Fundamentals of Information SecurityCLO↔PLO matrix

Programme learning outcomes

1. 1

   PLO 1

   The essence, concept, basic principles of the information security problem, CIA model (confidentiality, integrity, availability), security aspects of digital systems, networks, operating systems and software, methods and means of protecting computer and telecommunication networks.

   No contribution from this subject

2. 2

   PLO 2

   Classical and modern cryptographic methods (symmetric/asymmetric encryption, digital signature, key, etc.) exchange), application protocols of cryptography in real systems (vpn, ssl/tls, pki, etc.), electronic certificates, digital identification and authentication technologies (biometric systems, works with multi-factor authentication (mfa), sso, etc.), firewall, ids/ips, waf, nat, dmz, VLAN and knows and applies other protection technologies, secure infrastructure and cloud systems able to design its architecture.

   No contribution from this subject

3. 3

   PLO 3

   Knows and applies methods of identification, assessment and prevention of security risks, develops and implements security strategy, security policies and procedures in enterprises, builds information security management systems (isms).

   No contribution from this subject

4. 4

   PLO 4

   Conducts penetration tests, applies ethical hacking techniques, security incidents detection, response and analysis, digital forensics and evidence gathering techniques and works with tools.

   No contribution from this subject

5. 5

   PLO 5

   Local and international normative legal documents on information security, standard and knows protocols (iso/iec 27001, nist, cobit, gdpr, etc.) and is guided in its activities, organizes compliance and audit processes.

   No contribution from this subject

6. 6

   PLO 6

   In the field of information security, information security methods and tools, new conducts research and development of technologies (artificial intelligence, blockchain, post-quantum cryptography, etc.), evaluation of security aspects, prepares scientific bases for teaching and methodological activities.

   No contribution from this subject

7. 7

   PLO 7

   Cryptography, authentication, identification, data privacy, integrity and availability (cia model) has the necessary knowledge, cryptographic protection methods, encryption implements and implements algorithms, electronic signature, key management systems (pki), ssl/tls protocols.

   No contribution from this subject

8. 8

   PLO 8

   Develops the cyber security strategy, forms the security policies of the organization and applies.

   No contribution from this subject

9. 9

   PLO 9

   Analysis of risks, assessment, planning of suitable protection measures, management knows and applies strategies, performs vulnerability scanners, penetration tests and ethical hacking, analyzes and prevents malware (malware, phishing, dos/ddos, ransomware, etc.).

   No contribution from this subject

10. 10

    PLO 10

    Cyber incident detection, analysis and response, log analysis, forensic analysis and evidence collection, protection, works with legal procedures, SIEM (splunk, gradar, etc.) systems, configures and manages technologies such as firewall, ids/ips, vpn, network monitoring.

    No contribution from this subject

11. 11

    PLO 11

    Artificial intelligence and machines in cybersecurity challenges can apply learning technologies.

    No contribution from this subject

12. 12

    PLO 12

    Knows standards from iso/iec 27001, cobit, NIST SP 800 series, in his work guided by and complying with their requirements.

    No contribution from this subject

13. 13

    PLO 13

    Safe management of operating systems (ms windows, linux), endpoint implements security (antivirus, EDR systems), software vulnerability analysis and code level protection (secure coding, code auditing).

    No contribution from this subject

14. 14

    PLO 14

    Data protection in computer systems and networks, network security, traffic applies analysis and threat prevention technologies (firewall, vpn, ids/ips).

    No contribution from this subject

15. 15

    PLO 15

    Analyzing, detecting and countering system and network vulnerabilities applies methods and tools

    No contribution from this subject

16. 16

    PLO 16

    Computer and network security protocols, cryptographic encryption methods, electronic implements and implements signature technology, key management systems.

    No contribution from this subject

17. 17

    PLO 17

    Designs and builds secure network architecture, virtual machines and sandbox conducts tests and analyzes with technologies, configures and operates security measures in firewall, router, switch and other network equipment, VPN technologies and security protocols (ssl/tls, ipsec), ids/ips systems.

    No contribution from this subject

18. 18

    PLO 18

    Detects and prevents possible malware on computer systems and networks takes

    No contribution from this subject

19. 19

    PLO 19

    Distributed registers (dlt), block structures and consensus algorithms (proof of work, proof of stake, bft, etc.), design of blockchain networks, types (public, private, consortium) and works with functional models.

    No contribution from this subject

20. 20

    PLO 20

    Economics of digital assets, token models, defi (decentralized finance) concepts, works with cryptocurrency exchanges and digital wallets.

    No contribution from this subject

21. 21

    PLO 21

    Ethereum, hyperledger, solana, cardano, etc. smart contracts on platforms (solidity, rust, vyper languages).

    No contribution from this subject

22. 22

    PLO 22

    Designs and develops dapps (decentralized applications) on the blockchain forms automated legal and financial processes.

    No contribution from this subject

23. 23

    PLO 23

    Weaknesses in smart contracts (reentrancy, integer overflow/underflow, access control, etc.) analyzes security risks in blockchain technologies and works with attack models (51% attack, sybil attack, DAO hack, etc.).

    No contribution from this subject

24. 24

    PLO 24

    International and local regulation of cryptocurrencies and blockchain technologies knows legal norms, AML (anti-money laundering), KYC (know your customer) and tax adjusts compliance with its requirements, applies cryptographic encryption methods and electronic signature algorithms to protect data privacy during the implementation of cryptocurrencies and blockchain technologies.

    No contribution from this subject

25. 25

    PLO 25

    Classical and modern symmetric and asymmetric encryption algorithms (aes, rsa, ecc, elgamal, chacha20, etc.), knows key management systems (pki), security and usage of public and private key systems, programs cryptographic algorithms, builds and implements cryptographic systems.

    No contribution from this subject

26. 26

    PLO 26

    Cryptocurrency and electronic signature technologies, electronic signatures and certificate systems uses cryptographic databases.

    No contribution from this subject

27. 27

    PLO 27

    Secure internet protocols (ssl/tls, ipsec, ssh, etc.), key exchange knows and applies protocols (diffie-hellman, ecdh), authentication mechanisms, analyzes vulnerabilities of cryptographic protocols and performs security assessment with formal proofs.

    No contribution from this subject

28. 28

    PLO 28

    Works with PKI (public key infrastructure), electronic certificates and electronic signature systems, develops key management, retention and rotation policies.

    No contribution from this subject

29. 29

    PLO 29

    Character analysis and statistical cryptanalysis, side channel, timing analysis, selected original text and constructs, implements and applies cryptographic analysis methods, attack models, real attack scenarios to cryptographic systems.

    No contribution from this subject

30. 30

    PLO 30

    Adheres to legal and ethical frameworks related to the use of cryptography, governmental and corporate develops cryptographic applications in accordance with security requirements, knows local and international normative legal documents and standards and is guided in its activities.

    No contribution from this subject

31. 31

    PLO 31

    Telecommunication systems (mobile networks, IP networks, voip, 5g, optical networks etc.) knows and applies their architectures and principles, knows network protocols (tcp/ip, sip, rtp, mpls, bgp, etc.) from theoretical and practical aspects, analyzes and designs network infrastructure from the point of view of security.

    No contribution from this subject

32. 32

    PLO 32

    It applies cryptographic encryption methods in telecommunication networks, voice, data and encrypts signals, secure data transmission in broadband networks and radio channels, uses firewall, ids/ips, VPN and anti-ddos technologies.

    No contribution from this subject

33. 33

    PLO 33

    Possible attacks against telecommunication infrastructures (imsi catching, man-in-the- middle, jamming, ss7 exploit, etc.), apply technological and software solutions for their detection and prevention, analyze possible weaknesses and leaks in telecommunication systems, and perform penetration tests.

    No contribution from this subject

34. 34

    PLO 34

    Analyzes security risks in telecommunication systems, management develops strategies, security policies for telecommunication operators and designs procedures

    No contribution from this subject

35. 35

    PLO 35

    Domestic and international related to information security in the telecommunications sector standards (iso/iec 27011, etsi, itu-t, nist, etc.), subscriber data protection, individual knows and is guided by the requirements of data protection and privacy assurance.

    No contribution from this subject

36. 36

    PLO 36

    Analyzes security risks in telecommunication systems, risk management develops and implements strategies, information security policies and procedures for telecommunication infrastructures.

    No contribution from this subject

37. 37

    PLO 37

    The structure and working principles of industrial control systems such as scada, dcs, plc, rtu, knows and uses the principles of industrial process automation and real-time control.

    No contribution from this subject

38. 38

    PLO 38

    Builds secure network architecture for ics/scada systems, defense-in-depth in-depth) approach, firewall, ids/ips, whitelisting, VPN and zoning principles and applies them.

    No contribution from this subject

39. 39

    PLO 39

    Cyber security requirements of industrial management systems, industrial management systems knows and applies security principles of protocols (modbus, dnp3, opc-ua, IEC 60870-5-104, etc.).

    No contribution from this subject

40. 40

    PLO 40

    Identify attack models and types of threats (stuxnet, ransomware attacks, insider threats, mitm, etc.) knows, develops and implements protective measures and recovery plans for incident detection and prevention.

    No contribution from this subject

41. 41

    PLO 41

    Assesses information security risks in industrial enterprises, security detects gaps and plans actions, organizes audits on industrial management systems and evaluates compliance with international standards.

    No contribution from this subject

42. 42

    PLO 42

    Complies with major industry safety standards (iec 62443, NIST SP 800-82, iso/iec 27019, ansi/isa 99), knows the security policies applied in industrial enterprises, is guided in their activities and complies with their requirements.

    No contribution from this subject

43. 43

    PLO 43

    Web programming languages and environments (html, css, javascript, php, python, node.js, react, angular, django, laravel, etc.) and programs in those languages.

    No contribution from this subject

44. 44

    PLO 44

    Knows how to build and interact with client-server based applications, implements restful apis, AJAX technology, microservices architecture, https, it implements secure data transfer with tls/ssl protocols, token-based authentication (oauth 2.0, JWT (json web token), SSO and mfa), session management and cookie security technologies.

    No contribution from this subject

45. 45

    PLO 45

    Confidentiality, integrity and availability of information in the web technology environment (cia model) applies security methods, identification and authentication procedures. it applies security testing methodologies such as sast, dast, iast, manual and automated vulnerability detection tools (burp suite, OWASP zap, nikto, acunetix, etc.), penetration testing and bug bounty methodology.

    No contribution from this subject

46. 46

    PLO 46

    Principles of secure programming, detection and prevention of vulnerabilities in code purchase, implements OWASP top 10 vulnerability detection and protection tools (sql injection, cross site scripting – xss, cross-site request forgery – csrf, insecure deserialization, broken authentication, etc.).

    No contribution from this subject

47. 47

    PLO 47

    Apache, nginx, iis, etc. security configurations of servers, cdn, WAF (web application firewall), reverse proxy, ddos protection technologies, cloud-based web knows and applies security approaches on platforms (aws, azure, google cloud).

    No contribution from this subject

48. 48

    PLO 48

    Regulatory documents and standards for web systems (iso/iec 27001, gdpr, pci-dss, nist, etc.), evaluates and ensures compliance of web systems with their requirements.

    No contribution from this subject