Sécurité des systèmes d'exploitationArchitecture et Sécurité des systèmes (STI)
Operating System Security
Teaching unit Systems Architecture and Security · S09T_ A2S2 | EC Code S09O_4AS2-2
8ECTS (EU)
1Coefficient
21:20Hours
Séquencement
Learning objectives
- Understanding Security Mechanisms on Linux and Windows OS
- Being able to create a mechanism that bypasses kernel security mechanisms
- Establish native system protections and understand the limits of these protections
Prerequisites
| Module | Teaching unit | Semester |
|---|---|---|
| C Programming | Programming Principles | S5 |
| Windows System Administration | Network and System Administration | S6 |
| Linux System Administration | Network and System Administration | S6 |
Program
- Presentation of Windows system architecture (7 and 10)
- File System
- The register
- Process management
- Users
- Handling on various aspects of security administration of Windows systems.
- Development of a kernel mechanism (in several steps) modifying the behavior of Windows system
- Implementation of a detection tool (userland)
- Presentation of security mechanisms on Linux OS
- Protection of start-up
- Authentication
- Focus on SELinux
- Implementation of a SELinux security policy by hand
- Development of a kernel mechanism equivalent to what was done under Windows
Assessment
- Taking notes of the course (25%)
- Project output (75%)
References
- Windows Internals
- Rootkits : Subverting the Windows Kernel
- SELinux Cookbook
Skills
4| Ref. | Verb | Description | Level |
|---|---|---|---|
| C1_2 | identify | System mechanisms for carrying out specific actions | 2 |
| C1_4 | implement | Development of a kernel flow control mechanism | 2 |
| C2_2 | implement | Implementing a SELinux policy | 2 |
| C2_3 | show | Understanding Windows System Mechanisms | 1 |
SecNumEdu Skills
| Skill | Lecture hours | Practical hours | Entry level | Exit level |
|---|---|---|---|---|
| Operating system security | 9.6 | 9.6 | 2 | 3 |
| Being able to understand the security issues of Linux and Windows systems (core part) Applying these issues to real cases | ||||