|
|
| 1. rida: |
1. rida: |
| MTAT.03.246 Secure software design | | MTAT.03.246 Secure software design |
| | |
| MTAT.03.247 Secure software design: Project work | | MTAT.03.247 Secure software design: Project work |
|
| |
|
| Lectures: Wednesdays 10:00 Cyber-126. | | Lectures: Fridays 16:15, J. Liivi 2 - 404 |
|
| |
|
| Contact: margus at cyber.ee | | Contact: margus at cyber.ee |
|
| |
|
| == Lecture slides == | | == Lecture slides == |
| * [[media:Lecture1.pdf|Introduction]]
| | |
| * [[media:Lecture2-multilevel.pdf|Multilevel security]]
| | TBD |
| * [[media:Lecture3-multilateral.pdf|Multilateral security]]
| | |
| * [[media:Lecture4-digilugu.pdf|Estonian Health Information System]]
| |
| * [[media:Lecture5-statistics.pdf|Inference control in medicine]]
| |
| * [[media:Lecture6-banking.pdf|Banking and bookkeeping]], [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Home reading], starting from section 10.4
| |
| * [[media:Lecture7-crypto.pdf|Introduction to cryptography]]
| |
| * [[media:Lecture8-codingcentre.pdf|Coding Centre]], Additional reading (in Estonian): [http://www.sm.ee/fileadmin/meedia/Dokumendid/Sotsiaalvaldkond/STAR/Riigihankke_dokumendid/IKK_arhitektuur_22122005.pdf description of coding centre], [http://research.cyber.ee/~jan/publ/delikaatsedregistrid.pdf security analysis]
| |
| * [[media:Lecture9-strategies.pdf|Strategies for developing secure software]], [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf Home reading]
| |
| * [http://keeks.cyber.ee/~margus/lecture10-strategies2.pdf Guidelines for developing secure software, part 2]
| |
| * [http://keeks.cyber.ee/~margus/lecture11-usability.pdf Human factors and security], [http://www.csoonline.com/article/506309/Lifestyle_Hackers Interesting reading]
| |
| * [http://keeks.cyber.ee/~margus/lecture12-xroad.pdf X-Road], [http://www.acsac.org/2003/papers/36.pdf Additional reading]
| |
| * [http://keeks.cyber.ee/~margus/lecture13-games.pdf Security of online games]
| |
| * [http://keeks.cyber.ee/~margus/lecture14-pki.pdf PKI and digital signatures, part 1]
| |
| * [http://keeks.cyber.ee/~margus/lecture15-pki2.pdf PKI and digital signatures, part 2]
| |
| * [http://keeks.cyber.ee/~margus/lecture16-economy.pdf Economics of secure software]
| |
| * [http://keeks.cyber.ee/~margus/lecture17-process.pdf Development process for secure software]
| |
|
| |
|
| == Projects == | | == Projects == |
| 38. rida: |
25. rida: |
|
| |
|
| Exam dates: | | Exam dates: |
| * January 12th, 10:00 B-101 | | * TBA |
| * January 19th, 10:00 B-101
| |
| | |
| There is no need to register for exams. Just come to the exam.
| |
|
| |
|
| == Mandatory (examinable) reading == | | == Mandatory (examinable) reading == |
|
| |
|
| The exam may contain questions from these papers.
| | TBA |
| * [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf Chapter 10 from "Security Engineering"], starting from section 10.4
| |
| * [http://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf Ross Anderson, "Programming Satan's Computer"]
| |
| * [http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf Ken Thompson, "Reflections on Trusting Trust"]
| |
| * [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix02.pdf Peter Gutmann, "Lessons Learned in Implementing and Deploying Crypto Software"]
| |
| * [http://www.cl.cam.ac.uk/~rja14/Papers/eternity.pdf Ross Anderson, "The Eternity Service"] -- a good example of security analysis of a system
| |
| * [http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c11.pdf Chapter 11 from "Security Engineering"]
| |
|
| |
|
| == Recommended reading == | | == Recommended reading == |
| * Ross Anderson, "Security Engineering. A Guide to Building Dependable Distributed Systems"
| | |
| * [http://www.your-call.com.au/information/documents/EY8thGlobalSurvey2003.pdf Fraud. The Unmanaged Risk, 8th Global Survey]
| | TBD |
| * [http://www.cs.auckland.ac.nz/~pgut001/pubs/usenix99.pdf Peter Gutmann, "The Design of a Cryptographic Security Architecture"]
| |
| * [http://www.ietf.org/rfc/rfc2119.txt RFC 2119: Key words for use in RFCs to Indicate Requirement Levels]
| |
| * [http://gaudior.net/alma/johnny.pdf Alma Whitten, J.D. Tygar, "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"]
| |
| * Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
| |
| * David Maurer, "The Big Con: The Story of the Confidence Man"
| |
| * Jim Routh, Gary McGraw, [http://www.csoonline.com/article/506309/Lifestyle_Hackers "Lifestyle Hackers"]
| |
| * Arne Ansper, [http://www.cyber.ee/cms-et/firmainfo/infomaterjalid/failid-1/arne-msc.pdf "e-Riigist andmeturbe seisukohalt"]
| |
| * Arne Ansper, Ahto Buldas, Margus Freudenthal, Jan Willemson [http://www.acsac.org/2003/papers/36.pdf "Scalable and Efficient PKI for Inter-Organizational Communication"]
| |
| * Peter Gutmann, [http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt "X.509 Style Guide"]
| |
| * Ahto Buldas, Märt Saarepera. [http://middleware.internet2.edu/pki03/presentations/08.pdf "Electronic Signature System with Small Number of Private Keys"]
| |
| * Cormac Herley, [http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users"]
| |
| * Frank Stajano, Paul Wilson, [http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-754.html "Understanding scam victims: seven principles for systems security"]
| |
MTAT.03.246 Secure software design
MTAT.03.247 Secure software design: Project work
Lectures: Fridays 16:15, J. Liivi 2 - 404
Contact: margus at cyber.ee
Lecture slides
TBD
Projects
Project presentations will be on 16.12.2009. Each project has 15 minutes (10 minutes of presentation + 5 min questions). The presentation should give overview of the system, discuss possible attacks and countermeasures (basically an overview of the project report).
Project presentation must be done in English. Project report can be written in English or Estonian.
Due date for Project reports is 17.01.2010.
Exam
The exam is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.
Exam dates:
Mandatory (examinable) reading
TBA
Recommended reading
TBD