Cyber Security
MSc

Module learning outcomes

On successful completion of the module, students will be able to:

1. Be able to critically analyse and evaluate the functionality of security protocols under given case study problems and be able to apply and evaluate them under various constraints
2. Critically evaluate and analyse current research into Computer Security and be able to formulate critical academic and professional responses to given research exercises

Module content

Advanced authentication techniques

• Kerberos 4 and Kerberos 5

Cryptographic algorithms

• First generation and second generation algorithms
• Analysis and evaluation of cryptographic algorithms (DES, AES, IDEA, MD5), Elliptic Curve Cryptography
• Mathematical functions and concepts of encryption algorithms

Analysis of key exchange algorithms

• Diffie Hellman
• Just Fast Keying
• Oakley
• IKE

Remote security protocols

• Analysis of session security protocols such as SSL/TLS
• Advanced understanding and analysis of IPSec and other Internet security protocols
• Heuristic algorithms and Bayesian Filtering in popular filtering protocols
• Current research topics in Network security protocols

Cloud security

• Issues presented in the international domain relating to the development and management of cloud security in multi-international domains
• Security issues presented by the dynamic routing of data through multi-international domains
• Jurisdictional problems caused by data storage in multi-jurisdictions

Module learning outcomes

On successful completion of the module, students will be able to:

• Analyse and discuss core business security policy issues that ensure the delivery of good and workable security policies
• Critically evaluate and analyse the security requirements of an organisation.

Module content

• the role of a CISO
• security, techniques for infrastructure protection
• security policy formulation
• business continuity and disaster recovery planning. Backups, cold sites,
• access control and privilege management. Biometrics
• formal risk management strategies
• personnel management, change management, security training/awareness, administrative responsibilities
• balancing internal and external threats and protection
• physical security
• national critical infrastructure protection
• network monitoring systems. User monitoring.
• firewalls
• malware, anti-virus, spam filtering
• ISO/IEC 27001 Lead Auditor material

Module learning outcomes

On successful completion of the module, students will be able to:

• Demonstrate through evaluation, analysis, and critical comparison, detailed comprehension of the mechanisms of system breach, perimeter defence and intrusion detection.
• Develop creative thinking to apply or amend the techniques taught, to address issues within the research domain, and offer innovative solutions.

Module content

• anti-malware techniques
• firewalls and ACLs
• server log analysis
• IDS rule creation
• IDS log interpretation
• inline traffic altering
• comparison of different IDS techniques
• ethical hacking
• system penetration testing

Module learning outcomes

On successful completion of the module, students will be able to:

1. Research, review and critically evaluate current academic literature within a specific context in order to identify the key issues and gaps within current knowledge
2. Demonstrate a critical understanding of research design and methodological enquiry and to propose an appropriate research plan. Reflective evaluation of the impact of ethical values on academic research will be demonstrated
3. Systematically analyse and synthesise researched data and theories where appropriate

Module content

The aim of this module is to impart the necessary skills and behaviours required for Master’s study, as well as building the essential characteristics of professionalism in your chosen discipline. It is important that you are able to participate fully in the module so that you can gain maximum benefit from it.

This module will help you identify the knowledge, skills and competencies (academic and professional) that you bring with you to the module, from previous studies or your work experience or both of these. You will have the opportunity to identify areas where your skills might need further development in order for you to achieve your personal aims during the course.

The module also provides the opportunity for you to engage with academic staff in your chosen specialist area, as well as putting the module into the context of your overall professional development now, and in the future.

There are three key areas of study as follows:

1. Critical thinking. A fundamental principle of Level 7 study and your development as a professional is your ability to think and act critically. You will be exposed to wide range of resources that will enable the development of advanced professional behaviours
2. Managing a research project. As part of your Master’s study you will be required to conduct a rigorous investigation that will result in tangible research outputs. During this module you will gain first-hand experience of the management of enquiry-based activity to prepare you for research in academic or industrial contexts

Evaluating research outputs. The ability to evaluate and provide a robust justification of your ideas is key to demonstrating professionalism. You will be exposed to a variety of approaches that will allow you to practice critical evaluation of enquiry focused processes and outputs.

Module learning outcomes

On successful completion of the module, students will be able to:

• Critically analyse and research the efficacy of computer systems through the use of penetration testing techniques
• Research, design and critically evaluate protection techniques for identified attack types and justify their use

Module content

• Investigating social engineering and host reconnaissance
• Looking at industry best practice in network hardening
• How can Trojans and Viruses be used for hacking and how to defeat them
• Investigation into how IDS and Honey-pots can be used
• Explore techniques for circumventing IPS/firewalls and how to guard against these
• Analysing popular exploits such as buffer overflows and investigating methods of mitigating them
• Critical analysis and evaluation of models of system test plans
• Investigate the most effective ways of creating pragmatic testing plans

Module learning outcomes

On successful completion of the module, students will be able to:

1. Identify, articulate and discuss the issues associated with legal and human aspects of Cyber Security
2. Evaluate and apply legal provisions and experimental methods to cyber-security

Module content

• History of Computer Crime
• Law applied to Computer Crime
• Accountability and Legal Aspects including the Computer Misuse Act, theft, damage, and forgery, Data Protection Act and Intellectual Property and Copyright
• Human Dimensions of Cyber Security including the user of a secure system and usable security classics
• Research Methods for Cyber Security including evidence-based methods, hallmarks of scientific experiments and statistical inference

A portfolio of artefacts will provide the means of assessment, which will include evidence of a ‘product’. A product may be a piece of software, a detailed design for a system, a feasibility study, a creative piece of work, or any tangible asset or collection of assets that are relevant to the investigation. All deliverables will be negotiated with your designated supervisor. Ultimately this is your opportunity to demonstrate your ability to apply what you have learned on the programme in an independent and rigorous fashion.

Module learning outcomes

On successful completion of this module you will be able to:

• Critically assess contributions in the literature of a range of academic concepts/paradigms and analyse their relevance to a range of academic, technical, creative or business contexts, leading to the creation and justification of a methodologically sound research programme
• Undertake methodologically sound enquiry into a significant issue in a field relevant to the domain of Computing, demonstrating critical awareness to devise, recommend and/or implement innovative and creative solutions to the area under investigation, and to be able to present these solutions coherently, using the most appropriate media
• Adopt an original and self-critical approach and reflect on the processes of enquiry and undertake a significant piece of independent research

Module content

This module serves as a ‘capstone’ that effectively demonstrates your ability to demonstrate your management and execution of a significant project. You will use your knowledge and experience to plan, design, execute and evaluate a research project within your chosen domain.