Subject · Information security
Веб-программирование (front-end)CLO↔PLO matrix
CLO ↔ PLO matching table
How this subject's course outcomes map onto the programme's learning outcomes.
| Course outcome | PLO 1 | PLO 2 | PLO 3 | PLO 4 | PLO 5 | PLO 6 |
|---|---|---|---|---|---|---|
| CLO 1CLO-19065Объясняет основные понятия, принципы, этапы и методы тестирования на проникновение, а также требования к проведению тестирования в контролируемой виртуальной лаборатории. | does not match | does not match | does not match | does not match | does not match | does not match |
| CLO 2CLO-89549Настраивает виртуальную лабораторию и применяет kali linux, основные инструменты командной строки linux и средства тестирования на проникновение для выполнения практических задач в рамках авторизованной среды. | does not match | does not match | does not match | does not match | does not match | does not match |
| CLO 3CLO-40579Применяет методы сбора информации и разведки с открытым исходным кодом, сканирования портов и обнаружения уязвимостей с использованием соответствующих инструментов, включая nmap, netcraft и nessus. | does not match | does not match | does not match | does not match | does not match | does not match |
| CLO 4CLO-92986Анализирует сетевой трафик и взаимодействие сетевых узлов с использованием wireshark, а также применяет методы анализа сетевых данных в рамках контролируемого тестирования. | does not match | does not match | does not match | does not match | does not match | does not match |
| CLO 5CLO-52911Применяет основные методы эксплуатации уязвимостей, атак с использованием паролей, клиентской эксплуатации, социальной инженерии и пост-эксплуатационного анализа в изолированной учебной среде. | does not match | does not match | does not match | does not match | does not match | does not match |
| CLO 6CLO-77537Использует инструменты и методы тестирования веб-приложений, включая анализ sql-инъекций, xpath-инъекций и работу с burp proxy, а также выявляет и анализирует соответствующие уязвимости. | does not match | does not match | does not match | does not match | does not match | does not match |
| CLO 7CLO-96560Объясняет принципы работы памяти и механизмы переполнения буфера, анализирует уязвимости, связанные с переполнением стека и перезаписью структурированных обработчиков исключений (seh), в учебной среде. | does not match | does not match | does not match | does not match | does not match | does not match |
| CLO 8CLO-12008Применяет методы фаззинга, анализирует результаты тестирования программного обеспечения и использует соответствующие возможности фреймворка metasploit для проведения контролируемого тестирования. | does not match | does not match | does not match | does not match | does not match | does not match |
| CLO 9CLO-71554Объясняет основные векторы атак на мобильные устройства и применяет специализированные фреймворки для проведения авторизованного тестирования безопасности смартфонов. | does not match | does not match | does not match | does not match | does not match | does not match |
| CLO 10CLO-24933Анализирует результаты тестирования на проникновение, документирует выявленные уязвимости, оценивает их потенциальное влияние и составляет структурированный отчет с рекомендациями по устранению выявленных проблем. | does not match | does not match | does not match | does not match | does not match | does not match |
Programme learning outcomes
PLO 1
Ptn 1 - must know the emergence, formation and development of the traditions of modern statehood of azerbaijan, political and ideological, economic and technological in the formation of modern statehood of azerbaijan. should be able to analyze and study the role of scientific and cultural factors. azerbaijan should be able to systematically analyze the place and role of the state in the modern world he should be knowledgeable about the history of development in the fields of cybernetics, applied mathematics, information and communication technologies of azerbaijan, the traditions and potential of scientific education and industry in these fields, and the professional activities of world-class specialists. must acquire presentation, public speaking, academic and business writing skills in azerbaijani language. must have presentation, public speaking, academic and business writing, oral and written communication skills in one of the foreign languages. he should know the purpose and tasks of the "information security" specialty, its interaction with other specialty areas, the importance of demand in the public and private sectors, and future prospects. the importance of engineering ethics is to know the importance of applying the knowledge learned in this specialty only within the framework of legislation and ethical norms, in accordance with professional competences.
No contribution from this subject
PLO 2
Ptn 2 - must have knowledge of numerical and cumulative sequences, limit and continuity of a function, derivative of a function, extrema of a univariate function, indefinite integral, definite integral, numerical and power series, limit, special derivatives and differential of a multivariable function. the concept of matrix, operations on matrices and matrix transposition, calculation of two- and three-order determinants, determinant of product of two matrices, inverse matrix and its existence, n-dimensional vector space, linear dependence of vectors, matrix rank, system of linear algebraic equations, polynomials and operations on them, root of polynomial, horner scheme, quadratic forms should be known. elementary functions of logic algebra, their properties, operations on them, binary function. should have knowledge about duality principle, concept of graph, geometric expression of graph, connected, sub, complete, isomorphic and homomorphic graphs, directed, undirected and mixed graph, smooth and homogeneous graph, coding, decoding, reciprocal one-valued decoding, alphabetic and regular coding, code selection, source of obstacles, one-valued decoding criterion. subject of probability theory, classical probability. elements of combinatorics, kolmogorov axioms. properties of probability. geometric probability. entropy and information quantity. must have knowledge of bernoulli scheme, probability distribution, discrete distribution, numerical characteristics of random quantity, mathematical expectation, variance, markov and chebyshev inequality, asymmetry coefficient, covariance and correlation coefficient, law of large numbers.
No contribution from this subject
PLO 3
Ptn 3 - knowledge and skills should be acquired for preventive protection of information systems, minimization of information security risks, detection of threats and vulnerabilities, prevention of complications. he should be able to determine the scope of information security, keep records of information assets and assets used in information processes, their related functionality, and define information security management policies and sub-policies for managing risks, incidents, ict-services and ict-projects. information security requirements for assets that are protected, including protection tools, and information security measurement indicators (metrics) should be mastered. he should be able to determine incidents (to information security) and consequences (to business continuity) that may arise from threats, and their degree of seriousness. cyber intelligence ("cyber-intelligence"), including the ability to identify threats, related efforts and preparations, and related preventive countermeasures should be mastered. should be able to prepare drafts, guidelines, practical implementation manuals ("playbooks") of local (corporate) normative legal acts in accordance with the provision of cryptography services (recommendatory), audit and evaluation of information security management, information security management policy
No contribution from this subject
PLO 4
Ptn 4 - knowledge and skills for the organization of incident management, including continuous monitoring, regular audits, expertise and other control mechanisms for the detection of information security incidents. must be able to ensure the implementation of processes related to the information security structural unit - the security monitoring operations center ("soc, security operation center"). he should know how to identify and evaluate information security events in protected assets, how to detect information security incidents, how to determine the severity levels of incidents, and the types and degrees of complications. cyber-forensics & "collection of evidence/findings". should be aware of their security requirements.
No contribution from this subject
PLO 5
Ptn 5 - must acquire knowledge and skills in managing configurations and changes to protected assets to address vulnerabilities in response to information security incidents. must know how to choose the appropriate option (blocking, recovery, change, update, upgrade, fallback, rollback) for counter-response to information security incidents and how to formulate, implement and apply appropriate "playbooks" or call for external support in crisis situations. must be knowledgeable about administration of software and technical services ("controls") with information protection tools.
No contribution from this subject
PLO 6
Ptn 6 - knowledge and skills related to the planning and implementation of information security solutions, the design, development, development and implementation of these solutions in accordance with the levels of excellence and reliability determined from the foundation of ICT tools, and project management in this field should be acquired. must be able to determine and document the request for proposal, rfp, for an ICT product (including software tools, electronics, electrical engineering, telecommunications and other technical support tools) that is protected within the scope of information security, including a protection tool. it should be able to conduct an analysis of the compliance of the ICT product with the standards related to the set of technical requirements of the destination (for example, by the "gap analysis" method). should be aware of cascade approach / "agile" iterative IT product creation methods ("waterfall" approach, etc.), should acquire the necessary knowledge to choose the appropriate methodology ("scrum", "lean", "xp") for the corresponding approach. the ICT product technical requirements ("statement of requirements. sor") and technical task conditions ("terms of reference, tor") must be determined and documented, ICT product verification tests must be provided, including the mechanisms for checking and documenting the implementation of technical requirements and technical tasks/conditions.
No contribution from this subject