CE 304 | Course Introduction and Application Information - Department of Software Engineering

Course Name

Operating Systems Security

Code	Semester	Theory (hour/week)	Application/Lab (hour/week)	Local Credits	ECTS
CE 304	Fall/Spring	2	2	3	5

Prerequisites

	CE 303 To succeed (To get a grade of at least DD)
or	CE 323 To succeed (To get a grade of at least DD)

Course Language

English

Course Type

Elective

Course Level

First Cycle

Mode of Delivery

-

Teaching Methods and Techniques of the Course

Application: Experiment / Laboratory / Workshop
Lecture / Presentation

National Occupation Classification

-

Course Coordinator

Prof. Dr. Turhan TUNALI

Course Lecturer(s)

-

Assistant(s)

-

Course Objectives

The objective of this course is to teach the students security related details of most widely used operating systems, threat analysis, and countermeasures agaist the threats.

Learning Outcomes

#	Content	PC Sub	* Contribution Level
#	Content	PC Sub	1	2	3	4	5
1	classify security issues of operating systems and their critical dependence factors,
2	specify methods needed to analyze and discover threats against operating systems,
3	identify techniques and tools needed to implement countermeasures against threats,
4	apply different protection mechanisms,
5	analyze security of a system.

Course Description

A study of technical security policies, models, and mechanisms for confidentiality, integrity, and availability with respect to operating systems from an engineering point of view.

Course Category	Core Courses
	Major Area Courses
	Supportive Courses
	Media and Management Skills Courses
	Transferable Skill Courses

Week	Subjects	Related Preparation	Learning Outcome
1	Introduction, basic terms & concepts in information security & related legal issues	Preliminary study 1
2	Basics of OS Security; concepts, general & common problems, threats, countermeasures	Preliminary study 2
3	Access controls & methodologies, IAAA in OS & relevant technologies & applications in today’s world	Preliminary study 3
4	Centralized / decentralized IAAA solutions, different IAAA architectures in secure OS	Preliminary study 4
5	Audit & monitoring in OS	Preliminary study 5
6	Intro to cryptography, protection of assets, data, systems in OS with today’s best practices	Preliminary study 6
7	Secure system management; models, solutions, various technologies	Preliminary study 7
8	Midterm
9	Opensource architecture & approach and its relation with information security & OS security	Preliminary study 8
10	IAAA differences of Linux vs. Windows architectures	Part I Guide to Operating Systems Security, Michael Palmer
11	IAAA differences of Linux vs. Windows architectures	Part II Guide to Operating Systems Security, Michael Palmer
12	Network related issues in OS Security	Part I Guide to Operating Systems Security, Michael Palmer
13	Network related issues in OS Security (including cryptographic basics)	Part II Guide to Operating Systems Security, Michael Palmer
14	Related vulnerabilities, threats & countermeasures (DOS attacks, malicious codes, XSS, rootkits, JavaScript, SQL, Ajax, .Net, Apache, IIS, etc)	Part I Guide to Operating Systems Security, Michael Palmer
15	Semester Review
16	Final Exam

Course Notes/Textbooks

Suggested Readings/Materials

Maximum Linux Security (2nd Edition), John Ray, Sams, 2 Pap/Cdr edition, 2001, ISBN10: 0672321343, ISBN13: 9780672321344

Hacking Exposed Windows Server 2003, Joel Scambray & Stuart McClure, McGrawHill Osborne Media, 2006, ISBN10: 0072230614, ISBN13: 9780072230611

CISSP Textbook, Vallabhaneni, S.Rao, SRV Pro Publications, 2002, ASIN: B0006S7QN0 ISO27001:IEC, British Standards Institution, 2005

Hacking Exposed: Network Security Secrets & Solutions, Stuart McClure, et al, McGrawHill Osborne, Fourth Edition, 2003, ISBN 0072227427

Applied Cryptography: Protocols, Algorithms, and Source Code in C, Schneier, Bruce, Second Edition, 1998, ISBN 0471117099

Hacking Exposed Web Applications, Scambray, Joel, et al, Second Edition, McGrawHill Osborne, 2006, ISBN 0072262990

Semester Activities	Number	Weigthing	LO 1	LO 2	LO 3	LO 4	LO 5
Participation
Laboratory / Application	1	10
Field Work
Quizzes / Studio Critiques
Portfolio
Homework / Assignments	1	40
Presentation / Jury
Project
Seminar / Workshop
Oral Exams
Midterm	1	20
Final Exam	1	30
Total

Weighting of Semester Activities on the Final Grade	3	70
Weighting of End-of-Semester Activities on the Final Grade	1	30
Total

Semester Activities	Number	Duration (Hours)	Workload
Theoretical Course Hours (Including exam week: 16 x total hours)	16	2	32
Laboratory / Application Hours (Including exam week: '.16.' x total hours)	16	2	32
Study Hours Out of Class	14	2	28
Field Work			0
Quizzes / Studio Critiques			0
Portfolio			0
Homework / Assignments	4	5	20
Presentation / Jury			0
Project			0
Seminar / Workshop			0
Oral Exam			0
Midterms	1	18	18
Final Exam	1	20	20
		Total	150

#	PC Sub	Program Competencies/Outcomes	* Contribution Level
#	PC Sub	Program Competencies/Outcomes	1	2	3	4	5
1	Engineering Knowledge: Knowledge of mathematics, science, basic engineering, computer computation, and topics specific to related engineering disciplines; the ability to use this knowledge in solving complex engineering problems		X	-	-	-	-
	1	Mathematics	-	-	-	-	-
	2	Science	-	-	-	-	-
	3	Basic engineering	-	-	-	-	-
	4	Computer computation	-	-	-	-	-
	5	Topics specific to related engineering disciplines	-	-	-	-	-
	6	The ability to use this knowledge in solving complex engineering problems	-	-	-	-	-
2	Problem Analysis: The ability to define, formulate, and analyze complex engineering problems by using fundamental science, mathematics, and engineering knowledge, while considering the relevant UN Sustainable Development Goals (SDGs) related to the problem.		-	-	X	-	-
3	Engineering Design: The ability to design creative solutions to complex engineering problems; the ability to design complex systems, processes, devices, or products that meet present and future requirements, considering realistic constraints and conditions.		-	-	X	-	-
	1	The ability to design creative solutions to complex engineering problems	-	-	-	-	-
	2	Considering realistic constraints and conditions in designing complex systems, processes, devices, or products	-	-	-	-	-
	3	The ability to design in a way that meets current and future requirements	-	-	-	-	-
4	Use of Techniques and Tools: The ability to select and use appropriate techniques, resources, and modern engineering and information technology tools, including prediction and modeling, for the analysis and solution of complex engineering problems, while being aware of their limitations		-	-	-	X	-
5	Research and Investigation: The ability to use research methods, including literature review, designing experiments, conducting experiments, collecting data, analyzing and interpreting results, for the investigation of complex engineering problems.		-	-	-	-	-
	1	The ability to use research methods, including literature review	-	-	-	-	-
	2	Designing experiments	-	-	-	-	-
	3	Conducting experiments, collecting data, analyzing and interpreting results, for the investigation of complex engineering problems	-	-	-	-	-
6	Global Impact of Engineering Practices: Knowledge of the impacts of engineering practices on society, health and safety, the economy, sustainability, and the environment within the scope of the UN Sustainable Development Goals (SDGs); awareness of the legal consequences of engineering solutions		-	-	-	-	-
	1	Global Impact of Engineering Practices: Knowledge of the impacts of engineering practices on society, health and safety, the economy, sustainability, and the environment within the scope of the UN Sustainable Development Goals (SDGs)	-	-	-	-	-
	2	Awareness of the legal consequences of engineering solutions	-	-	-	-	-
7	Ethical Behavior: Acting in accordance with the principles of the engineering profession; knowledge of ethical responsibility; awareness of acting impartially and inclusively, without discrimination in any matter. (FENG101)		-	-	-	-	-
	1	Acting in accordance with the principles of the engineering profession; knowledge of ethical responsibility	-	-	-	-	-
	2	Awareness of acting impartially and inclusively, without discrimination in any matter.	-	-	-	-	-
8	Individual and Team Work: The ability to work effectively as an individual and as a member or leader of both intra-disciplinary and interdisciplinary teams (whether face-to-face, remote, or hybrid).		-	-	-	-	-
9	Verbal and Written Communication: Taking into account the various differences of the target audience (such as education, language, profession), particularly in technical matters.		-	-	-	-	-
	1	Verbal (ENGxxx)	-	-	-	-	-
	2	Written effective communication skills. (ENGxxx)	-	-	-	-	-
10	Project Management: Knowledge of business practices such as project management and economic feasibility analysis; awareness of entrepreneurship and innovation.		-	-	-	-	-
	1	Knowledge of business practices such as project management and economic feasibility analysis; (FENG497-FENG498)	-	-	-	-	-
	2	Awareness of entrepreneurship and innovation. (FENG101)	-	-	-	-	-
11	Lifelong Learning: The ability to learn independently and continuously, adapt to new and emerging technologies, and think critically about technological changes.		-	-	-	-	-

CE 304 | Course Introduction and Application Information

WEEKLY SUBJECTS AND RELATED PREPARATION STUDIES

EVALUATION SYSTEM

ECTS / WORKLOAD TABLE

COURSE LEARNING OUTCOMES AND PROGRAM QUALIFICATIONS RELATIONSHIP

NEWSALL NEWS

Visit of broadAngle in Izmir University of Economics

NEW GÜZELBAHÇE CAMPUS

GLOBAL CAREER

CONTRIBUTION TO SCIENCE

VALUING PEOPLE

BENEFIT TO SOCIETY