There are no pre-requisites for this module to be added

The aim of the module is to develop an advanced understanding of cyber security incident management, digital forensics and malware analysis, enabling students to investigate, contain and report security incidents professionally.An outline of the main areas includes:-- Security Operations and Incident Management: Incident response frameworks and lifecycles; planning and preparation; risk assessment; SOC operations; monitoring, incident detection and analysis; containment, recovery and reporting.-- Digital Forensics: Acquisition, preservation and analysis of network, host and memory evidence; investigation of intrusion activity; evidence correlation and attack timeline reconstruction.-- Malware and Attack Technologies: Malware fundamentals and adversarial behaviours; static and dynamic analysis; behavioural analysis; indicators of compromise; debugging and sandboxed investigation.-- Reverse Engineering and Advanced Malware Analysis: Disassembly, machine-code analysis, obfuscation, packing/unpacking and anti-analysis techniques.-- AI for Security: Applications of machine learning and AI to security operations, incident management and malware analysis, including limitations and ethical considerations.-- Current Developments: Emerging research and professional practices in incident management, digital forensics, malware analysis and AI-assisted cyber security.

Upon completion of this module you will be able to

LO1: Develop an advanced knowledge of key security/digital forensic principles and methods related to incident response and malware analysis.

LO2: Develop analytical skills related to the key academic principles and practical skills required to understand complex investigations using data from a range of sources, and make informed choices.

LO3: Research, design, implement, evaluate and critically analyse an advanced system to a given set of security and/or digital forensic requirements, with a focus on virtualised environments.