FR
EN
Sécurité des conteneursAdministration Audit et Analyse de Sécurité (STI)
Container Security
Teaching unit Administration, Audit, and Security Analysis · S09_4AS | EC Code S09O_4AS1-1
8ECTS (EU)
1Coefficient
21:20Hours
Séquencement
Learning objectives
Know the problems of distributed systems and the impact of architectural choices. Understand the advantages of modern architectures (stateless, micro-services...). Design recovery strategies on breakdowns. Know cloud definitions and manipulate a cloud platform.
Prerequisites
| Module | Teaching unit | Semester |
|---|---|---|
| Algorithms and Complexity | Programming Principles | S5 |
| Web Engineering | Network and System Administration | S6 |
| Network Administration | Computer Security | S7 |
| Networks | Network and System Administration | S6 |
Program
Systems distributed:
- Paradigms, memory and communication
- Issues & Objectives
- Consistency, logical clock, breakdown
- RPC application in client/server mode: types of failures, repeat strategies, semantics
Cloud computing:
- Definition, characteristics, models and service management, deployment models and architecture. Short discussion on administration issues (scheduling, power scaling, self-adaptation...)
- Application, use of a PaaS platform
Assessment
- TD evaluation
References
- Mr van Steen and A.S. Tanenbaum, Distributed Systems, 3rd ed., distributed-systems.net, 2017.
- Mell, P. and Grance, T. (2011), The NIST Definition of Cloud Computing, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD
- Liu, F. , Tong, J. , Mao, J. , Bohn, R. , Messina, J. , Badger, M. and Leaf, D. (2011), NIST Cloud Computing Reference Architecture, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD
Skills
3| Ref. | Verb | Description | Level |
|---|---|---|---|
| C1_4 | critique | architectural choice in view of a need | 3 |
| C2_2 | identify | cloud solutions service and deployment models | 1 |
| C2_2 | design | recovery strategies | 3 |
SecNumEdu Skills
| Skill | Lecture hours | Practical hours | Entry level | Exit level |
|---|---|---|---|---|
| Contribution of architectures to security | 4 | 9.33 | 1 | 2 |
| We address issues specific to distributed systems (partial local view, inconsistent perception...), a taxonomy of these systems (synchronous/asynchronous, type of shared memory, processes and servers with/without being...) and see how these architectural properties impact the functionality and knowledge of the system. Students are confronted with a problem of resumption of processes communicating on an inconsistent state as well as partial recovery with non-idepotent replay on SUN RPC. They resolve by changing the properties of the system, or simply by setting up a logical clock to ensure a coherent total recovery, or by making the processes ideal for the RPC replay | ||||