Teacher(s)
Bertrand Van Ouytsel Charles-Henry (coordinator); Cassiers Gaëtan;
Language
English
> French-friendly
> French-friendly
Main themes
This course introduces software security by exploring the fundamentals of cybersecurity, software attacks, and vulnerabilities, such as those found in cryptographic protocols, RFID cards, and biometric passports.
Students will examine techniques for protecting against attacks and gain familiarity with malware analysis. Advanced topics include integer and buffer overflows, static and dynamic malware analysis, and practical exercises involving setting traps and analyzing intrusions and malware.
Students will examine techniques for protecting against attacks and gain familiarity with malware analysis. Advanced topics include integer and buffer overflows, static and dynamic malware analysis, and practical exercises involving setting traps and analyzing intrusions and malware.
Learning outcomes
At the end of this learning unit, the student is able to : | |
Given the learning outcomes of the "Master in Computer Science and Engineering" program, this course contributes to the development, acquisition and evaluation of the following learning outcomes:
Given the learning outcomes of the "Master [120] in Computer Science" program, this course contributes to the development, acquisition and evaluation of the following learning outcomes:
Students completing successfully this course will be able to:
|
|
Content
The course offers an introduction to IT system security through a variety of topics.
Examples of topics covered in previous years:
Examples of topics covered in previous years:
- Privilege escalation and separation.
- Memory security (buffer overflow, stack overflow, exploits on dynamic memory allocations): attacks and countermeasures; undefined behaviour.
- Static and dynamic malware analysis.
- Design of secure communication protocols (example: TLS).
- Machine authentication systems: cryptography fundamentals, certificates, TOFU, etc.
- User authentication: password security, multi-factor authentication, single sign-on (SSO).
- Software supply chain: secure distribution, updates, dependencies, traceability.
- Incident response
Teaching methods
Lectures, Literature reading, Practical session
Evaluation methods
Evaluation for the June session:
- Written exam (70% of the final mark)
- Oral assessment of practical session during the quadrimester (30% of the final mark)
- Written exam (100% of the final mark)
Other information
INFO2144 vs INFO2347:
- INFO2144 is a course that explores the above topics in greater depth.
- INFO2347 is a general introduction to cybersecurity, with a particular focus on network and web application security.
- A general knowledge of computer systems and programming is required. It is not necessary to take INFO2347 in order to take INFO2144.
Online resources
Bibliography
Available on moodle.
Disponible sur moodle.
Disponible sur moodle.
Faculty or entity
Programmes / formations proposant cette unité d'enseignement (UE)
Title of the programme
Sigle
Credits
Prerequisites
Learning outcomes
Master [120] in Electrical Engineering
Master [120] in Computer Science and Engineering
Master [120] in Computer Science
Master [120] in Mathematical Engineering
Master [120] in Data Science Engineering
Master [120] in Data Science: Information Technology