Bachelor of Information Security

– Analyze a complex computing problem and to apply principles of computing and other relevant disciplines to identify solutions.
– Design, implement, and evaluate a computing-based solution to meet a given set of computing requirements in the context of the program’s discipline.
– Communicate effectively in a variety of professional contexts.
– Recognize professional responsibilities and make informed judgments in computing practice based on legal and ethical principles.
– Function effectively as a member or leader of a team engaged in activities appropriate to the program’s discipline.
– Apply security principles and practices to maintain operations in the presence of risks and threats [InfSec].
– Apply knowledge of computing and understanding of wide range of theoretical basics, principles, concepts, and advanced topics of information technology appropriate to the program’s student outcomes and to the discipline.

1. Obtaining the Jordanian General Secondary Education Certificate or equivalent.

2. High school average not less than the minimum required for the major.

605161 – Introduction to Data Communications & Networking (3:3-0)

Prerequisite: 601105
This introductory course covers the fundamentals of data communications and computer networks. Students learn about communication applications, networking industries, and the advantages of various network types such as LAN, WAN, MAN, WLAN, and WWAN. The course explains communication protocol standards, the basics of data transmission, packet and circuit switching, transmission systems, and the role of data communications in networked environments. Additionally, it examines the OSI and TCP/IP models, presenting key functions and representative protocols at each layer.

605150 – Cybersecurity Fundamentals (3:3-0)

Prerequisite: 601104
This course provides a foundational understanding of cybersecurity, its scope, and major challenges. Topics include core terminology, network protocols and services, security infrastructures, protocol vulnerabilities, common attack types, threat classifications, cryptographic basics, defensive mechanisms, and an introduction to digital forensics.

605210 – Cybersecurity Fundamentals (3:3-0)

Prerequisite: 605161
This course builds a strong foundation in cybersecurity concepts and challenges. Students explore cybersecurity terminology, network protocols and services, infrastructure security, protocol-level vulnerabilities, attack methods, threat types, and defensive strategies.

605250 – Linux Security Fundamentals (3:3-0)

Prerequisite: 605210
Students are introduced to the Linux operating system with a focus on command-line operations. The course covers the kernel, file systems, shells, user utilities, basics of shell scripting, processes, communication mechanisms, and essential security tools. It also includes coverage of Kali Linux as a leading penetration testing and security assessment platform.

605262 – Local & Wide Area Networks (3:3-0)

Prerequisite: 605161
This course examines core concepts of LAN and WAN technologies. Students study wired LANs, including standard, bridged, switched, fast, and 10-Gigabit Ethernet. Also covered are networking devices such as hubs, bridges, switches, and routers, the structure and role of backbone networks, and the need for VLANs. WAN technologies such as Frame Relay and ATM are introduced, along with detailed IPv4 and IPv6 concepts. The practical component uses Cisco Packet Tracer for hands-on networking simulation.

605264 – Information & Network Security (3:3-0)

Prerequisite: 605161
This course explores mechanisms that secure network communication and data exchange. Topics include encryption, cryptographic and steganographic fundamentals, key types, firewalls, hashing, certificate authorities, secure communication practices, email security, malware, intrusion systems, threats, vulnerabilities, and defensive strategies.

335605 – Ethical Hacking (3:3-2)

Prerequisite: 605264 + 605250
This course introduces ethical hacking principles, tools, and practices. Students learn about security fundamentals, information gathering, footprinting, system hacking techniques, and evaluating system security. Practical exercises reinforce theoretical concepts and emphasize analytical, problem-solving approaches to ethical hacking.

605336 – Ethical Hacking (2:2-0)

Prerequisite: 605250
This course provides an introduction to ethical hacking concepts, tools, and techniques. Students explore security basics, information gathering, system footprinting, and hacking methodologies, supported by practical tasks that strengthen analytical and problem-solving skills.

605337 – Ethical Hacking Lab (1:2-0)

Prerequisite: 605250
This laboratory course offers practical training in ethical hacking and penetration testing. Students work in controlled environments to simulate attacks and defenses, covering reconnaissance, enumeration, vulnerability scanning, exploitation, privilege escalation, and post-exploitation techniques using tools such as Nmap, Metasploit, Burp Suite, and Wireshark.

605340 – Information Security Protocols (3:3-0)

Prerequisite: 605262
This course focuses on widely used information security protocols. Topics include X.509 PKI, IPsec, SSL/TLS, and application-layer protocols such as PGP, S/MIME, Kerberos, and SSH. Students examine protocol structure, functionality, and practical usage.

605341 – Digital Forensic Investigation (3:3-0)

Prerequisite: 605335
This course introduces digital forensic principles and their appropriate applications. Students examine digital evidence acquisition, interpretation, and analysis; legal and procedural considerations; documentation standards; forensic techniques for different systems; and current tools for network, email, web, and mobile investigations.

605342 – Secure Business Architecture (3:3-0)

Prerequisite: 605262
Students learn foundational principles of security architecture and the role of security architects in complex enterprise environments. The course covers strategy development, policy formulation, security control implementation, and architecture evaluation within organizational contexts.

605343 – Cryptography Theory (3:3-0)

Prerequisite: 601222 + 605210
This course provides an in-depth study of cryptographic algorithms and their requirements. It covers classes of algorithms, pseudorandom number generators, stream and block ciphers, DES, AES, Feistel networks, public-key cryptography, Diffie–Hellman, RSA, elliptic curve cryptography, authentication mechanisms, MACs, digital signatures, and hash function requirements.

605346 – Information & Network Security Programming (3:3-0)

Prerequisite: 601222 + 601214 + 601215
Students learn programming techniques for information and network security, including socket programming, web connectivity libraries, threading, exception handling, and I/O streams in Python. The course also covers file system access, memory management, and system calls in C.

605347 – Information Systems Risk Management (3:3-0)

Prerequisite: 605336 + 605337
This course explores risk types affecting organizational information systems and how to ensure security and business continuity. Students learn asset identification, threat and vulnerability assessment, preventive techniques, containment strategies, contingency planning, incident response, business continuity, and disaster recovery.

605349 – Data Analytics (3:3-0)

Prerequisite: 605262
This course introduces big data and data analytics from a cybersecurity perspective. Students study data wrangling, exploratory analysis, statistical learning models, programming tools, data visualization, and data ethics. The course emphasizes analytics applications in cybersecurity, including fraud detection and communication monitoring.

605350 – Blockchain Technology (3:3-0)

Prerequisite: 605343
Students gain a deep understanding of blockchain technologies and their security applications. Topics include distributed ledgers, consensus mechanisms, hashing, digital signatures, Merkle trees, blockchain architecture, smart contracts, DApps, attack vectors, privacy concerns, and mitigation strategies. Practical tasks involve building and deploying smart contracts on platforms such as Ethereum and Hyperledger, and analyzing real-world blockchain use cases.

260535 – Digital Forensic Investigation (2:2-0)

Prerequisite: 605336 + 605337
This course introduces essential principles of digital forensics, covering digital evidence acquisition, analysis, interpretation, procedural and legal considerations, and forensic techniques applied to Windows, CLI systems, networks, email, web, and mobile environments.

605353 – Digital Forensic Investigation Lab (1:2-0)

Prerequisite: 605336 + 605337
This lab offers hands-on training with digital forensic tools and methodologies. Students practice disk imaging, file system analysis, deleted data recovery, log analysis, packet inspection, and investigation of email, web, and mobile artifacts.

605360 – Malware Analysis (3:3-0)

Prerequisite: 605346
Students learn modern malware analysis techniques through readings and interactive labs. Topics include system architecture, x86 assembly, addressing modes, static and dynamic analysis, reverse engineering, IDA Pro usage, debugging, malware behavior profiling, obfuscation, encryption methods, and evasion techniques.

605365 – Network Monitoring & Documenting (3:3-0)

Prerequisite: 605262
This course teaches students how to deploy and manage network monitoring sensors. Students learn traffic capture, sensor placement, traffic filtering, data evaluation, AIS configuration, and the use of tools such as Wireshark, tcpdump, WinPcap, and WinDump.

605400 – Field Training (3:3-0)

Prerequisite: Department Approval + 603392
Students participate in supervised field training within public or private organizations. The experience enables them to apply academic knowledge in real-world environments, using tools and applications relevant to their field while gaining exposure to professional practices.

605408 – Selected Topics in Information Security (3:3-0)

Prerequisite: 603391
This course covers special topics selected based on instructor expertise and student interest. Subjects may include advanced programming languages, network technologies, database systems, MIS, internet and web developments, and applied case studies.

605441 – Cloud Computing Security (3:3-0)

Prerequisite: 605262
This course introduces the principles, architecture, and programming of cloud computing, with emphasis on security policies, technologies, and controls that protect cloud data, applications, and infrastructure.

605409 – Innovation & Entrepreneurship in InfoSec (3:3-0)

Prerequisite: 603392
Students explore innovation, entrepreneurship, and creativity within the information security domain. Topics include private and public sector entrepreneurship, innovation types and stages, economic benefits, creative processes, and business model canvas fundamentals.

605442 – Database Security (3:3-0)

Prerequisite: 601282 + 601283 + 605336 + 605337
Students study database security and auditing using Oracle-based examples. Topics include security profiles, password policies, privileges and roles, virtual private databases, auditing, SQL injection, securing DBMS systems, and enforcing access controls.

605443 – Intrusion Detection & Prevention (3:3-0)

Prerequisite: 605336 + 605337
This course explores packet capturing, traffic analysis, IDS architectures, intrusion detection techniques, firewalls, wireless IDS, machine-learning-based IDS, and tools such as Snort.

605446 – Biometrics Systems (3:3-0)

Prerequisite: 605262 + 606360
Students learn biometric principles and technologies used for personal identification, including face and voice recognition, fingerprints, iris scans, DNA matching, multimodal biometrics, forensic applications, and biometric system security.

605460 – Vulnerability Assessments (3:3-0)

Prerequisite: 605336 + 605337 + 605365
This course focuses on identifying and exploiting vulnerabilities in web applications. Students learn assessment tools, methods for analyzing authentication, session management, access controls, and client-side weaknesses. Practical labs address injection attacks and defensive strategies used in online banking and e-commerce applications.

605461 – Software Development Security (3:3-0)

Prerequisite: 605460 + 603392
Students develop programming skills for secure software development. Topics include Java Security Architecture, permissions and policy files, security libraries, keystore management, coding vulnerabilities, and memory-based attacks in C and Assembly.

605462 – Software Security Development (3:3-0)

Prerequisite: 603392 + 605360
This course covers secure software development practices, SSDLC, threat modeling, risk assessment, secure coding standards, SAST/DAST testing, and integrating security into DevOps through DevSecOps practices.

605470 – Latest Advancements in InfoSec (3:3-0)

Prerequisite: 605262
Students explore emerging trends and advanced topics in information security through group learning and collaborative instruction.

605477 – Secured Wireless Application Programming (3:3-0)

Prerequisite: 605262 + 601222
Students learn Android application development with a focus on secure mobile application design. Topics include UI development, internet connectivity, file and preference management, location-based services, messaging, and networking.

605480 – Graduation Project (1) (3:3-0)

Prerequisite: 402201 + 603392
This first project course guides students in forming teams, selecting a project topic, understanding scope, reviewing literature, and planning work across two semesters. It emphasizes requirement gathering and preparation for the final project.

605485 – Graduation Project (2) (3:0-3)

Prerequisite: 605480
Students design and implement a complete information system to solve a real organizational problem. The course requires applying the development life cycle, technical tools, and analytical skills under faculty supervision.

605488 – Professional Skills in Information Security (3:3-0)

Prerequisite: 402201 + 603391
This course introduces students to high-demand jobs and essential soft skills such as résumé writing, interviewing, and professional networking. It also provides practical industry-aligned skills relevant to the information security field.