Students will have the ability to recognize security threats, computer system weaknesses and will be able to propose appropriate system protection procedures and techniques. Students will develop theoretical and practical knowledge about cryptography, fundamentals of computer security, operating system security mechanisms and secure systems design principles. Students will be able to use cryptography algorithms and apply protocols for key exchange, authentication and authorisation. Furthermore, students will be able to apply an instance of RAID system for increasing data availability and reliability.

1. apply intraprocessor communication mechanisms
2. modify mutual exclusion protocols in real distributed systems
3. illustrate authentication protocols and key exchange protocols
4. assemble hash functions, symmetric and asymmetric algorithms into complex cryptosystems
5. calculate mean time to data loss
6. design computer system with redundant array of independent disks (RAID)

Teaching is organized into two teaching cycles (15-week classes, 3 hours per week). First cycle consists of 7-week classes and midterm exam. Second cycle consists of 6-week classes and final exam.

Short tests. Midterm exam. Final exam.

Two laboratory exercises.

konzultacije

Programming tasks.

1. Intraprocessor communication. File sharing. Sharing memory.
2. Message queues. Pipelines.
3. Mutual exclusion in distributed systems. Lamport's distributed mutual exclusion protocol. Ricart-Agrawala protocol.
4. Security mechanisms. Threats and attacks. Security demands.
5. Symmetric cryptosystems. Advanced Encryption Standard (AES). Block cipher modes of operation (ECB, CBC, CFB, OFB, CTR).
6. Asymmetric cryptosystems (RSA, digital envelope). RSA cryptosystem analysis.
7. Hash functions (SHA). Digital signature. Sealed digital envelope.
8. Midterm exam
9. Key management and key exchange protocols. Diffie-Hellman key exchange protocol. Authentication protocols.
10. Access control and authorisation. Authentication Protocol Kerberos. Digital certificate. Public key infrastructure. X.509 certificate and authentication protocols.
11. Array of disks. Striped disk array: byte-level and block-level striping.
12. Failure rate models. System components reliability and availability, fault tolerance.
13. Two-component and multi-component system modelling.
14. Redundant disk array organisation. Mean time to data loss for various redundant disk arrays.
15. Final exam