Computer Systems Security

Code:

M.EIC025

Acronym:

SSI

Keywords
Classification	Keyword
OFICIAL	Cybersecurity

Instance: 2024/2025 - 2S

Active?	Yes
Web Page:	https://moodle2425.up.pt/course/view.php?id=4885
Responsible unit:	Department of Informatics Engineering
Course/CS Responsible:	Master in Informatics and Computing Engineering

Cycles of Study/Courses

Acronym	No. of Students	Study Plan	Curricular Years	Credits UCN	Credits ECTS	Contact hours	Total Time
M.EIC	19	Syllabus	1	-	6	39	162

Teaching language

English

Objectives

This Course aims the study of IT security systems, in order to provide students with a basic understanding of the concepts and of the threats and defenses to the misuse and operational destruction of these systems.

Learning outcomes and competences

At the end of this course unit, the students that have passed should be able to: - describe the security fundamentals of computer systems; - specify a security policy for a typical computer system and select the adequate mechanisms for enforcing the policy and for verifying its compliance; - analise a typical communication channel and identify its associated main protection levels or the ones that should be in use; - study, program and operate some security devices and tecniques in real situations.

Working method

Presencial

Pre-requirements (prior knowledge) and co-requirements (common knowledge)

Basic knowledge of programming, networks, operating systems and distributed systems.

Program

1. Fundamental concepts.
2. Secure coding
3. Cryptography
4. OS security, policies and trusted computing
5. Distributed systems security
6. Web security

Practical classes: Practical aspects in systems, in networks and in programming.

Mandatory literature

William Stallings, Lawrie Brown; Computer Security: Principles and Practice, 4th Edition, Pearson, 2018. ISBN: 9780134794105
Seacord Robert C.; Secure coding in C and C++. ISBN: 0-321-33572-4

Complementary Bibliography

Bishop Matt; Introduction to Computer Security. ISBN: 0-321-24744-2
Fred Long, Dhruv Mohindra, et al; The CERT Oracle Secure Coding Standard for Java, Pearson, 2012. ISBN: 978-0-321-80395-5
Justin Richer, Antonio Sanso; OAuth 2.0 in Action, Manning, 2017. ISBN: 9781617293276

Teaching methods and learning activities

The classes will consist of the exposition and discussion of contents, followed by the presentation of examples and complemented with periods of search and study of techniques and case studies published in the literature and in the Web.
Practical classes for solving problems with coding, relative to concrete scenarios.
Possible presentation, by students, of specific and illustrative aspects of the laboratory work carried out.

keywords

Technological sciences > Technology > Information technology > Security technology

Evaluation Type

Distributed evaluation with final exam

Assessment Components

Designation	Weight (%)
Exame	50,00
Trabalho laboratorial	20,00
Trabalho prático ou de projeto	30,00
Total:	100,00

Amount of time allocated to each course unit

Designation	Time (hours)
Estudo autónomo	60,00
Frequência das aulas	39,00
Trabalho laboratorial	25,00
Elaboração de projeto	38,00
Total:	162,00

Eligibility for exams

As specified in the current FEUP's General Evaluation Rules.

Calculation formula of final grade

Final Grade = 0,5 F + 0,5 E
                = 0,2 L + 0,3 P + 0,5 E
where
    F - distributed evaluation's grade
    L - laboratory grade (5/6 reports)
    P - mini project's grade
    E - written exam's grade

Examinations or Special Assignments

Throughout the course, students, working in groups, will carry out a set of laboratory work, including a mini-project. Members of the same group may have a different classification in this item, due to a clear difference in contribution in the global effort.

Special assessment (TE, DA, ...)

All assessment components apply to all students, regardless of their enrollment regime, as they do not require regular attendance of classes.
The exams of special periods contemplated by the law will consist of a written test identical to the exam of the normal period and the presentation of a practical laboratory work similar to the mini-project developed during the semestre.

Classification improvement

The improvement of classification per exam focuses on the written test component, which will be identical to the exam of the normal season.
The practical component (laboratory and mini-project) of the classification may be improved in the next edition of the course.

Observations

Pre-requirements: basic knowledge of programming, operating systems, networks and distributed systems.
All examinations are individual, written, with no personal documentation allowed for consultation, except that provided by the teacher.
The student who shows dishonest academic behavior will be reported to the Director.