Masterstudium Business Informatics - Fakultät für Informatik, TU Wien

Skills:
• Practical skills to identify security gaps and conducting security assessments including
technical vulnerability scans in large IT infrastructures
• Designing and implementing enterprize security architectures (e.g. RBAC, AAA,
logging, security domains, information security policy, monitoring and incident
response)
• Identiying security pitfalls in enterprize architectures
• Economics of security and right sizing security architectures (security- vs. business
risks)
• Compromising information security and data integrity ("hacking", social engineering)
Competences:
• Methods for interdisciplinary threat- and risk identication
• Eective incident response in complex technological and organizational contexts
• Enforcing best practice security engineering behavior in early phases of IT-projects
(security engineering as part of systems engineering)
Syllabus: Based on the concepts and security mechanisms this module broadens and
deepens the knowledge of IT security by teaching theoretical aspects and best practice
solutions as well as giving practical exercises.
Advanced aspects of the planning and implementation of security mechanisms: Requirement
studies, situation analysis and risk identication, security architecture principles,
advanced aspects for implementing, software security, Web application security, mobile
security, network security, public key infrastructures, service level agreements, quality
of service; attacking IT systems, e.g., injection attacks, buer overows, dierent kinds
of denial of service attacks, eects of the combination of attacks for IT systems; best
practice examples of implementing security in large IT infrastructures; security testing
in large IT infrastructures, e.g., test process, penetration testing.
Expected Prerequisites:
WIN/RSI - Recht und Sicherheit
Teaching and Learning Methods and Adequate Assessment of Performance: The module
is organized along lectures, exercises in group work, e-learning.
Courses of Module:
3.0/2.0 VU Advanced Security for Systems Engineering
3.0/2.0 VU IT security in Large IT infrastructures
80