| Course Unit: | Computer Systems Security | ||||||
| Code: | EIC0072 | ||||||
| Keyword: | Sistemas Operativos e Redes | ||||||
| Programmes: |
|
||||||
| Academic Year: | 2011/2012 | ||||||
| Semester: | 1S | ||||||
| Credits: | 6 | ||||||
| ECTS: | 6 | ||||||
| Unit: | Department of Informatics Engineering | ||||||
| Hours/Weeks: | TP: 3 | ||||||
| Teachers: |
José Manuel Magalhães Cruz - Professor Auxiliar |
||||||
This is a Draft, waits for Course Director validation. |
|||||||
Suitable for English-speaking students
At the end of this course unit, the students that have passed should be able to:
- describe the security fundamentals of computer systems;
- specify a security policy for a typical computer system and select the adequate mechanisms for enforcing the policy and for verifying its compliance;
- analise a typical communication channel and identify its associated main protection levels or the ones that should be in use;
- study, program and operate some security devices and tecniques in real situations.
Fundamentals. Security Policies.
Cryptography: theory and applications.
Security mechanisms and their use on the implementation of security policies.
Security analyses and monitoring of a system.
Practical aspects in networks, systems and in programming.
| Matt Bishop;Introduction to Computer Security, Addison Wesley Professional, 2004. ISBN: 0-321-24744-2 |
| Charlie Kaufman, Radia Perlman, Mike Speciner;Network Security: Private Communication in a Public World, Prentice Hall, 2002. ISBN: 0-13-046019-2 |
| Stallings & Brown;Computer Security: Principles and Practice, Prentice Hall, 2007. ISBN: 978-0-13-600424-0 |
| Pfleeger & Pfleeger;Security in Computing, 4/E, Prentice Hall, 2006. ISBN: 978-0-13-239077-4 |
| Gollmann;Computer Security, 2/E, John Wiley, 2005. ISBN: 978-0-470-86293-3 |
The classes will consist of the exposition and discussion of contents, followed by the presentation of examples and complemented with periods of search and study of techniques and case studies published in the literature and in the Web.
Presentation, by the students, of specific topics illustrating the security issues studied and materialised on the proposed mini projects.
Distributed evaluation with final exam
| Description | Type | Time (Hours) | Date of conclusion |
|---|---|---|---|
| Attendance (estimated) | Lectures | 42 | |
| Study during semester | Study | 60 | |
| Final practical assignement | Work | 30 | |
| Mini-test | Test/Examination | ,5 | |
| Study of preparation for exam | Study | 30 | |
| Final examination | Test/Examination | 2 | |
| Total: | 164,5 |
As specified in the current FEUP's General Evaluation Rules.
0,5 F + 0,5 E = 0,4 P + 0,1 T + 0,5 E
where:
F - distributed evaluation's grade
E - written exam's grade
P - mini project's grade
T - mini test's grade
All through the course unit, the students are encouraged to make homework exercises, but that are not directly used for grading.
Also along the course, groups of two students should perform a mini project specified in more detail in a separate document. These mini projects include: the study and planning of the assigned topic, to be presented at the end of the 1st month, the development of the theme out of classes' hours and the presentation of the final product in the final classes. The mini projects' themes and their assignment to the students will be validated by the teacher; members of the same group may have a different classification in this item, due to inequivocal differences of contribution in the global effort.
All components of evaluation apply to all students, whatever their enrollment type is, because a regular presence in the classroom is not required.
The special examinations allowed by law consist of a written test identical to the exam in the normal evaluation period and the implementation of a mini project similar to those offered in the semester. The theme and the development time will be settled and presented to the student.
The final grade is calculated by the following formula:
0,4 P + 0,6 E
where:
P - grade of mini project
E - grade of written exam
Classification improvement is possible, by choice of the student, in any of the assessment components: the component of the written test and the mini project. The written test will be identical to the exam in the normal evaluation period; a new mini project, similar to those offered in the semester, can be performed, or the mini project that the student worked on during the semester can also be improved. The theme of the new mini project and its development time (or the time of improving the previous work) will be settled and presented to the student. The final grade is calculated by the following formula:
0,4 P + 0,6 E
where:
P - grade of (new or previous) mini project
E - grade of (new or previous) written exam
Pre-requirements: basic knowledge of programming, networks, operating systems and distributed systems.
All examinations are individual, written, with no personal documentation allowed for consultation; the presentation of the mini project's specifications lasts, at the most, 15 minutes and the final presentation 30 minutes; the mini-test has a duration of 30 minutes, all written exams have a duration of 2 hours.
Important comment: the student who shows dishonest academic behavior will be reported to the Director.