IT324 Information Security

This course defines information security. Topics include security services and its mechanisms,
such as confidentiality, integrity, availability and non-repudiation, security policies, access control
models, authentication methods, types of attacks (including social engineering, man in the middle,
DoS...etc), malware, security principles (such as separation of duties, need to know...etc), basic
principles of hashing, symmetric & asymmetric cryptography, digital certificates &PKI , Email security
through S/MIME & PGP, Web Security, overview of firewalls and Intrusion detection system, Operating
System security, physical security, risk assessment, incidence response, disaster recovery, business
continuity and a general look into computer forensics.