Course Syllabus

Course Information：

Year-Semester	Course Number	Course Name	Phase	Credits	Hours	Required/Elective	Instructor	Class	Student NO.	Withdraw	Note
Fall Semester Year 2026	364540	Network and System Security	1	3.0	3	★	Ching-Huang Lin	GIFM MSIS	23	0	資財四甲、資財所和創新資安合開

Course Plan：

Instructor	Ching-Huang Lin　Office Hours
Email	gbox@ntut.edu.tw
Last Updated	2026-06-12 19:17:01
Course Objective	本課程主要是在於介紹一些駭客常用的攻擊方法和可能使用工具，並藉由這些技術的解說讓學生瞭解實際駭客的攻擊行為與思維模式，進而習得如何保護所管理的網路或資訊系統於被攻擊成功。課程中將輔以實機操作，教導您如何利用現有電腦資源掃描及測試系統的安全問題，藉以保護系統安全，課程中將加強實際的上機操作，藉由上課所模擬的網路環境中，讓同學能夠實際感受攻擊的可能實況 This course is mainly to introduce network and system attack methods and security assessment tools used by hackers, and to explain the attack behavior and thinking strategy of hackers through the explanation of these technologies. In addition, this course teaches students learn how to protect the managed network or information system to against from being compromised successfully. The course will be supplemented by practices, and teaching students how to use the existing tools to scan and test the security of the system. In order to protect the security of the system, the course will focus on the system and network practices, which can let the students feel the possible network and system attacks.
Course Schedule	0 - 00_網路與系統安全_課程簡介 1 - 資訊與網路安全簡介(Introduction of Cybersecurity) 2 - 資安事件處理與應變(Incident Response & Handling) 3 - 網路掃描與資訊蒐集(Information Gatting & Scaning) 4 - 資訊安全弱點與威脅(Information Security Vulnerability & Threat) 5 - 常見攻擊手法(Common Attack model) 6 - 網站應用程式安全(Web Application Security) 7 - 滲透測試與紅隊演練(Pentration Testing & Red Team Assement) 8 - 期中測驗(Middle Exam) 9 - 網路防護與偵測(Detection and Protection) 10 - 資訊系統與網路模型(Network Security Model) 11 - 認證、授權與存取控制(Authentication, Authorization and Access Control) 12 - 實體安全與營運安全(Physical Security & Business continue) 13 - 資訊安全管理系統(Information Security Management System) 14 - 變更管理與備援、備份(Change management and redundancy, backup) 15 - 物聯網與工業控制系統安全簡介(IoT and Industrial Control System Security) 16 - 軟體安全生命週期(Software Security Lifecycle) 17 - 資安測試技術相關議題(Security Testing Issue) 18 - 期末測驗(Final Exam)
Evaluation and grading policy	1.期中考 30% 2.期末考或期末專題 40% 3.平時成績 30% - 作業 (5% * 3)+(8% * 1) - 出席 7%
Materials	All right reserved. Do not reproduce without permission. Foreign-language textbooks:No 1.自編講義 2.教育部先進資通安全實務人才培育計畫資安實務課程 3.資訊安全概論(第三版)林祝興,張明信旗標 4.2020新趨勢計算機概論陳惠貞碁峰 5.相關ISO標準、NIST SP系列及Owasp相關資料 實作平台使用： 國家高速網路與計算中心 Cyber Defense Exercise: CDX https://cdx.nchc.org.tw/
The access to curricular consultation	Office Hour： 週一、三13:00-16:00 透過email, 北科i學園PLUS討論提問
Expanding teaching and resources	● 混成學習 (Blended Learning) 課程結合實體授課與線上學習（同步視訊／非同步活動）。 Combines face-to-face instruction with online learning (including synchronous video sessions or asynchronous activities). ● 參與式創新教學 (Participatory & Innovative Teaching) 強調學生參與與產出，導入翻轉、PBL/專題、設計思考或遊戲化等策略。 Emphasizes student engagement and outcomes by adopting strategies such as Flipped Classroom, PBL (Problem/Project- Based Learning), Design Thinking, or Gamification. ● 數位科技融入 (Digital Technology Integration) 運用生成式AI、VR/AR、IoT、IRS等新興科技輔助教學與評量。 Utilizes emerging technologies such as Generative AI, VR/AR, IoT, and IRS (Interactive Response Systems) to facilitate teaching and assessment.
The course corresponds to the SDGs	SDG9：產業創新與基礎設施（Industry, Innovation and Infrastructure）
Does the course incorporate AI	● 使用生成式AI作為教學過程的輔助工具（Use generative AI tools as an aid to the teaching process） ● 鼓勵學生使用生成式AI工具（Encourage students to use generative AI tools） ● 使用生成式AI進行課堂即時互動（Use generative AI for real-time classroom interaction）
Note	彈性學習/Flexible Learning 一、類別 (可複選) □學生分組實作及討論 二、內容 (1)第 17 週:各組針對資安測試技術相關議題專題報告,全班參與 Q&A 提問討論。 (2)第 18 週:各組針對資安測試技術相關議題專題報告,全班參與 Q&A 提問討論。 三、時數 總共 6 小時。 四、學習成果 第 16 週課程結束前各組須繳交第 17 、18週之書面報告及簡報。 五、評量比例 (1)書面報告與簡報:25% (2)17-18 週課堂報告表現:10%