Safety and Security of Information Systems | Faculty of Technical Sciences

Subject: Safety and Security of Information Systems (17.IZOO23)

Type of studies	Title
Undergraduate Academic Studies	Information Systems Engineering (Year: 4, Semester: Winter)

General information:

Category	Theoretical-methodological
Scientific or art field	Inženjerstvo informacionih sistema Mehatronika, robotika, automatizacija i integrisani sistemi Information-Communication Systems
ECTS	5

The aim of this course is to introduce students to selected approaches and methods in the filed of safety and security of information systems, with a special focus on applying natural language processing methods in automatic security analyses.

On completion of this course, students are expected to be able to understand, explain, apply and critically evaluate the introduced approaches and methods in particular contexts of use.

Exploits and prevention of stack overflow attacks; automatic cryptanalysis of substitution ciphers based on statistical language models (n-grams), genetic algorithms and a gradient ascent method; evolutionary approach to automatic analysis of software security flaws based on fuzzy testing, genetic algorithms, context free grammars and Markov chains; automatic classification of unstructured texts based on naive Bayesian classification and logistic regression (i.e., maximum entropy modeling), automatic authorship attribution and malicious code detection based on n-grams.

Lectures introduce the content of this course and present examples and analysis of selected problem scenarios in the field of safety and security of information systems. These are supported by practical exercises in laboratory sessions. In the exercises, students will be encouraged to work individually and in groups to develop systems implementing the methods introduced in lectures.

Authors	Title	Year	Publisher	Language
Noriswadi Ismail, Edwin Lee Cieh	Beyond Data Protection: Strategies Case Studies and Practical Guidance	2012	Springer	English
ISO/IEC	Information security management systems Requirements	2013	ISO/IEC	English
Gutwirth, S., Poullet, Y., De Hert, P.	Computers, Privacy anad Data Protection: an Element of Choice	2011	Springer	English
Paul Lambert	A Users Guide to Data Protection	2013	Bloomsbury Professional	English

Course activity	Pre-examination	Obligations	Number of points
Computer exercise attendance	Yes	Yes	5.00
Written part of the exam - tasks and theory	No	Yes	40.00
Oral part of the exam	No	Yes	10.00
Term paper	Yes	Yes	20.00
Lecture attendance	Yes	Yes	5.00
Test	Yes	Yes	10.00
Test	Yes	Yes	10.00