Introduction to Information Assurance (IAO201c)
Vietnamese title: Nhập môn an toàn thông tin
Credits: 3

Description:
This course will introduce fundamental modern information and system protection technology and methods, develop a lifelong passion and appreciation for cyber security.

Learning outcomes:
Explain underlying concepts related to common cyber security threats, vulnerabilities, and risks.
Explain basics of cyber defense starting with foundational models such as Bell-LaPadula and information flow frameworks.
Explain real-time cyber security techniques and methods in the context of the TCP/IP protocol suites.
Summary advanced and current topics in cyber security, many of which are especially relevant in modern enterprise and infrastructure settings.

Student tasks:
Student must get the certification of Introduction to Cyber Security Specialization specialization specialization from Coursera to be accepted to the final examination.

Tools:
- Internet

Materials:
description: SPEC: Introduction to Cyber Security Specialization
publisher: Coursera
note: https://www.coursera.org/specializations/intro-cyber-security
description: Help Articles
publisher: Coursera
note: https://learner.coursera.help/hc/en-us/articles/208280036-Coursera-Code-of-Conduct
description: MOOC 1: Introduction to Cyber Attacks
publisher: Coursera
note: https://www.coursera.org/learn/intro-cyber-attacks?specialization=intro-cyber-security
description: MOOC 2: Cyber Attack Countermeasures
publisher: Coursera
note: https://www.coursera.org/learn/cyber-attack-countermeasures?specialization=intro-cyber-security
description: MOOC 3: Real-Time Cyber Threat Detection and Mitigation
publisher: Coursera
note: https://www.coursera.org/learn/real-time-cyber-threat-detection?specialization=intro-cyber-security
description: MOOC 4: Enterprise and Infrastructure Security
publisher: Coursera
note: https://www.coursera.org/learn/enterprise-infrastructure-security?specialization=intro-cyber-security

Assessments:
category: PE
type: practical exam
weight: 50.0
duration: 120'
grading_guide: All studied courses.
note: by Exam Board
category: TE
type: Final exam
weight: 50.0
duration: 60'
no_question: Computer gradable
knowledge_and_skill: 50
grading_guide: All studied courses. Each module of course contributes 2-3 questions.
note: by Exam Board

Schedule:
session: Specialization Introduction
Introduction to Cyber Attacks
- What is Cyber Security ?
- Worm, Trojan Horse, Buffer overflow
- Vulnerability, Threat
- CIA model
session: Specialization Introduction
Introduction to Cyber Attacks
- What is Cyber Security ?
- Worm, Trojan Horse, Buffer overflow
- Vulnerability, Threat
- CIA model
Course 1 (Week 1, 2)
session: Introduction to Cyber Attacks
- Botnet, DDOS, Man-in-the-middle
- Calculating Risk
- Level of security risk
session: Introduction to Cyber Attacks
- Botnet, DDOS, Man-in-the-middle
- Calculating Risk
- Level of security risk
Course 1 (Week 3, 4)
session: Cyber Attack Countermeasures
- Bell La Padula Model
- Covert Channels
- Biba Integrity Model
- Identification and Authentication
session: Cyber Attack Countermeasures
- Password Protocol
- DES, Triple-DES
- Kerberos
- CBC Mode Block Cryptography
- Public Key Crypto
session: Real-Time Cyber Threat Detection and Mitigation
- TCP/IP Overview
- TCP Sequence Number Attack
- Packet Sniffing
- Firewall Rules
- Firewall Rules for FTP
session: Real-Time Cyber Threat Detection and Mitigation
- Firewall Architectures
- System Auditing
- IDS Versus IPS
- Design of SIEM
- Design of a SOC
session: Real-Time Cyber Threat Detection and Mitigation
- Target APT Attack
- Layer 3 DDOS Protection
- Layer 7 Application Level DDOS Risk
session: Enterprise and Infrastructure Security
- Social Engineering
- Phishing
- Security Awareness
- PCI-DSS Framework Overview
- Defense in Depth
session: Enterprise and Infrastructure Security
- Hashing Algorithms
- Blockchain
session: Enterprise and Infrastructure Security
- Mobility Security
- IoT Security
Course 4 Review
learning_outcomes: TU