Security - Computer Engineering and Networks Laboratory

404 Pages·2012·23.41 MB·English

Introduction, Definitions, and Context
Risk and Security Management – HS 2012
PD Dr. Hannes P. Lubich
2012 ff
What is This Lecture All About?
2012 ff
Security Technology
netsec06ethfrs
© Hannes P. Lubich Risk and Security Management 3
Security Risks, Threats, etc.
netsec06ethfrs
© Hannes P. Lubich Risk and Security Management 4
Security Processes, Laws, Regulation etc.
netsec06ethfrs
© Hannes P. Lubich Risk and Security Management 5
Security Culture, Awareness, People
netsec06ethfrs
© Hannes P. Lubich Risk and Security Management 6
Lecture Outline and Logistics
2012 ff
Lecture Outline
1. Introduction, Definitions and Context
2. Threats, Attackers and Intentions
3. IT Security Requirements, Standards, Baselines & Best Practices
4. Lecture Project: Introduction, Rules and Expectations
5. Overall Structure of an IT Security Architecture
6. Architecture Components: Identity & Access Management
7. Architecture Components: Threat Management
8. Architecture Components: Security Information & Event Management, Correlation
and Forensics
9. Cost / Benefit Considerations for IT Security
10. Sourcing of Security Components and Services
11. Organisation of IT Security and Related Topics
12. Risk Mgmt: Standards, Best Practices and Governance
13. Presentation / Defense of Lecture Project Results
14. Security Culture and Awareness, Q & A, Lecture Project Results, Exam Preparation
The lecture project will be organised and conducted in cooperation with Detecon Consulting
netsec06ethfrs
© Hannes P. Lubich Risk and Security Management 8
Lecture Logistics
Lecturer: Hannes Lubich
Tutor(s): Abdullah Alhussainy, Ariane Keller
Lecture Dates: every Tuesday 3:15 – 5:00 pm from Sep. 18 to Dec. 18,
lecture hall ETH Zentrum, NO C6 (18.9. only) and ETZ F78.1 (all
subsequent events) (and yes, we will start on time!)
Exercise Dates: every Friday 3:15 – 5:00 pm (max) from Sep. 21 to
Dec. 14, lecture hall ETH Zentrum, ETZ E8 (except 12.10, 14.12 and
21.12.)
Lecture Material: Slide handouts, exercises (
Note: some screenshots refer to
).
outdated products, in order not to indicate any market preferences
Homework:
(cid:1) Preparation / self-study
(cid:1) Lecture Project (see additional information sheets)
Exams: individual (1:1) oral exam, 30 min each, during official exam
time in spring 2013 ONLY!
netsec06ethfrs
© Hannes P. Lubich Risk and Security Management 9
Lecture Project
(cid:1)
Mandatory, pre-requisite for exam registration
(cid:1)
Includes both paperwork and presentation /
defense
(cid:1)
Will be evaluated in binary mode „passed / not
passed“
(cid:1)
If not passed, one additional opportunity to
submit improved version
(cid:1)
Group work, 3 to 4 students for each project
(cid:1)
Exam question(s) may refer to „your“ project
(cid:1)
Registration in week 4 of the lecture cycle
(cid:2)
See additional project information sheets
netsec06ethfrs
© Hannes P. Lubich Risk and Security Management 10