CYBERSECURITY

Single discipline educational activity

Course Sheet

Course code:

ECBA004

Academic Year of enrolment:

2023

Year of supply:

2023/2024

Type of Course:

Related/Supplementary

Degree:

Course of 2nd Cycle Degree in ECONOMICS AND BUSINESS ANALYTICS

Disciplinary Sector:

Computer Science

Language:

Italian

Location:

PESCARA

Credits:

Programme Year:

Professor and Collaborators:

FIORAVANTI Fabio

Cycle:

Second semester

Hours of classroom activity:

Individual study hours:

102

Prerequisites:

Basic knowledge of computer science and mathematics.

Objectives

The educational aims for the student consist in achieving the following learning outcomes.Knowledge and ability to understand.The course aims at providing the student with basic knowledge about operating systems, network, data and software security.At the end of the course the student will be able to understand the risks deriving from internal and external threats and to identify techniques and tools that can be used to increase the security level and improve the protection of operating systems, networks, data and software.Ability to apply knowledge and comprehension.At the end of the course the student will be able to recognize and classify the risks deriving from existing or potential threats to the security of operating systems, networks, data and software.
Moreover, the student will be able to identify the countermeasures for mitigating the security risks and the tools needed for implementing such countermeasures.

Contents

Security risks.Threats and countermeasures.

Symmetric and asymmetric cryptography.
Use of cryptography in security (e.g. authentication, confidentiality, integrity, non-repudiation). Other uses of cryptography (e.g. blockchain).

Operating systems and network security.

Data and software security.

Extended Syllabus

Security properties: availability, confidentiality, integrity, non-repudiation.
Authentication and authorization systems. Password security

Security risks. Threats and countermeasures
- Viruses, worms, keyloggers, rootkits, malware, botnets, phishing
- Antivirus, Intrusion Detection Systems, Firewall

Cybercrime and cybersecurity economics

Privacy
- Cookies and Fingerprinting
- General Data Protection Regulation
(GDPR)
- Privacy by design and by default.
Pseudonymisation

Security risk management
- The Italian National Framework for Cyber Security and Data Protection
- AGID Minimum ICT security measures for public administrations

Cryptography: basic principles.
Symmetric key cryptography
- Classic transposition and substitution ciphers. Polygraphic and polyalphabetic ciphers.
Vigenere, One-time pad
- Confusion and diffusion. Avalanche criterion
- Substitution-permutation networks
- Key exchange problem. Diffie-Helmann protocol

Asymmetric key cryptography. RSA algorithm

Hybrid cryptography.

Digital certificates and PKI
- X.509 certificates
- Public Key Infrastructures
- Certificate Revocation lists and OCSPs

Digital signature.
- Hash functions
- "Remote" digital signature
- Graphometric signature
- Digital stamp
- Time stamp
- CAdES and PAdES signatures

Data backup and digital preservation

Email and network security
- Pretty Good Privacy (PGP)
- Certified Electronic Mail (PEC) and S / MIME
- Transport Layer Security (TLS)

Credential and identity Management
- Firefox Sync, Chrome Sync, Pain Free Passwords, FIDO UAF

Single Sign On systems
- Centralized approaches. Kerberos. Needham-Schroeder protocol
- Federated approaches. Shibboleth, OpenID, OAuth
- Public Digital Identity System (SPID)

Blockchain and Distributed Ledger
- Bitcoin, Ethereum, Algorand
- Smart contracts

Virtual private networks (VPN)

Anonymity and Onion Routing (TOR)

Recommended Bibliography

- Lecture notes

Other suggested readings
- Crittografia pratica. Bruce Schneier, Niels Ferguson. Apogeo.
- Introduction to computer security. Matt Bishop. Addison-Wesley
- Sicurezza delle reti: Applicazioni e standard – 3/Ed. William Stallings. Pearson Education
- Il Futuro della Cybersecurity in Italia: Ambiti Progettuali Strategici. Laboratorio Nazionale di Cybersecurity CINI - Consorzio Interuniversitario Nazionale per l’Informatica. A cura di: Roberto Baldoni, Rocco De Nicola, Paolo Prinetto.

Methods of Provision

Conventional

Teaching Methods

Oral lessons and seminars.Case studies. Practical sessions in the computer laboratory.

Evaluation methods

Verification of learning:

Knowledge and ability to understand.The learning outcomes can be assessed using two alternative methods.The first method consists in delivering one or more written assignments containing answers to both theoretical and empirical questions.Next, there will be an optional oral interview for assessing the basic and theoretical knowledge (on student and teacher request).The marks are out of 30 and will be based on the evaluation of writings and, possibly, on the oral interview. The second method consists in replacing one or more written assignments with a (group or individual) project work with written (and possibly software) deliverables.Next, there will be an oral interview for assessing the student contribution to the project work as well as basic and theoretical knowledge.The marks are out of 30 and will be based on the evaluation of writings and, possibly, on the project work and the oral interview.Ability to apply knowledge and comprehension.During the exam, it will be possible to assess the ability of the student to applying his/her knowledge of security threats and countermeasures for facing practical situations.

Contacts/More Information

Email fabio.fioravanti@unich.it

Office hours: by appointment.

Università degli Studi
"G. d'Annunzio"

Chieti - Pescara

Aree

CYBERSECURITY

Course year: 1

Course year: 2

Search form

Aree

CYBERSECURITY