Catalogue of Compulsory Optional Modules M. Sc. Security Management (2014)

Transcription

1 Catalogue of Compulsory Optional Modules M. Sc. Security Management (2014) Juli 2014

2 Impressum Autor: Prof. Dr. Sachar Paulus Redaktion: Prof. Dr. Sachar Paulus Druck: Druckerei der Fachhochschule Brandenburg Kontakt: Fachhochschule Brandenburg University of Applied Sciences Magdeburger Str Brandenburg an der Havel T F E sachar.paulus@fh-brandenburg.de Stand: 30. April 2014 Fachhochschule Brandenburg Seite 2/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

3 Table of Contents 1. Introduction 4 2. Data protection in a networked work 5 3. Security requirements to nuclear facilities 7 4. IT security for security organizations 9 5. System competence and security conscious behavior Working for Life PCI DSS Information security management systems (ISMS) Technical elements of IT forensics Sicherheitsveranstaltungen 22 Seite 3/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

4 1. Introduction This document contains the descriptions of the compulsory optional modules of Brandenburg University of Applied Sciences M. Sc. Degree program on Security Management. The module content is of Module overview Ter m Module CP 1 2 Fundamentals of Security Management (6CP) Security and Crisis Management in International Contexts (6CP) Law, Compliance and Data Protection (6CP) Organizational Elements of Security Management (6 CP) Secure ICT Infrastructures and IT Services (6CP) Mathematical and Technical Foundations of IT Security (6CP) Secure Software Lifecycle Management (6CP) Network Security (6CP) Project (6CP) Scientific Writing (6CP) Compulsory Optional Module 1 (3CP) Compulsory Optional Module 2 (3CP) Compulsory Optional Module 3 (3CP) 9 Master Thesis incl. Colloquium (21CP) Topic area Security Management Law and Business Management Mathematical and Technical Foundations IT-Security Scientific Work Compulsory Optional Modules Seite 4/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

5 2. Data protection in a networked work Brief module label: Module description: Division in teaching sessions, if applicable: Duration of module: Classification in the curriculum: MA_SM_WPM_Datenschutz_vernetzt Data protection in a networked work --- One semester SecMan Master, 1./2./3. Semester, compulsory optional module Usability of the module: --- Frequency of offering of modules: Author: Lecturer: Language of instruction: Depending on demand Prof. Dr. Sachar Paulus Prof. Dr. Ivo Keller, Prof. Dr. Friedrich Holl German Prerequisites: --- ECTS-Credits: 3 Total workload and ist composition: 90 hours = 30 hours of attendance and 60 hours of self-study Form of teaching/semester hours per week: Study and examination achievements: Weighting of the grade in the overall grade: 30 hours within 3 days Oral examination or homework 2,5% of the final grade Learning outcomes: The goal of this course is to be able to use networked media and internet services in a constructive manner. To achieve this, it is important to refresh the individual information security related competences, and furthermore to achieve n individual awareness about personal rights regarding any form of data and information. This shall enable the students to choose and use modern IT architectures such as big data or data mining in a secure and compliant manner, so that ethical requirements about personal data and privacy are met. Seite 5/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

6 Contents: Students will get information about the following topics: - history of individuality, personas and privacy - Cloud Computing and Web Artificial intelligence, data mining and knowledge discovery - Social media, sentiment analysis - Service oriented data organizations and data sovereignty Teaching and learning methods: Literature: Lectures, practical tasks for groups Bernhard C. Witt: Datenschutz kompakt Michael Helisch: Security Awareness Haufe-Verlag: Datenschutz von A-Z Roland Fiege: Social Media Balanced Scorecard Thomas Schwenke: Social Media Marketing & Recht Thorsten Logemann: Datenschutz in Unternehmen Jakob Steinschaden: Phänomen Facebook Additional information: 0. Seite 6/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

7 3. Security requirements to nuclear facilities Brief module label: Module description: MA_SM_Sich_KTA Security requirements to nuclear facilities Division in teaching sessions, if applicable: Duration of module: Classification in the curriculum: Usability of the module: One semester SecMan Master, 1./2./3. Semester, compulsory optional module Course profile: nuclear security Frequency of offering of modules: Depending on demand Author: Lecturer: Language of instruction: Prof. Dr. Sachar Paulus Prof. Dr. Manfred Mertins German Prerequisites: ECTS-Credits: 3 Total workload and ist composition: 90 hours = 30 hours of attendance and 60 hours of self-study Form of teaching/semester hours per week: Study and examination achievements: Weighting of the grade in the overall grade: 30 hours within 3 days Homework 2,5% of the final grade Learning outcomes: The objective is to enable the students to acquire knowledge and skills in the following topics areas: Understand and apply requirements to nuclear facilities Seite 7/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

8 Contents: Integrated management systems (interaction of mantechnology-organization (MTO concept)) Safety goals (radiological and technical objectives) Defense in depth concept, independence of the safety levels barrier concept Events and conditions on levels of System-internal emergency response plan Protection against internal and external impacts Principles of safety cases (deterministic and probabilistic approaches) classification concept Concept to the virtual exclusion of events Principles of interpretation Diversity principle Single failure concept 30-minute concept Inherent safety, fail-safe principle Passive operating principles Basic security, break exclusion concept - safety requirements for future nuclear power plants Teaching and learning methods: Literature: Lectures, practical tasks for groups Borlein, M.: Kerntechnik, Vogel Business Media, 2011 Smidt, D.: Reaktor-Sicherheitstechnik, Springer-Verlag, Berlin, 1979 IAEA: WENRA: =1&action=pod_show KTA: GRS: Handbuch für Reaktorsicherheit und Strahlenschutz, BMU: Sicherheitskriterien für Kernkraftwerke, en_technische_regeln/doc/40327.php Additional information: 0. Seite 8/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

9 4. IT security for security organizations Brief module label: Module description: MA_SM_ITSich_BOS IT security for security organizations Division in teaching sessions, if applicable: Duration of module: Classification in the curriculum: One semester SecMan Master, 1./2./3. Semester, compulsory optional module Usability of the module: Frequency of offering of modules: Depending on demand Author: Lecturer: Language of instruction: Prof. Dr. Sachar Paulus Rolf Lambertz German Prerequisites: ECTS-Credits: 3 Total workload and ist composition: 90 hours = 30 hours of attendance and 60 hours of self-study Form of teaching/semester hours per week: Study and examination achievements: Weighting of the grade in the overall grade: Learning outcomes: 30 hours within 3 days Homework 2,5% of the final grade The objective is to enable the students to acquire knowledge and skills in the following topic areas: IT security requirements for IT systems in security organizations (police, fire brigades, rescue services ) Seite 9/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

10 Contents: Teaching and learning methods: Literature: Students will get information about the following topics: Which authorities are security organizations"? Allocation to local authoritative structure (federal, state, local) How to incorporate plant fire brigades (eg BER airport), important for cooperation with public fire departments Security architecture in Germany (police forces of the federal and state governments, customs administration, military police) Inclusion in the Schengen area (SIS, VIS, Eurodac, the role of EUROPOL and FRONTEX, European Commission - DG Home Affairs) Central offices function of the BKA, BKA Law Cooperation with "the services" (police state security, principle of legality, anti-terrorism database) IT systems of the German Police (overview, INPOL, Extrapol) Typical applications of the police (transaction processing, investigation, case analysis systems, AFIS, Outlook PIAV and xpolizei) Sicherheitsüberprüfungsgesetz Role of industry Lectures, practical tasks for groups Will be announced in the module. Additional information: 0. Seite 10/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

11 5. System competence and security conscious behavior Brief module label: Module description: MA_SM_Systemkompetenz System competence and security conscious behavior Division in teaching sessions, if applicable: Duration of module: Classification in the curriculum: One semester SecMan Master, 1./2./3. Semester, compulsory optional module Usability of the module: --- Frequency of offering of modules: Depending on demand Author: Lecturer: Language of instruction: Prof. Dr. Sachar Paulus Dipl.-Ing. Dieter Skrobotz German Prerequisites: --- ECTS-Credits: 3 Total workload and ist composition: 90 hours = 30 hours of attendance and 60 hours of self-study Form of teaching/semester hours per week: Study and examination achievements: Weighting of the grade in the overall grade: Learning outcomes: 30 hours within 3 days Oral or written examination or homework 2,5% of the final grade The objective is to enable the students to acquire knowledge and skills in the following topic areas: Understanding of the influence of the complexity of a system to the security of the overall system as well as of the components / actors in the system Seite 11/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

12 Contents: Teaching and learning methods: Literature: Students will get information about the following topics: The modern concept of security Holistic security management Example: integrated building security Hidden management functions Building Information Modeling system competence Safety-conscious action cybernetics Lectures, practical tasks for groups Standard literature about cybernetics and networks thinking Wird in der Veranstaltung bekannt gegeben Additional information: 0. Seite 12/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

13 6. Working for Life Brief module label: Module description: MA_SM_Working_for_Life Working for Life Division in teaching sessions, if applicable: Duration of module: Classification in the curriculum: One semester SecMan Master, 1./2./3. Semester, compulsory optional module Usability of the module: --- Frequency of offering of modules: Depending on demand Author: Lecturer: Language of instruction: Prof. Dr. Sachar Paulus Dr. Manuel Burkert German Prerequisites: --- ECTS-Credits: 3 Total workload and ist composition: 90 hours = 30 hours of attendance and 60 hours of self-study Form of teaching/semester hours per week: Study and examination achievements: Weighting of the grade in the overall grade: Learning outcomes: 30 hours within 3 days Oral examination or homework 2,5% of the final grade The objective is to enable the students to acquire knowledge and skills in the following topic areas: Health management and occupational medicine in the corporate context Seite 13/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

14 Contents: Teaching and learning methods: Literature: Students will get information about the following topics: Occupational safety and corporate medical care Health Management Posting of workers in regions with health risks Medical care at large events Work-Life Balance Focused insight into the world of medicine Understanding of different ways of thinking Legal implications of paramedical decisions Application of principles from the security environment in the medical setting Lectures, practical tasks for groups Will be announced in the module. Additional information: 0. Seite 14/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

15 7. PCI DSS Brief module label: Module description: MA_SM_PCI_DSS PCI DSS Division in teaching sessions, if applicable: Duration of module: Classification in the curriculum: One semester SecMan Master, 1./2./3. Semester, compulsory optional module Usability of the module: --- Frequency of offering of modules: Depending on demand Author: Lecturer: Language of instruction: Prof. Dr. Sachar Paulus Patrick Sauer M. Sc. German Prerequisites: --- ECTS-Credits: 3 Total workload and ist composition: 90 hours = 30 hours of attendance and 60 hours of self-study Form of teaching/semester hours per week: Study and examination achievements: Weighting of the grade in the overall grade: Learning outcomes: Contents: Teaching and learning methods: 30 hours within 3 days Homework 2,5% of the final grade The objective is to enable the students to acquire knowledge and skills in the following topic areas: Security requirements to web shops and web portals that perform financial transactions Students will get information about the following topics: Security requirements of the credit card industry Technical options for realization How to certify Lectures, practical tasks for groups Seite 15/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

16 Literature: Will be announced in the module. Additional information: 0. Seite 16/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

17 8. Information security management systems (ISMS) Brief module label: Module description: MA_SM_ISMS Information security management systems (ISMS) Division in teaching sessions, if applicable: Duration of module: Classification in the curriculum: One semester SecMan Master, 1./2./3. Semester, compulsory optional module Usability of the module: --- Frequency of offering of modules: Depending on demand Author: Lecturer: Language of instruction: Prof. Dr. Sachar Paulus Ronny Frankenstein and Jörn Maier German Prerequisites: --- ECTS-Credits: 3 Total workload and ist composition: 90 hours = 30 hours of attendance and 60 hours of self-study Form of teaching/semester hours per week: Study and examination achievements: Weighting of the grade in the overall grade: Learning outcomes: Contents: Teaching and learning methods: 30 hours within 3 days Homework 2,5% of the final grade The objective is to enable the students to acquire knowledge and skills in the following topic areas: Implementing an ISMS in a corporate environment Students will get information about the following topics: ISO 2700X series of standards IT Baseline Protection by the German BSI Differences and commonalities Success factors during implementation Lectures, practical tasks for groups Seite 17/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

18 Literature: Will be announced in the module. Additional information: 0. Seite 18/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

19 9. Technical elements of IT forensics Brief module label: Module description: MA_SM_Tech_Forensik Technical elements of IT forensics Division in teaching sessions, if applicable: Duration of module: Classification in the curriculum: One semester SecMan Master, 1./2./3. Semester, compulsory optional module Usability of the module: --- Frequency of offering of modules: Depending on demand Author: Lecturer: Language of instruction: Prof. Dr. Sachar Paulus Prof. Dr. Igor Podebrad German Prerequisites: --- ECTS-Credits: 3 Total workload and ist composition: 90 hours = 30 hours of attendance and 60 hours of self-study Form of teaching/semester hours per week: Study and examination achievements: Weighting of the grade in the overall grade: Learning outcomes: 30 hours within 3 days Homework 2,5% of the final grade The objective is to enable the students to acquire knowledge and skills in the following topic areas: IT forensic procedures and technical analysis Implementation of IT forensic investigations using the example of two different file systems Seite 19/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

20 Contents: Teaching and learning methods: Students will get information about the following topics: Grundsätze und Anforderungen, speziell im internationalen Kontext und vor dem Hintergrund unterschiedlicher rechtlicher Situationen: (Hard) disk analysis: Overview Types of hard drives (SCSI, xata, xide, etc.) Overview of the physical structure (cylinder, head, sector) Overview of the logical structure (partitions, raw data) Overview of the file systems (FAT, NTFS as focus, eventually ext2, ext3) Overview file management (Cluster, slack space [drive slack, RAM slack]) Details on disk analysis (Security measures, tools, handson) Files and their properties (metadata) Types of files (normal, hidden, deleted, encrypted, alternate data stream,...) string search (logical vs. physically, encoding) details FAT Historical FAT systems (FAT 12, FAT 16) FAT32 (structures, naming conventions) Operating system analysis Server vs. Workstation Location of the operating system on the disk Process analysis Network connections Registry NTFS Details on alternate data streams Details on file types Windows artifacts (cookies, temporary files, MRU, print jobs,...) timelining Details on the registry analysis Network analysis Basics Protocols Details on the analysis Anomalies Covert channels Attack types Lectures, practical tasks for groups Seite 20/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

21 Literature: File System Forensic Analysis, Brian Carrier, Taschenbuch: 600 Seiten, Verlag: Addison-Wesley Longman, Amsterdam (17. März 2005), Sprache: Englisch, ISBN-10: , ISBN-13: Computer Forensik: Computerstraftaten erkennen, ermitteln, aufklären, Alexander Geschonneck, Broschiert: 342 Seiten, Verlag: dpunkt Verlag; Auflage: 4., aktualisierte Auflage (22. Februar 2010), Sprache: Deutsch, ISBN-10: , ISBN-13: Windows Internals, Fifth Edition (PRO-Developer), Mark Russinovich & David A. Solomon, Gebundene Ausgabe: 1232 Seiten, Verlag: Microsoft Press; Auflage: Fifth Edition. (17. Juni 2009), Sprache: Englisch, ISBN-10: , ISBN-13: , ASIN: Harlan Carvey, Windows Forensic Analysis, Verlag: Syngress Media; Auflage: 2nd edition. (13. Juli 2009), ISBN-13: Sammes; Jenkinson, Forensic Computing: A Practitioner's Guide, Verlag: Springer, Berlin; Auflage: 2nd ed. (30. Juli 2007), ISBN-13: Additional information: 0. Seite 21/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

22 10. Sicherheitsveranstaltungen Brief module label: Module description: SM_MA_WPM_Sicherheitsveranstaltungen Sicherheitsveranstaltungen Division in teaching sessions, if applicable: Duration of module: Classification in the curriculum: One semester SecMan Master, 1./2./3. Semester, compulsory optional module Usability of the module: --- Frequency of offering of modules: Depending on demand Author: Lecturer: Language of instruction: Prof. Dr. Sachar Paulus Prof. Dr. Friedrich Holl German Prerequisites: --- ECTS-Credits: 3 Total workload and ist composition: 90 hours = 30 hours of attendance and 60 hours of self-study Form of teaching/semester hours per week: Study and examination achievements: Weighting of the grade in the overall grade: 30 hours within 3 days Homework 2,5% of the final grade Learning outcomes: The objective is to enable the students to acquire knowledge and skills in the following topic areas: Analysis of the content of conferences and trade shows with security focus Determining the value of various conferences and trade shows Creating summaries of lectures, conferences and trade shows Seite 22/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

23 Contents: Teaching and learning methods: Literature: Additional information: Depending on the offer. Typically, an excursion to a commercial identity management and cloud conference, an excursion to a trade show about physical security, and an excursion to a safety-related event of a publicly listed company. Visiting the events, moderation of the analysis. None. Travel costs are not covered and must be paid by the students. 0. Seite 23/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014

24 Seite 24/24 Catalogue of Compulsory Optional Modules M. Sc. Security Management V. of 2014 July 2014