|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/advanced-system-security-topics
课程评论：没有评论
课程名称：高级系统安全主题 概述：本MOOC课程将学习基于角色的访问控制（RBAC）和基于属性的访问控制（ABAC），用于便捷地指定和管理访问策略。我们将探讨现代系统（如Docker和AWS IAM）如何支持RBAC，并学习XACML 3.0及其在控制对网络资源和网页文档安全访问方面的ABAC实现，涉及属性证书和XACML架构组件。同时，课程还介绍了如何通过GeoEncryption、安全增强地理锁定和R2D2等概念提升数据安全性，这些技术能够确保数据沿着正确路径传递到合适位置。此外，我们将展示如何将Google地图与Web加密API集成，以便在网页浏览器中加密文档，而无需下载应用程序，并与地理锁定区域关联，以限制未授权和不当访问。 课程大纲： 1. **增强地理位置安全性**：讨论地理加密技术及安全增强地理锁定系统的设计与分析问题，学习使用Javascript结合Google Map API和CryptoJS API实现基于网页的安全增强地理锁定系统。 2. **使用网络和上下文信息增强安全性**：介绍利用WiFi或BLE信号来估算用户地理位置的技术，展示增值软件定义网络服务确保数据通过指定路径传递到正确位置的技术。 3. **认证与基于角色的访问控制**：讨论认证的定义、认证凭证的类型及其流程与相关要求，学习RBAC作为限制系统访问的安全方法，帮助管理反映组织结构的安全政策。使用Docker Universal Control Plan和AWS IAM作为实例，说明RBAC如何简化访问控制的指定与管理。 4. **授权与基于属性的访问控制**：讨论特权管理基础设施（PMI）用于管理系统内特权的授权，介绍属性证书作为将资源/服务的访问权限与系统中用户身份或角色关联的工具。比较PKI（公钥基础设施）与PMI在访问控制中的不同应用，并介绍可扩展访问控制标记语言（XACML），这是一个基于属性的访问控制系统（ABAC），基于用户、操作或资源的属性来决策访问权限。最后，展示使用Sun公司的XACML 2.0 Java参考实现ENFORCE的ABAC系统示例。
Name:Enhance Security with Geolocation
Description:In this module, we discuss the geoencryption techniques, the issues in the design and analysis of a Secure Enhanced Geolocking system for protected encrypted info with geolocking. We learn the web based implementation of an Secure Enhancing Geolocking system using Javascript with Google Map API and CryptoJS API.
Name:Enhance Security with Network and Context Information
Description:In this module, we learn the techniques for using WiFi or BLE signals to estimate the geolocation of a user. We also show the technique where the value added Software Defined Network services can be used to ensure the data are delivered through a designated path to the right location.
Name:Authentication and Role Based Access Control
Description:In this module, we discuss the definition of the authentication, the types of authentication credentials, and the authentication process and related requirements. we learn the Role Based Access Control, short for RBAC, which is an security approach to restricting system access to authorized users and to help specify organization's security policies reflecting its organizational structure. We use Docker Universal Control Plan and AWS IAM access control as examples for illustrating how RBAC simplifies the access control specification and management.
Name:Authorization and Attribute Based Access Control
Description:In this module, we discuss PMI Privilege Management Infrastructure for managing the authorization of privileges within a system. We use attribute certificates as an instrument to associate access rights of the resources/services in the system to the identities or roles of the intended users of the system. We compare the differences between the PKI, the public key infrastructure which is focused on identity management, with the PMI which is focused on the management of the privileges authorized for users. We discuss their difference usages for the access control of the system. We then present the XACML, which is an eXtensible Access Control Markup Language (XACML) for specifying policies. It is an attribute-based access control system (ABAC), where attributes associated with a user or action or resource are inputs into the decision of whether a given user may access a given resource in a particular way. An implementation of ABAC system using Sun’s XACML 2.0 Java reference implementation called ENFORCE is then presented as an example.
In this MOOC, we learn RBAC and ABAC access control to facilitate the specification and management of access policies. We learn examples of how RBAC is supported by modern systems such as Docker and AWS IAM. We learn XACML 3.0 and an ABAC implementation for controling secure access to web documents and network resources with attribute certificates, and XACML architecture components. We show how to exhance the data security with GeoEncryption, Secure Enhanced Geolocking, and R2D2 concepts which deliver data to right places via right path. We show how Google Map and Web Crytpo API can be integrated for encrypted document on web browser without download apps and associate them with geolocking area to restrict unauthorize and improper accesses.
