Briefing Bachelor of Computing in

Information Security2019/20

A/P Chang Ee-ChienJoint-Academic-Committee (InfoSec)

BCOMP Information Security

• Started in 2015, enhancing and replacing Specialisation in Information Security.

• Starting with 11 students from AY14/15.• 11, 16, 26, 43, 70, …

Programme Structure

Curriculum

• Cybersecurity is multi-disciplinaryo System + Management aspects. o Domain specific knowledge.

• Provide o Solid technical background (Foundation +Core) o In-depth studies in chosen domains (Elective, FYP)o Industrial Relevance (Internship, selected modules)

!"#$""%&"'()$"*"+,-

!"#$%&'(#$)'*+$,%+"$*#-'+%./0"%)$12$*134$,'0$/.+$5.6/3$%/$+"#$5%-#7

!""#$%%&&&'()*#'+,-'./,'-0%#1)012**.-%,0%3-(%(,11%

4)15/.01..51.6,31.*.+"-5)75#1.83),-5()!)1"$!""#$%%&&&'()*#'+,-'./,'-0%(,01.-),1(.%#.19()!)1"%3-(%3-(9:;9:<%

=.7.15")5"!.5)773(32>5?)@5&.A-3".52+/BC?5D,>>."3+57)15()*#>.".E5,#9")9/2".53+7)1*2"3)+'

!"#$%&&'()

!*+$%&&,-./0123-/

!&&4$%&&5-66./37123-/

!"#$%&&8/9-:;7&5-<;

!="$%&&8/9-:;7&>?;723@;

!="$%&&8/2;</A,BC

!*"$%&&'/<;:2<3723@;&'>

!="$%&&D12E

!&&4$%&&5F&G<;12E&

!"#$%&'()*+"%(,-&'"(*

./0%1'&2*!"1/

3(4,/$&5*'(*05"6/(*&"$'06

3(,%6&1'-7*1/7/8-(0/

!5""6/*95-&*6%'&*2"%

:5-&*-*)1-,%-&/*65"%7,*;("9

,<-6&E22H:%AAIIIJ7-6HJ/.:J;0.J:KAH<-K<166;:A.KA3:7A7.<<A&

CS2105Network

CS2106OS

CS2107Intro InfoSec

CS2102Database

CS1010programming

IS4231Infosec

Management

CS4236Crypto

IFS4102Forensic

IFS4101Legal aspect

IFS4103Pentesting

CS5231Sys Security

CS5331Web

IS4302Blockchain

IS4234Audit

CS5321Network

Security

CS5322DatabaseSecurity

IS4204IT Govern

IS4233Legal IT

CS1231Smath

Electives (choose 3).

Can be counted as Breadth (choose 2) or UE

Foundation

Core

CS2040Cprogramming

CS2100Computer

Organisation

CS2113TSoftware Eng

IS3103IS & Comm

CS4238Lab-based

CS4239Software Security

CS4257Privacy

CS3235Comp Sec

IFS4205Capstone

Pre-requisite

CS4276IoT Security

CS5332Biometric

CORE• CS2107 Intro to InfoSec.

o Illustrates how system fails. General knowledge for all IT professionals.

• CS3235 Computer Security. o Covering topics in System, Network, Web/mobile. A

little bit of everything.

• (IFS4103 + CS4238) or (IFS4105)o IFS4105: (Capstone Project) Let’s build a security

system.o IFS4103: (Pentesting) Let’s pentest NUS systemso CS4236: (Lab) Let’s hack some virtual environment

• IS4231 Infosec Management.o Infeasible to be “perfectly secure”. Let’s manage it.

ELECTIVESE.G

IFS4101 Legal Aspect

CS4239 Software security

CS4238 Crytpography

…

Remarks

• CS3235 is the pre-req of many advanced modules. Complete it early.

• CS3230 (Algo) is a core in BCOMP CS but not in InfoSec. Algorithm Analysis is fundamental. Recommended although not core.

• CS2107 (Intro). Students graduated from security-focus diploma could waive CS2017. Nevertheless, try taking it, maybe in year 1 semester 2.

CS vs Infosec

CS InfoSec Remarks

CS1101S / CS2040 CS1010 / CS2040C In C++ instead of Java

CS2030, CS2103T CS2113T Combined SE and OOP

ES2660 IS3103 IS Leadership & Communication

CS3230 CS2102 Database replaces Algorithms

SoftEng Project InfoSec Project

CS Electives InfoSec Core + Electives

1 Sci Module 2 SoC Electives Any CP/IS/CS coded modules

Year 1 Year 2 Year 3 Year 4Sem 1 Sem 2 Sem 1 Sem 2 Sem 1 Sem

2Special Sem1 Sem 2

MA1521CalculusforComputing

MA1101RLinear

Algebra I

CS2105Introduction to

Computer Network

CS2113TSoftware

Engineering& Object-Oriented

Programming

+

CS2101Effective

Communication forComputing

Professionals

CS2102DatabaseSystems

ATAP

+UE

ATAP

InfoSec Elective 2

IS4231Information

Security Management

CS1010ProgrammingMethodology

ST2334Probability and

Statistics

CS2106Introduction toOperating System

IS3103Information

Systems Leadershipand Communication

BreadthElective 1

InfoSec Elective 3*(IFS4203)

Breadth Elective 2

UE

CS1231SDiscrete

Structures

CS2100Computer

Organisation

CS2107Introduction to

Information Security

CS3235Computer Security

IFS4205*Capstone

Project

IS1103IS Innovations in

OrganisationsandSociety

CS2040CData

Structures andAlgorithms

UE (2MC)InfoSec

Elective 1*(CS4238) UE UE

UE (2MC) ULR UE UE UE

ULR ULR ULR ULR

22 MCs 22 MCs 20 MCs 22 MCs 20MC 16MC 20MC 20 MCs

Sample Study Plan (AY19/20)

*: core requirement (IFS4205) or (CS4238+IFS4203). If taken all 3, (1) CS4238 can be counted as “Breadth elective” or “Infosec elective” or UE, (2) IFS4203 can be counted as infosec electives or UE.

Many variations/options:

• NOC• Co-op• Internship• Double degree, 2nd Major, Minor.• Exchange

Second Major/MinorSome interesting options:• Second Major in Mathematics• Second Major in Statistics• Minor in Mathematics• Minor in Statistics• Minor in Financial Mathematics• Minor in Life Science• Minor in Geography Information Systems• Minor in Interactive Media Development• Minor in Management• Minor in Technopreneurship• and many others• http://www.nus.edu.sg/registrar/education-at-nus/undergraduate-education/special-undergraduate-

programmes/minor-programmes.html

Co-op (Infosec)

Co-operative Education Programme (Infosec)

• Integrates academic studies with relevant work experience.• Students complete multiple(3) industrial attachment stints alternating

with regular academic semesters over their 4-year candidature at NUS.• Students can expect to work at an attached company for three

internships (about 64 weeks or around 16 months).

Sem 1(early-Aug~mid-

Dec)

Sem 2(Jan ~ early

May)

Special term(mid-may ~ end-July)

Sem 1 Sem 2 Special term

Sem 1 Sem 2 Special term

Sem 1 Sem 2

NUS 1st internship(~ 12 weeks) NUS 2nd internship

(~ 24 weeks) NUS 3rd internship(~ 28 weeks)

NUS

Year 1 Year 2 Year 3 Year 4

Sem 1(early-

Aug~mid-Dec)

Sem 2(Jan ~ early May)

Sem 1 Sem 2 Special term

Sem 1 Sem 2 Special term

Sem 1 Sem 2 Special term

Sem 1

Exemption NUS NUS

1st

internship(12

weeks)

NUS NUS 2rd internship(~ 24 weeks)

3rd internship(~28 weeks) NUS

Year 1 Year 2 Year 3 Year 4 Year 5

Poly Intake

A-level intake

See Sample Study Plan in IVLE

Year 1 Year 2 Year 3 Year 4Sem 1 Sem 2 Sem S Sem 1 Sem 2 Sem S Sem 1 Sem 2 Sem S Sem 1 Sem 2

MA1521Calculus

MA1101RLinear A

Internship1

CS2113TSW Eng

+

CS2101

Internship2

CS3235C.Security

InfoSec Elective 2

Internship3

IS4231

CS1010Programming

CS2107Intro

IS3103Leadership

Breadth Elective 2

InfoSec Elective 3

CS1231SDiscrete

CS2100C. Organ

CS2106OS

InfoSec Elective 1

UE

IS1103IS innovation

CS2040CData S. Algo

CS2105Network

Breadth Elective 1

UE (2MC) UE

UE(2MC)ST2334

StatCS2102

DatabaseULR UE

ULRPrep

workshop + Placement

ULR ULR ULR UE

22 MCs 20 MCs 6 MC s 24 MCs 12 MCs 20 MCs 22 MCs 14 MCs 20 MCs

Sample Study Plan (Co-op A level intake)

Year 2 Year 3 Year 4 Year 5Sem 1 Sem 2 Sem S Sem 1 Sem 2 Sem S Sem 1 Sem 2 Sem S Sem 1

MA1521Calculus

MA1101RLinear A

Internship1

CS2113TSW Eng

+

CS2101

CS3235C.Security

Internship 2 & 3

IS4231

CS1010Programming

CS2107Intro

IS3103Leadership InfoSec Elective 3

CS1231SDiscrete

CS2100C. Organ

CS2106OS

InfoSec Elective 1

Breadth Elective 1

IS1103IS innovation

CS2040CData S. Algo

CS2105Network

InfoSec Elective 2

Breadth Elective 2

ST2334Stat

CS2102Database

ULR4

ULR1 ULR2 ULR3 ULR5

Prep workshop +

Placement22 MCs 24 MCs 6 MC s 24 MCs 24 MCs 26 MCs 16 MCs

Sample Study Plan (Co-op Poly intake)

Timeline in 1st year for Co-op~July 2019: Submit Application form

Sem

este

r 1Se

mes

ter 2

Early Jan 2020: Students to be informed if they can continue in the programme

End of Jan 2020: apply internship via TalentConnectInterviews.End of Feb 2020: Companies convey decisions.

Early Mar 2020: Students accept offer.End Mar 2020: Placement finalized

Spec

ial t

erm

First internship

Admin

• Joint Academic Committee (InfoSec)• A/P Chang Ee-Chien• A/P Roland Yap• A/P Setiono Rudy

Enquiry, question: SOC Undergradaute Officesocug@comp.nus.edu.sg

!"#$%&'()*+$,'"%

!"#$% !"#$%&"'!"#$%&'(%)*+',"-%$./)$)*0-%1),.2#3"(*+',"-%$.

(&)"*% &%%#'(#)4563-&)$%35*78'3-'$%,*2-.9$3:-)98.**

+,-./'0123%0&$*+',-$;)-(<)-'*+',"-%$.

.#$%4&'0526='$<3->*?*/%@$-%A"$'(*+.@$'&*+',"-%$.B%-'#'@@*='$<3->*+',"-%$.45$'-5'$*C@'-*0-%1),.

7,8/'90/#0+.@$'&*+',"-%$.2#3"(*23&9"$%5:0-3:-)&&%5:*D)5:"):'@

:-/;""6 1#2+$#+.@$'&*+',"-%$.*/)$)*0-3$',$%35E%5$',8

<=%&6 3-45"-6*"6'4F%5)-.*G5)#.@%@7-"@$<3-$8.*+36$<)-'+36$<)-'*+',"-%$.

78#$% >%"'6/&F%5)-.*8)-('5%5:+.@$'&*+',"-%$.

7"?/01"-9'823&9"$'-*+',"-%$.*?*0-%1),.

:6- $%/-'307/'37-"@$'(*+.@$'&*H)$%5:2-.9$3:-)98.

@2'0;#$437*+',"-%$.

Other ResearchersTan Kian Lee

- Database Security & Data Privacy

Yu Haifeng- Distributed Computing,

Sybil Attacks

Terence Sim- Face Recognition, Biometric Security

Dong Jinsong- Formal Method, Security Protocol

AnalysisXiao Xiaokui

- Data Privacy

Chan Mun Choon- Network Security

Rahul Jain- Quantum Cryptography,

Algorithms

Stephane Bressan- Data Anonymization

Harold Soh- Human Behaviour

Mohan Kankanhalli- Image/Video Security

& Privacy

Enhancing capabilities for the next-gen Managed Security Service Provider

• Security Data analytics

• Security-as-a-Service in Cloud

• IoT• Future-ready

technology

NUS-SingtelCorporate Lab in Cybersecurity

Shared infrastructure, resources & platform of interactions for cybersecurity R&D community

National Cybersecurity R&d Lab (NCL)

Research Centers

R&D on how trustworthy software can be built from commercial off-the-shelf (COTS) components

Singapore Cybersecurity Consortium

A seamless platform for engagement between industry, government and IHLs in the area of information security in Singapore

TSUNAMi N-CRiPT

Towards a privacy-aware Smart Nation

The goal is to develop privacy-preserving technologies to protect people’s and organisations’ privacy in a holistic manner

!"#$%&'()*+,-$)++.,/0012,3&'()*+,-4&30

)++.,/00555-6*7'8449-74:03&42.,012,3&'()*+,0*842+0)++.,/00555-6*7'8449-74:03&42.,012,3&'()*+,0*842+0

!"#$%$#$&'

!"#$%&'('%)**&%+$,-%

! !"#$%"#&'("&)*#&+,-.)-"#/0*(,123&&&&&&! 4#&($#56758#83! 9#%"5&*(:&)(&.#%"53

! ;<=#"0#,-"7)<&70&6-.)7870,7$.75%"<3! >#&%"#&)*#&?((8&?-<3

Thank You!Q&A

Let’s secure the cyberworld