MSc Cyber Security

The module covers concepts and technologies for building secure and usable systems. The different lectures of the module focus on access control mechanisms, software and operating systems security, malware, threats and countermeasures for Web applications and databases, web and user authentication protocols, security of cyber-physical systems, human-centred security aspects such as social engineering and usability, security economics, privacy protection and trusted computing technologies.

The module introduces general cryptographic concepts, challenges and goals and then focuses on foundational cryptographic primitives and algorithms in the fields of symmetric (a.k.a. private-key) and asymmetric (a.k.a. public-key) cryptography. The module will introduce mathematical foundations that are essential for the functionality and security of cryptographic algorithms and then focus on the security definitions and constructions of concrete algorithms for authentication, confidentiality and integrity. In labs students will develop and test their understanding of the material and learn how to implement and use existing algorithms from symmetric and asymmetric cryptography.

Integrating security components into an information system to identify, protect, detect, respond and recover from an increasingly diverse set of threats has become more complex with new computing concepts such as cloud infrastructure, cloud native applications and edge computing. Organisations need a systematic approach to defining security for information systems that integrate processes, people and technology. The Architectural Thinking for Security module is designed to teach concepts and practice techniques that Security Architects can apply to delivering consistent and effective security solutions. The architectural thinking process can be applied either acting as an adviser to a project or a primary security solution architect. The course will introduce an architectural thinking process that a Security Architect would use to protect the data at the centre of a business. As part of this process the security architect needs to think about the integration of security controls to protect the confidentiality, integrity and availability of business data. This module provides insights into both the theory and the practical aspects of this process allowing students to critically evaluate the cyber security posture of an organisation and define a solution that can be described to key decision makers within an organisation.

This module introduces general concepts of privacy enhancing technologies and aligns with key concepts recommended by the CyBoK. It will motivate the need for privacy in the modern world and touch on legal considerations, introduce concepts of transparency, control and confidentiality for privacy, and look at privacy preserving and democratic values. This module will also explore how these are realised in a range of applications.

The module teaches digital forensics models and techniques used by analysts and law enforcement officers in practice. It also teaches the theory and application of real-world digital forensics tools and puts an emphasis on data recovery and the analysis of multimedia artifacts. Relationships and links between multimedia security, digital forensics and broader cyber security topics are also covered.

The module introduces general information and network security principles, challenges and goals and then focuses on main security mechanisms and protocols for protecting network communication across different layers of the Internet protocol stack. This will include discussion on various attacks on the networks, penetration testing tools and possible countermeasures to ensure protection of authentication, confidentiality and end-to-end security of communications. In labs students will be able to practice experience with various network security protocols and tools.

Cyber security is one of the major challenges for computer and information systems. Many users have lost data due to viruses, both on home and business computers. Most of us have seen a range of email messages attempting different kinds of fraud. Vulnerabilities are everywhere. Some are obvious or well-known; others are obscure and harder to spot. Security is not limited to secrecy and confidentiality, but also involves problems like integrity, availability, and effectiveness of information. Moreover, security issues can potentially affect all of us, from innocent home users to companies and even governments. Cyber security is not just a technical problem but needs to be embedded throughout an organisation to be effective. As such good security solutions build on a complete understanding of the values at stake, and the supporting business processes and requirements. This includes people as well as information systems and physical resources. Consequently, raising security awareness and embedding security within roles and policies is as important, if not more, as secure software. In short, secure solutions can only be implemented with both key technical skills and a solid understanding of cultures and people skills. The module looks broadly at the implications of regulations on the cyber crime landscape. It also brings together the issues of cyber from a high-level perspective. It will also equip students with an awareness of what is very current out there in terms of leading-edge applications of cyber security. The module uniquely accesses leading international speakers in their field, draws on the significant expertise of leading industrialists and through shaping the module into distinct learning blocks we are also able to ensure that our students will be directed to key industry reports, regulations and best practice guidance that shapes current industry thinking in cyber security for business and government.

This module teaches cloud computing concepts and the security of the cloud platform to enable students to understand how to secure workloads on cloud. The topics including basic concepts and the core security services needed to secure workloads and the processing of sensitive data. To re-enforce learning, the module will require students to work in teams to configure the cloud platform using infrastructure automation.

The study of cybercrime and cybersecurity not only represents one of the key emerging areas of research within contemporary criminology but is also a crucial problem of national policy and crime control. Recent (2016) data from the Crime Survey for England and Wales suggest that cybercrime may now be the most prevalent form of criminality in the UK and repeated breaches to key infrastructures across most jurisdictions have emphasized why it is has also become one of the main threats to international peace and security. This module will introduce students to the key themes within the study of cybercrime and cybersecurity – including, offence types and their prevalence; typical victims and perpetrators; policing and control measures; varieties of cybersecurity responses and the ‘human’ problem in making these resilient.

The course is an introduction in formal methods for system specification and verification. It will focus on logic-based formalisms and techniques, and specifically on model checking. The main logics taught will be temporal logics, which are mainstream in verification, especially analysis of hardware systems. Other logics and verification techniques (such as theorem proving) will be included to a smaller extended. Model checkers will be used in the labs, on different system-verification problems. Elements of building model checking tools will be presented and explored. Some elements of advanced verification techniques (e.g., abstraction) will be mentioned.

This module introduces students to the techniques and tools to discover known vulnerabilities in systems and applications, and use appropriate techniques to carry out attacks. A practical project-based assessment allows students to demonstrate their ability to successfully exploit vulnerable systems to exfiltrate data and circumvent access controls. The module will introduce students to the legal and ethical considerations of ethical hacking, as well as the processes by which vulnerabilities are reported, classified, documented, and mitigated by security practitioners.

The dissertation consists of a substantial written report. This report is based on a major piece of work that involves applying material encountered in the taught component of the degree, and extending that knowledge with the student's contribution, under the guidance of a supervisor. The dissertation usually involves a substantial literature survey on a specific topic, followed by the identification of a problem to tackle, and thereafter the development of a technical solution, and experimental or theoretical evaluation of the achievement.