Security Theory Module D2 Information Weeks 1 - 12

Security Theory Module D2 Information Weeks 1 - 12

Module Notes

Week 1

Lecture notes: Security System Theory module introduction notes and bullet points

.

Tutorial notes: You have completed the tutorial for this week when you are sure you know how to start the Linux VMs, backup and restore any changes you make in your VM, edit text files using a GUI editor and can transfer files into and out of the VM environment from elsewhere, using a network connection or removeable media.

Week 2

Lecture notes: Password based security systems

Tutorial notes: Please read the Unix filename path notesand then complete the UNIX simple commands tutorial and make sure that you can use command lines to display, rename, create, copy, move and edit text files. System administrators and other hackers need to know how to edit and manipulate files without requiring a GUI. To continue, obtain demo.tgz from the downloads area. Your instructor will show you how to extract the files from the demo.tgz archive, but you may need a floppy disk to get files into and out of your virtual machine if the VM networking to the internet isn't working. Further tutorial exercises suitable for this week's work are also present in the unix2ex.txt file extracted from the archive.

Week 3

Lecture notes: Unix pathnames, IO plumbing and filters.

Tutorial notes: For this week and for subsequent tutorials you will need to start making some of your own notes in a logbook. Make sure that you capture the command history of your successful commands in a file, editing out the unsuccessful ones afterwards. This file can become part of your logbook when you have tranferred it out of the VM and printed it. Continue working through the Unix pipes and filters tutorial notes.

Week 4

Lecture notes: Backups and Disaster Recovery Procedures.

For the Tutorial content experiment by working through the Job Control and Environment Tutorial notes.

Week 5

Lecture notes: Linux/Unix scripting and rapid application development.

Please complete as much as you can of the Unix scripting tutorial.

Week 6

Lecture notes: Linux/Unix ownership, permissions and setuid.

Please complete the Unix security commands tutorial.

Week 7

Lecture notes: Malware, Viruses, Worms, Trojans and Defences.

Use the tutorial time to catch up with previous uncompleted exercises. A demonstration of a password guessing programming will be given if time permits.

Week 8

Lecture notes: Entropy, random numbers and password generation.

A mock formative test will be made available during the tutorial.

Week 9

Reading week. Use this week to catch up with any tutorial exercises you have missed and make sure you have discovered how to answer all the mock test questions. Knowing how to answer these from first principles is much better than getting an answer from someone else which you did not work out for yourself.

Week 10

Lecture notes: Kerberos and centralised network password management.

Answers to the mock test questions will be demonstrated during the tutorial.

Week 11

Details for the in-class test have been announced by email to all enrolled students. The assignment 1 page has also been updated to give session times and locations for each student for the test on Monday 8th Dec 2008.

Week 12

Lecture notes: ACLs, capabilities and SELinux.

Assignment 2 has been set and project titles are available. This week's tutorial will provide individual help for students in connection with project selection.