Bilgisayar Mühendisliği

CE 304 | Ders Tanıtım Bilgileri

Dersin Adı

Operating Systems Security

Kodu	Yarıyıl	Teori (saat/hafta)	Uygulama/Lab (saat/hafta)	Yerel Kredi	AKTS
CE 304	FALL	2	2	3	5

Ön-Koşul(lar)	CE 303 To Succeed (To get a grade of at least DD) or CE 323 To Succeed (To get a grade of at least DD)
Dersin Dili	English
Dersin Türü	ELECTIVE_COURSE
Dersin Düzeyi	Lisans
Dersin Veriliş Şekli	Face-To-Face/Online
Dersin Öğretim Yöntem ve Teknikleri	Application: Experiment / Laboratory / Workshop Lecture / Presentation
Ulusal Meslek Sınıflandırma Kodu	-
Dersin Koordinatörü	Prof. Dr. Turhan Tunalı
Öğretim Eleman(lar)ı	-
Yardımcı(ları)	-

Dersin Amacı

The objective of this course is to teach the students security related details of most widely used operating systems, threat analysis, and countermeasures against the threats.

Öğrenme Çıktıları

Bu dersi başarıyla tamamlayabilen öğrenciler;

Ad	Açıklama	PC Alt	* Katkı Düzeyi
Ad	Açıklama	PC Alt	1	2	3	4	5
LO1	classify the security-critical sections of operating systems,						X
LO2	specify methods needed to analyze and discover threats against operating systems,					X
LO3	identify techniques and tools needed to implement countermeasures against threats,				X
LO4	apply different protection mechanisms,				X
LO5	analyze the security of a system.					X

Ders Tanımı

A study of technical security policies, models, and mechanisms for confidentiality, integrity, and availability with respect to operating systems from an engineering point of view.

Dersin İlişkili Olduğu Sürdürülebilir Kalkınma Amaçları

Dersin Kategorisi	Temel Ders
	Uzmanlık/Alan Dersleri	X
	Destek Dersleri
	İletişim ve Yönetim Becerileri Dersleri
	Aktarılabilir Beceri Dersleri

HAFTALIK KONULAR VE İLGİLİ ÖN HAZIRLIK ÇALIŞMALARI

Hafta	Konular	Ön Hazırlık	Öğrenme Çıktısı
1	Introduction, basic terms & concepts in information security & related legal issues	Preliminary work 1	LO1
2	Basics of OS Security; concepts, general & common problems, threats, countermeasures	Preliminary work 2	LO2
3	Access controls & methodologies, IAAA in OS & relevant technologies & applications in today’s world	Preliminary work 3	LO3
4	Centralized / decentralized IAAA solutions, different IAAA architectures in secure OS	Preliminary work 4	LO4
5	Audit & monitoring in OS	Preliminary work 5	LO1
6	Intro to cryptography, protection of assets, data, systems in OS with today’s best practices	Preliminary work 6	LO3
7	Secure system management; models, solutions, various technologies	Preliminary work 7	LO5
8	Midterm Exam		-
9	Open source architecture & approach and its relation with information security & OS security	Preliminary work 8	LO2
10	IAAA differences of Linux vs. Windows architectures	Part I Guide to Operating Systems Security, Michael Palmer	LO4
11	IAAA differences of Linux vs. Windows architectures	Part II Guide to Operating Systems Security, Michael Palmer	LO3
12	Network related issues in OS Security	Part I Guide to Operating Systems Security, Michael Palmer	LO5
13	Network related issues in OS Security (including cryptographic basics)	Part II Guide to Operating Systems Security, Michael Palmer	LO2
14	Related vulnerabilities, threats & countermeasures (DOS attacks, malicious codes, XSS, rootkits, JavaScript, SQL, Ajax, .Net, Apache, IIS, etc)	Part I Guide to Operating Systems Security, Michael Palmer	LO3
15	Review of the Semester		-
16	Final Exam		-

Ders Kitabı

Guide to Operating Systems Security
Michael Palmer
Publisher: Thomson
2003 (2004 2nd ed)
ISBN 13: 9780619160401©2004
ISBN 10: 0619160403

Önerilen Okumalar/Materyaller

Maximum Linux Security (2nd Edition)
John Ray
Sams
2 Pap/Cdr edition
2001
ISBN10: 0672321343
ISBN13: 9780672321344
Hacking Exposed Windows Server 2003
Joel Scambray & Stuart McClure
McGrawHill Osborne Media
2006
ISBN10: 0072230614
ISBN13: 9780072230611
CISSP Textbook
Vallabhaneni
S.Rao
SRV Pro Publications
2002
ASIN: B0006S7QN0 ISO27001:IEC
British Standards Institution
2005
Hacking Exposed: Network Security Secrets & Solutions
Stuart McClure
et al
McGrawHill Osborne
Fourth Edition
2003
ISBN 0072227427
Applied Cryptography: Protocols
Algorithms
and Source Code in C
Schneier
Bruce
Second Edition
1998
ISBN 0471117099
Hacking Exposed Web Applications
Scambray
Joel
et al
Second Edition
McGrawHill Osborne
2006
ISBN 0072262990

DEĞERLENDİRME ÖLÇÜTLERİ

Yarıyıl Aktiviteleri	Sayı	Katkı Payı %	LO1	LO2	LO3	LO4	LO5
Laboratuvar / Uygulama	1	10		X	X	X	X
Ödev	1	40		X		X	X
Ara Sınav	1	20	X	X	X	X
Final Sınavı	1	30	X	X	X	X	X
Toplam	4	100

AKTS / İŞ YÜKÜ TABLOSU

Yarıyıl Aktiviteleri	Sayı	Süre (Saat)	İş Yükü
Katılım	-	-	-
Teorik Ders Saati	16	2	32
Laboratuvar / Uygulama Ders Saati	16	2	32
Sınıf Dışı Ders Çalışması	14	2	28
Arazi Çalışması	-	-	-
Küçük Sınav / Stüdyo Kritiği	-	-	-
Portfolyo	-	-	-
Ödev	4	5	20
Sunum / Jüri Önünde Sunum	-	-	-
Proje	-	-	-
Seminer/Çalıştay	-	-	-
Sözlü Sınav	-	-	-
Ara Sınavlar	1	18	18
Final Sınavı	1	20	20
		Toplam	150