Lambda - Kasutaja kaastöö [et]

Secure software design

2011-05-29T19:54:35Z

Margus: /* Exam */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]
* [[Media:13-process.pdf|Development Process for Secure Software]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

=== Due dates ===
* '''May 27th''' -- project presentation (10-15 minutes)
* '''June 20th''' -- written report

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* '''May 30th''' 10:00, J. Liivi 2, room 122
* '''June 10th''' 10:00, J. Liivi 2, room 206

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]
* K. Tsipenyuk, B. Chess, G. McGraw, [http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.106.6376&rep=rep1&type=pdf Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Secure software design

2011-05-21T19:49:54Z

Margus: /* Mandatory (examinable) reading */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]
* [[Media:13-process.pdf|Development Process for Secure Software]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

=== Due dates ===
* '''May 27th''' -- project presentation (10-15 minutes)
* '''June 20th''' -- written report

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* '''May 30th''' 10:00, AK-122
* '''June 10th''' 10:00, AK-206

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]
* K. Tsipenyuk, B. Chess, G. McGraw, [http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.106.6376&rep=rep1&type=pdf Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Secure software design

2011-05-21T19:49:46Z

Margus: /* Mandatory (examinable) reading */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]
* [[Media:13-process.pdf|Development Process for Secure Software]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

=== Due dates ===
* '''May 27th''' -- project presentation (10-15 minutes)
* '''June 20th''' -- written report

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* '''May 30th''' 10:00, AK-122
* '''June 10th''' 10:00, AK-206

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]
* K. Tsipenyuk, B. Chess, G. McGraw,[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.106.6376&rep=rep1&type=pdf Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Secure software design

2011-05-21T19:46:42Z

Margus: /* Lecture slides */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]
* [[Media:13-process.pdf|Development Process for Secure Software]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

=== Due dates ===
* '''May 27th''' -- project presentation (10-15 minutes)
* '''June 20th''' -- written report

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* '''May 30th''' 10:00, AK-122
* '''June 10th''' 10:00, AK-206

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Fail:13-process.pdf

2011-05-21T19:46:12Z

Margus: 13-process

13-process

Secure software design

2011-05-18T23:06:54Z

Margus: /* Exam */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

=== Due dates ===
* '''May 27th''' -- project presentation (10-15 minutes)
* '''June 20th''' -- written report

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* '''May 30th''' 10:00, AK-122
* '''June 10th''' 10:00, AK-206

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Secure software design

2011-05-18T23:05:20Z

Margus: /* Exam */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

=== Due dates ===
* '''May 27th''' -- project presentation (10-15 minutes)
* '''June 20th''' -- written report

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* '''May 30th''', AK-122
* '''June 10th''', AK-206

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Secure software design

2011-05-18T23:04:37Z

Margus: /* Projects */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

=== Due dates ===
* '''May 27th''' -- project presentation (10-15 minutes)
* '''June 20th''' -- written report

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* May 30th, AK-122
* June 10th, AK-206

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Secure software design

2011-05-18T23:04:11Z

Margus: /* Projects */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

'''Due dates'''
* May 27th -- project presentation (10-15 minutes)
* June 20th -- written report

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* May 30th, AK-122
* June 10th, AK-206

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Secure software design

2011-05-18T23:02:46Z

Margus: /* Exam */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* May 30th, AK-122
* June 10th, AK-206

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Secure software design

2011-05-17T00:16:55Z

Margus: /* Recommended reading */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* TBA

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
* Rick Wash, [http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf Folk Models of Home Computer Security]

Secure software design

2011-05-16T23:29:23Z

Margus: /* Recommended reading */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* TBA

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
* Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]

Secure software design

2011-05-16T23:27:57Z

Margus: /* Lecture slides */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]
* [[Media:12-economics.pdf|Economics of Software Security]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* TBA

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]

Fail:12-economics.pdf

2011-05-16T23:27:17Z

Margus: 12-economics

12-economics

Secure software design

2011-05-08T22:18:25Z

Margus: /* Mandatory (examinable) reading */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* TBA

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"]
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]

Secure software design

2011-05-08T22:17:01Z

Margus: /* Lecture slides */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]
* [[Media:11-games.pdf|Security of online games]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* TBA

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]

Fail:11-games.pdf

2011-05-08T22:16:25Z

Margus: 11-games

11-games

Secure software design

2011-05-04T22:35:48Z

Margus: /* Recommended reading */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* TBA

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]

Secure software design

2011-05-04T22:33:12Z

Margus: /* Recommended reading */

'''MTAT.03.246 Secure software design'''

'''MTAT.03.247 Secure software design: Project work'''

Lectures: Fridays 16:15, J. Liivi 2 - 404

Contact: margus at cyber.ee

== Lecture slides ==
* [[Media:01-introduction.pdf|Introductory lecture]]
** [[Media:01a-multilevel.pdf|Multilevel security]]
** [[Media:01b-multilateral.pdf|Multilateral security]]
* [[Media:02-security-analysis.pdf|Security analysis]]
* [[Media:03-human-factors.pdf|Human factors and security]]
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers]
* [[Media:05-strategies.pdf|Strategies for secure software development]]
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]]
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]]
* [[Media:08-pki1.pdf|PKI and digital signatures]]
* [[Media:09-pki2.pdf|PKI and digital signatures, part 2]]
* [[Media:10-xroad.pdf|Case study: Estonian x-road]]

== Projects ==

[[Secure Software Design: Project|Requirements for the project]]

== Exam ==

'''The exam''' is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.

Exam dates:
* TBA

== Mandatory (examinable) reading ==

* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf "Programming Satan's Computer"]
* Ken Thompson, [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf "Reflections on Trusting Trust"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf "Lessons Learned in Implementing and Deploying Crypto Software"]
* Ross Anderson, [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf "The Eternity Service"] -- a good example of security analysis of a system
* [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]

== Recommended reading ==

* [http://www.csoonline.com/article/506309/lifestyle-hackers Lifestyle Hackers]
* Alma Whitten, J.D. Tygar, [http://gaudior.net/alma/johnny.pdf "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
* David Maurer, "The Big Con: The Story of the Confidence Man"
* Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
* Richards J. Heuer, Jr., [https://www.cia.gov/library/center-for-the-study-of-intelligence/csi-publications/books-and-monographs/psychology-of-intelligence-analysis/index.html "Psychology of Intelligence Analysis"]
* Rachna Dhamija, Doug Tygar, Marti Hearst. [http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf "Why Phishing Works"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usability.pdf "Security Usability"]
* Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf "The Design of a Cryptographic Security Architecture"]
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
* Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]

Secure software design

2011-05-04T22:30:23Z

Margus: /* Lecture slides */

Fail:10-xroad.pdf

2011-05-04T22:26:06Z

Margus: 10-xroad

10-xroad

Secure software design

2011-04-25T23:38:07Z

Margus: /* Lecture slides */

Fail:09-pki2.pdf

2011-04-25T23:37:41Z

Margus: 09-pki2

09-pki2

Secure software design

2011-04-10T15:40:40Z

Margus: /* Lecture slides */

Fail:08-pki1.pdf

2011-04-10T15:40:04Z

Margus: 08-pki1

08-pki1

Secure software design

2011-04-07T23:17:47Z

Margus: /* Recommended reading */

Secure software design

2011-04-07T23:15:36Z

Margus: /* Mandatory (examinable) reading */

Secure software design

2011-04-07T23:14:58Z

Margus: /* Recommended reading */

Secure software design

2011-04-07T23:14:34Z

Margus: /* Recommended reading */

Secure software design

2011-04-07T23:12:20Z

Margus: /* Mandatory (examinable) reading */

Secure software design

2011-04-06T23:47:29Z

Margus: /* Lecture slides */

Fail:06-ivote2011.pdf

2011-04-06T23:46:24Z

Margus: 06-ivote

06-ivote

Fail:07-strategies2.pdf

2011-04-06T23:44:41Z

Margus: 07-strategies2

07-strategies2

Secure software design

2011-03-29T11:36:43Z

Margus: /* Recommended reading */

Secure software design

2011-03-20T20:26:47Z

Margus: /* Lecture slides */

Fail:05-strategies.pdf

2011-03-20T20:26:11Z

Margus: 05-strategies

05-strategies

Secure software design

2011-03-13T16:52:43Z

Margus: /* Lecture slides */

Secure software design

2011-03-08T20:49:38Z

Margus: /* Recommended reading */

Secure software design

2011-03-08T20:48:17Z

Margus: /* Recommended reading */

Secure software design

2011-03-08T20:47:43Z

Margus: /* Recommended reading */

Secure software design

2011-03-08T20:47:35Z

Margus: /* Mandatory (examinable) reading */

Secure software design

2011-03-08T20:47:07Z

Margus: /* Recommended reading */

Secure software design

2011-03-08T20:44:43Z

Margus: /* Lecture slides */

Fail:03-human-factors.pdf

2011-03-08T20:44:00Z

Margus: 03-human-factors

03-human-factors

Secure software design

2011-02-27T14:31:13Z

Margus: /* Lecture slides */

Fail:02-security-analysis.pdf

2011-02-27T14:30:09Z

Margus: 02-security analysis

02-security analysis

Secure Software Design: Project

2011-02-20T23:41:57Z

Margus:

== Goal ==

The goal of the project work is to do security analysis of a "reasonably complex system". The analysis should be "design-level", meaning that the code level stuff (like buffer overflows) need not be covered.

== The system ==

Previously mentioned "reasonably complex" system should have different kinds of users. Preferably, the users would have conflicting interests (i.e., the "good" users should have some conflict). The system does not have to exist. It is also possible to imagine a system and analyze whether this kind of system is reasonable. You do not have to build the system -- just analyze the security. If your system is too big (for example, whole government IT), you can just analyze some part or aspect of it. If the system is too small, you must go into more details in order to have substantial analysis. I recommend erring on the side of big. :)

Examples of systems that can be analyzed:
* Electronic bus tickets
* Internet voting
* Offline cash
* Some Internet environment
** Orkut
** Facebook
** Rate.ee
* Some innovative mobile service
* ...

== Contents of the report ==

The following is proposed contents of the report.

* Description of the system
** Purpose
** Parties
** Assets
* Security policy
** What are the rules
** What are the risks
* What will we defend against?
* How?
* Some cost estimations
** Cost of attack
** Cost of defence
* Conclusion
** What should be done
** Most important security measures
** Is the whole system reasonable?

== Notes ==

You must present main contents of your analysis in the last lecture. You must send the written report by the end of exam session.

When doing risk analysis, concentrate on risks that are specific to this system -- risks that arise from motivations of users and attackers, nature of the assets in the system (for example, physical assets vs. information assets), how the business works etc. The standard buffer overflow/css/injection etc. attacks are applicable everywhere and they do not need to be discussed in depth, except when they have interesting business-specific consequences.

The project should be done in teams of 2 or 3.

If you have project idea, please discuss it with me, either in person or via E-mail. This helps to make sure that the system you analyze is suitable for the project.

Secure software design

2011-02-20T23:41:16Z

Margus: /* Projects */

Secure software design

2011-02-18T17:07:16Z

Margus:

Secure software design

2011-02-18T17:06:31Z

Margus: /* Lecture slides */