Schedule, syllabus and examination date

Course content

Security by Design means that security is integrated in the entire development lifecycle of IT systems, including programming, testing, deployment, configuration and operation. This course teaches how to build adequate security into systems that thereby are able to maintain their functionality while being exposed to cyberthreats.

Learning outcome

After completing IN5280, you will have:

  • knowledge about how to include security requirements in system specifications, design, and testing
  • understanding of the trade-off between security risk, and the cost of implementing security controls
  • knowledge about GDPR (General Data Protection Regulation) as well as the major frameworks for threat modelling, vulnerability management, and secure systems development

And you will be able to:

  • perform threat modelling and security/privacy risk assessment of system functionality and components
  • apply the principles of privacy by design and security by design during practical systems development,
  • assess the maturity of secure systems development

Admission to the course

Students admitted at UiO must apply for courses in Studentweb. Students enrolled in other Master's Degree Programmes can, on application, be admitted to the course if this is cleared by their own study programme.

Nordic citizens and applicants residing in the Nordic countries may apply to take this course as a single course student.

If you are not already enrolled as a student at UiO, please see our information about admission requirements and procedures for international applicants.

IN2000 – Software Engineering with Project Work.

General knowledge of information security, e.g. from IN2120 – Information Security/INF3510 – Information security (continued).

Successful completion of the course requires good knowledge and skills in programming, familiarity with general principles of software development and knowledge related to web development.

Knowledge of Java and/or PHP.

Overlapping courses


Lectures and practice 4 hours per week


There will be a home exam that constitutes 40% of the final grade and a final exam that constitutes 60% of the final grade. Both exams must have a pass grade.

It will also be counted as one of your three attempts to sit the exam for this course, if you sit the exam for one of the following courses: IN9280 - Security by Design

Examination support material

No examination support material is allowed.

Grading scale

Grades are awarded on a scale from A to F, where A is the best grade and F is a fail. Read more about the grading system.

Resit an examination

Students who can document a valid reason for absence from the regular examination are offered a postponed examination at the beginning of the next semester. Re-scheduled examinations are not offered to students who withdraw during, or did not pass the original examination.

Special examination arrangements, use of sources, explanations and appeals

See more about examinations at UiO

Last updated from FS (Common Student System) Dec. 8, 2022 9:28:15 PM

Facts about this course


The course is last held spring 2021


Examination is last held spring 2023

Teaching language