Master TR-NQF-HE: Level 7 QF-EHEA: Second Cycle EQF-LLL: Level 7

Course Introduction and Application Information

Course Code Course Name Semester Theoretical Practical Credit ECTS
CYS5123 Web Application Security: Hacking and Defence Fall 3 0 3 12
This catalog is for information purposes. Course status is determined by the relevant department at the beginning of semester.

Basic information

Language of instruction: English
Type of course: Departmental Elective
Course Level:
Mode of Delivery: Face to face
Course Coordinator : Dr. Öğr. Üyesi AHMET NACİ ÜNAL
Recommended Optional Program Components: None
Course Objectives: Teaching organizational management methods of information security. Discussing data access models. Discussing information security policies.

Learning Outcomes

The students who have succeeded in this course;
Information management. Data access models. Information management legislation. Auditing and certification of information management processes will be though.

Course Content

Introduction of data security principles. Standards defining data security levels. Standards regarding user security levels. Classification of data stored in the information systems. Classification of user access levels from security perspective. Access monitoring, auditing and reporting with respect to defined user and data security levels. Information management strategies and policies. Introducing national and international information management legislation.

Weekly Detailed Course Contents

Week Subject Related Preparation
1) Course outline Lecturer notes
2) Information security and access Lecturer notes
3) Confidentiality levels and access levels Lecturer notes
4) Access models Lecturer notes
5) Confidentiality classification methods Lecturer notes
6) Auditing access Lecturer notes
7) Undeniability of access Lecturer notes
8) Information management concept Lecturer notes
9) Information management policies Lecturer notes
10) Information management standards Lecturer notes
11) Certification of information management Lecturer notes
12) National and international information management principles Lecturer notes
13) Daily topics Lecturer notes
14) Daily topics Lecturer notes


Course Notes / Textbooks: Management of Information Security, 4th Ed., Michael E. Whitman, Herbert J.
Mattord, 2013, Cengage Learning.
Fundamentals Of Information Systems Security, 2nd Ed., David Kim, Michael
G. Solomon, 2013, Jones & Bartlett Learning.
References: Ders notları

Evaluation System

Semester Requirements Number of Activities Level of Contribution
Attendance 10 % 0
Homework Assignments 4 % 10
Presentation 1 % 10
Midterms 1 % 20
Final 1 % 60
Total % 100
Total % 100

ECTS / Workload Table

Activities Number of Activities Duration (Hours) Workload
Course Hours 14 3 42
Study Hours Out of Class 14 12 168
Presentations / Seminar 2 3 6
Homework Assignments 4 8 32
Midterms 1 20 20
Final 1 20 20
Total Workload 288

Contribution of Learning Outcomes to Programme Outcomes

No Effect 1 Lowest 2 Low 3 Average 4 High 5 Highest
Program Outcomes Level of Contribution
1) Understand and implement advanced concepts of Siber Security 5
2) Use math, science, and modern engineering tools to formulate and solve advenced siber security problems. 3
3) Review the literature critically pertaining to his/her research projects, and connect the earlier literature to his/her own results. 5
4) Follow, interpret and analyze scientific researches in the field of engineering and use the knowledge in his/her field of study. 5
5) Work effectively in multi-disciplinary research teams. 3
6) Acquire scientific knowledge 5
7) Find out new methods to improve his/her knowledge 5
8) Effectively express his/her research ideas and findings both orally and in writing 5
9) Defend research outcomes at seminars and conferences 5
10) Demonstrate professional and ethical responsibility. 5