ITALIANO

Security Concepts
SCTP
Cryptography (DES, AES e Modi, RSA
Stream Cypher, Hash)
Access Control - Authentication, Protocols, HTTP Auth framework, Needham-Schroeder, mAC, Kerberos, Servlet
Authorizaion (Access Control Matric, MAC/DAC/RBAC/ABAC, XACML)
SSL/TLS
Ipsec, KDC, Key management, PKI
DHT
AVI Model, CVE e CVSS, CWE, CAPECA, ATT&CK, Security Review, ASVS
Penetration Testing
Firewalls, NTP
OAUTH
Risk Analysis
Security Certifications
SIP

William Stallings, Cryptography and Network Security: Principles and Practice 7th Edition, Pearson

William Stallings, Lawrie Brown, Computer Security: Principles and Practice, Pearson College Div; 3 edizione

Conoscenza dei principi di sicurezza informatica, dei principi di crittografia dei protocolli di rete e delle metodologie di security-by-design, security hardening e security assessment

Competenza sulle tecnoicologie di controllo accessi, dei meccanismi di sicurezza, nell'implementazione di protocolli, nel progetto di sistemi di rete in sicurezza.

Saper configurare un sistema di rete in modo sicuro, saper configurare e implementare un sistema di controllo egli accessi, saper implementare un algoritmo crittografico, sapere effettuare security assessment, una security review e un penetration testing. Saper valutare il livello di sicurezza di un sistema.

Conoscenze di reti di calcolatori, architettura dei calcolatori, sistemi operativi, sistemi web e basi di dati

Lezioni frontali
Esercitazioni in aula
Progetti individuali e di gruppo

Progetto Individuale o di gruppo con dimostratore e presentazione

Prova Orale.

Security Concepts
SCTP
Cryptography (DES, AES e Modi, RSA
Stream Cypher, Hash)
Access Control - Authentication, Protocols, HTTP Auth framework, Needham-Schroeder, mAC, Kerberos, Servlet
Authorizaion (Access Control Matric, MAC/DAC/RBAC/ABAC, XACML)
SSL/TLS
Ipsec, KDC, Key management, PKI
DHT
AVI Model, CVE e CVSS, CWE, CAPECA, ATT&CK, Security Review, ASVS
Penetration Testing
Firewalls, NTP
OAUTH
Risk Analysis
Security Certifications
SIP

Italian

Security Concepts
SCTP
Cryptography (DES, AES e Modi, RSA
Stream Cypher, Hash)
Access Control - Authentication, Protocols, HTTP Auth framework, Needham-Schroeder, mAC, Kerberos, Servlet
Authorizaion (Access Control Matric, MAC/DAC/RBAC/ABAC, XACML)
SSL/TLS
Ipsec, KDC, Key management, PKI
DHT
AVI Model, CVE e CVSS, CWE, CAPECA, ATT&CK, Security Review, ASVS
Penetration Testing
Firewalls, NTP
OAUTH
Risk Analysis
Security Certifications
SIP

William Stallings, Cryptography and Network Security: Principles and Practice 7th Edition, Pearson

William Stallings, Lawrie Brown, Computer Security: Principles and Practice, Pearson College Div; 3 edizione

Knowledge on computer security principles, cryptography, network protocols, security-by-design, security hardening e security assessment methodologies.

Competences on technologies related to access control, security mechanisms, protocol implementation, computer network design.

Capability of computer network configuration, access control configuration, crypttography algorithm implementation, security assessment (including security review and penetration testing).

Knowledge of computer networks, computer arhcitecture, operating systems, web systems, databases

lessons,
Exercise
personal projects

Demonstration and Presentation of an individual project

Question-based Examination

Security Concepts
SCTP
Cryptography (DES, AES e Modi, RSA
Stream Cypher, Hash)
Access Control - Authentication, Protocols, HTTP Auth framework, Needham-Schroeder, mAC, Kerberos, Servlet
Authorizaion (Access Control Matric, MAC/DAC/RBAC/ABAC, XACML)
SSL/TLS
Ipsec, KDC, Key management, PKI
DHT
AVI Model, CVE e CVSS, CWE, CAPECA, ATT&CK, Security Review, ASVS
Penetration Testing
Firewalls, NTP
OAUTH
Risk Analysis
Security Certifications
SIP