B3110 - System Security and Privacy Workshop Classes - Cesena Campus

Learning outcomes

At the end of the course, the student knows the basic principles of cybersecurity and the main security issues of computer systems and networks. They know the protocols and communication mechanisms used to ensure the secure transfer of information. They are able to critically evaluate the security of a computer system, identifying possible vulnerabilities and implementing all necessary countermeasures to mitigate the identified issues and increase the system’s robustness. They know the principles and methodologies behind directory services and are able to manage a small-scale system based on proprietary or open-source directory services. They know the methods to support an application with a directory service deployed in the cloud using the services of major cloud providers. They are able to contribute to the design of systems, including cloud-based ones, where security is an essential and structural element. They are able to design mechanisms to secure devices on the Internet and distributed systems in the cloud, using the frameworks available on these cloud platforms. They are able to use penetration testing tools to validate the security of a system by searching for its vulnerabilities and measuring the effects of exploiting these vulnerabilities.

Course contents

• Introduction
• Regulations
• Windows Active Directory Security in Corporate Environments
• Web Application Security
• Elements of Cryptography
• Authentication and Access Control Systems
• Firewalls and IDS/IPS
• Secure Software Development Lifecycle
• Red Teaming and Blue Teaming

Teaching methods

Conventional in-person and hybrid modes.

Assessment methods

A theoretical test (via written exam) and a practical test (via a project to be carried out in groups of two people) will be conducted.

Office hours

See the website of Marco Canducci