Course Syllabus

Course Information：

Year-Semester Course Number Course Name Phase Credits Hours Required/Elective Instructor Class Student NO. Withdraw Note

Spring Semester
Year 2023 317315 Cybersecurity For Finance 1 3.0 3 ★ TSUI PENG GIFM
MSIS 10 0 科研243/資財三四甲乙碩和創新資安學程合開

Year-Semester	Course Number	Course Name	Phase	Credits	Hours	Required/Elective	Instructor	Class	Student NO.	Withdraw	Note
Spring Semester Year 2023	317315	Cybersecurity For Finance	1	3.0	3	★	TSUI PENG	GIFM MSIS	10	0	科研243/資財三四甲乙碩和創新資安學程合開

Course Plan：

Instructor TSUI PENG　Office Hours

Email johnpeng@mail.ntut.edu.tw

Last Updated 2023-05-29 00:05:48

Course Objective 金融產業已經大規模的使用金融科技技術來增加效益與商機，然而背後潛藏的資安問題仍是個棘手的課題，本課程的學習目標將以培養金融產業的資通科技安全架構思維為主，著墨IT基礎設施與應用服務的兩大資安架構主題。課程所包含的範圍如下: 金融資通環境的IT架構與應用，系統與網路IT架構下弱點的入侵與攻擊，網路各層的安全防禦，資通安全設備架構，應用服務的認證與授權，資料與系統的災難回覆，國際資安標準和認證，資安服務開發的安全架構，下一代的資安架構。 Fintech technology has already been used widely in the financial industry to increase cost-effectiveness and business opportunities. However, hidden information security issues are still a thorny issue. The learning objectives of this course will focus on cultivating the security framework design thinking for IT systems and applications for the financial industry, categorized into two major architecture themes IT infrastructure and application services. The scope of the course is as follows: IT architecture and application of financing environment, penetration and attack of vulnerabilities under system and network IT architecture, Security defense at each layer of the computer network, cybersecurity equipment architecture, authentication and authorization of application services, Data and system disaster recovery, international information security standards and certification, security architecture for information security service development, and next-generation information security architecture.

Course Schedule week 1 Cybersecurity fundamentals: an overview of why, how, what week 2-3 Application and finance-related cases study week 4-5 Penetration and attacks: system and network vulnerability week 6-7 Network Security, intrusion, and Prevention week 8 Special topic on providing secure infrastructure for financial industry week 9 Mid-term report week 10-12 Authentication and authorization: from cryptography to application flow week 13 Recover model and process week 14 Standard and certificate week 15 Special topic on providing secure application development for financial industry Week 16 Modern Security Framework: Zero Trust, SASE … week 17-18 Group project presentation

Evaluation and grading policy • Homework, class participation: 30% • Midterm report & presentation: 30% • Final project: 40%

Materials All right reserved. Do not reproduce without permission.

Foreign-language textbooks:No
Important security framework studies, such as https://csrc.nist.gov/ https://fidoalliance.org/

The access to curricular consultation johnpeng@ntut.edu.tw

the course website will be listed on
https://tipeng.wixsite.com/school/

The course corresponds to the SDGs

Note
　

Instructor	TSUI PENG　Office Hours
Email	johnpeng@mail.ntut.edu.tw
Last Updated	2023-05-29 00:05:48
Course Objective	金融產業已經大規模的使用金融科技技術來增加效益與商機，然而背後潛藏的資安問題仍是個棘手的課題，本課程的學習目標將以培養金融產業的資通科技安全架構思維為主，著墨IT基礎設施與應用服務的兩大資安架構主題。課程所包含的範圍如下: 金融資通環境的IT架構與應用，系統與網路IT架構下弱點的入侵與攻擊，網路各層的安全防禦，資通安全設備架構，應用服務的認證與授權，資料與系統的災難回覆，國際資安標準和認證，資安服務開發的安全架構，下一代的資安架構。 Fintech technology has already been used widely in the financial industry to increase cost-effectiveness and business opportunities. However, hidden information security issues are still a thorny issue. The learning objectives of this course will focus on cultivating the security framework design thinking for IT systems and applications for the financial industry, categorized into two major architecture themes IT infrastructure and application services. The scope of the course is as follows: IT architecture and application of financing environment, penetration and attack of vulnerabilities under system and network IT architecture, Security defense at each layer of the computer network, cybersecurity equipment architecture, authentication and authorization of application services, Data and system disaster recovery, international information security standards and certification, security architecture for information security service development, and next-generation information security architecture.
Course Schedule	week 1 Cybersecurity fundamentals: an overview of why, how, what week 2-3 Application and finance-related cases study week 4-5 Penetration and attacks: system and network vulnerability week 6-7 Network Security, intrusion, and Prevention week 8 Special topic on providing secure infrastructure for financial industry week 9 Mid-term report week 10-12 Authentication and authorization: from cryptography to application flow week 13 Recover model and process week 14 Standard and certificate week 15 Special topic on providing secure application development for financial industry Week 16 Modern Security Framework: Zero Trust, SASE … week 17-18 Group project presentation
Evaluation and grading policy	• Homework, class participation: 30% • Midterm report & presentation: 30% • Final project: 40%
Materials	All right reserved. Do not reproduce without permission. Foreign-language textbooks:No Important security framework studies, such as https://csrc.nist.gov/ https://fidoalliance.org/
The access to curricular consultation	johnpeng@ntut.edu.tw the course website will be listed on https://tipeng.wixsite.com/school/
The course corresponds to the SDGs
Note