MSc - Cyber Security

University of Hertfordshire

In this module, you will explore the concept of information as a weapon in the modern information environment, examining various cyber battlespaces and domains of conflict such as network warfare, command and control warfare, defensive operations, threat intelligence, protection measures, and attack response and restoration. You will also cover offensive operations, including perception management, intelligence for targeting and damage assessment, and attack operations. The module will delve into the disciplines of cyber operations, also known as information operations, including psychological operations, deception, network operations, intelligence and counterintelligence, information security, operational security, and the concept of defence in depth.

In this module, you will focus on a variety of general legacy as well as recent OS-related security issues, ranging from driver, kernel, networking, memory/process/user management, and race conditions, to more specific OS vulnerabilities. You will study methods of checking for vulnerabilities and employ OS hardening by configuring various aspects of the OS, as well as scripting and managing upgrades. You will be expected to work both individually and in groups, producing professional-grade reports.

In this module, you will integrate digital forensic methodologies with incident response strategies. You will study digital forensics, which deals with the collection, examination, analysis, and reporting of digital evidence, and incident response, which focuses on containment and recovery, in addition to investigating computer systems by collecting and analysing data. You will gain practical expertise in evidence collection, analysis, and reporting while mastering containment and recovery approaches during Cyber Security incidents. The module will emphasise preserving the integrity of digital evidence and managing complex cyber threats using advanced forensic tools and techniques.

In this module, you will focus on two key themes at the heart of distributed systems security: the development of cryptographic tools to address threats and perceived threats in distributed systems, and the application of these tools to both static and dynamic systems, with a particular emphasis on decentralised distributed systems. You will explore cryptography and cryptanalysis, essential tools for protecting information and communication channels in response to attacks. Additionally, you will examine recent threats emerging from the quantum world and Artificial Intelligence, along with the developments being made to counter these challenges.

In this module, you will explore the complexities of modern Information Environments, which have become large, diverse, and heterogeneous. You will learn how system boundaries and jurisdictions have blurred, with system assets now spread across different geographical locations. You will understand how stakeholders span an integrated supply chain, how new vulnerabilities are continually discovered, and how threat agents can expand their operations internationally with little effort. You will also examine the importance of a thorough, explicitly defined, and well-implemented risk and threat assessment process as the first and last line of defence in any information environment. The module will discuss procedures and controls for ensuring and assuring the information assets of an organisation, covering threat, risk, and vulnerability management methods. Additionally, you will explore security models, standards, and compliance issues to train you in conducting and managing risk and threat assessments.

In this module, you will explore the current network security protocols and architectures required to design and implement secure computer networks. You will gain knowledge of the latest network security technologies and study them in depth. Additionally, you will work on one or more small-scale projects to apply these network security concepts, using various tools and techniques.

In this module, you will explore the Cyber Domain as the Information Environment of choice for committing and facilitating crime in today's knowledge-centred virtual-computing era. You will learn how criminals exploit system vulnerabilities to further their objectives and why understanding the structure, configuration, tools, and techniques they rely on is essential for computer security professionals. You will also examine the importance of performing regular penetration tests to discover vulnerabilities. The module will cover the mindset, culture, and ethics of professional Pen-Testers, the current practices for conducting a 'PenTest', and the technologies and tools involved. Additionally, you will gain practical experience in hacking infrastructures, mining search-engine results, extracting and analysing document metadata, identifying and exploiting vulnerabilities, and enumerating users and services.

In this module, you will explore legal, social, ethical, and professional issues that may affect the work of practitioners in the computing and technology sectors. You will focus on the ethical considerations inherent in the development of responsible technologies. The topics covered will vary from year to year to reflect contemporary research and issues.

The project module includes both a taught and a non-taught component. During the taught part, you will cover the following topics: Project plan development, Project risk assessment, Ethics and working with human participants, Problem analysis and decision-making, Literature review, Conducting investigative work, Documenting a project, and Report writing and presentation. In the non-taught part, under the guidance of a supervisory team, through a series of scheduled meetings lasting up to 6 hours, you will work towards completing a project in Cyber Security.