Course

Syllabus

Program- processes- Binaries – Libraries- SetUID Programs, Environmental variable based Attacks – Shellshock attack- Process memory organization- Stack management- Stack overflow – Runtime protection strategies, Return-to-libc, ROP, Format string vulnerabilities – File I/O Race conditions – TOCTOU – Dirty COW Attack – Concurrency control – Operating System Security Architecture – User Mode and Kernel Mode – Process Isolation – File System Security – Access Control Models (DAC, MAC, RBAC, ABAC) – Authentication and Credential Management – Linux Security Modules – SELinux, CVE/CWE ecosystems, Sandboxing- Virtualization techniques for security – Trusted computing – TEE, Zero Trust Security, Distributed systems security, and Windows vs. Linux security comparison.

Prerequisites

Basic knowledge of concurrency and access control. Practical experience in installation, monitoring, and troubleshooting of operating systems (Windows and Linux)

Course Outcome

CO-PO Mapping

1. Wenliang Du, Computer Security – A hands-on Approach, First Edition, CreateSpace Independent Pub, 2017
2. T. Jaeger, Operating System Security, Vol. 1 of Synthesis Lectures on Information Security, Privacy and Trust, Morgan & Claypool Publishers, 2008.
3. W. Mauerer, Professional Linux Kernel Architecture, John Wiley and Sons, New York, 2008.
4. R Anderson, Security engineering, John Wiley & Sons, 2008.
5. Matt Bishop, Computer Security: Art and Science, Vol. 2, Addison-Wesley, 2012.