Secure software design: erinevus redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
Resümee puudub |
Resümee puudub |
||
| 19. rida: | 19. rida: | ||
* [http://keeks.cyber.ee/~margus/lecture11-usability.pdf Human factors and security] | * [http://keeks.cyber.ee/~margus/lecture11-usability.pdf Human factors and security] | ||
* [http://keeks.cyber.ee/~margus/lecture12-xroad.pdf X-Road] | * [http://keeks.cyber.ee/~margus/lecture12-xroad.pdf X-Road] | ||
Mandatory reading: | |||
* [[http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"], starting from section 10.4 | |||
* [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf Ross Anderson, "Programming Satan's Computer"] | |||
Recommended reading: | Recommended reading: | ||
* Ross Anderson, "Security Engineering. A Guide to Building Dependable Distributed Systems" | * Ross Anderson, "Security Engineering. A Guide to Building Dependable Distributed Systems" | ||
* [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey] | * [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey] | ||
* [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf Peter Gutmann, "The Design of a Cryptographic Security Architecture"] | |||
* [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels] | |||
* [http://gaudior.net/alma/johnny.pdf Alma Whitten, J.D. Tygar, "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"] | |||
* Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security" | |||
* David Maurer, "The Big Con: The Story of the Confidence Man" | |||
* Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"] | |||
* Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"] | |||
Redaktsioon: 5. november 2009, kell 17:42
MTAT.03.246 Secure software design MTAT.03.247 Secure software design: Project work
Lectures: Wednesdays 10:00 Cyber-126.
Contact: margus at cyber.ee
Lecture slides:
- Introduction
- Multilevel security
- Multilateral security
- Estonian Health Information System
- Inference control in medicine
- Banking and bookkeeping, Home reading, starting from section 10.4
- Introduction to cryptography
- Coding Centre, Additional reading (in Estonian): description of coding centre, security analysis
- Strategies for developing secure software, Home reading
- Guidelines for developing secure software, part 2
- Human factors and security
- X-Road
Mandatory reading:
- [Chapter 10 from "Security Engineering", starting from section 10.4
- Ross Anderson, "Programming Satan's Computer"
Recommended reading:
- Ross Anderson, "Security Engineering. A Guide to Building Dependable Distributed Systems"
- Fraud. The Unmanaged Risk, 8th Global Survey
- Peter Gutmann, "The Design of a Cryptographic Security Architecture"
- RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
- Alma Whitten, J.D. Tygar, "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"
- Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
- David Maurer, "The Big Con: The Story of the Confidence Man"
- Arne Ansper, "e-Riigist andmeturbe seisukohalt"
- Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson "Scalable and Efficient PKI for Inter-Organizational Communication"