.

Credits: 3 (3-0-0) Prerequisites: CYS531 + CYS532

This course explores an in-depth examination of cybersecurity laws and controls that are established and implemented in order to develop safe practices within organizations’ environment. Based on cybersecurity roles and responsibilities, students will research and develop business and governmental policies and regulations related to cybersecurity. Students will also learn how to create compliance reports with information security policies. The course will also address cyberspace related legal issues, such as privacy, intellectual property, cybercrime, emerging technology, national security, and global cybersecurity. The course will prepare students for knowledge of security risk management processes and their components.