Faculty of Technical Sciences

Subject: Cyber Incident Analysis and Response (19.IB23)

General information:
 
Category Scientific-professional
Scientific or art field Primenjeno softversko inženjerstvo
ECTS 6

The goal of this course is to teach students the necessary skills required for designing and building incident response teams. This goal will be achieved via a detailed presentation and discussion of the threats, vulnerabilities, attack types and attack modelling techniques utilized in cyberspace. The relevant regulatory framework will be overviewed.

The students are able to enumerate the different cyber threat and vulnerability types. They are able to create detailed cyber attack analysis and modeling. The students are able to analyze malware samples. They are familiar with the types of incident response teams. The students are familiar with the methodology for developing and managing Security Operations Centers. They are aware of the relevant regulations and ethics surrounding the incident analysis and response domain.

Cybersecurity and privacy principles. Cyber threats and vulnerabilities. Different classes of attacks, cyber attackers behavior models. Modeling the cyber attack stages. Basics of malware analysis – concepts and methodologies. Incident categories, incident responses, and timelines for responses. Organization and management of Security Operations Centers (SOC). Types of incident response teams, e.g. military, national, company-level. Laws, regulations, standards, policies and ethics in cybersecurity and privacy.

Lectures; Other forms of teaching; Consultations.

Authors Title Year Publisher Language
N.K. McCarthy, Matthew Todd, Jeff Klaben The Computer Incident Response Planning Handbook: Executable Plans for Protecting Information at Risk 2012 McGraw-Hill Education English
Eric C. Thompson Cybersecurity Incident Response: How to Contain, Eradicate, and Recover from Incidents 2018 Apress English
Monnappa K A Learning Malware Analysis: Explore the concepts, tools, and techniques to analyze and investigate Windows malware 2018 Packt Publishing English
André Årnes Digital Forensics (1st Edition) 2017 Wiley English
Scott N. Schober Hacked Again 2016 ScottSchober.com Publishing English
Course activity Pre-examination Obligations Number of points
Test Yes Yes 20.00
Exercise attendance Yes Yes 5.00
Project Yes Yes 50.00
Oral part of the exam No Yes 20.00
Lecture attendance Yes Yes 5.00
API Image

Assoc. Prof. Selakov Aleksandar

Associate Professor

Lectures
API Image

Assoc. Prof. Kovačević Mladen

Associate Professor

Lectures

Assistant - Master Đorđević Filip

Assistant - Master

DON - drugi oblici nastave

Faculty of Technical Sciences

© 2024. Faculty of Technical Sciences.

Contact:

Address: Trg Dositeja Obradovića 6, 21102 Novi Sad

Phone:  (+381) 21 450 810
(+381) 21 6350 413

Fax : (+381) 21 458 133
Emejl: ftndean@uns.ac.rs

© 2024. Faculty of Technical Sciences.