Official government website of the Government of Kingdom of Saudi Arabia
Link to official Saudi websites end with edu.sa

All links to official educational websites in the Kingdom of Saudi Arabia end with sch.sa or edu.sa

Government websites use the HTTPS protocol for encryption and security.

Secure websites in the Kingdom of Saudi Arabia use the HTTPS protocol for encryption.

Registered with the Digital Government Authority under number:

20250417892
Main
UQU Programs
Cybersecurity

IT Security Principles and Design

SEC2402
3 hours English

IT Security Principles and Design

IT Security Principles and Design
1 Fundamentals and Importance of the Secure Design for Programs and Systems
2 Design Principles: / - Separation of Duties / - Isolation / - Encapsulation / - Modularity / - Simplicity of Design / - Minimization of Implementation / - Open Design / - Complete Mediation
3 Defense Mechanisms: / - Layering and Defense-in-Depth / - Fail Safe Defaults and Fail Secure / - Least Astonishment / - Minimize Trust Surface / - Secure Design and Usability / - Trust Relationships / - Secure Coding Patterns
4 Security Elements: / - Endpoint Protection / - Storage Devices / - System Architectures / - Virtualization and Cloud / - SCADA, Real-Time, and Critical Infrastructures Environments / - Network Mapping
5 Security Practices: / - Incident Response / - Managed Services / - Configuration Management / - Patching
6 People and Physical Security: / - People and Security / - Physical and Environmental Security
7 Internet of Things (IoT)
1.1 Mapped to: K1

Explain the importance of cybersecurity design principles, secure design, and how each principle is useful to design trusted systems.

Teaching Strategy Course lectures, tutorials, HomeWorks, term project
Assessment Methods Quiz, Exam
1.2 Mapped to: K1

Distinguish the violated design principle for common system security weaknesses.

Teaching Strategy Course lectures, tutorials, HomeWorks, term project
Assessment Methods Quiz, Exam
1.3 Mapped to: K1

Identify common IT and cybersecurity system components (both hardware and software) and illustrate their main functions, activities, and values.

Teaching Strategy Course lectures, tutorials, HomeWorks, term project
Assessment Methods Quiz, Exam
1.4 Mapped to: K1

Explain main cybersecurity implications of the current and future IT environments.

Teaching Strategy Course lectures, tutorials, HomeWorks, term project
Assessment Methods Quiz, Exam
2.1 Mapped to: S2

Illustrate and compare authorization and authentication techniques

Teaching Strategy Course lectures, tutorials, HomeWorks, term project
Assessment Methods Exam
2.2 Mapped to: S2

Design secure information system based on cyber computing-based solutions

Teaching Strategy Course lectures, tutorials, HomeWorks, term project
Assessment Methods Project
2.3 Mapped to: S2

Demonstrate security aspect of systems management in common systems architectures.

Teaching Strategy Course lectures, tutorials, HomeWorks, term project
Assessment Methods project
2.4 Mapped to: S2

Evaluate different cybersecurity design principles in the context of a given system architecture

Teaching Strategy Course lectures, tutorials, HomeWorks, term project
Assessment Methods project
Assessment
Weight
Quizzes
10%
HomeWorks
20%
project
20%
Midterm
20%
Final Exam
30%
Total
100%