Module Directory

This module delves into the concept of security by design, emphasizing the importance of building robust systems from the ground up to minimize vulnerabilities. By integrating security measures at the earliest stages of system development, the module highlights how risks can be significantly reduced. Students will explore key principles of secure design, focusing on proactive strategies to identify and mitigate weaknesses before they can be exploited. Through case studies and real-world examples, the module provides a comprehensive understanding of how security can be embedded into the architecture of both software and hardware systems.

In addition, the module connects the concept of security by design to a detailed understanding of how threats can be addressed at multiple levels, from the application layer to the network and infrastructure layers. It examines various types of security threats and the appropriate countermeasures for each, ensuring that learners are equipped with the knowledge to implement multi-layered defense strategies. By focusing on both theoretical frameworks and practical solutions, the module enables students to not only understand how to design secure systems but also how to continuously adapt to emerging threats in an ever-evolving digital landscape.

The aims of this module are:

• To instil a security by design methodology within the understanding of cyber security.


• To provide students with in-depth knowledge and practical experience on analysing and designing secure software systems using appropriate methodological approaches.

By the end of this module, students will be expected to be able to:

1. Evaluate and apply theoretical and practical approaches to modelling and analysing security requirements.


2. Conduct threat analysis.


3. Synthesise security models using state-of-the-art research methodologies.


4. Appraise the role of human factors in cyber security.

Indicative syllabus information

• Security requirements engineering methodologies and tools
  
  
  
  • Practical demonstration of security-by-design concepts
  
  
  
  


• Human factors in cybersecurity
  
  
  
  • Usable security
  
  
  • Insider threats
  
  
  • Psychology of security
  
  
  
  


• Design and implementation methodologies
  
  
  
  • Minimizing the risk of vulnerabilities
  
  
  
  


• Risk modeling and risk-based decision making


• Threat landscape and adversarial thinking


• Common attacks
  
  
  
  • Human and technical attacks
  
  
  
  


• Malicious code and situational awareness


• Computer Emergency Response Teams (CERTs)


• Secure software practices, guidelines, and standards


• Social engineering


• Malware analysis
  
  
  
  • Static and dynamic analysis
  
  
  • Detection techniques
  
  
  
  


• Penetration testing

This module will be delivered via:

• Two 1-hour lecture per week (10 weeks)
• One 2-hour laboratory per week (10 weeks)
• Two 1-hour revision lectures in Summer Term

Inclusivity is ensured in the following ways: lecturers and other teachers are informed at the start of the term about students with special needs; student voice groups allow representatives to discuss issues surrounding learning for minorities.