FR
EN
Sécurité InformatiqueAdministration réseaux et système (STI)
Computer Security
Teaching unit Network and System Administration · AS06_PRS2 | EC Code AS06_PRS2-3
6ECTS (EU)
1Coefficient
16:00Hours
Séquencement
Learning objectives
- The main educational objectives of this module are to introduce the basic terminology of information security: objectives and threats, vulnerabilities and exploits.Then, practically cover vulnerabilities and techniques of attack and defence that are:
Prerequisites
| Module | Teaching unit | Semester |
|---|---|---|
| Networks | Introduction to Systems and Networks | S5 |
| System Programming | System Introduction | S5 |
Program
Module divided 4 courses and 8 TD
Courses
Buffer Oberflows
- Understand buffer overflow attack techniques and defences (Stack canaries/W^/ASLR)
- Understanding the Attack Return-Oriented Programming (ROP)
Web Model Vulnerabilities
1.Understanding Web Vulnerabilities
2.Understand SQL injections
3.Understand Cross-Site Request Forgery (CSRF) and XSS attacks
IP Network vulnerabilities
- Introduction to IP networks
- ARP poisoning
- IP spoofing
- TCP Injection
- Denial of service
Directed work
The directed work adheres as closely as possible to the CM: implement attacks and defence techniques explained in CM.
Assessment
- a MCQ
- a partial
References
- Computer security: Corrected courses and exercises, by Gildas Avoine , Pascal Junod
Skills
3| Ref. | Verb | Description | Level |
|---|---|---|---|
| C2_1 | define | buffer overflow attack techniques and defences | 1 |
| C2_1 | identify | Web Model Vulnerabilities | 1 |
| C2_1 | identify | IP Network vulnerabilities | 1 |
SecNumEdu Skills
| Skill | Lecture hours | Practical hours | Entry level | Exit level |
|---|---|---|---|---|
| Operating system security | 2 | 2 | 0 | 1 |
| Buffer Oberflows: Understanding buffer overflow attack techniques and defences (Stack canaries/W^/ASLR), Understanding Return-Oriented Programming (ROP). | ||||
| Software development and software engineering (from a security perspective) | 1 | 1 | 0 | 1 |
| Web Model Vulnerabilities: Understanding Web Vulnerabilities, Understanding SQL Injections, Understanding Cross-Site Request Forgery (CSRF) and XSS Attacks | ||||
| Network and protocol security | 2 | 2 | 0 | 1 |
| IP Network Vulnerabilities: ARP poisonning, IP spoofing, TCP njection, Service Denial | ||||
| Penetration testing | 1 | 1 | 0 | 1 |
| Web intrusion test, SQL injections, Cross-Site Request Forgery (CSRF) and XSS, network attacks | ||||
| Fundamentals | 2 | 2 | 0 | 2 |
| Typology of attacks, vulnerabilities systems and networks, countermeasures | ||||