Search Log in FR EN

Sécurité des systèmes d'exploitationArchitecture et Sécurité des systèmes (STI)

FISEFISA STI Semester 9 Option: Architecture, Administration, Audit, and Security Analysis Machine translation

Operating System Security

Teaching unit Systems Architecture and Security · S09T_ A2S2  |  EC Code S09O_4AS2-2
8ECTS (EU)
1Coefficient
21:20Hours

Séquencement

C TD C TD C TD C TD C TD C TD C TD C TD

Learning objectives

  • Understanding Security Mechanisms on Linux and Windows OS
  • Being able to create a mechanism that bypasses kernel security mechanisms
  • Establish native system protections and understand the limits of these protections

Prerequisites

ModuleTeaching unitSemester
C ProgrammingProgramming PrinciplesS5
Windows System AdministrationNetwork and System AdministrationS6
Linux System AdministrationNetwork and System AdministrationS6

Program

  • Presentation of Windows system architecture (7 and 10)
  • File System
  • The register
  • Process management
  • Users
  • Handling on various aspects of security administration of Windows systems.
  • Development of a kernel mechanism (in several steps) modifying the behavior of Windows system
  • Implementation of a detection tool (userland)
  • Presentation of security mechanisms on Linux OS
  • Protection of start-up
  • Authentication
  • Focus on SELinux
  • Implementation of a SELinux security policy by hand
  • Development of a kernel mechanism equivalent to what was done under Windows

Assessment

  • Taking notes of the course (25%)
  • Project output (75%)

References

  • Windows Internals
  • Rootkits : Subverting the Windows Kernel
  • SELinux Cookbook

Skills

4
Ref.VerbDescriptionLevel
C1_2identifySystem mechanisms for carrying out specific actions2
C1_4implementDevelopment of a kernel flow control mechanism2
C2_2implementImplementing a SELinux policy2
C2_3showUnderstanding Windows System Mechanisms1

SecNumEdu Skills

SkillLecture hoursPractical hoursEntry levelExit level
Operating system security9.69.623
Being able to understand the security issues of Linux and Windows systems (core part) Applying these issues to real cases