N_BIS Information System Security

University of Finance and Administration
Summer 2018
Extent and Intensity
2/0/0. 6 credit(s). Type of Completion: zk (examination).
Teacher(s)
RNDr. Petr Tesař, Ph.D. (seminar tutor)
Guaranteed by
RNDr. Petr Tesař, Ph.D.
Department of Computer Science and Mathematics – Departments – University of Finance and Administration
Contact Person: Ivana Plačková
Timetable of Seminar Groups
N_BIS/vAPH: Sat 17. 2. 9:45–11:15 S22, 11:30–13:00 S22, Fri 2. 3. 14:00–15:30 S22, 15:45–17:15 S22, Sat 7. 4. 14:00–15:30 S22, 15:45–17:15 S22, P. Tesař
Prerequisites
There are no prerequisites for this course.
Course Enrolment Limitations
The course is offered to students of any study field.
Course objectives
Learning outcomes of the course unit The aim of the subject is to teach students basic theory, legislative framework, norms and practical approaches to protection of information systems. Deeper knowledge will be gained by students on ISMS building under international standards ISO/IEC 27001: 2013. Students will also get a more detailed overview of cryptography.
Learning outcomes
After completing the course the student will be able to handle basic theory , legislative framework and practical approaches protection of information in information systems of the organizations. He will also have an idea about resources applicable for cryptographic protection of the information.
Syllabus
  • 1. Fundamentals of IS security - definition of basic terms, why deal with security, how to deal with safety, security features, security mechanisms, security policies.
  • 2. Legislative framework - the classification of sensitive information, the Act on the Protection of Classified Information and Security, the Law on Personal Data Protection, GDPR, the Law on Electronic Communications, the Commercial Code, the Act on Undertaking on the Capital Market, Law on electronic signature, eIDAS, Cybernetic security Act.
  • 3. Standards in the field of Information Systems I - Family ISO 27k.
  • 4. Standards in the field of Information Systems II - ISO 13335, ISO 15408. ISO 9000, ISO 21827, PAS56, COBIT, ITIL.
  • 5. Information Security Management System I - security management, ISMS, PDCA cycle, documentation.
  • 6. Information Security Management System II - risk analysis, audit ISMS.
  • 7. Information Security Management System III - personnel security, physical security, information system security, crisis management.
  • 8. Principles of cryptography - basic definitions, history, classical ciphers, Shannon cipher security theory, complexity classes, primes in cryptology.
  • 9 Symmetric cryptography - definition, linear feedback shift register, substitution boxes (S-boxes), stream ciphers, block ciphers, DES, AES, Block cipher modes of operation. 10. Asymmetric cryptography - Overview, Diffie-Helmann protocol, RSA, ElGamal, Elliptic curve.
  • 11. PKI, hash algorithms, electronic signature and generation of random bits.
  • 12. Microsoft and cryptography - a server operating system, OS MS Windows Workstation, MS Office.
Literature
    required literature
  • P.Hanáček, J.Staudek : Bezpečnost informačních systémů, ÚSIS Praha, 2000.
  • J.Přibyl, J.Kodl : Ochrana dat v informatice, Vydavatelství ČVUT
  • A.J.Menezes, P.C. van Oorschot, S.A.Vanstone : Handbook of Applied Cryptography, CRC Press, 1996.
  • ISO/IEC TR 13335-1 Pojetí a modely bezpečnosti IT ISO/IEC TR 13335-2 Řízení a plánování bezpečnosti IT ISO/IEC TR 13335-3 Techniky pro řízení bezpečnosti
  • ISO 22301 Business Continuity Management Systém
  • ČSN ISO 9000 : 2016 Zásady managementu kvality
  • ISO 15408 Evaluation criteria for IT security
  • ISO/IEC 27002:2013 Soubor postupů pro opatření bezpečnosti informací
  • Nařízení EU: GDPR, eIDAS
  • Zákony: 412/2005, 181/2014, 297/2016, 256/2001, 127/2005, 101/2000, 227/2000, 89/201
  • ISO/IEC 27001:2013 Systémy řízení bezpečnosti informací – Požadavky
  • ISO 21827 Capability Maturity Model
    recommended literature
  • FIPS – 197: Advanced Encryption Standard (AES), NIST 2001
  • OCHODKOVÁ, E. Matematické základy kryptografických algoritmů. 2012, dostupné na http://mi21.vsb.cz
Teaching methods
Lectures and seminars in full-time study; tutorials in part-time study; compulsory seminar participation is 75% in full-time study, compulsory tutorial participation is 50% in part-time study.
Assessment methods
The exam is verbal, consists of two questions. Both questions must be answered at least on E. The set of questions covers the whole range of lecture.
Language of instruction
Czech
Further comments (probably available only in Czech)
The course can also be completed outside the examination period.
Information on the extent and intensity of the course: 12 hodin KS/semestr.
The course is also listed under the following terms Summer 2008, Summer 2009, Summer 2010, Summer 2011, summer 2012, Summer 2013, Summer 2014, Summer 2015, Summer 2016, Summer 2017, Summer 2019, Summer 2020, Summer 2021, Summer 2022, Summer 2023, Summer 2024.
  • Enrolment Statistics (Summer 2018, recent)
  • Permalink: https://is.vsfs.cz/course/vsfs/summer2018/N_BIS