Segurança de Sistemas de Informação

The following are Recommended Basic Knowledge (organized by course):

• Digital Systems (Binary Information Manipulation)
• Digital Networks (TCP/IP Technology)
• Systems and Network Management (Linux System Administration and Network Services)
• Business Information Systems (Business Models; Enterprise Software; Software Development Lifecycle)
• Databases (SQL)

Presentation and participatory discussion of the topics covered, focusing on critical thinking about the most relevant aspects of current technological responses. Consolidation of the knowledge transmitted through its practical exploration in realistic contexts.

Study of the main security mechanisms, technologies and tools which will permit to analyse and solve problems regarding the security of information systems. The student will be able to define and implement security policies in organizations, to perform monitoring and auditing security tasks, and to conceive and install security solutions.
These approaches will not only shield the organization from external attacks, but also protect the network from internal dangers. Simultaneously, this security will permit remote access to trustable filial and remote workers.

• Concepts of security.
• Definition and implementation of Security Policies in information systems.
• Modern security treats.
• Types of malware and attacks.
• Cryptographic Tools.
• Modern Criptography.
• Asymmetric Encryption.
• Public-key Management (types of distribution, digital certification, PKI).
• Algorithms and techniques for integrity control.
• Algorithms and techniques for authentication and non-repudiation.
• Access Control Techniques.
• Techniques for software security.
• Techniques for databases security.
• Security of operating systems.
• Security in commerce and electronic transactions.
• Auditing techniques.
• Intrusion detection and prevention.

This course uses a Continuous Assessment Method. Therefore, THERE ARE NO EXAMS DURING EXAM PERIODS. Assessment in this course is conducted exclusively continuously and periodically through short tests and projects. Each individual project and the set of tests provided by each teacher, as a whole, are subject to a minimum passing grade of 50%. Failure to achieve this minimum grade will result in failing the course. At least one test covering all the content summarized in previous classes will be given approximately weekly. The final weight of each assessment component tends to be proportional to the workload (contact and non-contact hours) allocated to the component. The specific weight of each component will be announced in due course on the Nónio forums.

Students who do not meet deadlines or do not achieve the defined minimum grades will fail the course.

Students who enjoy special status, duly recognized by the Academic Services, which prevents them from regularly attending classes with formal justification, must communicate this fact in a duly documented manner by email (lsantos@isec.pt) to the lecturer as soon as possible. It is also the responsibility of these students to follow and respect the curricular unit from the beginning of the semester, especially its assessment requirements, through Nónio (or Microsoft Teams, if they are unable to be registered on Nónio for reasons beyond their control).

Any student unable to attend a class punctually, but with formal justification by legal document, must communicate this fact by email (lsantos@isec.pt) to the lecturer as soon as possible. They must also attend and respond to the proposed alternative assessment date (to be received by email). They must ensure that their mailbox is operational and has sufficient space to receive regular mail. Failure to comply with these procedures and deadlines may result in failing the course.

NAO