Data Security Testing (3 op)

Arviointiasteikko

0-5

Tavoitteet

After completing the course, the student knows the common evaluation and auditing criteria used in security testing. The student is also able to apply security testing methods, techniques and tools into practice. In addition, the student masters the basic concepts and implementation criteria of security testing.

Sisältö

Opintojakso käsittää seuraavat aihe-alueet
o Tietoturva ja tietosuoja
o Tiedonluokittelu ja suojausmenetelmät
o Hyvä tiedonhallintatapa ja -käsittelytapa
o Tietoturvan arviointi ja auditointi
o Standardisointi ja tietoturvastandardit
o Sertifiointi ja akkreditointi
o Tietoturvatestaus ja testausprosessi
o Tietoturvan testausmenetelmät ja –tekniikat
o Tietoturvatestaustyökalut ja testaustulosten käsittely
o Tietoturvatestauksen dokumentointi ja raportointi
o Tietoverkon tietoturvatestaus
o Järjestelmien tietoturvatestaus
o Asiakasohjelmistojen tietoturvatestaus
o Palvelinohjelmistojen tietoturvatestaus
o Haavoittuvuuksien hallinta

Oppimateriaalit

The materials required to pass the course o lecture material o PCI Data Security Standard Council, Penetration Testing Guidance o NIST, Technical guide to information security testing and assessment

Toteutuksen valinnaiset suoritustavat

The items of assessment affecting the grade and the weighting of the grade o Exam (66%) o Group assignment (34%)

Opiskelijan ajankäyttö ja kuormitus

One credit (1 Cr) corresponds to an average of 27 hours of work.

Lectures 30 h, independent study 20h, assignments 30 h, other 1 h

Arviointikriteerit, tyydyttävä (1)

Sufficient (1): The student knows the course-related terminology and is able to utilize the security testing methods, techniques and tools studied in the course when assisted. In addition, the student knows criteria and practices concerning security testing.

Satisfactory (2): The student knows the course-related terminology and is able to utilize the security testing methods, techniques and tools in practice when guided. In addition, the student knows criteria and practices concerning criteria and practices.

Arviointikriteerit, hyvä (3)

Good (3): The student knows the terminology the course-related terminology and is able to utilize the security testing methods, techniques and tools studied in the course in practice when instructed. In addition, the student knows criteria and practices concerning security testing and is able to apply them limitedly to testing situations and results.

Very good (4): The student masters the course-related terminology and is able to almost independently apply the security testing methods, techniques and tools studied in the course into practice. In addition, the student knows criteria and practices concerning security testing and is able to apply them generally to testing situations and results

Arviointikriteerit, kiitettävä (5)

Excellent (5): The student masters the course-related terminology and is able to independently apply the security testing methods, techniques and tools studied in the course into practice. In addition, the student knows the criteria and practices concerning security testing and is able to apply them extensively to testing situations and results.

Esitietovaatimukset

Operating systems