Messages
Only the old exams made available on the web-page for the 2021 version of IN5130 are relevant.
In eariler versions of the course the curriculum was different (in particular the CORAS rules).
Question 1 and 2 in the exam from 2019 was Oblig-II last year. I then made the following slides:
On Friday I am available to answer questions and go through matarial according to your wishes.
If you send me your questions or suggestions in advance I will probably be able to do a better job.
Note that in the case of Question VI I expect the following to be fulfilled:
"The diagrams should all together capture at least seven risks. The diagrams should be annotated with consequences and likelihoods in such a way that they are consistent. Every initiate relation, unwanted incident and threat scenario should be assigned a likelihood in the form of a frequency interval. Every leads‐to relation should be assigned a conditional probability different from 1. Moreover, all initiate and leads‐to relations should have at least one vulnerability associated with them (i.e. represented in the diagram)."
This also implies that you have to define a frequency scale.
We will use the CORAS editor quite a lot in the weeks to come.
Friday this week we start the risk assessment part of the course. We will use a tool for that, as you will learn on Friday. Please bring your PC. The tool works best if you have installed Chrome.
Shukun Tokas will give a lecture titled: Privacy priciples for technology
Sagar Sen will give a lecture titled: Anonymization and re-identification risk analysis at the Cancer Registry of Norway
Both are researchers at SINTEF Digital.
Please note the following with respect to Question 3: The state machines should be reactive (no transition without input signal) and communicating. Hence, you have to distinguish between input and output signals (input and output seperated by "/").
Moreover each state machine should be able to simulate its lifeline as outlined in detail in the final part of the lecture on state machines.
Oblig-I to be submitted by midnight (24:00) September 28.
The closing date has been postponed until September 28 because there is actually a rule saying that obligatory exercises should be made available at least 14 days in advance. I was not aware of this rule (which I unfortunately have broken many times in the past).
Note that negative behaviour and state-machines will first be introduced Friday this week.
There will be three compulsory exercises. The closing dates for submission are:
Oblig 1: September 23
Oblig 2: October 21
Oblig 3: November 16
All solutions should be sent to kst@sintef.no in the form of a pdf attachment.
Syllabus is all lectures, group exercises and compulsory exercises.
The books and articles made available via Leganto are support literature.
If the infection rate reaches a level where parts of society are forced to close down again during the autumn semester, written examination in this course may be conducted as a written home exam or as an oral examination.