Course Syllabus

Course Information：

Year-Semester Course Number Course Name Phase Credits Hours Required/Elective Instructor Class Student NO. Withdraw Note

Spring Semester
Year 2024 331535 Cybersecurity For Finance 1 3.0 3 ★ TSUI PENG 4IFM4B
4IFM3B 16 1 全英語/科研243/資財三四甲三四乙資財所、創新資安、

Year-Semester	Course Number	Course Name	Phase	Credits	Hours	Required/Elective	Instructor	Class	Student NO.	Withdraw	Note
Spring Semester Year 2024	331535	Cybersecurity For Finance	1	3.0	3	★	TSUI PENG	4IFM4B 4IFM3B	16	1	全英語/科研243/資財三四甲三四乙資財所、創新資安、

Course Plan：

Instructor TSUI PENG　Office Hours

Email johnpeng@mail.ntut.edu.tw

Last Updated 2023-12-18 15:42:00

Course Objective 金融產業已經大規模的使用金融科技技術來增加效益與商機，然而背後潛藏的資安問題仍是個棘手的課題，本課程的學習目標將以培養金融產業的資通科技安全架構思維為主，著墨IT基礎設施與應用服務的兩大資安架構主題。課程所包含的範圍如下: 金融資通環境的IT架構與應用，系統與網路IT架構下弱點的入侵與攻擊，網路各層的安全防禦，資通安全設備架構，應用服務的認證與授權，資料與系統的災難回覆，國際資安標準和認證，資安服務開發的安全架構，下一代的資安架構。 Fintech technology has already been used widely in the financial industry to increase cost-effectiveness and business opportunities. However, the hidden information security issues are still a thorny issue. The learning objectives of this course will focus on cultivating the security framework design thinking for IT systems and application for the financial industry , categorized into two major architecture themes of IT infrastructure and application services. The scope of the course is as follows: IT architecture and application of financing environment, penetration and attack of vulnerabilities under system and network IT architecture, Security defense at each layer of the computer network, cybersecurity equipment architecture, authentication and authorization of application services, Data and system disaster recovery, international information security standards and certification, security architecture for information security service development, and next-generation information security architecture.

Course Schedule week 1 Cybersecurity fundamentals: overview of why, how, what week 2-3 Application and finance related cases study week 4-5 Penetration and attacks: system and network vulnerability week 6-7 Network Security, intrusion and prevention week 8 Special topic on providing secure infrastructure for financial industry week 9 Mid-term report week 10-12 Authentication and authorization: from cryptography to application flow week 13 Recover model and process week 14 Standard and certificate week 15 Special topic on providing secure application development for financial industry Week 16 Modern Security Framework: Zero Trust, SASE … week 17-18 Group project presentation

Evaluation and grading policy • Homeworks, class participation: 30% • Midterm report & presentation: 30% • Final project: 40%

Materials All right reserved. Do not reproduce without permission.

Foreign-language textbooks:No
Important security framework studies, such as https://csrc.nist.gov/ https://fidoalliance.org/

The access to curricular consultation johnpeng@ntut.edu.tw

course web site will be listed on
https://tipeng.wixsite.com/school/

The course corresponds to the SDGs

Does the course incorporate AI

Note
SDG9,11

Instructor	TSUI PENG　Office Hours
Email	johnpeng@mail.ntut.edu.tw
Last Updated	2023-12-18 15:42:00
Course Objective	金融產業已經大規模的使用金融科技技術來增加效益與商機，然而背後潛藏的資安問題仍是個棘手的課題，本課程的學習目標將以培養金融產業的資通科技安全架構思維為主，著墨IT基礎設施與應用服務的兩大資安架構主題。課程所包含的範圍如下: 金融資通環境的IT架構與應用，系統與網路IT架構下弱點的入侵與攻擊，網路各層的安全防禦，資通安全設備架構，應用服務的認證與授權，資料與系統的災難回覆，國際資安標準和認證，資安服務開發的安全架構，下一代的資安架構。 Fintech technology has already been used widely in the financial industry to increase cost-effectiveness and business opportunities. However, the hidden information security issues are still a thorny issue. The learning objectives of this course will focus on cultivating the security framework design thinking for IT systems and application for the financial industry , categorized into two major architecture themes of IT infrastructure and application services. The scope of the course is as follows: IT architecture and application of financing environment, penetration and attack of vulnerabilities under system and network IT architecture, Security defense at each layer of the computer network, cybersecurity equipment architecture, authentication and authorization of application services, Data and system disaster recovery, international information security standards and certification, security architecture for information security service development, and next-generation information security architecture.
Course Schedule	week 1 Cybersecurity fundamentals: overview of why, how, what week 2-3 Application and finance related cases study week 4-5 Penetration and attacks: system and network vulnerability week 6-7 Network Security, intrusion and prevention week 8 Special topic on providing secure infrastructure for financial industry week 9 Mid-term report week 10-12 Authentication and authorization: from cryptography to application flow week 13 Recover model and process week 14 Standard and certificate week 15 Special topic on providing secure application development for financial industry Week 16 Modern Security Framework: Zero Trust, SASE … week 17-18 Group project presentation
Evaluation and grading policy	• Homeworks, class participation: 30% • Midterm report & presentation: 30% • Final project: 40%
Materials	All right reserved. Do not reproduce without permission. Foreign-language textbooks:No Important security framework studies, such as https://csrc.nist.gov/ https://fidoalliance.org/
The access to curricular consultation	johnpeng@ntut.edu.tw course web site will be listed on https://tipeng.wixsite.com/school/
The course corresponds to the SDGs
Does the course incorporate AI
Note	SDG9,11