MSc — 2024 entry Cyber Security with Professional Postgraduate Year

Integrating security components into an information system to identify, protect, detect, respond and recover from an increasingly diverse set of threats has become more complex with new computing concepts such as cloud infrastructure, cloud native applications and edge computing. Organisations need a systematic approach to defining security for information systems that integrate processes, people and technology. The Architectural Thinking for Security module is designed to teach concepts and practice techniques that Security Architects can apply to delivering consistent and effective security solutions. The architectural thinking process can be applied either acting as an adviser to a project or a primary security solution architect. The course will introduce an architectural thinking process that a Security Architect would use to protect the data at the centre of a business. As part of this process the security architect needs to think about the integration of security controls to protect the confidentiality, integrity and availability of business data. This module provides insights into both the theory and the practical aspects of this process allowing students to critically evaluate the cyber security posture of an organisation and define a solution that can be described to key decision makers within an organisation.

 Digital technology influences every aspect of daily life, shaping the way that individuals live, work and socialise (and therefore also inevitably matters of civil law, such as contract and tort) but it has a less positive aspect as it has also transformed criminal behaviour. This module considers the legal, regulatory and commercial issues relating to the internet and digitisation as well as the dark side of technology that has led to the growth of online crime. It reflects on the ensuing impact on the digital economy, platforms and the wider business community plus the legal regulation thereof taking account of the unprecedented transformation in the digitisation of the law and the way business is conducted in the 21st century. The module encourages critical engagement with the way in which the law operates in an effort to both facilitate digitisation as well as combat cybercrime. It brings together theoretical ideas about the function of law with the practical considerations of the impact of criminal behaviour on society. It also engages with the challenges of preventing online crime and policing the internet. 

This module introduces general concepts of privacy enhancing technologies and aligns with key concepts recommended by the CyBoK. It will motivate the need for privacy in the modern world and touch on legal considerations, introduce concepts of transparency, control and confidentiality for privacy, and look at privacy preserving and democratic values. This module will also explore how these are realised in a range of applications.

The module teaches digital forensics models and techniques used by analysts and law enforcement officers in practice. It also teaches the theory and application of real-world digital forensics tools and puts an emphasis on data recovery and the analysis of multimedia artifacts. Relationships and links between multimedia security, digital forensics and broader cyber security topics are also covered.

Key to modern business operation is Risk Management, and a modern entrant on any Risk Register maintained by the executive of an organisation is the risk posed from falling victim to cybercrime and civil litigation resulting from, for example, data breaches. In order to understand how best to shape and evolve an organisation’s response to the cyber security threat, the module will cover what the more detailed operations in cyber security involve. The module will introduce the key disciplines that we are likely to encounter in the real-world.  It will provide an industry perspective on the common practices, latest innovations, technologies and the problems and concerns associated with information security. The module will show that cyber security is not just technical subject, but is a truly multidisciplinary function. The module looks broadly at the implications of regulations on the cyber crime landscape. It also brings together the issues of cyber from a high-level perspective. It will also equip students with an awareness of what is very current out there in terms of leading-edge applications of information security. The module uniquely accesses leading international speakers in their field, draws on the significant expertise of leading industrialists and through shaping the module into distinct learning blocks we are also able to ensure that our students will be directed to key industry reports, regulations and best practice guidance that shapes current industry thinking in information security for business and government.  

This module teaches cloud computing concepts and the security of the cloud platform to enable students to understand how to secure workloads on cloud. The topics including basic concepts and the core security services needed to secure workloads and the processing of sensitive data. To re-enforce learning, the module will require students to work in teams to configure the cloud platform using infrastructure automation.

The study of cybercrime and cybersecurity not only represents one of the key emerging areas of research within contemporary criminology but is also a crucial problem of national policy and crime control. Recent (2016) data from the Crime Survey for England and Wales suggest that cybercrime may now be the most prevalent form of criminality in the UK and repeated breaches to key infrastructures across most jurisdictions have emphasized why it is has also become one of the main threats to international peace and security.  This module will introduce students to the key themes within the study of cybercrime and cybersecurity – including, offence types and their prevalence; typical victims and perpetrators; policing and control measures; varieties of cybersecurity responses and the ‘human’ problem in making these resilient. 

This module introduces students to the techniques and tools to discover known vulnerabilities in systems and applications, and use appropriate techniques to carry out attacks. A practical project-based assessment allows students to demonstrate their ability to successfully exploit vulnerable systems to exfiltrate data and circumvent access controls. The module will introduce students to the legal and ethical considerations of ethical hacking, as well as the processes by which vulnerabilities are reported, classified, documented, and mitigated by security practitioners.