查詢教學大綱與進度

教學大綱與進度

課程基本資料：

學年期課號課程名稱階段學分時數修教師班級人撤備註

112-2 331623 金融資訊安全 1 3.0 3 ★ 彭祖乙資財四甲
資財三甲 16 1 資財三四甲三四乙資財所、創新資安、電資資安

學年期	課號	課程名稱	階段	學分	時數	修	教師	班級	人	撤	備註
112-2	331623	金融資訊安全	1	3.0	3	★	彭祖乙	資財四甲資財三甲	16	1	資財三四甲三四乙資財所、創新資安、電資資安

教學大綱與進度：

教師姓名彭祖乙　教師諮商時間(Office Hours)

Email johnpeng@mail.ntut.edu.tw

最後更新時間 2023-12-18 15:40:50

課程大綱金融產業已經大規模的使用金融科技技術來增加效益與商機，然而背後潛藏的資安問題仍是個棘手的課題，本課程的學習目標將以培養金融產業的資通科技安全架構思維為主，著墨IT基礎設施與應用服務的兩大資安架構主題。課程所包含的範圍如下: 金融資通環境的IT架構與應用，系統與網路IT架構下弱點的入侵與攻擊，網路各層的安全防禦，資通安全設備架構，應用服務的認證與授權，資料與系統的災難回覆，國際資安標準和認證，資安服務開發的安全架構，下一代的資安架構。 Fintech technology has already been used widely in the financial industry to increase cost-effectiveness and business opportunities. However, the hidden information security issues are still a thorny issue. The learning objectives of this course will focus on cultivating the security framework design thinking for IT systems and application for the financial industry , categorized into two major architecture themes of IT infrastructure and application services. The scope of the course is as follows: IT architecture and application of financing environment, penetration and attack of vulnerabilities under system and network IT architecture, Security defense at each layer of the computer network, cybersecurity equipment architecture, authentication and authorization of application services, Data and system disaster recovery, international information security standards and certification, security architecture for information security service development, and next-generation information security architecture.

課程進度 week 1 Cybersecurity fundamentals: overview of why, how, what week 2-3 Application and finance related cases study week 4-5 Penetration and attacks: system and network vulnerability week 6-7 Network Security, intrusion and prevention week 8 Special topic on providing secure infrastructure for financial industry week 9 Mid-term report week 10-12 Authentication and authorization: from cryptography to application flow week 13 Recover model and process week 14 Standard and certificate week 15 Special topic on providing secure application development for financial industry Week 16 Modern Security Framework: Zero Trust, SASE … week 17-18 Group project presentation

評量方式與標準 • Homeworks, class participation: 30% • Midterm report & presentation: 30% • Final project: 40%

使用教材、參考書目或其他 【遵守智慧財產權觀念，請使用正版教科書，不得使用非法影印教科書】

使用外文原文書：否
Important security framework studies, such as https://csrc.nist.gov/ https://fidoalliance.org/

課程諮詢管道 johnpeng@ntut.edu.tw

course web site will be listed on
https://tipeng.wixsite.com/school/

課程對應SDGs指標

備註
SDG9,11

教師姓名	彭祖乙　教師諮商時間(Office Hours)
Email	johnpeng@mail.ntut.edu.tw
最後更新時間	2023-12-18 15:40:50
課程大綱	金融產業已經大規模的使用金融科技技術來增加效益與商機，然而背後潛藏的資安問題仍是個棘手的課題，本課程的學習目標將以培養金融產業的資通科技安全架構思維為主，著墨IT基礎設施與應用服務的兩大資安架構主題。課程所包含的範圍如下: 金融資通環境的IT架構與應用，系統與網路IT架構下弱點的入侵與攻擊，網路各層的安全防禦，資通安全設備架構，應用服務的認證與授權，資料與系統的災難回覆，國際資安標準和認證，資安服務開發的安全架構，下一代的資安架構。 Fintech technology has already been used widely in the financial industry to increase cost-effectiveness and business opportunities. However, the hidden information security issues are still a thorny issue. The learning objectives of this course will focus on cultivating the security framework design thinking for IT systems and application for the financial industry , categorized into two major architecture themes of IT infrastructure and application services. The scope of the course is as follows: IT architecture and application of financing environment, penetration and attack of vulnerabilities under system and network IT architecture, Security defense at each layer of the computer network, cybersecurity equipment architecture, authentication and authorization of application services, Data and system disaster recovery, international information security standards and certification, security architecture for information security service development, and next-generation information security architecture.
課程進度	week 1 Cybersecurity fundamentals: overview of why, how, what week 2-3 Application and finance related cases study week 4-5 Penetration and attacks: system and network vulnerability week 6-7 Network Security, intrusion and prevention week 8 Special topic on providing secure infrastructure for financial industry week 9 Mid-term report week 10-12 Authentication and authorization: from cryptography to application flow week 13 Recover model and process week 14 Standard and certificate week 15 Special topic on providing secure application development for financial industry Week 16 Modern Security Framework: Zero Trust, SASE … week 17-18 Group project presentation
評量方式與標準	• Homeworks, class participation: 30% • Midterm report & presentation: 30% • Final project: 40%
使用教材、參考書目或其他	【遵守智慧財產權觀念，請使用正版教科書，不得使用非法影印教科書】使用外文原文書：否 Important security framework studies, such as https://csrc.nist.gov/ https://fidoalliance.org/
課程諮詢管道	johnpeng@ntut.edu.tw course web site will be listed on https://tipeng.wixsite.com/school/
課程對應SDGs指標
備註	SDG9,11