Module Catalogue 2023/24

Pre Requisite Comment

N/A

Co Requisite Comment

N/A

Aims

All computer scientist graduates should have a good understanding of the issues and practicalities of security when designing and implementing systems. This module explores key security challenges faced by modern day software applications and gives students first-hand experience in implementing security mechanisms using different programming styles or paradigms to help address those challenges.

Outline Of Syllabus

1. Security and programming paradigm basics, software security principles and practice.
2. Introduction to Web development and Python Flask.
3. Data input, input validation, error handling.
4. Storing input, database configuration and interaction.
5. Cryptography basics, hashing passwords, encrypting stored data.
6. Authenticating users, multi-factor authentication, limiting login attempts, password management.
7. Authorisation, managing user access, Role Based Access Control, logging users activity.
8. Random numbers, randomness issues, cryptographically secure random numbers.
9. Transmitting data, HTTPS, security headers, digital signatures.

Intended Knowledge Outcomes

To be able to:

• Understand the key security challenges faced by software applications.
• Reason about appropriate security mechanisms and their properties needed to address those security
challenges.
• Select suitable programming paradigms and elements to implement those security mechanisms.

Intended Skill Outcomes

To be able to:

• Implement solutions to key security issues using different development paradigms.
• Read and understand code written using different programming paradigms.
• Expand and extend existing software applications.
• Understand and problem solve programming errors.

Teaching Rationale And Relationship

Teaching will be PIP but allow for a blended learning approach if needed where a mix of online and face-to-face lecture type activities will present the basic material, followed by substantial practical time during which the students will develop the skills to apply the techniques introduced through the lecture material

Assessment Rationale And Relationship

This is both a theoretical and practical subject area and therefore merits assessment via digital examination and coursework components.

N.B. This module has both “Exam Assessment” and “Other Assessment” (e.g. coursework). If the total mark for either assessment falls below 35%, the maximum mark returned for the module will normally be 35%.

General Notes

N/A