Threat-informed Security

This course teaches how to analyse the security of IT systems starting from realistic adversaries and their behaviour. Rather than treating security as a checklist of controls, you learn to model who is likely to attack a system, how, and with what consequences, and to use that understanding to prioritise and evaluate defences.

About the course

The course is part of the Security specialisation of the MSc in Computer Science at the IT University of Copenhagen (7.5 ECTS, taught in autumn).

Learning objectives

After taking this course, students will be able to:

• model threats and adversary capabilities for a given system
• relate known attacker techniques to concrete weaknesses in a system
• evaluate and prioritise security measures against identified threats
• communicate security risks and findings to technical and non-technical audiences

Topics

• Threat modelling and attacker models
• Adversary tactics and techniques
• Attack analysis and risk prioritisation
• Evaluating and selecting defences