- Day/Workshop 1: System Security

Reading materials:

Bishop, M. (2018). Computer Security: Art and Science. Addison-Wesley Professional

Description:

System security is the practice of protecting systems from unauthorised access, modification, and destruction. This course contains description of CIA triad, attack trees, vulnerabilities, different attack patterns and security evaluation methodologies (e.g., attack trees). In this course, we are going to cover Chapters 1-2, 10, 27, 29, 30, and 31 from the textbook.

- Day/Workshop 2: Ethical Hacking

Reading Materials:

Moghadam, Vahid Eftekhari, et al. "Memory Integrity Techniques for Memory-Unsafe Languages: A Survey." IEEE Access (2024).
Liu, Miao, et al. "A survey of exploitation and detection methods of XSS vulnerabilities." IEEE access 7 (2019): 182004-182016.
Alazmi, Suliman, and Daniel Conte De Leon. "A systematic literature review on the characteristics and effectiveness of web application vulnerability scanners." IEEE Access 10 (2022): 33200-33219.

In addition to reading materials, we are going to use the following websites for simple demonstrations:

Description:

In this workshop, we are going to go through some ethical hacking techniques which include but not limited to buffer overflow, SQL injection, cross site scripting (XSS), and privilege escalation. After introducing those techniques, we are going to explain some prevention methodologies.

- Day/Workshop 3: Cloud Security

Reading materials:

Description:

Cloud security refers to the set of policies, controls, procedures, and technologies designed to protect data, applications, and infrastructure hosted in cloud environments. It encompasses securing cloud-based systems from threats like data breaches, unauthorized access, and DDoS attacks. Key aspects include identity and access management (IAM), encryption, data loss prevention (DLP), network security, monitoring, and compliance with security standards and regulations. Cloud security is shared between the cloud service provider (responsible for infrastructure) and the customer (responsible for data and applications).

- Day/Workshop 4: IoT Security and Digital ForensicsReading materials:

Casino, Fran, et al. "Research trends, challenges, and emerging topics in digital forensics: A review of reviews." IEEE Access 10 (2022): 25464-25493.
Bouzidi, Mohammed, et al. "A novel architectural framework on IoT ecosystem, security aspects and mechanisms: a comprehensive survey." IEEE Access 10 (2022): 101362-101384.

Atlam, Hany F., et al. "Internet of things forensics: A review." Internet of Things 11 (2020): 100220

Teaching dates: 24.03 - 27.03.2025

Subject description PIT9212-CS

Advanced Topics in Cyber Security