Architecture et Sécurité du CloudArchitecture et Sécurité des systèmes (STI)
Cloud Architecture and Security
Séquencement
Learning objectives
Goal
At the end of this race you should know:
- Where and when to use network virtualization, and understand the basics of its automatic deployment
- What is Software Defined Networking
- What is Network Function Virtualization
- Manipulate network virtualization tools (ODL, ONOS, openFlow, OVS)
- What are the different approaches used to secure a virtualized architecture: SDP, Micro Segmentation, Zero Trust Model Basics concepts of 5G and services
Introduction Many wide-scale distributed systems are now part of our daily lives: IoT, 4G/5G, and cloud are just a few examples of these systems. We know it from an application point of view, but what hides beneath this level?
All of them make intensive use of the concept of virtualization. From the end user's perspective, these distributed systems operate in an opaque manner, with most mechanisms hidden by abstraction layers and giving network abstractions: virtual networks. How does it all work? What are the mechanisms for implementing systems So we have a wide scale? How is the security of such systems enhanced by hardware, and how is their infrastructure managed?
Modalities
You'll be assessed based on work you'll do within the sessions: no final exam.
Prerequisites
| Module | Teaching unit | Semester |
|---|---|---|
| System Security | Computer Security | S7 |
| Network Security | Computer Security | S7 |
| Network Administration | Computer Security | S7 |
| Linux System Administration | Network and System Administration | S6 |
Program
- Prerequisite (basic remedies of your previous network courses)
- Large Scale Distributed Systems (LSDS): Cloud, Fog and Edge
- Core tech #1: Software Defined Networking (SDN)
- Core tech #2: Network Function Virtualization (NFV)
- LSDS organization and tools
- LSDS security models
- 4G, 5G and mobility
- Deep-dive into SDN: introduction to p4
Assessment
Continuous control by group rendering on each TP
SecNumEdu Skills
| Skill | Lecture hours | Practical hours | Entry level | Exit level |
|---|---|---|---|---|
| Security of electronics and hardware architectures | 2 | 1 | 0 | 1 |
| Introduction to the hardware mechanisms of TEE (MKTME, SEV) and support to virtualization | ||||
| Security of outsourced services | 2 | 2 | 0 | 1 |
| Introduction to virtualization, hypervisor, cloud. Strengthening container deployments and introduction to kata containers | ||||
| Security of specific and emerging systems | 2 | 2 | 0 | 1 |
| Securing virtualized networks by SDN and NFV | ||||