103806 - SYSTEMS ADMINISTRATION AND SECURITY

Subject type: Optional

Coordinator: Alfonso Palacios González

Trimester: First term

Credits: 6

The documentation of the subject will be mostly in English. Poden haver-hi documents en castellà i català, però l'idioma principal serà anglès.

Therefore, the student must be able to read English correctly.

In general, this subject covers the following descriptors specified for the subject to which it belongs (Architecture, Operating Systems and Computer Networks):

1.- Firmware programming of a commercial microcomputer for the development of a prototype

2.- Network applications (client-server paradigm, document exchange (web, HTTP, FTP), e-mail (SMTP, protocols), representation of structured information (web, XML))

3.- IP networks (protocol, routing, ARP, address translation, DNS, firewalls, private networks)

4.- Local area networks (architecture and typologies, Ethernet, wireless networks)

5.- Introduction to operating systems (types of operating systems and characteristics, processes, flows, address spaces, execution modes, basic commands)

6.- Process management (system services, planning, flows, context changes, basic support structures)

7.- Resource sharing and synchronization (memory, files, mutual exclusion, critical regions, deadly hug)

8.- Technologies, protocols and services of the networks of telecommunications operators

9.- Security in computer networks: protection, security protocols, e-commerce, application management

10.- Local and network services

For the follow-up of the subject the student works with his personal computer (laptop) that will have to take to each and every one of the classes

In general, this subject contributes to some of the learning outcomes specified for the subject to which it belongs (Architecture, Operating Systems and Computer Networks).

At a more specific level, at the end of the course the student must be able to:

1. (LO1) Know the current regulatory framework
2. (LO2) Identify the elements of an ISO standard, especially the 27000 series
3. (LO3) Understand the functionality and the different ways of responding to the problem of Authentication, Authorization and Accounting
4. (LO4) Know and have used tools and platforms for security monitoring and auditing
5. (LO5) Know the different security solutions in nodes and networks
6. (LO6) Understand the operation of syslog management tools
7. (LO7) Understand SIEM environments
8.  (LO8) Understand and know the different solutions for securing terminal equipment
9. (LO9) Understand NAC environments
10.  (LO10) Know protocol security solutions (in different layers, routing, ...)
11. (LO11) Understand the concept of perimeter security
12. (RA12) Understand and know firewalling solutions (UTM)
13. (LO13) Understand and know IDS, IPS solutions
14. (LO14) Understand and know the concepts of Encryption, Integrity, Confidentiality and Authenticity
15. (LO15) Understand and know the concepts of public key and private key systems
16. (LO16) Understand and get to know Virtual Private Networks
17. (LO17) Understand and know tools and solutions for forensic analysis in different environments
18. (LO18) Understand and know SDN solutions
19. (LO19) Understand the problems of mobile environments

Guided learning hours include:

1. Theoretical / practical classes in large groups (the whole class) in which the teacher introduces the contents of the subject and teaching activities are carried out that pursue that the student is an active protagonist in the acquisition of his knowledge.
2. Activities that are carried out in teams of two people or individually. These practical activities will be carried out both in classes with small groups and in classes with large groups (all students).
3. Presentations individually and / or in groups of specific topics related to the subject
4. Writing reports individually and / or in groups of specific topics related to the subject
5. Execution of projects (in work teams) to work skills, transversal competencies
6. Problem solving in a given time in the form of challenges to assess the student's ability to cope with everyday market situations 

The final objective is that the student acquires the knowledge of the subject through activities which can be small as more complete projects where the knowledge that is acquired throughout the course takes part. Within the hours of autonomous learning are considered the hours to prepare the theoretical classes, the hours to study and consolidate the acquired knowledge, the hours to prepare the work of the practices and, finally, the hours that the student can dedicate to increase and complement their knowledge on the subject.

1. Introduction and Basic Concepts
2. Legislation and Rules
   1. ISO standards (Series 27000) ...
3. Security Policies
   1. AAA: Authentication, Authorization, and Registration
   2. Disaster Recovery
   3. Integrity Maintenance
   4. Audits
   5. Penetration test
   6. Monitoring
4. Security in Nodes and Network
   1. WE ARE ...
   2. NAC...
5. Perimeter Security
   1. Firewall
   2. UTM
   3. IPS
   4. IDS
6. Encryption
   1. Integrity, Confidentiality, Authenticity (CIA)
   2. Public Key and Private Key Systems
   3. Virtual Private Networks
7. Forensic Analysis
8. SDN
9. Mobile environments

A series of eminently practical activities are made available to students, which are the basis of the learning activities of the subject. These activities will have to be solved by the students, sometimes in a non-contact way, following the instructions of the teachers and / or they will also be worked in class, either as examples in the theory sessions, or in laboratory sessions ( large or small groups). Although some of these activities could be optional (teachers will not individually verify the performance by students), they will be essential to achieve the theoretical and practical knowledge of the subject.

With the aim of gathering evidence of the achievement of the expected learning outcomes, the following activities of an evaluative nature will be carried out, related to the common, transversal and specific competences. The transversal competence associated with the subject of knowledge of the third language is worked from the documentary sources that the students have to consult, and from the subject itself that has English as its vehicle language.

1. Online self-learning environments, with laboratories, self-assessment tests, ...: individual / group tests of practical application of the theoretical concepts and practical procedures of the Units 1, 3, 4, 5, 6 and 7 of the subject (evidence of the results of the learning RA3, RA4, RA5, RA6, RA7, RA8, RA9, RA10, RA11, RA12, RA13, RA14, RA15, RA16)
2. Practices with simulated environments: individual / group tests of practical application of the theoretical concepts and practical procedures of the Units 1, 3, 4, 5, 6 and 7 of the subject (evidence of the results of the learning RA3, RA4, RA5, RA10, RA11, RA14, RA15, RA16)
3. Internships with market solutions and tools: individual / group tests of practical application of the theoretical concepts and practical procedures of the Units 1, 3, 4, 5, 6, 7 and 9 of the subject (evidence of the results of the learning RA4, RA5, RA8, RA9, RA10, RA12, RA13, RA16, RA17, RA19)
4. Configuration projects, installation of systems, services and solutions: individual / group tests of practical application of the theoretical concepts and practical procedures of the Units 3, 4, 6 and 7 of the subject (evidence of the results of the learning RA4, RA8, RA9, RA16)
5. Global projects: individual / group tests of practical application of the theoretical concepts and practical procedures of the Units 1, 3, 4, 6 and 7 of the subject (evidence of the results of the learning RA5, RA6, RA7, RA9, RA15, RA16)
6. Individual and group challenges: individual / group tests of practical application of the theoretical concepts and practical procedures of the Units 1, 3, 4, 5, 6 and 7 of the subject (evidence of the results of the learning RA3, RA4, RA5, RA8, RA13, LO16)
7. presentations: individual / group tests of practical application of the theoretical concepts and practical procedures of the Units 1, 2, 3, 4, 5, 6, 7, 8 and 9 of the subject (evidence of the results of the learning RA1, RA2, RA4, RA5, RA6, RA7, RA10, RA11, RA12, RA14, RA17, RA18, RA19)
8. Work in group: individual / group tests of practical application of the theoretical concepts and practical procedures of the Units 1, 3, 4, 5, 6, 8 and 9 of the subject (evidence of the results of the learning RA5, RA8, RA11, RA12, RA13, RA14, RA18, RA19)
9. Written Test: individual / group tests of practical application of the theoretical concepts and practical procedures of the Units 1, 2, 3, 4, 5, 6, 7, 8 and 9 of the subject (evidence of the results of the learning RA1, RA2, RA3, RA4, RA5, RA6, RA7, RA8, RA9, RA10, RA11, RA12, RA13, Ra14, RA15, RA16, Ra17, RA18, RA19)

In relation to the basic competences assigned to the subject, these are covered especially with regard to the aspects that are explained:

• CB2: problem solving within their area of ​​study.
• CB3: study of real use cases
• CB5: development of learning skills needed for further studies (autonomous access to documentation, effective work habits)

In relation to the transversal competences associated with the subject, these are covered especially with regard to the aspects that are explained:

• CT1: knowledge of the English language is worked from the documentary collections that students must consult, since most of them are mostly in English.
• CT2: working as members of an interdisciplinary team is mostly worked on in practical activities where management and shared responsibility is especially relevant

In relation to the specific competencies associated with the subject, these are covered especially so that the aspects that are explained:

• EFB5: it works of transversal form in the different activities of the asignatura. All problems end with a problem where on the one hand there is programming and on the other system and architecture

In relation to the common competencies associated with the subject, these are covered especially so that the aspects that are explained:

• CIN1: we work in a transversal way because many of the problems posed involve the development of computer solutions
• CIN4: we work in a transversal way because many of the problems posed involve the knowledge and understanding of current regulations
• CIN5: work in a transversal way because the subject focuses on how to achieve an administration, but safe, of systems and facilities
• CIN10: work in a transversal way in the written tests of the subject, which work the most theoretical aspects, but also in the practical activities, because in each of them emphasis is placed on aspects of the structure and architecture of the systems
• CIN11: work in a transversal way throughout the subject because most situations have elements linked to the distributed environments
• CIN13: work in a transversal way throughout the subject because most situations have elements linked to storage and the web environment

In order to pass (pass) the assessment activities, students must demonstrate:

• That they have acquired the theoretical knowledge related to the contents of the subject and that their understanding allows them to put them into practice [MECES-2 point a, point c]
• That they can develop solutions to problems that, although they may be similar to others seen above, present aspects that are new [MECES-2 point f]

Rules for carrying out the activities

• All activities are required to attend to be evaluated.
• Activities are mandatory. Activities not performed or not attended are rated as 0.

1. 15% Written Test
2. ONLINE activities 20%
3. Practices and Challenges 35%
4. Projects 20%
5. Presentations 10%

All grades are required. Theoretical exams can be retaken

For the written tests, the average of the tests must have a minimum rating of 5,0. If the grade is lower than 5.0 then the final grade of the subject will be that of the written tests.

http://www.netacad.com

Presentations and notes of the subject in Moodle