FR
EN
Cloud, Conteneurs et APISécurité des Infrastructures et des Services (STI)
Cloud, Containers, and APIs
Teaching unit Security of Infrastructures and Services · S09_4ASL_IA | EC Code S09O_ASL1-1
8ECTS (EU)
1Coefficient
21:20Hours
Séquencement
↳ Bousquet Aline
↳ Briffaut Jeremy
Learning objectives
The course allows students to understand Cloud architectures and implementation and security aspects.
Prerequisites
| Module | Teaching unit | Semester |
|---|---|---|
| Network Security | Computer Security | S7 |
| Network Administration | Computer Security | S7 |
| Introduction to Computer Networks | PO STI 1 | S3 |
| Introduction to Systems | PO STI 1 | S3 |
| Awareness of Computer Security | PO STI 2 | S4 |
Program
Courses
- Cloud
- What is the Cloud
- Public, private, hybrid - IaaS, PaaS, SaaS
- Definition and differences
- Examples of use, examples of suppliers
- Advantages and disadvantages
- Architecture
- Virtual machines (VM)
- Network
- Storage of images (block storage, object storage) - Databases
- Security
- Users, roles, policies
- Security groups
- Containers
- Definition
- Containers vs VM
- Docker
- Description
- Image Creation
- Docker images layers
- Container orchestration
- Kubernetes
- Architecture - Security
- Cloud, containers, and software development - Continuous deployment
TD
- Using cloud basic services
- Creating virtual machines
- Networking, user creation, ...
- Automatic code deployment
- Automatic scaling of instances and monitoring
- Using advanced cloud services
- Creation and use of a service database
- Use of a function system as a service
- Combined use of several services
- Containers
- Implementation of container deployment infrastructure
- Use of infrastructure to understand how it works
Assessment
TD to render on Célène
References
- https://nvlpubs.nist.gov/nistpubs/Legacy/SP/
- nistsspecialpublication800-145.pdf
- https://docs.aws.amazon.com
- https://cloud.google.com
- https://docs.openstack.org
- kubernets.io
- github.com/kelseyhightower/kubernetes-the-hard-way
- https://kubernetes.io/docs/tutorials/kubernetes-basics/
Skills
6| Ref. | Verb | Description | Level |
|---|---|---|---|
| C2_2 | describe | Cloud architectures | 1 |
| C2_2 | describe | the architecture of a container management system | 1 |
| C2_2 | choose | between different deployment models | 2 |
| C2_3 | manage | services deployed on a cloud system | 3 |
| C2_3 | analyze | services deployed on a cloud system | 3 |
| C2_3 | implement | a container management system | 3 |
SecNumEdu Skills
| Skill | Lecture hours | Practical hours | Entry level | Exit level |
|---|---|---|---|---|
| Security of outsourced services | 2 | 2 | 0 | 1 |
| Analysis and deployment of architectures using Cloud AWS and GCE products. Use of cloud security systems (VPC, security group, access control and permissions) | ||||