
Security and Privacy of Information Systems
Code: 106951Credits: 6
| Degree programme | Type | Course |
|---|---|---|
| Management of Smart and Sustainable Cities | OB | 3 |
Contact lecturer
- Name :
- Marc Caravaca Rodriguez
- Email :
- marc.caravaca@uab.cat
Group languages
You can consult this information at the end of the document.
Prerequisites
N/A
Objectives
To provide students with fundamental knowledge of cybersecurity applied to smart urban environments, enabling them to identify, assess and mitigate cybersecurity risks in critical urban infrastructures, as well as to protect citizens' privacy in complex digital ecosystems.
Learning outcomes
- CM05 (Relate computer knowledge and skills with those provided by other technicians in interdisciplinary teams.) Relate computer knowledge and skills with those provided by other technicians in interdisciplinary teams.
- KM09 (Understand the functioning and correct management of databases.) Understand the functioning and correct management of databases.
- SM06 (Use computer tools for data transmission in accordance with international standards.) Use computer tools for data transmission in accordance with international standards.
Contents
1. Information Security
1.1. The value of information
1.2. Basic notions of information security
1.3. Types of security
2. Practical security strategies
2.1. What is cybersecurity
2.2. Basic security measures
2.3. Data and application security
2.4. Security responsible entities
3. Cryptography. Digital signature
3.1. Introduction and fundamentals of cryptography
3.2. Public and private keys
3.3. Symmetric and asymmetric keys
3.4. Certification authorities
3.5. Digital signature
4. Communications network security
4.1. Internet, functioning, applications
5. Introduction to vulnerability analysis
5.1. Computer intrusion: vulnerability exploitation
5.2. Vulnerability exploitation. Stages of an intrusion
6. Forensic analysis
6.1. Forensic sciences
6.2. Computer forensics
6.3. Stages of computer forensic analysis
6.4. Analysis and investigation of computer crimes.
The legal framework
7. Regulatory compliance and International standards
7.1. Security plans
7.2. Information systems auditing
7.3. Regulations
Learning activities and methodology
| Title | Hours | ECTS | Learning outcomes |
|---|---|---|---|
| Activities and projects | 24 | 0.96 | CM05, KM09, SM06 |
| Self-directed work | 70 | 2.8 | CM05, KM09, SM06 |
| Teoria | 28 | 1.12 | CM05 |
Theoretical knowledge is introduced and reinforced through oral presentation by the instructor, as well as through students' autonomous work with the study of specific materials or learning activities proposed by the course instructor. All course data and materials will be available on the Virtual Campus. This same platform will be used to achieve fluid communication between students and instructor. The teaching methodology will be based on three types of activity:
- Directed activity: theoretical classes, practical sessions and problem analysis.
- Supervised activity: tutorial attendance and completion of exercises with structured follow-up.
- Autonomous activity: student study time and case resolution, individually or in groups.
Assessment
Continuous assessment activities
| Title | Weight | Hours | ECTS | Learning outcomes |
|---|---|---|---|---|
| Completion of problem-solving class activities | 10 | 4 | 0.16 | CM05, SM06 |
| Development of practical assignments with descriptive report and defense | 30 | 20 | 0.8 | CM05, KM09, SM06 |
| Knowledge tests for the course | 60 | 4 | 0.16 | CM05, KM09, SM06 |
The assessment of learning will be continuous and consists of the following elements:
a) Two tests on the content of the syllabus. These exams will be held individually in the middle and at the end of the semester. They will represent 60% of the final grade (30% + 30%).
b) The student will carry out practical work in a group of two people. The completion of the work represents 20% and the ability to find solutions to technical problems 10%.
c) The evaluation of the student's active participation in the debates and activities of the course and the presentation of the documentation defending the work. It will represent 10% of the final grade.
Continuous assessment tests
There are two tests that include the six blocks of material (1, 2, and 3 in the first test and 4, 5, 6, and 7 in the second test). The continuous assessment dates are set at the beginning of the course and do not have an alternative recovery date in case of absence. In case of any change in programming due to adaptation to possible incidents, these changes will always be informed.
Continuous assessment tests
| Assessment Block | Weight in Continuous Assessment | Weight in Final Assessment | Minimum Grade Required to Calculate Average |
| 1, 2, 3 | 50 % | 30% | 4.0 |
| 4, 5, 6, 7 | 50 % | 30 % | 4.0 |
Nota final de l'avaluació
| Component | Weight in Final Grade |
| Continuous Assessment | 60% |
| Laboratory Project | 30 % |
| Problem-Solving Skills Demonstrated in Problem Sessions | 10 % |
It is considered passed anyone who:
Has passed the two exams with a minimum grade per exam of 4 and a minimum average grade of 5. Has all the practical work deliveries approved (minimum grade of 5 in each and every one of the works). Has regularly participated in the course activities. Achieves a minimum overall grade equal to or greater than 5.
Qualification:
The final grade of the subject will result from the weighted average of all the assessment evidence: exams (60%), work (20%), evaluation of problem-solving skills (10%), and participation and presentation (10%). It will consist of a grade between 0 and 10. To pass the subject, a minimum total grade of 5 is required.
Re-evaluation
Once the ordinary assessment is finished, the student will have the possibility to take a re-evaluation exam within the dates scheduled by the School.
a) To be eligible for re-evaluation, it is necessary to have participated in the assessment tests and submitted the practical work. b) The results of the practical work deliveries will not be re-evaluable. c) In the re-evaluation, the maximum grade that can be obtained for each of the re-evaluated tests is 5.
Repeaters.
At the beginning of the academic year, if possible, it will be notified if there is validation of the work and its defense. If so, the validation will only be carried out for those students who request it and have passed the work and defense in the previous course. To be eligible for this differentiated assessment, repeat students must request it from the professor via email (marc.caravaca@uab.cat) no later than 5 days after the start of classes.
Non-assessable cases
If no delivery is made, no laboratory session is attended, and no exam is taken, the corresponding grade will be \"non-assessable\". In any other case, \"not presented\" counts as a 0 for the calculation of the weighted average, which, at most, will be 4.5. That is, participation in any assessed activity implies that \"not presented\" in other activities are considered as zeros. For example, an absence in a laboratory session implies a grade of zero for that activity.
Honors
Honors will be awarded to those who obtain a grade equal to or greater than 9.5 in each part, up to 5% of the enrolled students according to the descending order of the final grade. At the discretion of the teaching staff, they may also be awarded in other cases.
Copies, plagiarism, and irregularities
For this subject, the use of Artificial Intelligence (AI) technologies is allowed exclusively in support tasks, such as bibliographic or information search, text correction, or translations. The student must clearly identify which parts have been generated with this technology, specify the tools used, and include a critical reflection on how these have influenced the process and the final result of the activity.The lack of transparency in the use of AI in this assessable activity will be considered academic dishonesty and may result in partial or total penalization of the activity grade, or greater sanctions in severe cases.
Without prejudice to other disciplinary measures deemed appropriate, and in accordance with current academic regulations, irregularities committed by a student that may lead to a variation in the grade will be graded with a zero (0). For example, plagiarizing, copying, letting copy, unauthorized use of AI (e.g., not making correct use as stipulated in the previous paragraph), etc., an assessment activity, will result in failing this assessment activity with a zero (0). Assessment activities graded in this way and by this procedure will not be recoverable. If it is necessary to pass any of these assessment activities to pass the subject, this subject will be directly failed, without the opportunity to recover it in the same course.
Single assessment
This subject does not provide for the single assessment system
Rescheduling of assessment activities
Students may request the rescheduling of assessment activities in the cases described in the Assessment Criteria and Instructions of the School of Engineering.(https://www.uab.cat/ca/enginyeria/doc/criteris-avaluacio-esola-enginyeria.pdf)
Inclusion and Diversity
In accordance with the principles of inclusive education and Universal Design for Learning (UDL), and in line with UAB regulations and protocols, reasonable accommodations may be implemented for students with specific educational support needs (SEN). These adaptations will be designed to ensure equal opportunities and full participation in learning and assessment processes, without compromising the learning outcomes and competencies of the course.
Students requiring accommodations should contact the relevant university support services and inform the course instructor as early as possible in order to facilitate the implementation of the appropriate measures.
Review of Assessment Activities
For each assessment activity, the date, time, and location of the review session will be announced. During this session, students will have the opportunity to review their work with the teaching staff. Any claims or appeals regarding the grade awarded may be submitted during this review and will be considered by the instructors responsible for the course. If a student does not attend the scheduled review session, no subsequent review of that assessment activity will be conducted.
Bibliography
- Colobran, M. Arques, J. Iparraguirre, J. Com s'ha de fer l'informe pericial d'un delicte informàtic?
Editorial UOC (2012)
- Guia del Reglamento General de Protección de Datos para Responsables de Tratamiento. Agencia Espanyola de Protección de Datos.
https://www.aepd.es/media/guias/guia-rgpd-para-responsables-de-tratamiento.pdf
- Guia práctica para las evaluaciones de impacto en la protección de los datos sujetas al RGPD. Agencia Espanyola de Protección de Datos.
https://www.aepd.es/media/guias/guia-evaluaciones-de-impacto-rgpd.pdf
- GUÍA PRÁCTICA para la evaluación de impacto relativa a la protección de datos. Agencia Espanyola de Protección de Datos (2018)
http://apdcat.gencat.cat/web/.content/03-documentacio/Reglament_general_de_proteccio_de_dades/documents/GUIA-EVALUACION-DE-IMPACTO-CAST-2.0.pdf
- Garcia, E. Lopez, M. Ortega,J Una introducción a la CRIPTOGRAFIA (2005)
http://www.criptored.upm.es/guiateoria/gt_m182a.htm
- Smart Cities. Development and Governance Frameworks. Editors: Mahmood, Zaigham (Ed.) (2018)
- Smart Cities Cybersecurity and Privacy. Editors: Danda Rawat Kayhan Zrar Ghafoor. (1st November 2018)
Software
Se trabajará con amb la distribución actual de Kali Linux. Students are required to have access to their own laptop computer throughout the course for both classroom and independent learning activities.
Course groups and languages
The information provided is provisional until November 30. After this date, you will be able to consult the language of each group through this link. To access the information, you will need to enter the course CODE
| Type of teaching | Group | Language | Semester | Shift |
|---|---|---|---|---|
| (TE) Theory | 1 | Catalan | second semester | afternoon |
| (PAUL) Classroom practices | 1 | Catalan | second semester | afternoon |
| (PLAB) Practical laboratories | 1 | Catalan | second semester | afternoon |
| (PLAB) Practical laboratories | 2 | Catalan | second semester | afternoon |