Učni načrt predmeta

Predmet:

Varnost v internetnih tehnologijah

Course:

Security in Internet Technologies

Študijski program in stopnja / Study programme and level	Študijska smer / Study field	Letnik / Academic year	Semester / Semester
Informacijske in komunikacijske	Napredne internetne tehnolog	ije 1	1
Information and Communication	Advanced Internet Technologi	es 1	1

Vrsta predmeta / Course type

Izbirni

Univerzitetna koda predmeta / University course code:

IKT3-668

Predavanja Lectures	Seminar Seminar	Vaje Tutorial	Klinične vaje work	Druge oblike študija	Samost. delo Individ. work	ECTS
15	15			15	105	5

*Navedena porazdelitev ur velja, če je vpisanih vsaj 15 študentov. Drugače se obseg izvedbe kontaktnih ur sorazmerno zmanjša in prenese v samostojno delo. / This distribution of hours is valid if at least 15 students are enrolled. Otherwise the contact hours are linearly reduced and transfered to individual work.

Nosilec predmeta / Course leader:

doc. dr. Tomaž Klobučar

Sodelavci / Lecturers:

Jeziki / Languages:

Predavanja / Lectures:

slovenščina, angleščina / Slovenian, English

Vaje / Tutorial:

Pogoji za vključitev v delo oz. za opravljanje študijskih obveznosti:

Prerequisites:

Zaključen študij druge stopnje s področja informacijskih ali komunikacijskih tehnologij ali zaključen študij druge stopnje na drugih področjih z znanjem osnov s področja predmeta. Potrebna so tudi osnovna znanja matematike, računalništva in informatike.

Completed second cycle studies in information or communication technologies or completed second cycle studies in other fields with knowledge of fundamentals in the field of this course. Basic knowledge of mathematics, computer science and informatics is also requested.

Vsebina:

Content (Syllabus outline):

Uvod: predstavitev osnovnih pojmov, grožnje, napadi, varnostne storitve in mehanizmi

Varnostni modeli: formalni varnostni modeli, principi načrtovanja varnih internetnih tehnologij

Napredni kriptografski mehanizmi: simetrična in asimetrična kriptografija, izmenjava ključev, enosmerne zgoščevalne funkcije, digitalni podpis, časovni žig, mehanizmi overjanja

Avtorizacija in nadzor dostopa: upravljanje in izvedba nadzora dostopa, požarni zid, sistemi za odkrivanje vdorov, SAML

Omrežni varnostni protokoli: varnostne storitve in mehanizmi v različnih omrežnih slojih (npr. IPsec), zaščita v različnih tipih omrežij, varnost brezžičnih omrežij (IEEE 802.11, IEEE 802.16)

Varnostne infrastrukture: infrastruktura javnih ključev, infrastruktura za upravljanje s privilegiji, infrastruktura za uporabo čezmejnih storitev

Izbrana poglavja iz varnosti naprednih internetnih tehnologij (npr. varnost pri računalništvu v oblaku)

Introduction: presentation of basic concepts, threats, attacks, security services and mechanisms

Security models: formal security models, security design principles

Advanced cryptographic mechanisms: symmetric and asymmetric cryptography, key management, one-way hash functions, digital signature, timestamp, authentication mechanisms

Authorisation and access control: management and implementation of access control, firewall, intrusion detection system, SAML

Network security protocols: security services and mechanisms at different network layers (e.g. IPsec), protection in different types of networks, wireless networks security (IEEE 802.11, IEEE 802.16)

Security infrastructures: public-key infrastructure, privilege management infrastructure, infrastructure for cross-border services

Selected topics in advanced internet technologies security (e.g. security in cloud computing)

Temeljna literatura in viri / Readings:

Izbrana poglavja iz naslednjih knjig: / Selected chapters from the following books:
- W. Stallings and L. Brown, Computer Security: Principles and Practice, 4th Edition, Pearson, 2018, ISBN
978-0134794105.
- M. Bishop, Computer Security: Art and Science, Second Edition Addison-Wesley, 2019, ISBN 978-0321712332.
- R. Anderson, Security Engineering: A Guide to Building Dependable Distributed Systems, Second
Edition. Wiley Computer Publishing, 2008, ISBN 978-0470068526.

Izbrani znanstveni članki iz revij s področja varnosti internetnih tehnologij, npr. Computers & Security, Network Security, Journal of Computer Security, International Journal of Information Security / Selected scientific articles in the area of information technologies security, e.g. Computers & Security, Network Security, Journal of Computer Security, International Journal of Information Security.

Cilji in kompetence:

Objectives and competences:

Namen predmeta je študentom predstaviti varnostne probleme v internetu in osnovne varnostne storitve in mehanizme za izboljšavo ravni varnosti v internetnih tehnologijah.

Študenti bi morali biti sposobni:
- analizirati stanje varnosti in oceniti varnostne grožnje,
- izbrati ustrezne metode za zagotovitev varnosti internetnih tehnologij,
- načrtovati zaščito informacijskega sistema in njegovih virov,
- zadostiti varnostnim zahtevam pri razvoju informacijskih aplikacij in rešitev,
- razvijati varnostne ukrepe,
- nadaljevati raziskovalno-razvojno delo na področju informacijske varnosti.

The main objective of this course is to present security problems in Internet and basic security services and mechanisms that can be used to increase the security level in internet technologies.

Students should be able to:
- Analyze an information system with respect to security and evaluate security threats,
- Select appropriate methods for internet technology security provision,
- Design how to protect an information system and its resources,
- Ensure that security requirements are met when developing information applications and solutions,
- Develop security measures,
- Continue research and development work in the area of information system security.

Predvideni študijski rezultati:

Intendeded learning outcomes:

Študenti bodo z uspešno opravljenimi obveznostmi tega predmeta pridobili:
- poznavanje varnostnih problemov v internetu in ustreznih tehnoloških zaščitnih ukrepov,
- sposobnost analize stanja varnosti in ocene varnostne grožnje,
- sposobnost izbire ustreznega varnostnega mehanizma v danem kontekstu,
- sposobnost evalvacije ustreznosti varnostnih mehanizmov,
- sposobnost priprave znanstvenih rezultatov na področju.

Students successfully completing this course will acquire:
- Knowledge on internet security problems and relevant internet protection technologies,
- Ability to analyse state of security and evaluate security threats,
- Ability to select an appropriate security mechanism in a particular context,
- Ability to evaluate security mechanisms,
- Ability to provide research results in the field.

Metode poučevanja in učenja:

Learning and teaching methods:

Predavanja, seminar, konzultacije, individualno delo

Lectures, seminar, consultations, individual work

Načini ocenjevanja:

Delež v % / Weight in %

Assesment:

Seminarska naloga

50 %

Seminar work

Ustni ali pisni izpit

50 %

Oral or written exam

Reference nosilca / Lecturer's references:

1.	R. Kaur, D. Gabrijelčič, T. Klobučar, "Artificial intelligence for cybersecurity: literature review and future research directions", Information fusion. [Online ed.]. Sep. 2023, vol. 97, [article no.] 101804, str. 1-29.
2.	R. Kaur, D. Gabrijelčič, T. Klobučar, "Churn handling strategies to support dependable and survivable structured overlay networks", IETE Technical Review. 2022, vol. 39, no. 1, str. 179-195.
3.	R. Kaur, T. Klobučar and D. Gabrijelčič, "Privacy in online social networks: threat analysis and countermeasures" in Handbook of research on cyber crime and information privacy. Hershey: IGI Global, 2021, pp. 567-598. ISBN 978-1-79985-729-7.
4.	B. Jerman-Blažič and T. Klobučar, "A new legal framework for cross-border data collection in crime investigation amongst selected European countries", International journal of cyber criminology, 2019, vol. 13, no. 2, pp. 270-289, ISSN 0974-2891.
5.	T. Klobučar, R. Kaur, D. Gabrijelčič, "Umetna inteligenca za kibernetsko varnost", v: M. Holbl (ur.). Soustvarjamo digitrajno Slovenijo: zbornik: 30. konferenca Dnevi slovenske informatike. 1. izd. Ljubljana: Slovensko društvo Informatika, 2023. Str. [1-10], ilustr. ISBN 978-961-6165-60-0.