SECTION I: GENERAL INFORMATION ABOUT THE COURSE

Course Code	Course Name	Year	Semester	Theoretical	Practical	Credit	ECTS
50612METOZ-BGP0093	Database Security and Protection Algorithms	2	Fall	1	1	2	4

Course Type :	Compulsory
Cycle:	Associate      TQF-HE:5. Master`s Degree      QF-EHEA:Short Cycle      EQF-LLL:5. Master`s Degree
Language of Instruction:	Turkish
Prerequisities and Co-requisities:	N/A
Mode of Delivery:	Face to face
Name of Coordinator:	Instructor FATİH BİNGÜL
Dersin Öğretim Eleman(lar)ı:	Instructor FATİH BİNGÜL
Dersin Kategorisi:	Programme Specific

SECTION II: INTRODUCTION TO THE COURSE

Course Objectives & Content

Course Objectives:	The aim of this lesson is to examine internal and external threats targeting the database and to develop defense algorithms for the measures that can be taken against these threats.
Course Content:	The concept of threat in the database, developing internal threats from users and defense algorithms for these threats, revealing and eliminating procedural deficiencies on the database, examining and preventing the effects of natural disasters on databases, development of defense algorithms related to the threats caused by human factor and harmful software threats and their elimination

Course Learning Outcomes (CLOs)

Course Learning Outcomes (CLOs) are those describing the knowledge, skills and competencies that students are expected to achieve upon successful completion of the course. In this context, Course Learning Outcomes defined for this course unit are as follows:

Knowledge (Described as Theoritical and/or Factual Knowledge.)

1) Knows the concept of threats in the database.

Skills (Describe as Cognitive and/or Practical Skills.)

1) Develops internal threats from users and defense algorithms for these threats.

2) Reveals procedural deficiencies on the database and ensures its elimination.

3) Develops defense algorithms.

Competences (Described as "Ability of the learner to apply knowledge and skills autonomously with responsibility", "Learning to learn"," Communication and social" and "Field specific" competences.)

Weekly Course Schedule

Week	Subject	Materials Sharing *
		Related Preparation	Further Study
1)	Introduction to database and security	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
2)	DDL and DML statements	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
3)	Writing DML queries and DCL statements	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
4)	TCL and stored procedures	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
5)	Stored procedures	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
6)	Triggers, union and join statements	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
7)	Database attack and defense methods	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
8)	Midterm
9)	Brute Force attacks and defense	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
10)	SQL injection attacks	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
11)	SQL injection saldırıları ve savunma	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
12)	Automatic recording of DML transactions (trigger)	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
13)	Automatic recording of DML transactions (change data capture)	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
14)	Database backup	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
15)	User security management	Yusuf Anıl Akduygu, Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık, 2018. Reading the related chapter and other resources to be obtained
16)	Final Exam

*These fields provides students with course materials for their pre- and further study before and after the course delivered.

Recommended or Required Reading & Other Learning Resources/Tools

Course Notes / Textbooks:	Yusuf Anıl Akduygu, 2018; Oracle Veritabanı Güvenliği ve Sızma Testleri, Kodlab Yayıncılık
References:	Talip Hakan Öztürk, 2012; Oracle Database 11g R2 İleri Veritabanı Yönetimi, Pusula Yayıncılık Süleyman Uzunköprü, 2017; Projeler İle C# 7.0 ve SQL Server 2016, Kodlab Yayıncılık Süleyman Uzunköprü, 2017; Projeler İle SQL Server 2016, Kodlab Yayıncılık Ali Nizam, 2015; Veritabanı Teorisi ve Uygulamaları, Papatya Bilim Yayınevi

DERS ÖĞRENME ÇIKTILARI - PROGRAM ÖĞRENME ÇIKTILARI İLİŞKİSİ

Contribution of The Course Unit To The Programme Learning Outcomes

Ders Öğrenme Çıktıları (DÖÇ)	1	2	3	4
Program Öğrenme Çıktıları (PÖÇ)
1) Explains the basic, theoretical and practical information in the field of information security technology.
1) Acquires competency of analyzing and solving the problems.
1) Lists the tasks and responsibilities required to identify and prevent any exploitation of hardware.
1) Follow the patches of information technology systems published against known cyber security gaps.
1) Experiences all processes in business life.
1) Defines the corporate cyber security rules and guidelines.
2) Lists the tasks and responsibilities required to identify and prevent any abuse that may occur in software components.
2) Information Security Creates procedure and control components
2) Has awareness for ethical and social responsibility.
2) Know and analyze cyber assets in terms of information security.
2) Explains the importance of authorizing users as much as they can.
2) Takes part in activities related to the field of education in a business operating in the field.
3) Questions the application with theoretical knowledge.
3) Lists the tasks and responsibilities required to identify and prevent any abuse that may occur in local area networks.
3) Experience the cyber security risk management system.
3) Takes responsibility as a team member in works and operations of his/her field.
3) Identify non-technological tools and methods against cyber attack.
3) Explains the necessary policies and processes for effective event management.
4) Identifies the methods and methods of technological methods against cyber attack.
4) Compiles the knowledge and experience gained in the field.
4) Explains the importance of monitoring the cyber systems for the correct structuring of the powers, the realization of the realized, failed or failed cyber attacks, the timely response to the protection and the fulfillment of the legal requirements.
4) Applies the theoretical knowledge learned in business life for a semester.
4) Is aware of written, verbal communication and interaction.
5) User training and security awareness describes the importance of cyberspace.
5) Acquires the competencies defined as the institutional outcomes of Beykoz University on the basic level, inline with the expectations of business world and the society.
5) Follows the developments of advanced technology and digital transformation.
6) Recall national and international legislation and regulations related to the field of Information Security Technology.
6) Acquires the awareness for lifelong learning.
7) Has awareness about citizenship competency.
7) Defines the fundamentals of programming and algorithm information.
8) Evaluates the developments of his/her field with the understanding of an entrepreneur.
9) Acquires communication in a Foreign Language (English) competence defined on the level of at least A2 in European Language Portfolio. (In programs whose medium of instruction is English, on the level of B1).

SECTION III: RELATIONSHIP BETWEEN COURSE UNIT AND COURSE LEARNING OUTCOMES (CLOs)

Level of Contribution of the Course to PLOs

No Effect	1 Lowest	2 Low	3 Average	4 High	5 Highest

	Programme Learning Outcomes	Contribution Level (from 1 to 5)
1)	Explains the basic, theoretical and practical information in the field of information security technology.
1)	Acquires competency of analyzing and solving the problems.	5
1)	Lists the tasks and responsibilities required to identify and prevent any exploitation of hardware.	1
1)	Follow the patches of information technology systems published against known cyber security gaps.	1
1)	Experiences all processes in business life.	1
1)	Defines the corporate cyber security rules and guidelines.	2
2)	Lists the tasks and responsibilities required to identify and prevent any abuse that may occur in software components.	4
2)	Information Security Creates procedure and control components	5
2)	Has awareness for ethical and social responsibility.	1
2)	Know and analyze cyber assets in terms of information security.
2)	Explains the importance of authorizing users as much as they can.	1
2)	Takes part in activities related to the field of education in a business operating in the field.	1
3)	Questions the application with theoretical knowledge.	5
3)	Lists the tasks and responsibilities required to identify and prevent any abuse that may occur in local area networks.	1
3)	Experience the cyber security risk management system.
3)	Takes responsibility as a team member in works and operations of his/her field.	1
3)	Identify non-technological tools and methods against cyber attack.	5
3)	Explains the necessary policies and processes for effective event management.	1
4)	Identifies the methods and methods of technological methods against cyber attack.	1
4)	Compiles the knowledge and experience gained in the field.	5
4)	Explains the importance of monitoring the cyber systems for the correct structuring of the powers, the realization of the realized, failed or failed cyber attacks, the timely response to the protection and the fulfillment of the legal requirements.	5
4)	Applies the theoretical knowledge learned in business life for a semester.
4)	Is aware of written, verbal communication and interaction.	1
5)	User training and security awareness describes the importance of cyberspace.	1
5)	Acquires the competencies defined as the institutional outcomes of Beykoz University on the basic level, inline with the expectations of business world and the society.
5)	Follows the developments of advanced technology and digital transformation.	2
6)	Recall national and international legislation and regulations related to the field of Information Security Technology.	1
6)	Acquires the awareness for lifelong learning.	1
7)	Has awareness about citizenship competency.	1
7)	Defines the fundamentals of programming and algorithm information.	1
8)	Evaluates the developments of his/her field with the understanding of an entrepreneur.	1
9)	Acquires communication in a Foreign Language (English) competence defined on the level of at least A2 in European Language Portfolio. (In programs whose medium of instruction is English, on the level of B1).	1

SECTION IV: TEACHING-LEARNING & ASSESMENT-EVALUATION METHODS OF THE COURSE

Teaching & Learning Methods of the Course

(All teaching and learning methods used at the university are managed systematically. Upon proposals of the programme units, they are assessed by the relevant academic boards and, if found appropriate, they are included among the university list. Programmes, then, choose the appropriate methods in line with their programme design from this list. Likewise, appropriate methods to be used for the course units can be chosen among those defined for the programme.)

Teaching and Learning Methods defined at the Programme Level	Teaching and Learning Methods Defined for the Course
Lectures
Case Study
Problem Solving
Demonstration
Laboratory
Reading
Homework
Project Preparation

Assessment & Evaluation Methods of the Course

(All assessment and evaluation methods used at the university are managed systematically. Upon proposals of the programme units, they are assessed by the relevant academic boards and, if found appropriate, they are included among the university list. Programmes, then, choose the appropriate methods in line with their programme design from this list. Likewise, appropriate methods to be used for the course units can be chosen among those defined for the programme.)

Aassessment and evaluation Methods defined at the Programme Level	Assessment and Evaluation Methods defined for the Course
Midterm
Final Exam
Quiz
Homework Evaluation

Contribution of Assesment & Evalution Activities to Final Grade of the Course

Measurement and Evaluation Methods	# of practice per semester	Level of Contribution
Quizzes	2	% 20.00
Midterms	1	% 30.00
Semester Final Exam	1	% 50.00
Total		% 100
PERCENTAGE OF SEMESTER WORK		% 50
PERCENTAGE OF FINAL WORK		% 50
Total		% 100

SECTION V: WORKLOAD & ECTS CREDITS ALLOCATED FOR THE COURSE

WORKLOAD OF TEACHING & LEARNING ACTIVITIES
Teaching & Learning Activities	# of Activities per semester	Duration (hour)	Total Workload
Course	14	1	14
Laboratory	14	1	14
Application	0	0	0
Special Course Internship (Work Placement)	0	0	0
Field Work	0	0	0
Study Hours Out of Class	0	0	0
Presentations / Seminar	0	0	0
Project	0	0	0
Homework Assignments	1	10	10
Total Workload of Teaching & Learning Activities	-	-	38
WORKLOAD OF ASSESMENT & EVALUATION ACTIVITIES
Assesment & Evaluation Activities	# of Activities per semester	Duration (hour)	Total Workload
Quizzes	2	12	24
Midterms	1	15	15
Semester Final Exam	1	18	18
Total Workload of Assesment & Evaluation Activities	-	-	57
TOTAL WORKLOAD (Teaching & Learning + Assesment & Evaluation Activities)			95
ECTS CREDITS OF THE COURSE (Total Workload/25.5 h)			4