本課程旨在培養學生具備資訊安全之基本理論、實務技術與風險管理能力，使學生能理解現代資訊系統所面臨之安全威脅與防護方法，並建立完整之資訊安全觀念與防護意識。課程內容涵蓋資訊安全基本概念、網路安全、系統安全、密碼學、身份驗證、存取控制、惡意程式分析、弱點與滲透測試、雲端與行動安全，以及資訊安全管理與相關法規等核心議題。透過理論講授、案例分析與實作演練，學生將學習常見資安攻擊方式與防禦策略，並具備分析、偵測與防護資訊系統安全問題之能力，同時強化資安治理、風險評估與資訊倫理素養，以培養兼具理論基礎與實務應用能力之資訊安全人才。

This course aims to cultivate students' basic theory, practical technology and risk management ability of information security, so that students can understand the security threats and protection methods faced by modern information systems, and establish a complete information security concept and protection awareness. The course content covers core topics such as basic concepts of information security, network security, system security, cryptography, authentication, access control, malware analysis, vulnerability and penetration testing, cloud and mobile security, as well as information security management and related regulations. Through theoretical lectures, case analysis and practical exercises, students will learn common information security attack methods and defense strategies, and have the ability to analyze, detect and protect information system security issues. At the same time, they will strengthen information security governance, risk assessment and information ethics literacy to cultivate information security talents with both theoretical foundation and practical application capabilities.

林詠章，黃明祥.資訊與網路安全概論(七版).2024

Lin Yongzhang, Huang Mingxiang. Introduction to Information and Network Security (Seventh Edition). 2024