Publication in the Diário da República: Despacho n.º 12805/2021 - 29/12/2021
5 ECTS; 2º Ano, Anual, 60,0 TP , Cód. 602418.
Lecturer
- Renato Eduardo Silva Panda (1)(2)
(1) Lead Professor
(2) Teaching Professor
Prerequisites
Not applicable
Objectives
1. Identify the main threats to information security.
2. Design and implement solutions that minimise the damage resulting from attacks and security breaches.
3. Configure, test and monitor security mechanisms in systems, networks, data and applications.
Program
1. Fundamentals of IT security, threats and security policies.
2. Authentication, authorisation, permissions and the principle of least privilege.
3. Data security: availability, redundancy, integrity, hash functions, symmetric and asymmetric encryption, digital signatures and certificates.
4. Firewalls, intrusion detection and prevention, and system monitoring.
5. Secure protocols, TLS/HTTPS, virtual private networks and wireless network security.
6. Application security: data validation, SQL injection, XSS and password protection.
7. Configuration, testing and monitoring of security solutions.
Translated with DeepL.com (free version)
Evaluation Methodology
Assessment:
- 60%: Practical: continuous assessment based on five laboratory assignments, carried out individually or in groups.
- 40%: Theoretical: written examination.
The practical component is assessed on a continuous basis and cannot be retaken as part of an examination. Failure in this component results in failure of the course module.
The practical component may be subject to an individual oral presentation, which is eliminatory. Failure in the presentation results in a fail for the practical component.
Minimum:
- 10 out of 20 for the practical component;
- 7 out of 20 for the theoretical component.
Bibliography
- McNab, C. (2016). Network Security Assessement. : O'Reilly Media
- São Mamede, H. (2006). Segurança Informática nas Organizações. : FCA
- Zúquete, A. (2018). Segurança em Redes Informáticas. : FCA
Teaching Method
Theoretical and practical teaching, with weekly classes. As a rule, one of the classes is devoted to introducing theoretical concepts and practical examples. The remaining classes are dedicated to carrying out laboratory work.
Software used in class
Windows, Linux
