051061 VU Information Security (2024S)

The course provides an overview of the central topics of information security and is intended to provide the basic knowledge that allows IT systems to be defended against cyber-attacks.

The course content is structured as follows:

Introduction
• Setting the stage: IT Security, Information Security, Cyber Security
• Tasks and Purpose
• Challenges
Threat Analysis
• Current situation with the focus on CERT.at Jahresberichte (annual reports), EUROPOL EC3 IOCTA, ENISA Threat Information / Landscape, MITRE Att&ck / D3FEND Framework
• Information Sources / Information Exchange: CVE, CWE, NVD, MISP, STIX/TAXII
Risk Management
• Risk Management – legal obligations and practice of risk management
• (Data) Privacy Impact Assessment (WKO, CNIL)
• CERT OCTAVEInformation Security: Standards, Processes, Management
• Österreichisches Handbuch zur Informationssicherheit (SiHB), Recommendations and Handbooks of WKO, BSI-Grundschutz, Recommendatios of ENISA, NIST Cyber Security Framework (CSF)
• Incident Handling according to SiHB
Technical Aspects of Information Security Deployment: Applications, Networks and Infrastructure, Data
• Firewalls
• Encryption
• SIEM & SOC
Software Security
• OWASP
• Blockchains
Summary and Outlook