Module Catalogue 2024/25

Pre Requisite Comment

N/A

Co Requisite Comment

N/A

Aims

Complex systems, such as industrial control systems, include social, cyber and physical aspects, which can all be exploited by attackers.

This module will cover approaches and practices used in securing complex systems, including vulnerabilities, attacks and defence techniques concerning networking protocols and architectures in such systems. Additionally, the module will cover human and organisational aspects and how such factors intersect with the software and hardware components in complex systems, and how to mitigate the impact of risks arising from such interaction. Aspects of incident response and post-incident forensics will also be covered.

Outline Of Syllabus

- Fundamentals of complex systems, e.g., the devices, platforms and protocols used in them
- Security of complex systems (e.g., Industrial control systems; Smart grids; Industrial IoTs; Smart cities)
- Vulnerabilities in computing systems and defence techniques
- Threat modelling and risk analysis in the context of complex systems
- Advanced physical-layer attacks and defences, e.g., side channel attacks.
- Security in software development and program analysis.
- Human and organisational factors, e.g., usability challenges of security; social engineering techniques; risk
perceptions and decision-making.

Intended Knowledge Outcomes

The ability to describe and discuss:
- The interaction of security of social, cyber and physical aspects in complex systems, and their impact on the
security of the whole system.
- The role of human users in the security and privacy of complex systems.
- The possible security mechanisms to detect, respond to and prevent attacks against complex systems.

Intended Skill Outcomes

- The ability to suggest and recommend security mechanisms for a specific complex system.
- The ability to analyse the causes of a compromise in a complex system and be able develop strategies to keep
the infrastructure operational by limiting the progress of an attack to other parts of the system.

Teaching Rationale And Relationship

Lecture material (using both recorded videos and written/interactive material) will be used to teach fundamental concepts and to introduce technical and relevant research papers. Learners are expected to follow-up lectures within a few days, and to read the selected background material uploaded online. The small group teaching sessions will allow learners to work with several demonstrators on topics related to the coursework, and learners are expected to actively participate on the discussion forum.

Assessment Rationale And Relationship

The purpose of formative assessment is to help students prepare for the summative assessment, and both assessment include an aspect of critical thinking, application of research techniques, and require awareness of current security problems. However, the summative assessment is more comprehensive in terms of topic coverage, analytical techniques employed, and the depth of understanding regarding security issues. We provide feedback on the formative coursework.

General Notes

N/A