In this MOOC, we learn RBAC and ABAC access control to facilitate the specification and management of access policies. We learn examples of how RBAC is supported by modern systems such as Docker and AWS IAM. We learn XACML 3.0 and an ABAC implementation for controling secure access to web documents and network resources with attribute certificates, and XACML architecture components. We show how to exhance the data security with GeoEncryption, Secure Enhanced Geolocking, and R2D2 concepts which deliver data to right places via right path. We show how Google Map and Web Crytpo
Этот курс входит в специализацию ''Специализация Advanced System Security Design'
от партнера
Специализация Advanced System Security DesignСистема университетов штата КолорадоОб этом курсе
Недавно просмотрено: 5,197
Сертификат, ссылками на который можно делиться с другими людьми
Получите сертификат по завершении
100% онлайн
Начните сейчас и учитесь по собственному графику.
Курс 4 из 4 в программе
Гибкие сроки
Назначьте сроки сдачи в соответствии со своим графиком.
Начальный уровень
Прибл. 15 часов на выполнение
Английский
Субтитры: Арабский, Французский, Португальский (Европа), Китайский (упрощенное письмо), Итальянский, Вьетнамский, Корейский, Немецкий, Русский, Турецкий, Английский, Испанский
Сертификат, ссылками на который можно делиться с другими людьми
Получите сертификат по завершении
100% онлайн
Начните сейчас и учитесь по собственному графику.
Курс 4 из 4 в программе
Гибкие сроки
Назначьте сроки сдачи в соответствии со своим графиком.
Начальный уровень
Прибл. 15 часов на выполнение
Английский
Субтитры: Арабский, Французский, Португальский (Европа), Китайский (упрощенное письмо), Итальянский, Вьетнамский, Корейский, Немецкий, Русский, Турецкий, Английский, Испанский
от партнера
Система университетов штата Колорадо
The University of Colorado is a recognized leader in higher education on the national and global stage. We collaborate to meet the diverse needs of our students and communities. We promote innovation, encourage discovery and support the extension of knowledge in ways unique to the state of Colorado and beyond.
Программа курса: что вы изучите
5 ч. на завершение
Enhance Security with Geolocation
In this module, we discuss the geoencryption techniques, the issues in the design and analysis of a Secure Enhanced Geolocking system for protected encrypted info with geolocking. We learn the web based implementation of an Secure Enhancing Geolocking system using Javascript with Google Map API and CryptoJS API.
5 ч. на завершение
3 видео ((всего 20 мин.)), 2 материалов для самостоятельного изучения, 5 тестов
3 видео
Lesson 4.2 Secure Enhanced Geolocking8мин
Ensure Data Delivery to Right Location2мин
2 материала для самостоятельного изучения
Read the seminal location based encryption paper by Scott Logan and Dorothy E. Denning.1ч
Read SEG master project report by Ashish Korpe1ч
4 практических упражнения
L1.1 Practice Quiz10мин
L1.2. Practice Quiz15мин
L1.3. Practice Quiz9мин
Quiz: M1 quiz30мин
3 ч. на завершение
Enhance Security with Network and Context Information
In this module, we learn the techniques for using WiFi or BLE signals to estimate the geolocation of a user. We also show the technique where the value added Software Defined Network services can be used to ensure the data are delivered through a designated path to the right location.
3 ч. на завершение
3 видео ((всего 14 мин.)), 3 материалов для самостоятельного изучения, 4 тестов
3 видео
Location Verification Using Bluetooth Low Energy Devices5мин
Right Path Right Place Data Delivery3мин
3 материала для самостоятельного изучения
Read the following papers related to Right Place Verification30мин
Read paper on using RSSI measurement of BLE devices for localization30мин
Read R2D2 paper on BLE location verification and SDN Data Path Confidence Analysis40мин
4 практических упражнения
L2.1 Practice Quiz9мин
L2.2. Practice Quiz12мин
L2.3 Practice Quiz9мин
M2 quiz30мин
4 ч. на завершение
Authentication and Role Based Access Control
In this module, we discuss the definition of the authentication, the types of authentication credentials, and the authentication process and related requirements. we learn the Role Based Access Control, short for RBAC, which is an security approach to restricting system access to authorized users and to help specify organization's security policies reflecting its organizational structure. We use Docker Universal Control Plan and AWS IAM access control as examples for illustrating how RBAC simplifies the access control specification and management.
4 ч. на завершение
4 видео ((всего 24 мин.)), 4 материалов для самостоятельного изучения, 4 тестов
4 видео
Digital Certificate Creation7мин
Role Based Access Control (RBAC)4мин
RBAC Examples: Docker UCP and AWS IAM5мин
4 материала для самостоятельного изучения
Watch OAuth presentation.1ч
Read how digital certificates are created for secure web access15мин
Reading assignments for RBAC.20мин
Read Docker and AWS RBAC support example.10мин
4 практических упражнения
L3.1 Practice Quiz30мин
L3.2 Practice Quiz30мин
L3.3 Practice Quiz30мин
M3 Quiz30мин
3 ч. на завершение
Authorization and Attribute Based Access Control
In this module, we discuss PMI Privilege Management Infrastructure for managing the authorization of privileges within a system. We use attribute certificates as an instrument to associate access rights of the resources/services in the system to the identities or roles of the intended users of the system. We compare the differences between the PKI, the public key infrastructure which is focused on identity management, with the PMI which is focused on the management of the privileges authorized for users. We discuss their difference usages for the access control of the system. We then present the XACML, which is an eXtensible Access Control Markup Language (XACML) for specifying policies. It is an attribute-based access control system (ABAC), where attributes associated with a user or action or resource are inputs into the decision of whether a given user may access a given resource in a particular way. An implementation of ABAC system using Sun’s XACML 2.0 Java reference implementation called ENFORCE is then presented as an example.
3 ч. на завершение
4 видео ((всего 23 мин.)), 3 материалов для самостоятельного изучения, 4 тестов
4 видео
eXtensible Access Control Markup Language (XACML)4мин
Attribute Based Access Control4мин
Enforce Testbed as an ABAC Example6мин
3 материала для самостоятельного изучения
Read the following paper which utilize attribute certificates for secure information sharing.1ч
Read key sections of OASIS Standard XACML version 3.020мин
Read Osama Khaleel's master thesis on Implementing an ABAC system with XACML 2.020мин
4 практических упражнения
L4.1 Practice Quiz30мин
L4.2 Practice Quiz16мин
Quiz L4.3 Practice Quiz6мин
M4 Quiz30мин
Рецензии
Лучшие отзывы о курсе ADVANCED SYSTEM SECURITY TOPICS
от партнера PP6 мая 2020 г.
Thanks Coursera for this course but i am not happy because in mt certificate my name is change so please help me to change my name
от партнера IC26 апр. 2019 г.
Quality learning materials. Enjoyed the cryptography systems introduction, especially the one based on GPS coordinates.
от партнера US27 мая 2020 г.
this is good , but i think it's gonna be better by including subtitle inside a video.
от партнера IG23 июля 2020 г.
the course is not easy but useful for comprehension
Специализация Advanced System Security Design: общие сведения
This specialization is intended for intermediate level learners with basic programming skills and basic cybersecurity knowledge. Through this course learner will learn about advanced secure software techniques such as those for cloud computing, TOR, web-based cryptography, and geo-location/context based access control. With these techniques, learners will be better prepared to implement new security and privacy preserving data security features, to perform secure system design and implementation, vulnerability analysis, and Securely Provision (SP), Operate and Maintain (OM), Oversee and Govern (OV), Protect and Defend (PR), Analyze (AN), Collect and Operate (CO), and investigate (IN) tasks.
Часто задаваемые вопросы
Когда я получу доступ к лекциям и заданиям?
Что я получу, оформив подписку на специализацию?
Is financial aid available?
Остались вопросы? Посетите Центр поддержки учащихся.
