FR
EN
Sécurité systèmeSécurité Informatique (STI)
9ECTS (EU)
1Coefficient
21:20Hours
Séquencement
Learning objectives
- Operation, implementation and administration of the mandatory access control modules under GNU/Linux
- secure the GNU/Linux operating system start sequence
Prerequisites
| Module | Teaching unit | Semester |
|---|---|---|
| Computer Security | Network and System Administration | S6 |
| Linux System Administration | Network and System Administration | S6 |
Program
Part 1: GNU/Linux Security
Courses
- Security properties
- Principle of every privilege
- GNU/Linux System Security
- Discretionary Access Control
- Mandatory Access Control
- SELinux
- GRSecurity
- PaX, ASLR, SSP
TDs
- administration of a system under SELinux
- SELinux module writing
- installation and administration of GRSecurity
- grsecurity test
- RBAC policy GRsecurity
- Get out of chroot.
Part 2: Security and start sequence
Courses
- Linux Distribution Structure
- Role of Bootloader: BIOS/MBR, UEFI, GRUB
- Security parameters
- principles of a safe start sequence.
TDs
- Creating a GNU/LINUX mini-distribution
- Creating and installing a bootloader
- Basic security
- SecureBoot
Assessment
Continuity
- Part 1: SELinux module to report + TD gsecurity report
References
Skills
3| Ref. | Verb | Description | Level |
|---|---|---|---|
| C2_1 | analyze | the operation of SELinux | 3 |
| C2_1 | analyze | the operation of grsecurity | 3 |
| C2_2 | implement | a secure GNU/Linux | 3 |
SecNumEdu Skills
| Skill | Lecture hours | Practical hours | Entry level | Exit level |
|---|---|---|---|---|
| Operating system security | 4 | 4 | 1 | 2 |
| Course: Security properties, principle of every privilege, GNU/Linux System Security, Discretionary Access Control, Mandatory Access Control, SELinux, GRSecurity, PaX, ASLR, SSP TDs: system administration under SELinux, SELinux module writing, installation and administration of GRSecurity, grsecurity test, RBAC GRsecurity policy, chroot output. | ||||
| Penetration testing | 2.66 | 2.66 | 1 | 2 |
| System intrusion test, system vulnerability exploitation, chroot output. | ||||
| Product certifications and evaluations | 2 | 2 | 0 | 1 |
| Certification concept, common criteria, security properties, ITSEC. | ||||
| Cyberdefense | 2 | 2 | 0 | 1 |
| Detection, aggregation, standardization, correlation, reporting, event storage. | ||||