This course is part of the Advanced System Security Design Specialization

4.5
stars
80 ratings

Edward Chow +1 more instructor

15,032 already enrolled

Offered By

Advanced System Security Design SpecializationUniversity of Colorado System

About this Course

1,621 recent views

In this MOOC, we learn RBAC and ABAC access control to facilitate the specification and management of  access policies. We learn examples of how RBAC is supported by modern systems such as Docker and AWS IAM. We learn XACML 3.0 and an ABAC implementation for controling secure access to web documents and network resources with attribute certificates, and XACML architecture components.   We show how to exhance the data security with GeoEncryption, Secure Enhanced Geolocking, and R2D2  concepts which deliver data to right places via right path.  We show how Google Map and Web Crytpo 
API can be integrated for encrypted document on web browser without download apps and associate them with geolocking area to restrict unauthorize and improper accesses.

Flexible deadlines

Reset deadlines in accordance to your schedule.

Shareable Certificate

Earn a Certificate upon completion

100% online

Start instantly and learn at your own schedule.

Coursera Labs

Includes hands on learning projects.

Learn more about Coursera Labs

Course 4 of 4 in the

Advanced System Security Design Specialization

Beginner Level

Approx. 15 hours to complete

English

Could your company benefit from training employees on in-demand skills?

Try Coursera for Business

Flexible deadlines

Reset deadlines in accordance to your schedule.

Shareable Certificate

Earn a Certificate upon completion

100% online

Start instantly and learn at your own schedule.

Coursera Labs

Includes hands on learning projects.

Learn more about Coursera Labs

Course 4 of 4 in the

Advanced System Security Design Specialization

Beginner Level

Approx. 15 hours to complete

English

Could your company benefit from training employees on in-demand skills?

Try Coursera for Business

Instructors

Instructor rating

4.19/5 (23 Ratings)

Edward Chow

Greg Williams

Lecturer

Department of Computer Science

135,743 Learners

18 Courses

Offered by

University of Colorado System

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

Syllabus - What you will learn from this course

Week1

Week 1

5 hours to complete

Enhance Security with Geolocation

5 hours to complete

3 videos (Total 20 min), 2 readings, 5 quizzes

Week2

Week 2

3 hours to complete

Enhance Security with Network and Context Information

3 hours to complete

3 videos (Total 14 min), 3 readings, 4 quizzes

3 videos

Verify User Location Using WiFi System5mLocation Verification Using Bluetooth Low Energy Devices5mRight Path Right Place Data Delivery3m

3 readings

Read the following papers related to Right Place Verification30mRead paper on using RSSI measurement of BLE devices for localization30mRead R2D2 paper on BLE location verification and SDN Data Path Confidence Analysis40m

4 practice exercises

L2.1 Practice Quiz9mL2.2. Practice Quiz12mL2.3 Practice Quiz9mM2 quiz30m

Week3

Week 3

4 hours to complete

Authentication and Role Based Access Control

In this module, we discuss the definition of the authentication, the types of authentication credentials, and the authentication process and related requirements. we learn the Role Based Access Control, short for RBAC, which is an security approach to restricting system access to authorized users and to help specify organization's security policies reflecting its organizational structure. We use Docker Universal Control Plan and AWS IAM access control as examples for illustrating how RBAC simplifies the access control specification and management.

4 hours to complete

4 videos (Total 24 min), 4 readings, 4 quizzes

4 videos

Authentication Credentials6mDigital Certificate Creation7mRole Based Access Control (RBAC)4mRBAC Examples: Docker UCP and AWS IAM5m

4 readings

Watch OAuth presentation.1hRead how digital certificates are created for secure web access15mReading assignments for RBAC.20mRead Docker and AWS RBAC support example.10m

4 practice exercises

L3.1 Practice Quiz30mL3.2 Practice Quiz30mL3.3 Practice Quiz30mM3 Quiz30m

Week4

Week 4

3 hours to complete

Authorization and Attribute Based Access Control

In this module, we discuss PMI Privilege Management Infrastructure for managing the authorization of privileges within a system. We use attribute certificates as an instrument to associate access rights of the resources/services in the system to the identities or roles of the intended users of the system. We compare the differences between the PKI, the public key infrastructure which is focused on identity management, with the PMI which is focused on the management of the privileges authorized for users. We discuss their difference usages for the access control of the system. We then present the XACML, which is an eXtensible Access Control Markup Language (XACML) for specifying policies. It is an attribute-based access control system (ABAC), where attributes associated with a user or action or resource are inputs into the decision of whether a given user may access a given resource in a particular way. An implementation of ABAC system using Sun’s XACML 2.0 Java reference implementation called ENFORCE is then presented as an example.

3 hours to complete

4 videos (Total 23 min), 3 readings, 4 quizzes

4 videos

Privilege Management Infrastructure and Attribute Certificates7meXtensible Access Control Markup Language (XACML)4mAttribute Based Access Control4mEnforce Testbed as an ABAC Example6m

3 readings

Read the following paper which utilize attribute certificates for secure information sharing.1hRead key sections of OASIS Standard XACML version 3.020mRead Osama Khaleel's master thesis on Implementing an ABAC system with XACML 2.020m

4 practice exercises

L4.1 Practice Quiz30mL4.2 Practice Quiz16mQuiz L4.3 Practice Quiz6mM4 Quiz30m

Reviews

4.5

17 reviews

5 stars
66.25%
4 stars
23.75%
3 stars
5%
2 stars
1.25%
1 star
3.75%

About the Advanced System Security Design Specialization

This specialization is intended for intermediate level learners with basic programming skills and basic cybersecurity knowledge. Through this course learner will learn about advanced secure software techniques such as those for cloud computing, TOR, web-based cryptography, and geo-location/context based access control. With these techniques, learners will be better prepared to implement new security and privacy preserving data security features, to perform secure system design and implementation, vulnerability analysis, and Securely Provision (SP), Operate and Maintain (OM), Oversee and Govern (OV), Protect and Defend (PR), Analyze (AN), Collect and Operate (CO), and investigate (IN) tasks.

Frequently Asked Questions

When will I have access to the lectures and assignments?
Access to lectures and assignments depends on your type of enrollment. If you take a course in audit mode, you will be able to see most course materials for free. To access graded assignments and to earn a Certificate, you will need to purchase the Certificate experience, during or after your audit. If you don't see the audit option:
The course may not offer an audit option. You can try a Free Trial instead, or apply for Financial Aid.
The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.
What will I get if I subscribe to this Specialization?
When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile. If you only want to read and view the course content, you can audit the course for free.
Is financial aid available?
Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

More questions? Visit the Learner Help Center.

Build employee skills, drive business results

Discover Coursera for Business

Advanced System Security Topics

About this Course