N4860 教學大綱表

教學大綱表 (113學年度第1學期)

請遵守智慧財產權，勿使用非法影印教科書，避免觸法。

課程名稱 Course Title	(中文) 高等資訊安全 (英文) Advanced Information Security			開課單位 Departments	資訊經營學系
				課程代碼 Course No.	N4860
授課教師 Instructor	陳志誠
學分數 Credit	3.0	必/選修 core required/optional	選修	開課年級 Level	大四
先修科目或先備能力(Course Pre-requisites)：Introduction to Computer Science, Operating Systems, Management Information Systems
課程概述與目標(Course Overview and Goals)：This advanced course is offered to the students who have acquired sufficient basic knowledge of information security or professionals of management information systems. The course proceeds in seminars on special topics of security. Contents of the course include system vulnerability, return on security investment, security investment, security management, and so on. Three students forming a research group and conduct a panel discussion.
教科書(Textbook)	A. Network security and its impact on business strategy B. CSA Security Guidance for Critical Areas of Focus in Cloud Computing V3.0
參考教材(Reference)
圖書館電子書(E-book of the Library)	https://www.igi-global.com/gateway/book/218133

課程大綱 Syllabus			學生學習目標 Learning Objectives	單元學習活動 Learning Activities	學習成效評量 Evaluation	備註 Notes
序 No.	單元主題 Unit topic	內容綱要 Content summary	學生學習目標 Learning Objectives	單元學習活動 Learning Activities	學習成效評量 Evaluation	備註 Notes
1	Introduction	A. System vulnerability B. Threats C. Protection	Overall understanding of the course
2	Technical aspects of information security	A. Cryptography B. Hardware enhancement C. Software measures	-To understand the advanced cryptosystems such as ElGammal,Ecliptic Curve, and Quantum Cryptography.	演講講授	作業其他評量-
3	EI Gamma Public-key crypto system	A. Primitive root B. Algorithm	-To know the weakness of RSA system	演講講授	作業其他評量-
4	Multimedia Security(I)	A. Image B. Information hiding	-To understand the threats hidden in multimedia	演講講授	問答
5	Multimedia Security(II)	A. Stenography B. Streaming	-To know how to improve the security in multimedia. In addition, copyrights protection is considered.	演講講授	問答
6	Electron: Commerce Security(I)	A. eCommerce B. Threats to eCommerce	-To introduce the structural of eCommerce and to know the threats behind including fraud	演講講授	作業問答
7	Electron: Commerce Security(II)	A. web Security B. Payment Security	-To gain an overview over eCommerce and its payment system - To know the risks in e-payment	演講講授	問答
8	Database Security(I)	A. ACID Property B. Statistic Attacks	-To understand the deatabase security -To protect attacks like statistical attack and SQL injection	講授	作業問答
9	Database Security(II)	A. DB Security measures B. DB Encryption	-To understand the new types of Large Language Models -To know the attacks on LLM	講授	問答
10	Cloud Computing Security(I)	A. Introduction B. Cloud Computing Architecture	-To understand the architecture, the sevice model and deployment model of cloud computing	講授	作業問答
11	Cloud Computing Security(II)	A. Hypervisor B. System Configuration	- To understand the risks associated with cloud computing such as DDOS attacks, side-channel attacks, and man-in-the-middle attacks -To understand how to leverage these new computing model	講授	問答
12	AI & Security	A. Security with AI enhancement B. AI exploited by hackers	-To make use of AI to strengthen security -To prevent hackers from attacks using AI	講授	問答
13	IOT Security	A. IOT overview B. Vulnerability of IOT systems C. Security enhancement	-To know the use of sensors and other devices -To understand the threats in IOT security (e.g., Mirai) -To strengthen by best practice	講授	問答
14	Mobile Security(I)	A. Introduction to GSM B. Data Security C. 5G security	-To understand the development of mobile communications -To know the vulnerabilities of 1G--4G Comm	講授	其他評量-
15	Mobile Security(II)	A. 5G Standard B. 5G Security	-To know the applications of 5G Comm -To understand the weakness of 5G and new generation mobile comm and its possible enhancement	講授	其他評量-
16	Security Management(I)	A. ISO 2 Tool B. Information Assets	-To dicuss online about the management aspects on security management from policy to procedure to methods	講授	問答彈性教學
17	Security Management(II)	A. Risk Management B. Security as a Service	-To know the PDCA management in ISO 27001 To discuss with case studies	講授	問答彈性教學
18	Conclusion	A. Review of all Information Security Issues B. Outlook	-Final examination		期末考

彈性教學週活動規劃

序 No.	實施期間 Period	實施方式 Content	教學說明 Teaching instructions	彈性教學評量方式 Evaluation	備註 Notes
1	起:2023-12-18 迄:2023-12-31		Visit Computer Exhibitions, Software House, Computer Security Organisations, or Attend Workshops	Write a summary and Findings	Active participation is expected
2	起:2024-12-30 迄:2025-01-04	2.非同步線上課程 Asynchronous online course	Study on cases of information security of financial institutions	Write a summary of findings

教學要點概述：
1.自編教材 Handout by Instructor：
■ 1-1.簡報 Slids
■ 1-2.影音教材 Videos
□ 1-3.教具 Teaching Aids
■ 1-4.教科書 Textbook
□ 1-5.其他 Other
■ 2.自編評量工具/量表 Educational Assessment
■ 3.教科書作者提供 Textbook

成績考核 Performance Evaluation：期末考：25% 期中考：25% 其他評量：25% 問答：5% 彈性教學：10% 作業：10%

教學資源(Teaching Resources)：
■ 教材電子檔(Soft Copy of the Handout or the Textbook)
□ 課程網站(Website)
扣考規定：https://curri.ttu.edu.tw/p/412-1033-1254.php