OPERATING SYSTEMS SECURITY

Course Description

This course covers both the fundamentals and advanced topics in operating system (OS) security. Access control mechanisms (e.g., SACL/DACL), memory protections, and interprocess communications mechanisms will be studied. Students will learn the current state-of-the-art OS-level mechanisms and policies designed to help protect systems against sophisticated attacks. In addition, advanced persistent threats, including rootkits and malware, as well as various protection mechanisms designed to thwart these types of malicious activities, will be studied. Advanced kernel debugging techniques will be applied to understand the underlying protection mechanisms and analyze the malicious software. Students will learn both hardware and software mechanisms designed to protect the OS (e.g., NX/ASLR/SMEP/SMAP).

OPERATING SYSTEMS SECURITY

Evaluation Tools (Active Term)

No evaluation items have been defined.

Course outcomes

No course outcomes have been defined yet.

Course Syllabus

Reference Books & Course Materials

1. 01 Operating System Security by Trent Jaeger, 3rd edition , 2022

Learning Outcomes

1. L01 Describe the fundamental principles and components of operating system security, including the role of the kernel, user accounts, and privilege levels. SOLO 3
2. L02 Configure and evaluate Unix/Linux security features such as file permissions, user management, access controls, and SELinux/AppArmor frameworks. SOLO 5
3. L03 Apply authentication and access control mechanisms, including password policies, Role-Based Access Control (RBAC), and Pluggable Authentication Modules (PAM). SOLO 4
4. L04 Assess the security implications of file systems and implement methods for securing data, including encryption, permissions, and file integrity monitoring. SOLO 4.5
5. L05 Identify and analyze common operating system threats and vulnerabilities, including privilege escalation, buffer overflows, and race conditions SOLO 3
6. L06 Demonstrate the use of host-based firewalls, such as iptables on Linux and Windows Firewall, to control and monitor network traffic. SOLO 4
7. L07 Design and evaluate homework-based security solutions with technical justification and peer collaboration. SOLO 5
8. L08 Implement secure shell (SSH) practices for remote access, key-based authentication, and tunneling to protect system communications. SOLO 4
9. L09 Create and develop operating system-level scripts that automate security tasks, audit logs, or user controls using Bash or PowerShell. SOLO 5
10. L10 Demonstrate applied knowledge of OS security through exam-based assessments and a final project presentation with documentation and practical demonstration SOLO 4

Program Outcomes

1. P01 Create a user interface in a contemporary object-oriented language to allow users to access business data
2. P02 Identify and analyze user needs and take them into account in the selection, creation, integration, evaluation and administration of computing-based systems
3. P03 Analyze common business functions and identify, design, and develop appropriate information technology solutions
4. P04 Design and develop software solutions for contemporary business environments by employing appropriate problem-solving strategies
5. P05 Configure and administer database server to support contemporary business environments.
6. P06 Administer or mange a relational database for a small to medium size company
7. P07 Be able to effectively integrate IT-based solutions into the user environment
8. P08 Understand professional, ethical, legal, security and social issues and responsibilities
9. P09 Be able to apply effective communication skills consistent with the professional environment
10. P10 Be able to apply effective collaboration skills in teamwork consistent with the professional environment

Po-Lo Matrix