Opinto-opas

Osaamistavoitteet

Learning targets:
The student is able to
- act ethically as a member of study group, community and
working-life partners
- explain network discovery, reconnaissance, harvesting and
vulnerability analysis techniques
- select appropriate tools for network discovery reconnaissance,
harvesting and vulnerability analysis
- analyze network vulnerabilities with network discovery,
reconnaissance, harvesting and analyzing tools
- reduce the attack surface of a network host
- present the results of network reconnaissance and vulnerability
analysis in professional format
- reflect and develop his or her own learning process working-life
and practitioners skills

Toteutustapa

o This study unit is fully online learning with the possibilities of volunteer tutoring meetings with the teachers.
o The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers.
o Students need to commit weekly based regular studies.
o Online studies, weekly basis distance learning and assignments:
>> Online Learning: Weekly module based online learning activities including video training tutorials, eBook and other study materials.
>> This is an advanced level cybersecurity course. It demands analytical and competence development efforts (See EQF-NQF guidelines or Laurea Competence Based Study guideline).
>> Learning Tasks: Weekly assignments including material study, learning reflections and finishing targeted learning tasks.
>> This course is a professional online training program facilitated by world-class experts video training from an authorised professional training provider. This course is not a traditional teacher's lecture-based format

Note:
- The content is mapped with the CompTIA Cybersecurity Analyst+ curriculum and hands-on labwork.
- The study unit provides preparatory training for CompTIA Cybersecurity Analyst+ but not certification exam.
- Prerequisites: R0318 Introduction to Information Security & R0319 Information Security Management OR R0385 Information Infrastructure and Security & A9185 Network Applications OR equivalent competence

VERY IMPORTANT: Any students participated old study unit titled, "Cybersecurity (A9158)" with Certified Ethical Hacker professional training. Please don't enrol and participate in this study unit. This study unit is an updated version of the previous curriculum's course "Cybersecurity (A9158)"

Aika ja paikka

The course is online and not dependent on place or time (online distance studies)
=======
• Course start: Monday, September 4, 2023
• Canvas workspace access: Monday, September 4, 2023
• Volunteer Orientation session: Wednesday, September 6, 2023 at 3:00 PM via Zoom (Zoom link will be available on the Canvas schedule page on September 4)
• Deadline to finish orientation module: Thursday, September 14, 2023 midnight
• Tutoring sessions: Teachers are offering volunteer tutoring session during the entire course schedule. The details will be provided in Canvas course schedule and roadmap (including Zoom links)
• If you are unable to attend the volunteer session, do not worry. The course is designed to be self-paced and can be completed online. However, it is important to make sure to meet the scheduled weekly deadlines and study effectively.

Very important to note, If you are not participating "Introduction to Information Security" course and participating both advanced cybersecurity courses. You can ignore your calendar entry with the name "Introduction to Information Security" that lasts from 15:00 to 17:30

Oppimateriaali ja suositeltava kirjallisuus

This course offers the following learning methods and materials:
---
o Online training: You will complete the online training using Laurea's Cybersecurity Professional Training platform and Canvas. The training covers a variety of topics, including cybersecurity fundamentals, threat analysis, and incident response.
o Hands-on lab exercises: You will also have the opportunity to participate in hands-on lab exercises. These exercises will give you the chance to practice your skills in a safe and controlled environment.
o Tutoring sessions: Volunteer tutoring sessions will be offered throughout the course. These sessions will provide you with additional support and help you to succeed in the course.

o Note: The course is designed to be self-paced and can be completed online. However, it is important to make sure to meet the scheduled weekly deadlines and study effectively.

Toteutuksen valinnaiset suoritustavat

o This study unit is for regular ICT & Cybersecurity students who prefer online studies.
o There is no parallel alternative method to finish this study unit.
o Any students achieved CompTIA Cybersecurity Analyst+ can contact teachers for AHOT (Competence Evaluation & Assessment)

Note:
>> Finishing online learning (as per requirement) is a basic requirements to consider for evaluation and grading. If student not finishing online learning as per requirements, not qualifying for evaluation and grading.

Työelämäyhteistyö ja/tai TKI

o Time to time, we are offering events, seminars and workshop participation.
o Also offering partner's announcements of internships, working life projects and thesis opportunities for Cybersecurity Module students.

For example,
>> In the past teachers offered annual event participation including Nokia HackAthon, Digia HackAthon or Visiting our partner Nixu Corporation's Cyber Defense Center.
>> Laurea also offers EU and Finnish Research, Development and Innovation project participation.

Toteutuksen tärkeät päivämäärät

All details on the course management system for accepted students only.
--Teachers are sending welcome e-mail message (Laurea student emails only) with induction details to accepted students.
--Inactive students are removed from the study unit after orientation period (the first week of the study unit).
--Please note that the study unit is divided in two main periods that have fixed starting and ending dates. You can proceed with faster pace within a period than module based deadlines express but you need to meet module based deadlines at the minimum

Kansainvälisyys toteutuksella

The teachers and students are international (Finnish and English degree programme students).
- Study is suitable for exchange students.
- We are also cooperating with working life companies and both teachers are involved in European and International innovation projects.

Opiskelijan ajankäyttö ja kuormitus

The student puts 5 ECTS study effort.
o 5 cr / 137,5 hours are attached to the workload of a full-time study of learning and the associated learning outcomes.

Sisältö ja sen jaksotus

The content of the study unit is mapped with CompTIA Cybersecurity Analyst+ professional certification. The content covers professional training and hands-on lab practices on virtual lab environment. Following are listed modules:

Period-1
-----------
Module-1: Threat Intelligence and Business Continuity
Module-2: Attack Types and Malware Threats
Module-3: Encryption & Hashing and Cloud Computing
Module-4: Hardware & Security and Threat Monitoring

Period-2
-----------
Module-5: User Account Security and Network Infrastructure Security
Module-6: Software Development Security and Data Privacy
Module-7: Digital Forensics and Network Scanning & Traffic Analysis
Module-8: IT Security Risk Mitigation and Intrusion Detection & Traffic Analysis

Lisätietoja opiskelijoille

The study unit is an advanced cybersecurity. It is suitable for graduate level students. Considering following points:
o Student must know: how company/organization works.
o Students knows the basics of ICT-technologies and Introduction to Information Security.
o Student is able to study independently with weekly-biweekly schedule.

Important Notes:
--Any student who is willing to learn the overview of information security technologies, we recommend to participate following study unit: Introduction to Information Security.
--This study unit is prioritized for TIKO and BIT students
--Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management after R0186 Information and Cybersecurity before participating this study unit.
--Inactive students are removed from the study unit after orientation period (the first week of the study unit)
---------------
Cybersecurity Professional Training and Body of Knowledge (BoK): This course is part of Laurea's advanced cybersecurity study offerings and professional training. The specific modules and topics covered in a cybersecurity analyst course are mapped with professional skills development focus areas. Some topics may vary and overlap depending on the context. However, the overlapping of topics is a common feature of cybersecurity courses, and it is justified by the complexity and ever-evolving nature of the field. There is also a practical reason for the overlapping of topics in cybersecurity courses. Many cybersecurity courses are offered online, and it is not always possible to offer a course that covers a single topic in sufficient depth. By offering courses that cover multiple topics, universities can ensure that students have access to the knowledge and skills they need to succeed in the cybersecurity field.

Cybersecurity is a complex and ever-evolving field, so it is important for cybersecurity professionals to have a broad understanding of the field. This can be achieved by taking courses that cover a variety of topics, even if some of the topics overlap. However, it is important to note that the depth and context of the topics may vary depending on the course.

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- The weekly study, assignment and tasks
- Students collect the points for different learning activities
- Online Tests

Important Note:
o Students are responsible to finish all tasks within schedule time to gain points.
o Learning Activities and Tasks: All Details given in respective Module Folders on the course management system.
o No points after the deadline.
o Sickness or family reasons - contact teacher for tutoring discussion. Sickness needs a doctor certificate.

Teachers will evaluate student work and post points after mid-term and end-term. There are two checkpoints.
Any student not finishing 'Module-0: Induction and Study Plan' will be removed from the study unit after first week of the course.

>> Grading scale (0 to 5):
0-49 points: 0
50-59 points: 1
60-69 points: 2
70-79 points: 3
80-89 points: 4
90-100 points: 5

Hylätty (0)

Not meeting minimum knowledge, skills and competences.

Arviointikriteerit, tyydyttävä (1-2)

In addition to content knowledge, skills, abilities, tasks and practices a student is able to:
– use essential professional concepts when explaining various work practices and situations
– search for information in different sources
– report
– work under guidance using the skills and methods learned
– receive guidance
– plan the progress of his/her work and use of time under guidance
– work safely and in accordance with the professional code of conduct
– follow the provided instructions and rules

Arviointikriteerit, hyvä (3-4)

In addition to [1] Evaluation criteria - satisfactory (1-2) and, [2] content knowledge, skills, abilities, tasks and practices a student is able to:
– use professional concepts in a consistent manner when explaining various work practices and situations
– gather information and use his/her knowledge basis
– report in the agreed manner
– work using the skills and methods learned
– take part in guidance and utilise it
– plan and manage the progress of his/her work and use of time
– justify this/her actions in accordance with the professional code of conduct

Arviointikriteerit, kiitettävä (5)

In addition to [1] Evaluation criteria - good (3-4) and, [2] content knowledge, skills, abilities, tasks and practices a student is able to:
– use professional concepts extensively
– compare and choose relevant information
– report and communicate in a professional manner
– work independently, using the skills and methods learned
– anticipate his/her need for guidance
– manage his/her time appropriately, completing the agreed tasks at the required quality level
– work responsibly, applying the skills and methods learned
– plan and evaluate their work, taking safety and/or ethical aspects into consideration

Esitietovaatimukset

Prerequisites:
R0318 Introduction to Information Security & R0319 Information
Security Management OR R0385 Information Infrastructure and
Security & A9185 Network Applications OR equivalent
competence

Osaamistavoitteet

The student is able to
- take sole responsibility for working as a member cybersecurity
analyst team (project target varies including research, innovation,
business, cyber ranges, cyber drill or cyber defense projects)
- participate and act ethically as a member of team, community
and working-life partners
- select appropriate tools and strategies for network
reconnaissance and vulnerability analysis project in real exercise
or company environment
- present the results of network reconnaissance and vulnerability
analysis in a professional format
- analyze critically the outcome of the project
- manifest cybersecurity professional practices and apply
practitioners skills in the community

Sisältö

Note: The learning targets can be advance studies in one or more
of following (not limited to only those): cybersecurity practices,
cyber ranges, cyber drills, cyber forensics, cyber war, cyber
defence, cybersecurity for AI and robotics, cybersecurity for
blockchain, cybersecurity for supply chain management and
relevant advance cybersecurity topics.

Toteutustapa

- The study unit offers students possibility to participate Hackathon or Capture the Flag (CTF) event or exercise
- The implementation of the study unit depends on current collaboration partner
- The students participate workshops, seminars, webinars and Hackathon / CTF event exercise
- The study unit is offered for the students who study cybersecurity as their major and they have already finished at least two of following study units: TO00BR89 Introduction to Information Security & TO00BR90 Information Security Management OR TO00BR88 Information Infrastructure and Security & A9185 Network Applications OR equivalent competence
- NOTE-1: We expect active participation in workshops, seminars and webinars
- NOTE-2: Use of microphone and camera is required in the virtual sessions

Oppimateriaali ja suositeltava kirjallisuus

- Workshops, seminars, webinars and Hackathon/CTF-event
- Kali Linux Penetration Testing BibleLinks to an external site. (Khawaja, 2021)
- Penetration Testing For DummiesLinks to an external site. (Shimonski, 2020)
- Hands-On Web Penetration Testing with MetasploitLinks to an external site. (Singh & Sharma, 2020)
- Hands-On Application Penetration Testing with Burp SuiteLinks to an external site. (Lozano, Shah & Walikar, 2019)

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit is offered in collaboration with industry partners or Laurea RDI-projects

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 34 (preliminary plan)
- Study unit ends on week 44 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 3 cr / 82,5 hours
- Study unit will last 11 weeks

Sisältö ja sen jaksotus

Modules:
- Module-0: Orientation to the studies
- Module-1: Linux Fundamentals
- Module-2: Setup Testing Environment
- Module-3: Project Plan
- Module-4: Project Execution
- Module-5: Personal Development Plan

Lisätietoja opiskelijoille

- The study unit is offered for the students who study cybersecurity as their major and who are planning their career in cybersecurity

Arviointiasteikko

Hyväksytty/Hylätty

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Group work
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, hyväksytty/hylätty

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Hylätty (0)

– is not able to use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– is not able to report and communicate in a professional manner
– is not able to act independently taking into account the operating environment
– is not able to describe the significance of his/her actions for successful co-operation
– is not able to describe his/her competence in relation to the learning outcomes

Arviointikriteerit, tyydyttävä (1-2)

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Arviointikriteerit, hyvä (3-4)

– critically evaluate information and justify their actions with science-based knowledge
– propose creative solutions at work
- describe the development of his/her competence in relation to the learning outcomes

Arviointikriteerit, kiitettävä (5)

– analyse the acquired information, draw conclusions and combine theoretical knowledge with experiential knowledge
– evaluate the applicability of produced knowledge, skill or idea to other contexts as well as their impact
– evaluate the possibilities for utilising competence and plan his/her personal development

Esitietovaatimukset

Prerequisites:
R0318 Introduction to Information Security & R0319 Information
Security Management AND R0385 Information Infrastructure and
Security & A9185 Network Applications OR equivalent
competence

Osaamistavoitteet

The student is able to
- take sole responsibility for working as a member cybersecurity
analyst team (project target varies including research, innovation,
business, cyber ranges, cyber drill or cyber defense projects)
- participate and act ethically as a member of team, community
and working-life partners
- select appropriate tools and strategies for network
reconnaissance and vulnerability analysis project in real exercise
or company environment
- present the results of network reconnaissance and vulnerability
analysis in a professional format
- analyze critically the outcome of the project
- manifest cybersecurity professional practices and apply
practitioners skills in the community

Sisältö

Note: The learning targets can be advance studies in one or more
of following (not limited to only those): cybersecurity practices,
cyber ranges, cyber drills, cyber forensics, cyber war, cyber
defence, cybersecurity for AI and robotics, cybersecurity for
blockchain, cybersecurity for supply chain management and
relevant advance cybersecurity topics.

Toteutustapa

- The study unit offers students possibility to participate Hackathon or Capture the Flag (CTF) event or exercise
- The implementation of the study unit depends on current collaboration partner
- The students participate workshops, seminars, webinars and Hackathon / CTF event exercise
- The study unit is offered for the students who study cybersecurity as their major and they have already finished at least two of following study units: TO00BR89 Introduction to Information Security & TO00BR90 Information Security Management OR TO00BR88 Information Infrastructure and Security & A9185 Network Applications OR equivalent competence
- NOTE-1: We expect active participation in workshops, seminars and webinars
- NOTE-2: Use of microphone and camera is required in the virtual sessions

Oppimateriaali ja suositeltava kirjallisuus

- Workshops, seminars, webinars and Hackathon/CTF-event
- Kali Linux Penetration Testing BibleLinks to an external site. (Khawaja, 2021)
- Penetration Testing For DummiesLinks to an external site. (Shimonski, 2020)
- Hands-On Web Penetration Testing with MetasploitLinks to an external site. (Singh & Sharma, 2020)
- Hands-On Application Penetration Testing with Burp SuiteLinks to an external site. (Lozano, Shah & Walikar, 2019)

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit is offered in collaboration with industry partners or Laurea RDI-projects

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 34 (preliminary plan)
- Study unit ends on week 44 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 3 cr / 82,5 hours
- Study unit will last 11 weeks

Sisältö ja sen jaksotus

Modules:
- Module-0: Orientation to the studies
- Module-1: Linux Fundamentals
- Module-2: Setup Testing Environment
- Module-3: Project Plan
- Module-4: Project Execution
- Module-5: Personal Development Plan

Lisätietoja opiskelijoille

- The study unit is offered for the students who study cybersecurity as their major and who are planning their career in cybersecurity

Arviointiasteikko

Hyväksytty/Hylätty

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Group work
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, hyväksytty/hylätty

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Hylätty (0)

– is not able to use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– is not able to report and communicate in a professional manner
– is not able to act independently taking into account the operating environment
– is not able to describe the significance of his/her actions for successful co-operation
– is not able to describe his/her competence in relation to the learning outcomes

Arviointikriteerit, tyydyttävä (1-2)

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Arviointikriteerit, hyvä (3-4)

– critically evaluate information and justify their actions with science-based knowledge
– propose creative solutions at work
- describe the development of his/her competence in relation to the learning outcomes

Arviointikriteerit, kiitettävä (5)

– analyse the acquired information, draw conclusions and combine theoretical knowledge with experiential knowledge
– evaluate the applicability of produced knowledge, skill or idea to other contexts as well as their impact
– evaluate the possibilities for utilising competence and plan his/her personal development

Esitietovaatimukset

Prerequisites:
R0318 Introduction to Information Security & R0319 Information
Security Management AND R0385 Information Infrastructure and
Security & A9185 Network Applications OR equivalent
competence

Osaamistavoitteet

The student is able to
- participate and act as a cybersecurity professional in workinglife events including industrial visits, seminars, workshops,
hands-on, cyber ranges, cyber drill and cyber defense activities
- act ethically as a member of team, community and working-life
partners
- network with other cybersecurity professionals
- summarize and analyze critically the content or outcome of the
event
- manifest cybersecurity professional practices and apply
practitioners skills in the community

Sisältö

The study unit is organized as a collaboration with Nixu and Hoxhunt. The preliminary idea is to arrange the series of workshops or webinars where students have possibility to meet cybersecurity staff from recruiters to topical experts. The topics will be decided before the study unit starts.

Note: The learning targets can be advance studies in one or more
of following (not limited to only those): company presentations, recruiters tips, cybersecurity practices,
cyber ranges, cyber drills, cyber forensics, cyber war, cyber
defence, cybersecurity for AI and robotics, cybersecurity for
blockchain, cybersecurity for supply chain management and
relevant advance cybersecurity topics.

Toteutustapa

- The study unit is organized as a collaboration with industry partners
- In this semester our collaborative partners are Nixu, Hoxhunt and SSH
- The industry partners offers workshops, seminars or webinars regarding contemporary cybersecurity topics including company presentations, recruitment, case studies, hands-on training and the latest news from the field
- Participants submit applied assignments in every study module
- The study unit is offered for the students who study cybersecurity as their major and they have already finished at least two of following study units: R0318 Introduction to Information Security & R0319 Information Security Management OR R0385 Information Infrastructure and Security & A9185 Network Applications OR equivalent competence
- NOTE-1: We expect active participation in workshops, seminars and webinars
- NOTE-2: Use of microphone and camera is required in the virtual sessions

Oppimateriaali ja suositeltava kirjallisuus

- Hacking For Dummies, 7th Edition (Beaver, 2022)
- Public internet sources

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit is offered in collaboration with industry partners (Nixu and Hoxhunt)

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 41 (preliminary plan)
- Study unit ends on week 49 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 2 cr / 55 hours
- Study unit will last 10 weeks

Sisältö ja sen jaksotus

- Detailed information is released when the study unit starts
- Module-1: Social Engineering and Cybersecurity Exercises
- Module-2: Threat Analysis and Security Operation Center Processes
- Module-3: Cybersecurity Awareness and Catch the flag exercise
- Module-4: Threat Simulation Workshop
- Conclusion & Feedback

Lisätietoja opiskelijoille

- The study unit is offered for the students who study cybersecurity as their major and who are planning their career in cybersecurity
- The study unit offers possibility to meet HR persons and technology experts
- The study unit offers hands-on training and analytical assignments

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Arviointikriteerit, hyvä (3-4)

– critically evaluate information and justify their actions with science-based knowledge
– propose creative solutions at work
- describe the development of his/her competence in relation to the learning outcomes

Arviointikriteerit, kiitettävä (5)

– analyse the acquired information, draw conclusions and combine theoretical knowledge with experiential knowledge
– evaluate the applicability of produced knowledge, skill or idea to other contexts as well as their impact
– evaluate the possibilities for utilising competence and plan his/her personal development

Esitietovaatimukset

Prerequisites:
R0318 Introduction to Information Security & R0319 Information
Security Management AND R0385 Information Infrastructure and
Security & A9185 Network Applications OR equivalent
competence

Osaamistavoitteet

The student is able to
- participate and act as a cybersecurity professional in workinglife events including industrial visits, seminars, workshops,
hands-on, cyber ranges, cyber drill and cyber defense activities
- act ethically as a member of team, community and working-life
partners
- network with other cybersecurity professionals
- summarize and analyze critically the content or outcome of the
event
- manifest cybersecurity professional practices and apply
practitioners skills in the community

Sisältö

The study unit is organized as a collaboration with Nixu and Hoxhunt. The preliminary idea is to arrange the series of workshops or webinars where students have possibility to meet cybersecurity staff from recruiters to topical experts. The topics will be decided before the study unit starts.

Note: The learning targets can be advance studies in one or more
of following (not limited to only those): company presentations, recruiters tips, cybersecurity practices,
cyber ranges, cyber drills, cyber forensics, cyber war, cyber
defence, cybersecurity for AI and robotics, cybersecurity for
blockchain, cybersecurity for supply chain management and
relevant advance cybersecurity topics.

Toteutustapa

- The study unit is organized as a collaboration with industry partners
- In this semester our collaborative partners are Nixu, Hoxhunt and SSH
- The industry partners offers workshops, seminars or webinars regarding contemporary cybersecurity topics including company presentations, recruitment, case studies, hands-on training and the latest news from the field
- Participants submit applied assignments in every study module
- The study unit is offered for the students who study cybersecurity as their major and they have already finished at least two of following study units: R0318 Introduction to Information Security & R0319 Information Security Management OR R0385 Information Infrastructure and Security & A9185 Network Applications OR equivalent competence
- NOTE-1: We expect active participation in workshops, seminars and webinars
- NOTE-2: Use of microphone and camera is required in the virtual sessions

Oppimateriaali ja suositeltava kirjallisuus

- Hacking For Dummies, 7th Edition (Beaver, 2022)
- Public internet sources

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit is offered in collaboration with industry partners (Nixu and Hoxhunt)

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 41 (preliminary plan)
- Study unit ends on week 49 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 2 cr / 55 hours
- Study unit will last 10 weeks

Sisältö ja sen jaksotus

- Detailed information is released when the study unit starts
- Module-1: Social Engineering and Cybersecurity Exercises
- Module-2: Threat Analysis and Security Operation Center Processes
- Module-3: Cybersecurity Awareness and Catch the flag exercise
- Module-4: Threat Simulation Workshop
- Conclusion & Feedback

Lisätietoja opiskelijoille

- The study unit is offered for the students who study cybersecurity as their major and who are planning their career in cybersecurity
- The study unit offers possibility to meet HR persons and technology experts
- The study unit offers hands-on training and analytical assignments

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Arviointikriteerit, hyvä (3-4)

– critically evaluate information and justify their actions with science-based knowledge
– propose creative solutions at work
- describe the development of his/her competence in relation to the learning outcomes

Arviointikriteerit, kiitettävä (5)

– analyse the acquired information, draw conclusions and combine theoretical knowledge with experiential knowledge
– evaluate the applicability of produced knowledge, skill or idea to other contexts as well as their impact
– evaluate the possibilities for utilising competence and plan his/her personal development

Esitietovaatimukset

Prerequisites:
R0318 Introduction to Information Security & R0319 Information
Security Management AND R0385 Information Infrastructure and
Security & A9185 Network Applications OR equivalent
competence

Osaamistavoitteet

The student is able to
- act ethically as a member of study group, community and
working-life partners
- identify threats, vulnerabilities and risks associated web
applications and web servers
- outline common attack tactics, techniques used when hacking
web servers, applications and wireless networks
- outline security controls for information systems against
common threats
- perform hacking exercises in virtualized training environment
- reflect and develop his or her own learning process, working-life
and practitioners skills

Toteutustapa

This is an e-Learning and Online study offering.

Main learning activities including weekly online learning, learning tasks and group activities. Some details listed below:
¤ Online Learning: Weekly module based online learning activities.
¤ Learning Tasks: Weekly assignments including material study, writing learning reflections and finishing targeted learning tasks.
¤ This course is a professional online training program facilitated by world-class experts video training from an authorised professional training provider. This course is not a traditional teacher's lecture-based format

Content:
The content is mapped with the Advanced Security Practitioner (CASP+) curriculum. This study unit offers 12 module learning path that covers the objectives for the Certified Advanced Security Practitioner (CASP+) exam.

Note: Laurea is not offering certification of Advanced Security Practitioner (CASP+). This course offers professional training for the Advanced Security Practitioner (CASP+).

Aika ja paikka

- Study unit starts from week-4 (24th January) to end of the semester.
- Not dependent on place or time (distance and online studies)
- Weekly online module based studies(every week regular studies).

Oppimateriaali ja suositeltava kirjallisuus

1) Canvas provides weekly module details including details on online learning, learning task and submission of task.
2) Online learning on professional training platform for CASP+
3) Laurea provide study material lists on course management system including eBook from Laurea online library resources.

Note: Laurea is not offering certification of Advanced Security Practitioner (CASP+). This course offers professional training for the Advanced Security Practitioner (CASP+).

Toteutuksen valinnaiset suoritustavat

This study unit is for regular students who prefer to learn every week. No direct alternative method to finish this study unit. However, any students gained CASP+ can consult for AHOT or recognition of early competences as per Laurea BIT norms.

Finishing online learning (as per requirement) is basic requirements to consider for evaluation and grading. If student not finishing online learning as per requirements, not qualifying for evaluation and grading.

Työelämäyhteistyö ja/tai TKI

We have a good cooperation with working-life partners and RDI projects.

We have offered annual event participation including Nokia HackAthon, Digia HackAthon or Visiting our partner Nixu Corporation's Cyber Defense Center. Time to time, we also announce internships, working life projects and thesis opportunities for Cybersecurity Module students.

Toteutuksen tärkeät päivämäärät

>>All details on the course management system for registered students only.
- Study unit starts from week-4 (24th January) to end of the semester.
- Inactive students are removed from the study unit after orientation period (the first week of the study unit).
- Volunteer tutoring sessions: Scheduled and listed in official Peppi Calendar

Kansainvälisyys toteutuksella

- Teachers and students group are international (Finnish and English degree programme students).
- Study is suitable for exchange students.
- We are also cooperating with working life companies and both teachers are involved in European and International innovation projects.

Opiskelijan ajankäyttö ja kuormitus

The student puts 5 ECTS study effort.
o 5 credits X 27 hours = 135 hours are attached to the workload of a full-time study of learning and the associated learning outcomes.

Sisältö ja sen jaksotus

The study unit starts on week-4 and finishes at the end of semester.
¤ The weekly module open on every Monday at 09.00 and closes on Sunday midnight.


COURSE CONENT: Mapped with latest Advanced Security Practitioner (CASP+) certification body of knowledge.

Lisätietoja opiskelijoille

The study unit is suitable for any graduate-level student. Considering following points:
o The student must know: how the company/organization works
o Students know the basics of ICT-technologies
o The student is able to study with weekly based schedule

- The study unit is prioritized for TIKO and BIT students.
- Safety, Security and Risk Management students should consider taking compulsory and intermediate cybersecurity courses before participating in this advanced course.
- Inactive students are removed from the study unit after orientation period (the first week of the study unit).

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Important Note:
o Students are responsible to finish all tasks within schedule time to gain points.
o Learning Activities and Tasks: All Details given in respective Module Folders on the course management system.
o No points after the deadline.
o Sickness or family reasons - contact teacher for tutoring discussion. We are here to help your learning process and support within Laurea Guidelines. Long term sickness needs a doctor certificate.

Teachers will evaluate student work and post points after mid-term and end-term. There are two checkpoints.
Any student not finishing 'Module-0: Induction and Study Plan' will be removed from the study unit after first week of the course.

Arviointikriteerit, hyväksytty/hylätty

Not meeting the minimum requirements

Hylätty (0)

Not meeting the minimum requirements

Arviointikriteerit, tyydyttävä (1-2)

– use essential professional concepts when explaining various work practices and situations
– search for information in different sources
– report
– work under guidance using the skills and methods learned
– receive guidance
– plan the progress of his/her work and use of time under guidance
– work safely and in accordance with the professional code of conduct
– follow the provided instructions and rules

Arviointikriteerit, hyvä (3-4)

– use professional concepts in a consistent manner when explaining various work practices and situations
– gather information and use his/her knowledge basis
– report in the agreed manner
– work using the skills and methods learned
– take part in guidance and utilise it
– plan and manage the progress of his/her work and use of time
– justify this/her actions in accordance with the professional code of conduct

Arviointikriteerit, kiitettävä (5)

– use professional concepts extensively
– compare and choose relevant information
– report and communicate in a professional manner
– work independently, using the skills and methods learned
– anticipate his/her need for guidance
– manage his/her time appropriately, completing the agreed tasks at the required quality level
– work responsibly, applying the skills and methods learned
– plan and evaluate their work, taking safety and/or ethical aspects into consideration

Esitietovaatimukset

Prerequisites:
R0318 Introduction to Information Security & R0319 Information
Security Management OR R0385 Information Infrastructure and
Security & A9185 Network Applications OR equivalent
competence

Osaamistavoitteet

The student is able to
- act ethically as a member of study group and community
- comprehend, explain and apply information security program
development and management principles
- comprehend, explain and apply risk management, incident
management and compliance principles
- plan, implement and finalize risk assessment process
- analyze typical information security management related
problems and draw solutions to them
- reflect and develop his or her own learning process

Toteutustapa

- This study unit is partially automated online learning associated with workshops and tutoring meetings with the teachers.
- The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers.
- Virtual studies, weekly basis virtual learning, assignments, groupwork and expert lectures/workshops
- NOTE: Student should have finished following compulsory ICT-studies or have equivalent competence: (R0240/R0277 The ICT Environment and Infrastructure and R0242/R0280 Data Networks and Information Security)

Oppimateriaali ja suositeltava kirjallisuus

- Learning material is based on Certified Information Security Manager (CISM) certification training material
- Video material
- Course book (CISM Exam Guide 2018, Gregory, Peter H.)
- The study unit provides preparatory training for CISM but not the certification exam

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit offers expert lecturers/workshops
- Worklife partner for this semester: PricewaterhouseCoopers (PwC), Nixu and Elisa

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 41 (preliminary plan)
- Study unit ends on week 49 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 5 cr / 137,5 hours
- Study unit will last 10 weeks

Sisältö ja sen jaksotus

- Weekly base schedule and one (1) module per week
- A student can be proceed in his/her own pace from Module-1 to Module-8

Module-0: Induction and Study Plan
Module-1: Info Sec Governance Part 1
Module-2: Info Sec Governance Part 2
Module-3: Information Risk Management-1
Module-4: Information Risk Management-2
Module-5: Info Sec Program Dev Part 1
Module-6: Info Sec Program Dev Part 2
Module-7: Info Sec Incident Man Part 1
Module-8: Info Sec Incident Man Part 2

Lisätietoja opiskelijoille

- The study unit is prioritized for the students who study cyberseecurity as their major
- Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management
- NOTE: Inactive students are removed from the study unit after orientation period (the first week of the study unit)

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Workshops
- Group work
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Arviointikriteerit, hyvä (3-4)

– critically evaluate information and justify their actions with science-based knowledge
– propose creative solutions at work
- describe the development of his/her competence in relation to the learning outcomes

Arviointikriteerit, kiitettävä (5)

– analyse the acquired information, draw conclusions and combine theoretical knowledge with experiential knowledge
– evaluate the applicability of produced knowledge, skill or idea to other contexts as well as their impact
– evaluate the possibilities for utilising competence and plan his/her personal development

Esitietovaatimukset

TIKO and BIT students: Compulsory ICT-studies
Or equivalent competence.

Osaamistavoitteet

The student is able to
- act ethically as a member of study group and community
- comprehend, explain and apply information security program
development and management principles
- comprehend, explain and apply risk management, incident
management and compliance principles
- plan, implement and finalize risk assessment process
- analyze typical information security management related
problems and draw solutions to them
- reflect and develop his or her own learning process

Toteutustapa

- This study unit is partially automated online learning associated with workshops and tutoring meetings with the teachers.
- The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers.
- Virtual studies, weekly basis virtual learning, assignments, groupwork and expert lectures/workshops
- NOTE: Student should have finished following compulsory ICT-studies or have equivalent competence: (R0240/R0277 The ICT Environment and Infrastructure and R0242/R0280 Data Networks and Information Security)

Oppimateriaali ja suositeltava kirjallisuus

- Learning material is based on Certified Information Security Manager (CISM) certification training material
- Video material
- Course book (CISM Exam Guide 2018, Gregory, Peter H.)
- The study unit provides preparatory training for CISM but not the certification exam

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit offers expert lecturers/workshops
- Worklife partner for this semester: PricewaterhouseCoopers (PwC), Nixu and Elisa

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 41 (preliminary plan)
- Study unit ends on week 49 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 5 cr / 137,5 hours
- Study unit will last 10 weeks

Sisältö ja sen jaksotus

- Weekly base schedule and one (1) module per week
- A student can be proceed in his/her own pace from Module-1 to Module-8

Module-0: Induction and Study Plan
Module-1: Info Sec Governance Part 1
Module-2: Info Sec Governance Part 2
Module-3: Information Risk Management-1
Module-4: Information Risk Management-2
Module-5: Info Sec Program Dev Part 1
Module-6: Info Sec Program Dev Part 2
Module-7: Info Sec Incident Man Part 1
Module-8: Info Sec Incident Man Part 2

Lisätietoja opiskelijoille

- The study unit is prioritized for the students who study cyberseecurity as their major
- Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management
- NOTE: Inactive students are removed from the study unit after orientation period (the first week of the study unit)

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Workshops
- Group work
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Arviointikriteerit, hyvä (3-4)

– critically evaluate information and justify their actions with science-based knowledge
– propose creative solutions at work
- describe the development of his/her competence in relation to the learning outcomes

Arviointikriteerit, kiitettävä (5)

– analyse the acquired information, draw conclusions and combine theoretical knowledge with experiential knowledge
– evaluate the applicability of produced knowledge, skill or idea to other contexts as well as their impact
– evaluate the possibilities for utilising competence and plan his/her personal development

Esitietovaatimukset

TIKO and BIT students: Compulsory ICT-studies
Or equivalent competence.

Osaamistavoitteet

The student is able to
- act ethically as a member of study group and community
- comprehend, explain and apply information security program
development and management principles
- comprehend, explain and apply risk management, incident
management and compliance principles
- plan, implement and finalize risk assessment process
- analyze typical information security management related
problems and draw solutions to them
- reflect and develop his or her own learning process

Toteutustapa

- This study unit is partially automated online learning associated with workshops and tutoring meetings with the teachers.
- The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers.
- Virtual studies, weekly basis virtual learning, assignments, groupwork and expert lectures/workshops
- NOTE: Student should have finished following compulsory ICT-studies or have equivalent competence: (R0240/R0277 The ICT Environment and Infrastructure and R0242/R0280 Data Networks and Information Security)

Oppimateriaali ja suositeltava kirjallisuus

- Learning material is based on Certified Information Security Manager (CISM) certification training material
- Video material
- Course book (CISM Exam Guide 2018, Gregory, Peter H.)
- The study unit provides preparatory training for CISM but not the certification exam

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit offers expert lecturers/workshops
- Worklife partner for this semester: PricewaterhouseCoopers (PwC), Nixu and Elisa

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 41 (preliminary plan)
- Study unit ends on week 49 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 5 cr / 137,5 hours
- Study unit will last 10 weeks

Sisältö ja sen jaksotus

- Weekly base schedule and one (1) module per week
- A student can be proceed in his/her own pace from Module-1 to Module-8

Module-0: Induction and Study Plan
Module-1: Info Sec Governance Part 1
Module-2: Info Sec Governance Part 2
Module-3: Information Risk Management-1
Module-4: Information Risk Management-2
Module-5: Info Sec Program Dev Part 1
Module-6: Info Sec Program Dev Part 2
Module-7: Info Sec Incident Man Part 1
Module-8: Info Sec Incident Man Part 2

Lisätietoja opiskelijoille

- The study unit is prioritized for the students who study cyberseecurity as their major
- Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management
- NOTE: Inactive students are removed from the study unit after orientation period (the first week of the study unit)

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Workshops
- Group work
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use professional concepts in a consistent manner and demonstrate his/her familiarity with the knowledge basis
– report and communicate in a professional manner
– act independently taking into account the operating environment
– describe the significance of his/her actions for successful co-operation
– describe his/her competence in relation to the learning outcomes

Arviointikriteerit, hyvä (3-4)

– critically evaluate information and justify their actions with science-based knowledge
– propose creative solutions at work
- describe the development of his/her competence in relation to the learning outcomes

Arviointikriteerit, kiitettävä (5)

– analyse the acquired information, draw conclusions and combine theoretical knowledge with experiential knowledge
– evaluate the applicability of produced knowledge, skill or idea to other contexts as well as their impact
– evaluate the possibilities for utilising competence and plan his/her personal development

Esitietovaatimukset

TIKO and BIT students: Compulsory ICT-studies
Or equivalent competence.

Osaamistavoitteet

The student is able to
- act ethically as a member of study group and community
- recognize and comprehend the importance of confidentiality,
integrity and availability model for the information and
cybersecurity
- recognize and comprehend different threats, attacks and
vulnerabilities
- comprehend and describe security technologies and tools
- comprehend and describe security architectures and designs
- comprehend and describe identity and access management
approaches
- comprehend, describe and apply risk management principles
- comprehend and describe cryptography and PKI concepts
- differentiate cybersecurity domains and subdomains from each
other
- comprehend and explain the importance of the cybersecurity in
the modern society
- reflect and develop his or her own learning process

Toteutustapa

- This study unit is fully automated self paced online learning (MOOC) with the possibilities of volunteer tutoring meetings with the teachers
- The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers
- Virtual studies, weekly basis virtual learning and assignments
- This is introduction level study unit and it gives good basis for more advanced study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- NOTE-1: There are no scheduled lecturers given by a teacher but the teachers is available for counselling and solving study related problems
- NOTE-2: Student should have finished following compulsory ICT-studies or have equivalent competence: (R0240/R0277 The ICT Environment and Infrastructure and R0242/R0280 Data Networks and Information Security)
- NOTE-3: Programming (Python) and Linux skills are beneficial but not mandatory in Capture the Flag (CTF) exercise

Aika ja paikka

- Not dependent on place or time (virtual studies)
- The study unit is implemented in Canvas LMS

Oppimateriaali ja suositeltava kirjallisuus

- Learning material is based on Comptia Security+ SY0-501 certification training material
- Video material
- Course book (Comptia Security+ 7th Edition, Dulaney Emmett)
- The study unit provides preparatory training for Comptia Security+ but not certification exam
- NOTE: There is no scheduled lecturers given by a teacher but the teachers are available for counselling and solving study related problems

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit content equals professional Comptia Security+ certification

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 33 (preliminary plan)
- Study unit ends on week 43 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 5 cr / 137,5 hours
- Study unit will last 12 weeks

Sisältö ja sen jaksotus

- Weekly base schedule and one (1) module per week
- A student can be proceed in his/her own pace from Module-1 to Module-10
- Integrated Capture the Flag (CTF) exercise

Modules:
- Module-0: Learning target and goal
- Module-1: Network Security Part 1
- Module-2: Network Security Part 2
- Module-3: Compliance and Operational Security Part 1
- Module-4: Compliance and Operational Security Part 2
- Module-5: Threats and Vulnerabilities Part 1
- Module-6: Threats and Vulnerabilities Part 2
- Module-7: Threats and Vulnerabilities Part 3
- Module-8: Application, Data, and Host Security
- Module-9: Access Control and Identity
- Module-10: Cryptography

Lisätietoja opiskelijoille

- STUDY UNIT IS FULLY AUTOMATED (MOOC) AND TEACHERS ARE AVAILABLE FOR COUNSELLING PURPOSES
- This is introduction level study unit and it gives good basis for more advanced cybersecurity study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- The study unit is prioritized for TIKO and BIT students
- Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management
- NOTE: Inactive students are removed from the study unit after the orientation period (the first week of the study unit)

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use essential professional concepts when explaining various work practices and situations
– search for information in different sources
– report
– work under guidance using the skills and methods learned
– receive guidance
– plan the progress of his/her work and use of time under guidance
– work safely and in accordance with the professional code of conduct
– follow the provided instructions and rules

Arviointikriteerit, hyvä (3-4)

– use professional concepts in a consistent manner when explaining various work practices and situations
– gather information and use his/her knowledge basis
– report in the agreed manner
– work using the skills and methods learned
– take part in guidance and utilise it
– plan and manage the progress of his/her work and use of time
– justify this/her actions in accordance with the professional code of conduct

Arviointikriteerit, kiitettävä (5)

– use professional concepts extensively
– compare and choose relevant information
– report and communicate in a professional manner
– work independently, using the skills and methods learned
– anticipate his/her need for guidance
– manage his/her time appropriately, completing the agreed tasks at the required quality level
– work responsibly, applying the skills and methods learned
– plan and evaluate their work, taking safety and/or ethical aspects into consideration

Esitietovaatimukset

Prerequisites:
For tiko students: study units R0240 ICT-toimintaympäristö, R0241 Tiedonhallinta ja tietokannat & R0242 Tietoverkot ja tietoturva
For BIT students: study units R0277 ICT Environment and Infrastructure, R0279 Information Management and Databases & R0280 Data Networks and Information Security
Or equivalent competence.

Osaamistavoitteet

The student is able to
- act ethically as a member of study group and community
- recognize and comprehend the importance of confidentiality,
integrity and availability model for the information and
cybersecurity
- recognize and comprehend different threats, attacks and
vulnerabilities
- comprehend and describe security technologies and tools
- comprehend and describe security architectures and designs
- comprehend and describe identity and access management
approaches
- comprehend, describe and apply risk management principles
- comprehend and describe cryptography and PKI concepts
- differentiate cybersecurity domains and subdomains from each
other
- comprehend and explain the importance of the cybersecurity in
the modern society
- reflect and develop his or her own learning process

Toteutustapa

- This study unit is fully automated self paced online learning (MOOC) with the possibilities of volunteer tutoring meetings with the teachers
- The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers
- Virtual studies, weekly basis virtual learning and assignments
- This is introduction level study unit and it gives good basis for more advanced study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- NOTE-1: There are no scheduled lecturers given by a teacher but the teachers is available for counselling and solving study related problems
- NOTE-2: Student should have finished following compulsory ICT-studies or have equivalent competence: (R0240/R0277 The ICT Environment and Infrastructure and R0242/R0280 Data Networks and Information Security)
- NOTE-3: Programming (Python) and Linux skills are beneficial but not mandatory in Capture the Flag (CTF) exercise

Aika ja paikka

- Not dependent on place or time (virtual studies)
- The study unit is implemented in Canvas LMS

Oppimateriaali ja suositeltava kirjallisuus

- Learning material is based on Comptia Security+ SY0-501 certification training material
- Video material
- Course book (Comptia Security+ 7th Edition, Dulaney Emmett)
- The study unit provides preparatory training for Comptia Security+ but not certification exam
- NOTE: There is no scheduled lecturers given by a teacher but the teachers are available for counselling and solving study related problems

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit content equals professional Comptia Security+ certification

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 33 (preliminary plan)
- Study unit ends on week 43 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 5 cr / 137,5 hours
- Study unit will last 12 weeks

Sisältö ja sen jaksotus

- Weekly base schedule and one (1) module per week
- A student can be proceed in his/her own pace from Module-1 to Module-10
- Integrated Capture the Flag (CTF) exercise

Modules:
- Module-0: Learning target and goal
- Module-1: Network Security Part 1
- Module-2: Network Security Part 2
- Module-3: Compliance and Operational Security Part 1
- Module-4: Compliance and Operational Security Part 2
- Module-5: Threats and Vulnerabilities Part 1
- Module-6: Threats and Vulnerabilities Part 2
- Module-7: Threats and Vulnerabilities Part 3
- Module-8: Application, Data, and Host Security
- Module-9: Access Control and Identity
- Module-10: Cryptography

Lisätietoja opiskelijoille

- STUDY UNIT IS FULLY AUTOMATED (MOOC) AND TEACHERS ARE AVAILABLE FOR COUNSELLING PURPOSES
- This is introduction level study unit and it gives good basis for more advanced cybersecurity study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- The study unit is prioritized for TIKO and BIT students
- Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management
- NOTE: Inactive students are removed from the study unit after the orientation period (the first week of the study unit)

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use essential professional concepts when explaining various work practices and situations
– search for information in different sources
– report
– work under guidance using the skills and methods learned
– receive guidance
– plan the progress of his/her work and use of time under guidance
– work safely and in accordance with the professional code of conduct
– follow the provided instructions and rules

Arviointikriteerit, hyvä (3-4)

– use professional concepts in a consistent manner when explaining various work practices and situations
– gather information and use his/her knowledge basis
– report in the agreed manner
– work using the skills and methods learned
– take part in guidance and utilise it
– plan and manage the progress of his/her work and use of time
– justify this/her actions in accordance with the professional code of conduct

Arviointikriteerit, kiitettävä (5)

– use professional concepts extensively
– compare and choose relevant information
– report and communicate in a professional manner
– work independently, using the skills and methods learned
– anticipate his/her need for guidance
– manage his/her time appropriately, completing the agreed tasks at the required quality level
– work responsibly, applying the skills and methods learned
– plan and evaluate their work, taking safety and/or ethical aspects into consideration

Esitietovaatimukset

Prerequisites:
For tiko students: study units R0240 ICT-toimintaympäristö, R0241 Tiedonhallinta ja tietokannat & R0242 Tietoverkot ja tietoturva
For BIT students: study units R0277 ICT Environment and Infrastructure, R0279 Information Management and Databases & R0280 Data Networks and Information Security
Or equivalent competence.

Osaamistavoitteet

The student is able to
- act ethically as a member of study group and community
- recognize and comprehend the importance of confidentiality,
integrity and availability model for the information and
cybersecurity
- recognize and comprehend different threats, attacks and
vulnerabilities
- comprehend and describe security technologies and tools
- comprehend and describe security architectures and designs
- comprehend and describe identity and access management
approaches
- comprehend, describe and apply risk management principles
- comprehend and describe cryptography and PKI concepts
- differentiate cybersecurity domains and subdomains from each
other
- comprehend and explain the importance of the cybersecurity in
the modern society
- reflect and develop his or her own learning process

Toteutustapa

- This study unit is fully automated self paced online learning (MOOC) with the possibilities of volunteer tutoring meetings with the teachers
- The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers
- Virtual studies, weekly basis virtual learning and assignments
- This is introduction level study unit and it gives good basis for more advanced study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- NOTE-1: There are no scheduled lecturers given by a teacher but the teachers is available for counselling and solving study related problems
- NOTE-2: Student should have finished following compulsory ICT-studies or have equivalent competence: (R0240/R0277 The ICT Environment and Infrastructure and R0242/R0280 Data Networks and Information Security)
- NOTE-3: Programming (Python) and Linux skills are beneficial but not mandatory in Capture the Flag (CTF) exercise

Aika ja paikka

- Not dependent on place or time (virtual studies)
- The study unit is implemented in Canvas LMS

Oppimateriaali ja suositeltava kirjallisuus

- Learning material is based on Comptia Security+ SY0-501 certification training material
- Video material
- Course book (Comptia Security+ 7th Edition, Dulaney Emmett)
- The study unit provides preparatory training for Comptia Security+ but not certification exam
- NOTE: There is no scheduled lecturers given by a teacher but the teachers are available for counselling and solving study related problems

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit content equals professional Comptia Security+ certification

Toteutuksen tärkeät päivämäärät

- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 5 cr / 137,5 hours
- Study unit will last 12 weeks

Sisältö ja sen jaksotus

- Weekly base schedule and one (1) module per week
- A student can be proceed in his/her own pace from Module-1 to Module-10
- Integrated Capture the Flag (CTF) exercise

Modules:
- Module-0: Learning target and goal
- Module-1: Network Security Part 1
- Module-2: Network Security Part 2
- Module-3: Compliance and Operational Security Part 1
- Module-4: Compliance and Operational Security Part 2
- Module-5: Threats and Vulnerabilities Part 1
- Module-6: Threats and Vulnerabilities Part 2
- Module-7: Threats and Vulnerabilities Part 3
- Module-8: Application, Data, and Host Security
- Module-9: Access Control and Identity
- Module-10: Cryptography

Lisätietoja opiskelijoille

- STUDY UNIT IS FULLY AUTOMATED (MOOC) AND TEACHERS ARE AVAILABLE FOR COUNSELLING PURPOSES
- This is introduction level study unit and it gives good basis for more advanced cybersecurity study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- NOTE: Inactive students are removed from the study unit after the orientation period (the first week of the study unit)

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use essential professional concepts when explaining various work practices and situations
– search for information in different sources
– report
– work under guidance using the skills and methods learned
– receive guidance
– plan the progress of his/her work and use of time under guidance
– work safely and in accordance with the professional code of conduct
– follow the provided instructions and rules

Arviointikriteerit, hyvä (3-4)

– use professional concepts in a consistent manner when explaining various work practices and situations
– gather information and use his/her knowledge basis
– report in the agreed manner
– work using the skills and methods learned
– take part in guidance and utilise it
– plan and manage the progress of his/her work and use of time
– justify this/her actions in accordance with the professional code of conduct

Arviointikriteerit, kiitettävä (5)

– use professional concepts extensively
– compare and choose relevant information
– report and communicate in a professional manner
– work independently, using the skills and methods learned
– anticipate his/her need for guidance
– manage his/her time appropriately, completing the agreed tasks at the required quality level
– work responsibly, applying the skills and methods learned
– plan and evaluate their work, taking safety and/or ethical aspects into consideration

Esitietovaatimukset

Prerequisites:
For tiko students: study units R0240 ICT-toimintaympäristö, R0241 Tiedonhallinta ja tietokannat & R0242 Tietoverkot ja tietoturva
For BIT students: study units R0277 ICT Environment and Infrastructure, R0279 Information Management and Databases & R0280 Data Networks and Information Security
Or equivalent competence.

Osaamistavoitteet

The student is able to
- act ethically as a member of study group and community
- recognize and comprehend the importance of confidentiality,
integrity and availability model for the information and
cybersecurity
- recognize and comprehend different threats, attacks and
vulnerabilities
- comprehend and describe security technologies and tools
- comprehend and describe security architectures and designs
- comprehend and describe identity and access management
approaches
- comprehend, describe and apply risk management principles
- comprehend and describe cryptography and PKI concepts
- differentiate cybersecurity domains and subdomains from each
other
- comprehend and explain the importance of the cybersecurity in
the modern society
- reflect and develop his or her own learning process

Toteutustapa

- This study unit is fully automated self paced online learning (MOOC) with the possibilities of volunteer tutoring meetings with the teachers
- The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers
- Virtual studies, weekly basis virtual learning and assignments
- This is introduction level study unit and it gives good basis for more advanced study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- NOTE-1: There are no scheduled lecturers given by a teacher but the teachers is available for counselling and solving study related problems
- NOTE-2: Student should have finished following compulsory ICT-studies or have equivalent competence: (R0240/R0277 The ICT Environment and Infrastructure and R0242/R0280 Data Networks and Information Security)
- NOTE-3: Programming (Python) and Linux skills are beneficial but not mandatory in Capture the Flag (CTF) exercise

Aika ja paikka

- Not dependent on place or time (virtual studies)
- The study unit is implemented in Canvas LMS

Oppimateriaali ja suositeltava kirjallisuus

- Learning material is based on Comptia Security+ SY0-501 certification training material
- Video material
- Course book (Comptia Security+ 7th Edition, Dulaney Emmett)
- The study unit provides preparatory training for Comptia Security+ but not certification exam
- NOTE: There is no scheduled lecturers given by a teacher but the teachers are available for counselling and solving study related problems

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit content equals professional Comptia Security+ certification

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 33 (preliminary plan)
- Study unit ends on week 43 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 5 cr / 137,5 hours
- Study unit will last 12 weeks

Sisältö ja sen jaksotus

- Weekly base schedule and one (1) module per week
- A student can be proceed in his/her own pace from Module-1 to Module-10
- Integrated Capture the Flag (CTF) exercise

Modules:
- Module-0: Learning target and goal
- Module-1: Network Security Part 1
- Module-2: Network Security Part 2
- Module-3: Compliance and Operational Security Part 1
- Module-4: Compliance and Operational Security Part 2
- Module-5: Threats and Vulnerabilities Part 1
- Module-6: Threats and Vulnerabilities Part 2
- Module-7: Threats and Vulnerabilities Part 3
- Module-8: Application, Data, and Host Security
- Module-9: Access Control and Identity
- Module-10: Cryptography

Lisätietoja opiskelijoille

- STUDY UNIT IS FULLY AUTOMATED (MOOC) AND TEACHERS ARE AVAILABLE FOR COUNSELLING PURPOSES
- This is introduction level study unit and it gives good basis for more advanced cybersecurity study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- The study unit is prioritized for TIKO and BIT students
- Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management
- NOTE: Inactive students are removed from the study unit after the orientation period (the first week of the study unit)

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use essential professional concepts when explaining various work practices and situations
– search for information in different sources
– report
– work under guidance using the skills and methods learned
– receive guidance
– plan the progress of his/her work and use of time under guidance
– work safely and in accordance with the professional code of conduct
– follow the provided instructions and rules

Arviointikriteerit, hyvä (3-4)

– use professional concepts in a consistent manner when explaining various work practices and situations
– gather information and use his/her knowledge basis
– report in the agreed manner
– work using the skills and methods learned
– take part in guidance and utilise it
– plan and manage the progress of his/her work and use of time
– justify this/her actions in accordance with the professional code of conduct

Arviointikriteerit, kiitettävä (5)

– use professional concepts extensively
– compare and choose relevant information
– report and communicate in a professional manner
– work independently, using the skills and methods learned
– anticipate his/her need for guidance
– manage his/her time appropriately, completing the agreed tasks at the required quality level
– work responsibly, applying the skills and methods learned
– plan and evaluate their work, taking safety and/or ethical aspects into consideration

Esitietovaatimukset

Prerequisites:
For tiko students: study units R0240 ICT-toimintaympäristö, R0241 Tiedonhallinta ja tietokannat & R0242 Tietoverkot ja tietoturva
For BIT students: study units R0277 ICT Environment and Infrastructure, R0279 Information Management and Databases & R0280 Data Networks and Information Security
Or equivalent competence.

Osaamistavoitteet

The student is able to
- act ethically as a member of study group, community and
working-life partners
- explain the role of ethical hacking in the offensive and defensive
network and applications security
- plan penetration testing process including footprinting,
reconnaissance, scanning networks, enumeration, vulnerability
analysis and system hacking
- select tools and techniques used in penetration testing process
- select appropriate security controls to network security based on
vulnerability analysis
- use the most common penetration testing tools in virtualized
training environment
- reflect and develop his or her own learning process and
working-life skills

Toteutustapa

o This study unit is fully online learning with the possibilities of volunteer tutoring meetings with the teachers.
o The tutoring meetings are not compulsory. Any student can participate in tutoring meeting if they need any help from teachers.
o Students need to commit weekly based on regular studies.
o Online studies, weekly basis distance learning and assignments:
>> Online Learning: Weekly module-based online learning activities including video training tutorials, eBook and other study materials.
>> This is an advanced level cybersecurity course. It demands analytical and competence development efforts (See EQF-NQF guidelines or Laurea Competence Based Study guideline).
>> Learning Tasks: Weekly assignments including material study, learning reflections and finishing targeted learning tasks.
>> This course is a professional online training program facilitated by world-class experts video training from an authorised professional training provider. This course is not a traditional teacher's lecture-based format

Note:
- The content is mapped with the Certified Ethical Hacker curriculum and hands-on lab work.
- The study unit provides preparatory training for Certified Ethical Hacker but not certification exam.
- Prerequisites: R0318 Introduction to Information Security & R0319 Information Security Management OR R0385 Information Infrastructure and Security & A9185 Network Applications OR equivalent competence

VERY IMPORTANT: Any students participated old study unit titled, "Enterprise Applications Security (R0323)" with Certified Ethical Hacker professional training. Please don't enrol and participate in this study unit. This study unit is an updated version of the previous curriculum's course "Enterprise Applications Security (R0323)"

Aika ja paikka

The course is online and not dependent on place or time (online distance studies)
=======
• Course start: Monday, September 4, 2023
• Canvas workspace access: Monday, September 4, 2023
• Volunteer Orientation session: Wednesday, September 6, 2023 at 4:00 PM via Zoom (Zoom link will be available on the Canvas schedule page on September 4)
• Deadline to finish orientation module: Thursday, September 14, 2023 midnight
• Tutoring sessions: Teachers are offering volunteer tutoring session during the entire course schedule. The details will be provided in Canvas course schedule and roadmap (including Zoom links)
• If you are unable to attend the volunteer session, do not worry. The course is designed to be self-paced and can be completed online. However, it is important to make sure to meet the scheduled weekly deadlines and study effectively.

Very important to note, If you are not participating "Introduction to Information Security" course and participating both advanced cybersecurity courses. You can ignore your calendar entry with the name "Introduction to Information Security" that lasts from 15:00 to 17:30

Oppimateriaali ja suositeltava kirjallisuus

This course offers the following learning methods and materials:
---
o Online training: You will complete the online training using Laurea's Cybersecurity Professional Training platform and Canvas. The training covers a variety of topics, including cybersecurity fundamentals, threat analysis, and incident response.
o Hands-on lab exercises: You will also have the opportunity to participate in hands-on lab exercises. These exercises will give you the chance to practice your skills in a safe and controlled environment.
o Tutoring sessions: Volunteer tutoring sessions will be offered throughout the course. These sessions will provide you with additional support and help you to succeed in the course.

o Note: The course is designed to be self-paced and can be completed online. However, it is important to make sure to meet the scheduled weekly deadlines and study effectively.

Toteutuksen valinnaiset suoritustavat

o This study unit is for regular ICT & Cybersecurity students who prefer online studies.
o There is no parallel alternative method to finish this study unit.
o Any students achieved "Certified Ethical Hacker" professional training can contact teachers for AHOT (Competence Evaluation & Assessment)

Note:
>> Finishing online learning (as per requirement) is a basic requirements to consider for evaluation and grading. If student not finishing online learning as per requirements, not qualifying for evaluation and grading.

Työelämäyhteistyö ja/tai TKI

o Time to time, we are offering events, seminars and workshop participation.
o Also offering partner's announcements of internships, working life projects and thesis opportunities for Cybersecurity Module students.

For example,
>> In the past teachers offered annual event participation including Nokia HackAthon, Digia HackAthon or Visiting our partner Nixu Corporation's Cyber Defense Center.
>> Laurea also offers EU and Finnish Research, Development and Innovation project participation.

Toteutuksen tärkeät päivämäärät

All details on the course management system for accepted students only.
--Teachers are sending welcome e-mail message (Laurea student emails only) with induction details to accepted students.
--Inactive students are removed from the study unit after orientation period (the first week of the study unit).
--Please note that the study unit is divided in two main periods that have fixed starting and ending dates. You can proceed with faster pace within a period than module based deadlines express but you need to meet module based deadlines at the minimum

Kansainvälisyys toteutuksella

The teachers and students are international (Finnish and English degree programme students).
- Study is suitable for exchange students.
- We are also cooperating with working life companies and both teachers are involved in European and International innovation projects.

Opiskelijan ajankäyttö ja kuormitus

The student puts 5 ECTS study effort.
o 5 cr / 137,5 hours are attached to the workload of a full-time study of learning and the associated learning outcomes.

Sisältö ja sen jaksotus

The content of the study unit is mapped with Certified Ethical Hacker(CEH) professional certification. The content covers professional training and hands-on lab practices on virtual lab environment. Following are listed modules:

Period-1
-----------
Module-1: Information & Cyber Security and Ethical Hacking Overview
Module-2: Reconnaissance Techniques-1
Module-2: Reconnaissance Techniques-2
Module-4: System Hacking Phases and Attack Techniques-1
Module-5: System Hacking Phases and Attack Techniques-2

Period-1
-----------
Module-6: Network and Perimeter Hacking
Module-7: Web Application Hacking-1
Module-8: Web Application Hacking-2
Module-9: Wireless Network, Mobile Platform, IoT, and OT Hacking
Module-10: Cloud Computing Hacking and Cryptography

Lisätietoja opiskelijoille

The study unit is an advanced cybersecurity. It is suitable for graduate level students. Considering following points:
o Student must know: how company/organization works.
o Students knows the basics of ICT-technologies and Introduction to Information Security.
o Student is able to study independently with weekly-biweekly schedule.

VERY IMPORTANT: Any students participated old study unit titled, "Enterprise Applications Security (R0323)" with Certified Ethical Hacker professional training. Please don't enrol and participate in this study unit. This study unit is an updated version of the previous curriculum's course "Enterprise Applications Security (R0323)"

Important Notes:
--Any student who is willing to learn the overview of information security technologies, we recommend to participate following study unit: Introduction to Information Security.
--This study unit is prioritized for TIKO and BIT students
--Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management after R0186 Information and Cybersecurity before participating this study unit.
--Inactive students are removed from the study unit after orientation period (the first week of the study unit)
--------------
Cybersecurity Professional Training and Body of Knowledge (BoK): This course is part of Laurea's advanced cybersecurity study offerings and professional training. The specific modules and topics covered in this course are mapped with professional skills development focus areas. Some topics may vary and overlap depending on the context. However, the overlapping of topics is a common feature of cybersecurity courses, and it is justified by the complexity and ever-evolving nature of the field. There is also a practical reason for the overlapping of topics in cybersecurity courses. Many cybersecurity courses are offered online, and it is not always possible to offer a course that covers a single topic in sufficient depth. By offering courses that cover multiple topics, universities can ensure that students have access to the knowledge and skills they need to succeed in the cybersecurity field.

Cybersecurity is a complex and ever-evolving field, so it is important for cybersecurity professionals to have a broad understanding of the field. This can be achieved by taking courses that cover a variety of topics, even if some of the topics overlap. However, it is important to note that the depth and context of the topics may vary depending on the course.

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- The weekly study, assignment and tasks
- Students collect the points for different learning activities
- Online Tests

Important Note:
o Students are responsible to finish all tasks within schedule time to gain points.
o Learning Activities and Tasks: All Details given in respective Module Folders on the course management system.
o No points after the deadline.
o Sickness or family reasons - contact teacher for tutoring discussion. Sickness needs a doctor certificate.

Teachers will evaluate student work and post points after mid-term and end-term. There are two checkpoints.
Any student not finishing 'Module-0: Induction and Study Plan' will be removed from the study unit after first week of the course.

>> Grading scale (0 to 5):
0-49 points: 0
50-59 points: 1
60-69 points: 2
70-79 points: 3
80-89 points: 4
90-100 points: 5

Hylätty (0)

Not meeting minimum requirements of learning outcomes including content knowledge, skills and competences.

Arviointikriteerit, tyydyttävä (1-2)

In addition to content knowledge, skills, abilities, tasks and practices a student is able to:
– use essential professional concepts when explaining various work practices and situations
– search for information in different sources
– report
– work under guidance using the skills and methods learned
– receive guidance
– plan the progress of his/her work and use of time under guidance
– work safely and in accordance with the professional code of conduct
– follow the provided instructions and rules

Arviointikriteerit, hyvä (3-4)

In addition to [1] Evaluation criteria - satisfactory (1-2) and, [2] content knowledge, skills, abilities, tasks and practices a student is able to:
– use professional concepts in a consistent manner when explaining various work practices and situations
– gather information and use his/her knowledge basis
– report in the agreed manner
– work using the skills and methods learned
– take part in guidance and utilise it
– plan and manage the progress of his/her work and use of time
– justify this/her actions in accordance with the professional code of conduct

Arviointikriteerit, kiitettävä (5)

In addition to [1] Evaluation criteria - good (3-4) and, [2] content knowledge, skills, abilities, tasks and practices a student is able to:
– use professional concepts extensively
– compare and choose relevant information
– report and communicate in a professional manner
– work independently, using the skills and methods learned
– anticipate his/her need for guidance
– manage his/her time appropriately, completing the agreed tasks at the required quality level
– work responsibly, applying the skills and methods learned
– plan and evaluate their work, taking safety and/or ethical aspects into consideration

Esitietovaatimukset

Prerequisites:
R0318 Introduction to Information Security & R0319 Information
Security Management OR R0385 Information Infrastructure and
Security & A9185 Network Applications OR equivalent
competence

Osaamistavoitteet

Opiskelija osaa
- selittää testauksen peruskäsitteet, periaatteet ja termit
- suunnitella testitapauksia ja testausta kokonaisuutena eri testausympäristöissä
- testata ohjelmistoja toiminnallisesti ja ei-toiminnallisesti
- soveltaa erilaisia testausmenetelmiä ja testaustekniikoita
- raportoida testauksen tulokset ja havainnot suunnitelmallisesti ja ymmärrettävästi
- analysoida testauksen merkitystä kokonaisuutena
- erotella testaukseen liittyvät erilaiset roolit ja tehtävät sekä ymmärtää niiden merkityksen

Toteutustapa

Monimuotototeutus

Canvas työtila käytössä, jossa keskeinen materiaali saatavissa.

Luennoille osallistuminen erittäin toivottavaa.Luennot sisältävät ryhmätöitä. Loppukurssin sisällön aikataulutus tarkentuu kurssin edetessä.

Läsnäolopäivät Tikkurilassa, paikanpäällä, ei etäosallistumista, ei tehdä videotallennetta.

Etäpäivät, Kokonaan zoom/teams välityksellä, Videotallenne tehdään ja tulee saataville kurssin ajaksi.

Tehtävät: Palautettava määräaikaan mennessä, Palauttamaton tai myöhässä palautettu tehtävä on arvostelussa 0 pistettä

Aika ja paikka

[Kenttä ei ole Laureassa käytössä]

Oppimateriaali ja suositeltava kirjallisuus

Keskeiset tietopohja on saatavissa Canvasisa ja luentomateriaaleissa.
Linkit tarvittaviin lisämateriaaleihin tehtävissä ja luentomateriaaleissa.

Toteutuksen valinnaiset suoritustavat

Laurean tutkintosäännön mukaisesti ”Kaikilla opiskelijoilla on oikeus osaamisensa näyttämiseen. Aloitteen hankitun osaamisen tunnistamisesta ja tunnustamisesta tekee opiskelija. Osaamisen tunnistaa ja tunnustaa opinnosta vastaava opettaja tai muu tehtävään nimetty henkilö. Arvioinnissa noudatetaan samaa arviointikriteeristöä ja pääsääntöisesti samaa arviointiasteikkoa kuin vastaavalla opintojaksolla tai -kokonaisuudella. Opiskelijalla on oikeus hakea osaamisen tunnustamista riippumatta siitä, missä, miten ja milloin osaaminen on hankittu. Opiskelija voi hakea myös työssä hankittavan osaamisen tunnistamista osaksi tutkintoa (työn opinnollistaminen). ... Opiskelija vastaa osaamisen osoittamisesta, todistamisesta ja riittävien tietojen toimittamisesta. Osaamisen arvioivat opiskelija ja näytön vastaanottava ohjaaja yhdessä. ” Katso lisätietoa opiskelijaintrasta.

Testausosaamisen muulla tavoin hankkineet voivat keskustella opettajan kanssa mahdollisista korvauskäytännöistä.
Tästä on aina sovittava erikseen heti kurssin alkuvaiheessa.

Työelämäyhteistyö ja/tai TKI

Osa harjoituksista voi liittyä työelämän antamaan testauskohteeseen.

Toteutuksen tärkeät päivämäärät

Tehtävien palautuspäivämäärät Canvasissa. Kurssin uusiminen on tarvittaessa mahdollista perinteisen tentin avulla jonka aikataulusta sovitaan erikseen.

Tutkintosäännön 18§ mukaisesti ”opiskelijan on oltava ensimmäisellä kontaktikerralla läsnä tai ilmoitettava poissaolostaan vastuuopettajalle opintoon osallistumisensa vahvistamiseksi. Vaihtoehtoisesti opettaja voi määrittää myös muun tavan, jolla opiskelija vahvistaa osallistumisensa toteutukselle. Näitä toimia voidaan edellyttää viikon sisällä toteutuksen alkamisesta. Edellä esitetyn mukaisesti toimintatavan soveltaminen edellyttää, että opettaja tiedottaa toteutukselle hyväksyttyjä opiskelijoita käytänteestä ja että käytänne on kerrottu opinnon toteutussuunnitelmassa. Mikäli opiskelija on estynyt perusteluista syistä osallistumaan ensimmäiseen kontaktikertaan tai aktivoitumaan opinnoissa opettajan asettamien edellytysten mukaisesti, hänen tulee olla yhteydessä vastuuopettajaan toteutukselle osallistumisesta sopimiseksi. Ilmoittautuminen hylätään, mikäli opiskelija ei ilmoita poissaolostaan opinnon aloituskerralta tai poissaolon syytä ei voida pitää perusteltuna. Hänen tilalleen voidaan ottaa jonossa oleva seuraava opiskelija”.

Opiskelijan ajankäyttö ja kuormitus

Luennot n 23h
Omaehtoinen opiskelu ja harjoitukset (tehtävät ja/tai projekti) n.110h

Sisältö ja sen jaksotus

Testauksen merkitys, peruskäsitteet, periaatteet ja termit
Testaus osana ohjelmistokehitysprosessia
Testaukseen liittyvät erilaiset roolit ja tehtävät sekä ymmärtää niiden merkitys ohjelmistokehityksessä
Testiautomaation merkitys
Testauksen ja testitapauksien suunnittelu kokonaisuutena
Testausmenetelmiä ja testaustykaluja

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

Osaamisen arviointi kohdistuu opetussuunnitelmien tavoitekuvauksiin ja osaamisen taso arvioidaan opinnon toteutussuunnitelmalla ilmoitetun arviointikriteeristön perusteella (Laurean tutkintosääntö).

Opintojakson aikana tehtävät yksilötehtävät sekä testausprojekti yksilö tai ryhmätyönä.

Kurssiin kuuluu 5 tehtävää + Testausprojekti Yhteensä (70p)
Lisäksi kurssista pidetään tentti (30p).

Arviointikriteerit, tyydyttävä (1-2)

AMMATILLINEN TIETOPERUSTA, TIEDONHAKU JA RAPORTOINTI
- käyttää johdonmukaisesti ammattikäsitteitä ja osoittaa perehtyneensä tietoperustaan
- raportoida ja viestiä ammattimaisesti
AMMATILLINEN TOIMINTA JA TYÖELÄMÄN KEHITTÄMINEN
- toimia itsenäisesti toimintaympäristö huomioiden
- ottaa vastuuta asiakkaan ja /tai yhteistyötahon kanssa toimimisesta ja heidän tarpeisiinsa vastaamisesta
Arvioidaan soveltuvilta osin: RYHMÄTYÖTAIDOT, JOHTAMINEN JA VASTUULLISUUS
- kuvata oman toimintansa merkitystä yhteistyön onnistumiseksi
- kuvata osaamistaan suhteessa opinnon osaamistavoitteisiin

Arviointikriteerit, hyvä (3-4)

AMMATILLINEN TIETOPERUSTA, TIEDONHAKU JA RAPORTOINTI
- arvioida kriittisesti tietoa ja perustella toimintaansa tutkitun tiedon avulla
AMMATILLINEN TOIMINTA JA TYÖELÄMÄN KEHITTÄMINEN
- esittää ratkaisuja ammatillisiin tehtäviin luovuutta hyödyntäen
- edistää ammatillista yhteistyötä sekä kehittää asiakas- tai kumppanisuhdetta
Arvioidaan soveltuvilta osin: RYHMÄTYÖTAIDOT, JOHTAMINEN JA VASTUULLISUUS
- edistää toiminnallaan ryhmän yrittäjämäistä ja vastuullista työskentelyotetta
- kuvata oman osaamisensa kehittymistä suhteessa opinnon osaamistavoitteisiin

Arviointikriteerit, kiitettävä (5)

AMMATILLINEN TIETOPERUSTA, TIEDONHAKU JA RAPORTOINTI
- analysoida hankittua tietoa ja tehdä päätelmiä sekä yhdistää teoreettisen ja kokemuksellisen tiedon toisiinsa
AMMATILLINEN TOIMINTA JA TYÖELÄMÄN KEHITTÄMINEN
- arvioida tuotetun tiedon, taidon tai idean sovellettavuutta ja vaikuttavuutta muihin yhteyksiin
- ennakoida asiakkaan ja/tai yhteistyötahojen tarpeita
Arvioidaan soveltuvilta osin: RYHMÄTYÖTAIDOT, JOHTAMINEN JA VASTUULLISUUS
- arvioida ja kehittää ryhmän yrittäjämäistä ja vastuullista työskentelyotetta
- arvioida osaamisen hyödyntämismahdollisuuksia sekä suunnitella omaa ja ryhmän kehittymistä

Osaamistavoitteet

The student is able to
- act ethically as a member of study group, community and
working-life partners
- identify threats, vulnerabilities and risks associated with
organization’s systems
- recognize and apply the confidentiality, integrity and availability
model for the information and cybersecurity in practice
- comprehend differences regarding different cryptographic
methods, its applications and techniques
- plan and apply the concepts of risk assessment, risk analysis and
risk management
- outline security controls for workstation and server
environments
- implement and manage authentication and authorization
mechanisms
- reflect and develop his or her own learning process and
working-life skills

Toteutustapa

This is an eLearning and Online study offering.

Main learning activities including weekly online learning, learning tasks and group activities. Some details listed below:
¤ Online Learning: Weekly module based online learning activities.
¤ Learning Tasks: Weekly assignments including material study, writing learning reflections and finishing targeted learning tasks.
¤ This course is a professional online training program facilitated by world-class experts video training from an authorised professional training provider. This course is not a traditional teacher's lecture-based format

Content:
The content is mapped with the Certified Information Systems Security Professional (CISSP) curriculum. This study unit offers 12 module learning path by acquiring the knowledge to design, implement, and manage secure information systems (topic details below).

Aika ja paikka

- Study unit starts from week-4 (24th January) to end of the semester.
- Not dependent on place or time (distance and online studies)
- Weekly online module based studies(every week regular studies).

Oppimateriaali ja suositeltava kirjallisuus

1) Canvas provides weekly module details including details on online learning, learning task and submission of task.
2) Online learning on professional training platform for CISSP.
3) Laurea provide study material lists on course management system including eBook from Laurea online library resources.

Toteutuksen valinnaiset suoritustavat

This study unit is for regular students who prefer to learn every week. No direct alternative method to finish this study unit. However, any students gained CISSP can consult for AHOT or recognition of early competences as per Laurea BIT norms.

Finishing online learning (as per requirement) is basic requirements to consider for evaluation and grading. If student not finishing online learning as per requirements, not qualifying for evaluation and grading.

Työelämäyhteistyö ja/tai TKI

We have a good cooperation with working-life partners and RDI projects.

We have offered annual event participation including Nokia HackAthon, Digia HackAthon or Visiting our partner Nixu Corporation's Cyber Defense Center. Time to time, we also announce internships, working life projects and thesis opportunities for Cybersecurity Module students.

Toteutuksen tärkeät päivämäärät

>>All details on the course management system for registered students only.
- Study unit starts from week-4 (24th January) to end of the semester.
- Inactive students are removed from the study unit after orientation period (the first week of the study unit).
- Volunteer tutoring sessions: Scheduled and listed in official Peppi Calendar

Kansainvälisyys toteutuksella

- Teachers and students group are international (Finnish and English degree programme students).
- Study is suitable for exchange students.
- We are also cooperating with working life companies and both teachers are involved in European and International innovation projects.

Opiskelijan ajankäyttö ja kuormitus

The student puts 5 ECTS study effort.
o 5 credits X 27 hours = 135 hours are attached to the workload of a full-time study of learning and the associated learning outcomes.

Sisältö ja sen jaksotus

The study unit starts on week-4 and finishes at the end of semester.
¤ The weekly module open on every Monday at 09.00 and closes on Sunday midnight.


COURSE CONENT: Mapped with latest Certified Information Systems Security Professional (CISSP) body of knowledge.

Lisätietoja opiskelijoille

- The study unit is suitable for any graduate-level student. Considering following points:
o The student must know: how the company/organization works
o Students know the basics of ICT-technologies
o The student is able to study with weekly based schedule

- The study unit is prioritized for TIKO and BIT students.
- Safety, Security and Risk Management students should consider taking compulsory and intermediate cybersecurity courses before participating in this advanced course.
- Inactive students are removed from the study unit after orientation period (the first week of the study unit).

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Important Note:
o Students are responsible to finish all tasks within schedule time to gain points.
o Learning Activities and Tasks: All Details given in respective Module Folders on the course management system.
o No points after the deadline.
o Sickness or family reasons - contact teacher for tutoring discussion. We are here to help your learning process and support within Laurea Guidelines. Long term sickness needs a doctor certificate.

Teachers will evaluate student work and post points after mid-term and end-term. There are two checkpoints.
Any student not finishing 'Module-0: Induction and Study Plan' will be removed from the study unit after first week of the course.

Hylätty (0)

Not meeting the minimum requirements

Arviointikriteerit, tyydyttävä (1-2)

– use essential professional concepts when explaining various work practices and situations
– search for information in different sources
– report
– work under guidance using the skills and methods learned
– receive guidance
– plan the progress of his/her work and use of time under guidance
– work safely and in accordance with the professional code of conduct
– follow the provided instructions and rules

Arviointikriteerit, hyvä (3-4)

– use professional concepts in a consistent manner when explaining various work practices and situations
– gather information and use his/her knowledge basis
– report in the agreed manner
– work using the skills and methods learned
– take part in guidance and utilise it
– plan and manage the progress of his/her work and use of time
– justify this/her actions in accordance with the professional code of conduct

Arviointikriteerit, kiitettävä (5)

– use professional concepts extensively
– compare and choose relevant information
– report and communicate in a professional manner
– work independently, using the skills and methods learned
– anticipate his/her need for guidance
– manage his/her time appropriately, completing the agreed tasks at the required quality level
– work responsibly, applying the skills and methods learned
– plan and evaluate their work, taking safety and/or ethical aspects into consideration

Esitietovaatimukset

Prerequisites:
R0318 Introduction to Information Security & R0319 Information
Security Management OR R0385 Information Infrastructure and
Security & A9185 Network Applications OR equivalent
competence

Osaamistavoitteet

The student is able to
- act ethically as a member of study group and community
- recognize and comprehend the importance of confidentiality,
integrity and availability model for the information and
cybersecurity
- recognize and comprehend different threats, attacks and
vulnerabilities
- comprehend and describe security technologies and tools
- comprehend and describe security architectures and designs
- comprehend and describe identity and access management
approaches
- comprehend, describe and apply risk management principles
- comprehend and describe cryptography and PKI concepts
- differentiate cybersecurity domains and subdomains from each
other
- comprehend and explain the importance of the cybersecurity in
the modern society
- reflect and develop his or her own learning process

Toteutustapa

- This study unit is fully automated self paced online learning (MOOC) with the possibilities of volunteer tutoring meetings with the teachers
- The tutoring meetings are not compulsory. Any student can participate tutoring meeting if they need any help from teachers
- Virtual studies, weekly basis virtual learning and assignments
- This is introduction level study unit and it gives good basis for more advanced study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- NOTE-1: There are no scheduled lecturers given by a teacher but the teachers is available for counselling and solving study related problems
- NOTE-2: Student should have finished following compulsory ICT-studies or have equivalent competence: (R0240/R0277 The ICT Environment and Infrastructure and R0242/R0280 Data Networks and Information Security)
- NOTE-3: Programming (Python) and Linux skills are beneficial but not mandatory in Capture the Flag (CTF) exercise

Aika ja paikka

- Not dependent on place or time (virtual studies)
- The study unit is implemented in Canvas LMS

Oppimateriaali ja suositeltava kirjallisuus

- Learning material is based on Comptia Security+ SY0-501 certification training material
- Video material
- Course book (Comptia Security+ 7th Edition, Dulaney Emmett)
- The study unit provides preparatory training for Comptia Security+ but not certification exam
- NOTE: There is no scheduled lecturers given by a teacher but the teachers are available for counselling and solving study related problems

Toteutuksen valinnaiset suoritustavat

- If a student has existing domain specific competence he/she can request a process for recognition of existing competence before or during the Orientation-module

Työelämäyhteistyö ja/tai TKI

- The study unit content equals professional Comptia Security+ certification

Toteutuksen tärkeät päivämäärät

- Study unit starts on week 33 (preliminary plan)
- Study unit ends on week 43 (preliminary plan)
- Detailed schedule is released at the beginning of the study unit
- NOTE: There can be scheduling changes

Opiskelijan ajankäyttö ja kuormitus

- 5 cr / 137,5 hours
- Study unit will last 12 weeks

Sisältö ja sen jaksotus

- Weekly base schedule and one (1) module per week
- A student can be proceed in his/her own pace from Module-1 to Module-10
- Integrated Capture the Flag (CTF) exercise

Modules:
- Module-0: Learning target and goal
- Module-1: Network Security Part 1
- Module-2: Network Security Part 2
- Module-3: Compliance and Operational Security Part 1
- Module-4: Compliance and Operational Security Part 2
- Module-5: Threats and Vulnerabilities Part 1
- Module-6: Threats and Vulnerabilities Part 2
- Module-7: Threats and Vulnerabilities Part 3
- Module-8: Application, Data, and Host Security
- Module-9: Access Control and Identity
- Module-10: Cryptography

Lisätietoja opiskelijoille

- STUDY UNIT IS FULLY AUTOMATED (MOOC) AND TEACHERS ARE AVAILABLE FOR COUNSELLING PURPOSES
- This is introduction level study unit and it gives good basis for more advanced cybersecurity study units
- This study unit is suitable for any student who is willing to learn the overview of information security technologies
- Students need to commit weekly based studies
- The study unit is prioritized for TIKO and BIT students
- Safety, Security and Risk Management students should take the study unit TO007BN Information and Cybersecurity Management
- NOTE: Inactive students are removed from the study unit after the orientation period (the first week of the study unit)

Arviointiasteikko

H-5

Arviointimenetelmät ja arvioinnin perusteet

- Weekly studies
- Students collect points for different learning activities
- Online Tests
- Learning assignments and tasks
- Possible bonus task

Assessment scale:
100-90 points equals grade 5
89-80 points equals grade 4
79-70 points equals grade 3
69-60 points equals grade 2
59-50 points equals grade 1
49-0 points equals grade 0

Arviointikriteerit, tyydyttävä (1-2)

– use essential professional concepts when explaining various work practices and situations
– search for information in different sources
– report
– work under guidance using the skills and methods learned
– receive guidance
– plan the progress of his/her work and use of time under guidance
– work safely and in accordance with the professional code of conduct
– follow the provided instructions and rules

Arviointikriteerit, hyvä (3-4)

– use professional concepts in a consistent manner when explaining various work practices and situations
– gather information and use his/her knowledge basis
– report in the agreed manner
– work using the skills and methods learned
– take part in guidance and utilise it
– plan and manage the progress of his/her work and use of time
– justify this/her actions in accordance with the professional code of conduct

Arviointikriteerit, kiitettävä (5)

– use professional concepts extensively
– compare and choose relevant information
– report and communicate in a professional manner
– work independently, using the skills and methods learned
– anticipate his/her need for guidance
– manage his/her time appropriately, completing the agreed tasks at the required quality level
– work responsibly, applying the skills and methods learned
– plan and evaluate their work, taking safety and/or ethical aspects into consideration

Esitietovaatimukset

Prerequisites:
For tiko students: study units R0240 ICT-toimintaympäristö, R0241 Tiedonhallinta ja tietokannat & R0242 Tietoverkot ja tietoturva
For BIT students: study units R0277 ICT Environment and Infrastructure, R0279 Information Management and Databases & R0280 Data Networks and Information Security
Or equivalent competence.