Secure software design: erinevus redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
| 15. rida: | 15. rida: | ||
* [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers] | * [http://keeks.cyber.ee/~margus/04-authentication.pdf Authenticating people and computers] | ||
* [[Media:05-strategies.pdf|Strategies for secure software development]] | * [[Media:05-strategies.pdf|Strategies for secure software development]] | ||
* [[Media:06-ivote2011.pdf|Internet voting in Estonia]] | |||
* [[Media:07-strategies2.pdf|Strategies for secure software development; developing security protocols]] | |||
== Projects == | == Projects == | ||
Redaktsioon: 7. aprill 2011, kell 01:47
MTAT.03.246 Secure software design
MTAT.03.247 Secure software design: Project work
Lectures: Fridays 16:15, J. Liivi 2 - 404
Contact: margus at cyber.ee
Lecture slides
- Introductory lecture
- Security analysis
- Human factors and security
- Authenticating people and computers
- Strategies for secure software development
- Internet voting in Estonia
- Strategies for secure software development; developing security protocols
Projects
Exam
The exam is a written exam. Use of written materials is allowed. The exam questions are based on lectures and mandatory reading material. The exam tries to measure knowledge about main principles/technologies/classes of attack and ability to apply these principles for specific examples.
Exam dates:
- TBA
Mandatory (examinable) reading
Recommended reading
- Lifestyle Hackers
- Alma Whitten, J.D. Tygar, "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0"
- Kevin Mitnick, "The Art of Deception: Controlling the Human Element of Security"
- David Maurer, "The Big Con: The Story of the Confidence Man"
- Frank Stajano, Paul Wilson, "Understanding scam victims: seven principles for systems security"
- Psychology of Intelligence Analysis, Richards J. Heuer, Jr.
- Rachna Dhamija, Doug Tygar, Marti Hearst. "Why Phishing Works"