Learning outcomes

The objective of the course is to introduce the principal methodologies and technologies for the security of computer networks, of distributed information systems, and of service-oriented software architectures. The course thus provides the main theoretical and applied notions for the theoretical design, the practical realization and the formal analysis of protocols, networks, systems and architectures for information security.

Program

- Basic notions:
-- Objectives, risks, attacks
-- Public-key infrastructures
-- Communication channels
-- Case studies (X.509, PGP)
- Protocols:
-- Risk and attack models
-- Formal analysis techniques
-- Case studies (Kerberos, Internet Key Exchange, IP Security)
- Privacy and anonymity:
-- Policies, problems and mechanisms (pseudonyms and proxies)
-- Case studies (Mix Networks and Crowds)
- Security of Web Services and service-oriented architectures.

Examination Methods

The examination consists of a written test, including questions about the theoretical notions considered in the course as well as small exercises on practical notions.
The written test must be taken without the help of notes, books, or other documentation. The teacher may decide to replace the written test with an oral examination, especially whenever it is not possible to make sure that the students cannot access this documentation.