In this MOOC, we learn RBAC and ABAC access control to facilitate the specification and management of access policies. We learn examples of how RBAC is supported by modern systems such as Docker and AWS IAM. We learn XACML 3.0 and an ABAC implementation for controling secure access to web documents and network resources with attribute certificates, and XACML architecture components. We show how to exhance the data security with GeoEncryption, Secure Enhanced Geolocking, and R2D2 concepts which deliver data to right places via right path. We show how Google Map and Web Crytpo
Dieser Kurs ist Teil der Spezialisierung Spezialisierung Advanced System Security Design
von
Spezialisierung Advanced System Security DesignUniversity of Colorado SystemÜber diesen Kurs
56,330 kürzliche Aufrufe
Zertifikat zur Vorlage
Erhalten Sie nach Abschluss ein Zertifikat
100 % online
Beginnen Sie sofort und lernen Sie in Ihrem eigenen Tempo.
Kurs 4 von 4 in
Flexible Fristen
Setzen Sie Fristen gemäß Ihrem Zeitplan zurück.
Stufe „Anfänger“
Ca. 13 Stunden zum Abschließen
Englisch
Untertitel: Englisch
Zertifikat zur Vorlage
Erhalten Sie nach Abschluss ein Zertifikat
100 % online
Beginnen Sie sofort und lernen Sie in Ihrem eigenen Tempo.
Kurs 4 von 4 in
Flexible Fristen
Setzen Sie Fristen gemäß Ihrem Zeitplan zurück.
Stufe „Anfänger“
Ca. 13 Stunden zum Abschließen
Englisch
Untertitel: Englisch
von
University of Colorado System
The University of Colorado is a recognized leader in higher education on the national and global stage. We collaborate to meet the diverse needs of our students and communities. We promote innovation, encourage discovery and support the extension of knowledge in ways unique to the state of Colorado and beyond.
Lehrplan - Was Sie in diesem Kurs lernen werden
4 Stunden zum Abschließen
Enhance Security with Geolocation
In this module, we discuss the geoencryption techniques, the issues in the design and analysis of a Secure Enhanced Geolocking system for protected encrypted info with geolocking. We learn the web based implementation of an Secure Enhancing Geolocking system using Javascript with Google Map API and CryptoJS API.
4 Stunden zum Abschließen
3 Videos (Gesamt 20 min), 2 Lektüren, 5 Quiz
3 Videos
Lesson 4.2 Secure Enhanced Geolocking8m
Ensure Data Delivery to Right Location2m
2 Lektüren
Read the seminal location based encryption paper by Scott Logan and Dorothy E. Denning.1h
Read SEG master project report by Ashish Korpe1h
4 praktische Übungen
L1.1 Practice Quiz10m
L1.2. Practice Quiz15m
L1.3. Practice Quiz9m
Quiz: M1 quiz20m
3 Stunden zum Abschließen
Enhance Security with Network and Context Information
In this module, we learn the techniques for using WiFi or BLE signals to estimate the geolocation of a user. We also show the technique where the value added Software Defined Network services can be used to ensure the data are delivered through a designated path to the right location.
3 Stunden zum Abschließen
3 Videos (Gesamt 14 min), 3 Lektüren, 4 Quiz
3 Videos
Location Verification Using Bluetooth Low Energy Devices5m
Right Path Right Place Data Delivery3m
3 Lektüren
Read the following papers related to Right Place Verification30m
Read paper on using RSSI measurement of BLE devices for localization30m
Read R2D2 paper on BLE location verification and SDN Data Path Confidence Analysis40m
4 praktische Übungen
L2.1 Practice Quiz9m
L2.2. Practice Quiz12m
L2.3 Practice Quiz9m
M2 quiz30m
3 Stunden zum Abschließen
Authentication and Role Based Access Control
In this module, we discuss the definition of the authentication, the types of authentication credentials, and the authentication process and related requirements. we learn the Role Based Access Control, short for RBAC, which is an security approach to restricting system access to authorized users and to help specify organization's security policies reflecting its organizational structure. We use Docker Universal Control Plan and AWS IAM access control as examples for illustrating how RBAC simplifies the access control specification and management.
3 Stunden zum Abschließen
4 Videos (Gesamt 24 min), 4 Lektüren, 4 Quiz
4 Videos
Digital Certificate Creation7m
Role Based Access Control (RBAC)4m
RBAC Examples: Docker UCP and AWS IAM5m
4 Lektüren
Watch OAuth presentation.1h
Read how digital certificates are created for secure web access15m
Reading assignments for RBAC.20m
Read Docker and AWS RBAC support example.10m
4 praktische Übungen
L3.1 Practice Quiz8m
L3.2 Practice Quiz8m
L3.3 Practice Quiz8m
M3 Quiz30m
3 Stunden zum Abschließen
Authorization and Attribute Based Access Control
In this module, we discuss PMI Privilege Management Infrastructure for managing the authorization of privileges within a system. We use attribute certificates as an instrument to associate access rights of the resources/services in the system to the identities or roles of the intended users of the system. We compare the differences between the PKI, the public key infrastructure which is focused on identity management, with the PMI which is focused on the management of the privileges authorized for users. We discuss their difference usages for the access control of the system. We then present the XACML, which is an eXtensible Access Control Markup Language (XACML) for specifying policies. It is an attribute-based access control system (ABAC), where attributes associated with a user or action or resource are inputs into the decision of whether a given user may access a given resource in a particular way. An implementation of ABAC system using Sun’s XACML 2.0 Java reference implementation called ENFORCE is then presented as an example.
3 Stunden zum Abschließen
4 Videos (Gesamt 23 min), 3 Lektüren, 4 Quiz
4 Videos
eXtensible Access Control Markup Language (XACML)4m
Attribute Based Access Control4m
Enforce Testbed as an ABAC Example6m
3 Lektüren
Read the following paper which utilize attribute certificates for secure information sharing.1h
Read key sections of OASIS Standard XACML version 3.020m
Read Osama Khaleel's master thesis on Implementing an ABAC system with XACML 2.020m
4 praktische Übungen
L4.1 Practice Quiz8m
L4.2 Practice Quiz16m
Quiz L4.3 Practice Quiz6m
M4 Quiz30m
Bewertungen
Top-Bewertungen von ADVANCED SYSTEM SECURITY TOPICS
von PP6. Mai 2020
Thanks Coursera for this course but i am not happy because in mt certificate my name is change so please help me to change my name
von IC26. Apr. 2019
Quality learning materials. Enjoyed the cryptography systems introduction, especially the one based on GPS coordinates.
von US27. Mai 2020
this is good , but i think it's gonna be better by including subtitle inside a video.
von PP18. März 2020
Very Good source for beginners and intermediate kb.
Über den Spezialisierung Advanced System Security Design
This specialization is intended for intermediate level learners with basic programming skills and basic cybersecurity knowledge. Through this course learner will learn about advanced secure software techniques such as those for cloud computing, TOR, web-based cryptography, and geo-location/context based access control. With these techniques, learners will be better prepared to implement new security and privacy preserving data security features, to perform secure system design and implementation, vulnerability analysis, and Securely Provision (SP), Operate and Maintain (OM), Oversee and Govern (OV), Protect and Defend (PR), Analyze (AN), Collect and Operate (CO), and investigate (IN) tasks.
Häufig gestellte Fragen
When will I have access to the lectures and assignments?
Access to lectures and assignments depends on your type of enrollment. If you take a course in audit mode, you will be able to see most course materials for free. To access graded assignments and to earn a Certificate, you will need to purchase the Certificate experience, during or after your audit. If you don't see the audit option:
The course may not offer an audit option. You can try a Free Trial instead, or apply for Financial Aid.
The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.
What will I get if I subscribe to this Specialization?
When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile. If you only want to read and view the course content, you can audit the course for free.
What is the refund policy?
If you subscribed, you get a 7-day free trial during which you can cancel at no penalty. After that, we don’t give refunds, but you can cancel your subscription at any time. See our full refund policy.
Is financial aid available?
Yes, Coursera provides financial aid to learners who cannot afford the fee. Apply for it by clicking on the Financial Aid link beneath the "Enroll" button on the left. You'll be prompted to complete an application and will be notified if you are approved. You'll need to complete this step for each course in the Specialization, including the Capstone Project. Learn more.
Haben Sie weitere Fragen? Besuchen Sie das Hilfe-Center für Teiln..
© 2020 Coursera Inc. Alle Rechte vorbehalten.
