Information Systems Security - 5PMISSI1

Goal(s)

*Being able to understand the threats and vulnerabilities and manage a security policy
**Operating Systems
**networks infrastructures
**Applications and software engineering
**Protocols and security property
**Business Processes
*What actions to avoid / limit
**Guide to good practice and usage
**Security Policy for information systems / Audit
**Methodology

Content(s)

The module is largely based on the assignments to be made, consisting of fault analysis, the responses needed to limit the impacts (anticipation and reaction), and propose experiments to implement them.

The topics covered in the framed sessions are :

*Introduction to the course, legal warning, assignments presentation.
*Lab : Docker and vagrant, and setting up a security challenge
*Good and bad use of crypto
*Authentication methods
**Certificates PKI, Kerberos, oauth2, case, SSO
**PKI Certificate Lab
*Local vulnerability and good practices
**identification (3 factors), solutions. Identity theft
**media confidentiality - encryption / access
**Access rights and best practices
**Exploits and answers
**Hardware flaw, illustration via meltdown and spectrum (if not otherwise processed)
**Buffer overflow
*Network failures and good practices
**Snort Lab
*WEB security
**WEB security lab
*Protocol verification
**Protocol verification lab

Having taken the following courses (or equivalent) is recommended:

*Operating System Design Project - Foundations
*Operating system and concurrent programming
*Security of systems and networks