Module: CYS6004-20 Cyber Defence

Level: 6

Credit Value: 20

Module Tutor: John Curry

Module Tutor Contact Details: j.curry@bathspa.ac.uk

1. Brief description and aims of module:

Our world is dependent on digital technology and this technology is under greater threat from attackers than ever before. Cyber security is critical to defend enterprise systems, as well as personal computing. As attacks evolve, so must the techniques for securing systems. The ongoing challenges facing information security professionals require diligence, readiness and pragmatism. At all times, the effort spent on defence must be proportional to the level of threat and the potential costs associated with compromise.

This module takes you through some of the key technologies, hardware and software that are essential in the layered defences that keep systems operational and the hackers out. You learn by following ‘blue team’ processes to assess flaws and vulnerabilities, and apply hardening techniques to mitigate risks. The aim is to build a layered system of controls to generate a defence in depth model - a cross between a maze and a digital minefield. Defences are continually monitored and adapted as new threats are discovered and technologies become available.

2. Outline syllabus:

• Defining the challenge of securing systems

• Risk management - assessing network vulnerabilities

• Business security challenges

• Building an effective defence - defence in depth

• Managing defence through technical and administrative controls

• Responding and managing incidents

• The role and application of threat intelligence

3. Teaching and learning activities:

Class Hours

Seminar sessions are discursive, with a strong emphasis on individual and group research. Simulation exercise and related practical activities provide an opportunity to evaluate defensive operations in hypothetical settings.

Independent Learning

You are expected to follow up concepts introduced in class, regularly review credible sources that describe instances of cyber attack/defence, and conduct simulation exercises as set by the tutor.

Assessment Item 1:

• Assessment Type: CW

• Description: Risk management strategy (5,000 words).

• % Weighting: 100%