Information security (master)Learning outcomes

PLO 1PLO-24497

The essence, concept, basic principles of the information security problem, CIA model (confidentiality, integrity, availability), security aspects of digital systems, networks, operating systems and software, methods and means of protecting computer and telecommunication networks.

PLO 2PLO-86058

Classical and modern cryptographic methods (symmetric/asymmetric encryption, digital signature, key, etc.) exchange), application protocols of cryptography in real systems (vpn, ssl/tls, pki, etc.), electronic certificates, digital identification and authentication technologies (biometric systems, works with multi-factor authentication (mfa), sso, etc.), firewall, ids/ips, waf, nat, dmz, VLAN and knows and applies other protection technologies, secure infrastructure and cloud systems able to design its architecture.

PLO 3PLO-18055

Knows and applies methods of identification, assessment and prevention of security risks, develops and implements security strategy, security policies and procedures in enterprises, builds information security management systems (isms).

PLO 4PLO-22842

Conducts penetration tests, applies ethical hacking techniques, security incidents detection, response and analysis, digital forensics and evidence gathering techniques and works with tools.

PLO 5PLO-25422

Local and international normative legal documents on information security, standard and knows protocols (iso/iec 27001, nist, cobit, gdpr, etc.) and is guided in its activities, organizes compliance and audit processes.

PLO 6PLO-30474

In the field of information security, information security methods and tools, new conducts research and development of technologies (artificial intelligence, blockchain, post-quantum cryptography, etc.), evaluation of security aspects, prepares scientific bases for teaching and methodological activities.

PLO 7PLO-80524

Cryptography, authentication, identification, data privacy, integrity and availability (cia model) has the necessary knowledge, cryptographic protection methods, encryption implements and implements algorithms, electronic signature, key management systems (pki), ssl/tls protocols.

PLO 8PLO-22024

Develops the cyber security strategy, forms the security policies of the organization and applies.

PLO 9PLO-39777

Analysis of risks, assessment, planning of suitable protection measures, management knows and applies strategies, performs vulnerability scanners, penetration tests and ethical hacking, analyzes and prevents malware (malware, phishing, dos/ddos, ransomware, etc.).

PLO 10PLO-84685

Cyber incident detection, analysis and response, log analysis, forensic analysis and evidence collection, protection, works with legal procedures, SIEM (splunk, gradar, etc.) systems, configures and manages technologies such as firewall, ids/ips, vpn, network monitoring.

PLO 11PLO-34091

Artificial intelligence and machines in cybersecurity challenges can apply learning technologies.

PLO 12PLO-98460

Knows standards from iso/iec 27001, cobit, NIST SP 800 series, in his work guided by and complying with their requirements.

PLO 13PLO-80985

Safe management of operating systems (ms windows, linux), endpoint implements security (antivirus, EDR systems), software vulnerability analysis and code level protection (secure coding, code auditing).

PLO 14PLO-99801

Data protection in computer systems and networks, network security, traffic applies analysis and threat prevention technologies (firewall, vpn, ids/ips).

PLO 15PLO-21995

Analyzing, detecting and countering system and network vulnerabilities applies methods and tools

PLO 16PLO-95222

Computer and network security protocols, cryptographic encryption methods, electronic implements and implements signature technology, key management systems.

PLO 17PLO-49600

Designs and builds secure network architecture, virtual machines and sandbox conducts tests and analyzes with technologies, configures and operates security measures in firewall, router, switch and other network equipment, VPN technologies and security protocols (ssl/tls, ipsec), ids/ips systems.

PLO 18PLO-87716

Detects and prevents possible malware on computer systems and networks takes

PLO 19PLO-52586

Distributed registers (dlt), block structures and consensus algorithms (proof of work, proof of stake, bft, etc.), design of blockchain networks, types (public, private, consortium) and works with functional models.

PLO 20PLO-84035

Economics of digital assets, token models, defi (decentralized finance) concepts, works with cryptocurrency exchanges and digital wallets.

PLO 21PLO-83673

Ethereum, hyperledger, solana, cardano, etc. smart contracts on platforms (solidity, rust, vyper languages).

PLO 22PLO-20430

Designs and develops dapps (decentralized applications) on the blockchain forms automated legal and financial processes.

PLO 23PLO-58970

Weaknesses in smart contracts (reentrancy, integer overflow/underflow, access control, etc.) analyzes security risks in blockchain technologies and works with attack models (51% attack, sybil attack, DAO hack, etc.).

PLO 24PLO-48977

International and local regulation of cryptocurrencies and blockchain technologies knows legal norms, AML (anti-money laundering), KYC (know your customer) and tax adjusts compliance with its requirements, applies cryptographic encryption methods and electronic signature algorithms to protect data privacy during the implementation of cryptocurrencies and blockchain technologies.

PLO 25PLO-23863

Classical and modern symmetric and asymmetric encryption algorithms (aes, rsa, ecc, elgamal, chacha20, etc.), knows key management systems (pki), security and usage of public and private key systems, programs cryptographic algorithms, builds and implements cryptographic systems.

PLO 26PLO-34203

Cryptocurrency and electronic signature technologies, electronic signatures and certificate systems uses cryptographic databases.

PLO 27PLO-17549

Secure internet protocols (ssl/tls, ipsec, ssh, etc.), key exchange knows and applies protocols (diffie-hellman, ecdh), authentication mechanisms, analyzes vulnerabilities of cryptographic protocols and performs security assessment with formal proofs.

PLO 28PLO-29486

Works with PKI (public key infrastructure), electronic certificates and electronic signature systems, develops key management, retention and rotation policies.

PLO 29PLO-32742

Character analysis and statistical cryptanalysis, side channel, timing analysis, selected original text and constructs, implements and applies cryptographic analysis methods, attack models, real attack scenarios to cryptographic systems.

PLO 30PLO-68922

Adheres to legal and ethical frameworks related to the use of cryptography, governmental and corporate develops cryptographic applications in accordance with security requirements, knows local and international normative legal documents and standards and is guided in its activities.

PLO 31PLO-99612

Telecommunication systems (mobile networks, IP networks, voip, 5g, optical networks etc.) knows and applies their architectures and principles, knows network protocols (tcp/ip, sip, rtp, mpls, bgp, etc.) from theoretical and practical aspects, analyzes and designs network infrastructure from the point of view of security.

PLO 32PLO-86477

It applies cryptographic encryption methods in telecommunication networks, voice, data and encrypts signals, secure data transmission in broadband networks and radio channels, uses firewall, ids/ips, VPN and anti-ddos technologies.

PLO 33PLO-61682

Possible attacks against telecommunication infrastructures (imsi catching, man-in-the- middle, jamming, ss7 exploit, etc.), apply technological and software solutions for their detection and prevention, analyze possible weaknesses and leaks in telecommunication systems, and perform penetration tests.

PLO 34PLO-72978

Analyzes security risks in telecommunication systems, management develops strategies, security policies for telecommunication operators and designs procedures

PLO 35PLO-56926

Domestic and international related to information security in the telecommunications sector standards (iso/iec 27011, etsi, itu-t, nist, etc.), subscriber data protection, individual knows and is guided by the requirements of data protection and privacy assurance.

PLO 36PLO-95368

Analyzes security risks in telecommunication systems, risk management develops and implements strategies, information security policies and procedures for telecommunication infrastructures.

PLO 37PLO-97633

The structure and working principles of industrial control systems such as scada, dcs, plc, rtu, knows and uses the principles of industrial process automation and real-time control.

PLO 38PLO-58307

Builds secure network architecture for ics/scada systems, defense-in-depth in-depth) approach, firewall, ids/ips, whitelisting, VPN and zoning principles and applies them.

PLO 39PLO-58444

Cyber security requirements of industrial management systems, industrial management systems knows and applies security principles of protocols (modbus, dnp3, opc-ua, IEC 60870-5-104, etc.).

PLO 40PLO-76193

Identify attack models and types of threats (stuxnet, ransomware attacks, insider threats, mitm, etc.) knows, develops and implements protective measures and recovery plans for incident detection and prevention.

PLO 41PLO-45085

Assesses information security risks in industrial enterprises, security detects gaps and plans actions, organizes audits on industrial management systems and evaluates compliance with international standards.

PLO 42PLO-39795

Complies with major industry safety standards (iec 62443, NIST SP 800-82, iso/iec 27019, ansi/isa 99), knows the security policies applied in industrial enterprises, is guided in their activities and complies with their requirements.

PLO 43PLO-41420

Web programming languages and environments (html, css, javascript, php, python, node.js, react, angular, django, laravel, etc.) and programs in those languages.

PLO 44PLO-65934

Knows how to build and interact with client-server based applications, implements restful apis, AJAX technology, microservices architecture, https, it implements secure data transfer with tls/ssl protocols, token-based authentication (oauth 2.0, JWT (json web token), SSO and mfa), session management and cookie security technologies.

PLO 45PLO-95783

Confidentiality, integrity and availability of information in the web technology environment (cia model) applies security methods, identification and authentication procedures. it applies security testing methodologies such as sast, dast, iast, manual and automated vulnerability detection tools (burp suite, OWASP zap, nikto, acunetix, etc.), penetration testing and bug bounty methodology.

PLO 46PLO-48136

Principles of secure programming, detection and prevention of vulnerabilities in code purchase, implements OWASP top 10 vulnerability detection and protection tools (sql injection, cross site scripting – xss, cross-site request forgery – csrf, insecure deserialization, broken authentication, etc.).

PLO 47PLO-59216

Apache, nginx, iis, etc. security configurations of servers, cdn, WAF (web application firewall), reverse proxy, ddos protection technologies, cloud-based web knows and applies security approaches on platforms (aws, azure, google cloud).

PLO 48PLO-51199

Regulatory documents and standards for web systems (iso/iec 27001, gdpr, pci-dss, nist, etc.), evaluates and ensures compliance of web systems with their requirements.