OPERATING SYSTEMS SECURITY

Course Description

This course covers both the fundamentals and advanced topics in operating system (OS) security. Access control mechanisms (e.g., SACL/DACL), memory protections, and interprocess communications mechanisms will be studied. Students will learn the current state-of-the-art OS-level mechanisms and policies designed to help protect systems against sophisticated attacks. In addition, advanced persistent threats, including rootkits and malware, as well as various protection mechanisms designed to thwart these types of malicious activities, will be studied. Advanced kernel debugging techniques will be applied to understand the underlying protection mechanisms and analyze the malicious software. Students will learn both hardware and software mechanisms designed to protect the OS (e.g., NX/ASLR/SMEP/SMAP).

OPERATING SYSTEMS SECURITY

Evaluation Tools (Active Term)

No evaluation items have been defined.

Course outcomes

No course outcomes have been defined yet.

Course Syllabus

Reference Books & Course Materials

1. 01 Operating System Security by Trent Jaeger, 3rd edition , 2022

Learning Outcomes

1. L01 Describe the fundamental principles and components of operating system security, including the role of the kernel, user accounts, and privilege levels. SOLO 3
2. L02 Configure and evaluate Unix/Linux security features such as file permissions, user management, access controls, and SELinux/AppArmor frameworks. SOLO 5
3. L03 Apply authentication and access control mechanisms, including password policies, Role-Based Access Control (RBAC), and Pluggable Authentication Modules (PAM). SOLO 4
4. L04 Assess the security implications of file systems and implement methods for securing data, including encryption, permissions, and file integrity monitoring. SOLO 4.5
5. L05 Identify and analyze common operating system threats and vulnerabilities, including privilege escalation, buffer overflows, and race conditions SOLO 3
6. L06 Demonstrate the use of host-based firewalls, such as iptables on Linux and Windows Firewall, to control and monitor network traffic. SOLO 4
7. L07 Design and evaluate homework-based security solutions with technical justification and peer collaboration. SOLO 5
8. L08 Implement secure shell (SSH) practices for remote access, key-based authentication, and tunneling to protect system communications. SOLO 4
9. L09 Create and develop operating system-level scripts that automate security tasks, audit logs, or user controls using Bash or PowerShell. SOLO 5
10. L10 Demonstrate applied knowledge of OS security through exam-based assessments and a final project presentation with documentation and practical demonstration SOLO 4

Program Outcomes

1. P01 Demonstrate comprehensive knowledge of key concepts across the breadth of effective application and use of MIS and innovative information technologies in organizations.
2. P02 Demonstrate autonomy and responsibility in managing MIS projects and improving organizational processes
3. P03 Demonstrate comprehensive understanding of appropriate enterprise frameworks, theories from the MIS to research and assess contemporary issues in the field and related allied fields and disciplines
4. P04 Apply MIS knowledge to facilitate the acquisition, development, deployment, and management of information systems
5. P05 Apply MIS knowledge to the exploitation of opportunities created by information technology innovations ensuring the alignment between MIS strategy and organizational strategy
6. P06 Demonstrate ethical reasoning in relation to crucial MIS issues such as privacy, information security, and ethical use of information
7. P07 Apply appropriate technologies and techniques to the collection and analysis of organizational and environmental data to facilitate evidence-based decision-making
8. P08 Analyse organizational data to accurately identify organizational problems and propose solutions using MIS
9. P09 Apply effective communication skills consistent with the professional environment
10. P10 Apply effective collaboration skills consistent with the professional environment

Po-Lo Matrix