Sécurité, Cryptologie et Codage des Systèmes...

12
2008-2009 Sécurité, Cryptologie et Codage des Systèmes d’Information Security, Cryptology and Coding of Information Systems Context General presentation 1. Academic program, calendar 2. Lectures/Tutoring organization Administration, registration: who’s who Grenoble University

Transcript of Sécurité, Cryptologie et Codage des Systèmes...

Page 1: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Sécurité, Cryptologie et Codage des Systèmes d’Information

Security, Cryptology and Coding of Information Systems

  Context

  General presentation  1. Academic program, calendar  2. Lectures/Tutoring organization

  Administration, registration: who’s who

Grenoble University

Page 2: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Context - Objective

  Context : expansion of networks and distributed applications  Confidentiality, Authentication, Integrity, Non-repudiation

  Various applications and professional skills:   Enterprise specialised in security: solutions providers (hardware,

software, smartcard, …); security audit, …   Specialized department of a company : bank, e-business, telecom,

video, tv, …   Information system within a company: network/system administration

Formation spécialisée en 1 an conjointe UJF – INP (Grenoble Univ.) Institut Fourier et Ensimag + Dépt Telecom

  Objective : formation of experts in security and coding technologies   Cryptology : mathematical protocols (RSA, AES, ECC…)

  Security: software/hardware (network, system, integraton)   Applications : watermarking, multimedia, smartcard, …

  M2P : Directed to profession: sept-feb=lectures / march-sept internship/thesis

Page 3: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Brief history & organization   Master UJF-INPG Cryptologie, Sécurité, Codage de l’Information (2001…)

  Sept 2003: first promotion: 17 graduate students   148 graduate students up to sept 2009 (24 en sept 2008)   From Sept 2007: international M2P – program taught in english   From sept 2008: part of MOSIG International Master; From sept 2009: new calendar

  M2P Security, Cryptology and Coding of Information Systems   2009-20010: 50 students: 14 ENSIMAG / 25 Institut Fourier / 11 Emirati (intl. coop)   Gathers French and English speaking students (2 groups of students)   Director UJF/IF : [email protected]   Co-director INP/ENSIMAG: [email protected]   Web:

  http://www-ufrima.imag.fr/spip.php?article49   http://www-fourier.ujf-grenoble.fr/enseignement/spip.php?rubrique19

Page 4: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Calendar 2009-2010

SemaDébut Fin L M Me J V36 31/08/2009 04//09/200937 07/09/2009 11/09/2009 CM EIS CM EIS CM Intensive session in Mathematics and Informatics38 14/09/2009 18/09/2009 EIS CM EIS CM Intensive session in Mathematics and Informatics39 21/09/2009 25/09/2009 IL/1 1 1 INTRODUCTORY LECTURE / September 23th / 11am / AMPHI D -Ensimag40 28/09/2009 02/10/2009 1 1 1 1/REX 1 REX - Retour d'Expérience de Stage (no lectures in the afternoon)41 05/10/2009 09/10/2009 1 1 1 1 142 12/10/2009 16/10/2009 1 1 1 JP 1 JP - Journée des Partenaires (no lectures)43 19/10/2009 23/10/2009 1 1 1 1 144 26/10/2009 30/10/2009 V V V V V Toussaint Vacations45 02/11/2009 06/11/2009 1 1 1 1 146 09/11/2009 13/11/2009 1 1 H 1 1 Armistice 1918 Holiday47 16/11/2009 20/11/2009 1 1 1 1 148 23/11/2009 27/11/2009 1 1 1 1 149 30/11/2009 04/12/2009 1 1 1 E E Exams50 07/12/2009 11/12/2009 1 1 1 1 T/R TOEIC English test / catch up slot51 14/12/2009 18/12/2009 1 1 1 1 152 21/12/2009 25/12/2009 V V V V V Noël Vacations53 28/12/2009 01/01/2010 V V V V V Noël Vacations1 04/01/2010 08/01/2010 1 1 1 1 12 11/01/2010 15/01/2010 1 1 1 1 13 18/01/2010 22/01/2010 1 1 1 1 14 25/01/2010 29/01/2010 1 1 1 1 15 01/02/2010 05/02/2010 E E E E E Exams6 08/02/2010 12/02/2010 1 1 1 1 17 15/02/2010 19/02/2010 V V V V V Winter Vacations8 22/02/2010 26/02/2010 1 1 1 1 19 01/03/2010 05/03/2010 1 1 1 1 1

10 08/03/2010 12/03/2010 1 1 1 1 111 15/03/2010 19/03/2010 1 1 1 1 112 22/03/2010 26/03/2010 E E E E E Exams13 29/03/2010 02/04/2010 PFE PFE PFE PFE PFE Internship14 05/04/2010 09/04/2010 PFE PFE PFE PFE PFE Pâques Holiday15 12/04/2010 16/04/2010 PFE PFE PFE PFE PFE Pâques Vacations16 19/04/2010 23/04/2010 PFE PFE PFE PFE PFE17 26/04/2010 30/04/2010 PFE PFE PFE PFE PFE18 03/05/2010 07/05/2010 PFE PFE PFE PFE PFE19 10/05/2010 14/05/2010 PFE PFE PFE PFE PFE Ascention Holiday20 17/05/2010 21/05/2010 PFE PFE PFE PFE PFE21 24/05/2010 28/05/2010 PFE PFE PFE PFE PFE Pentecôte Holiday22 31/05/2010 04/06/2010 PFE PFE PFE PFE PFE23 07/06/2010 11/06/2010 PFE PFE PFE PFE PFE24 14/06/2010 18/06/2010 PFE PFE PFE PFE PFE25 21/06/2010 25/06/2010 PFE PFE PFE PFE PFE26 28/06/2010 02/07/2010 PFE PFE ESPD ESPD ESPD ESPD - End of Studies Project Defense (3A Ensimag)27 05/07/2010 09/07/2010 MASTER THESIS28 12/07/2010 16/07/201029 19/07/2010 23/07/201030 26/07/2010 30/07/2010 September - oral defense of the Internship

MASTER M2-SCCI CALENDAR 2009-2010

Academic calendar:

  mid-Sept -> March: courses (level 3) (Rem: 2 weeks optional pretraining early sept)

  April -> September 30: (level 4) full-time internship (Master thesis)   mid-june: mid-term presentation,

+ “PFE ingénieur” for ENSIMAG students   mid-september: Master thesis defense

  Validation: by “level” (~semester)   Mark ≥ 10/20=50% to level 3 (courses)

  No mark < 7 in global units   Mark ≥ 10/20=50% to level 4 (thesis/project)

Page 5: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Organisation

M2 Mosig SCCI (M2-P)   27 ECTS Master thesis   3 ECTS UE Transversal (English / French / … )   30 ECTS “scientific/technology”

  15 ECTS Common Core   12 ECTS Elective Specialization in Security (“math” or “info”)   3 ECTS = electve unit (2 proposed, but yet open to all units

proposed in Grenoble M2 Math-Info)

Page 6: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Security, Cryptology and Coding of Information Systems

M2 SCCI – 2009/2010 Non-elective Core Courses 18 ECTS ECTS Teaching teams

- Security models: proofs, protocols and politics 6 Autreau, Lafourcade, Roch - Symmetric and asymmetric cryptology – PKI 6 Fousse, Elbaz-Vincent

- System administration and network security 3 Denneulin, Wagner, Marchand

- English or French 3 Pool Langues

Choose one of the two following elective 12 ECTS

Elective A. Security of systems and infrastructures - Advanced security of system and networks - Hardware and embedded secure architectectures - Distributed algorithms and fault-tolerance - Deployment of a secure grid infrastructure

3 3 33

Wagner, Castellucia Leveugle Quéma, Anghel Denneulin, Wagner

Elective B. Cryptology, coding and multimedia - Advanced cryptology:elliptic curves, cryptanalysis - Multimedia applications and watermarking - Error correcting codes and fault-tolerance

6 33

Elbaz-Vincent, Leprévost, Gillard Cayre, Ebrahimi, Bas Pernet; Patchichkine, Brossier

Choose one of the two following elective 3 ECTS - Elective 1. Smart card security, certif. and norms 3 Autreau, Buzon - Elective 2. New trends in cryptography 3 Perdrix, Malha, Mainguet, Elbaz-Vincent

Page 7: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Examples of Master thesis   Integration of zero-knowledge authentication on smart card [C-S]   Secure server for SIP telecommunications [INRIA]   Integration of strong authentication in an information system [British Telecom]   Management of identity for printer access [Helwett-Packard, Germany]   Reconfiguraton of a secure infrastructure [France-Telecom, Grenoble]   Conception et réalisation d’un composant de sécurité [Ministère Défense, Paris]   Analysis and deployment of a confidential data service [Solucom, Nantes]   Integration of biometrics in crypto protocols [SAGEM, Paris]   Hidden channel attacks [SAGEM, Paris]   Windows CardSpace components in a smart card [Gemalto, La Ciotat]   Secure loading of jar in JavaCard3.0 [Gemalto, La Ciotat]   Lightweight electronic signature [Dictao, Paris]   Wireless infrastructure for emergency comm. [Wisecomm, Germany]   Secure and anonymous communication on internet [UL, Luxembourg]   Test of crypto-secure random generators [LTSI, Lyon]   Security analysis of a medical data protection scheme [Philips, Eindhoven]   Supervision of the CEA computer infrastructure [CEA, Grenoble]   Security analysis of images watermarking [GIPSA, Grenoble]   Security audit of the SCADA platform [Atos Origin, Grenoble]   ….

Page 8: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Organization of courses   1 ECTS Scientific Unit = 10h attendency M2P

  3 ECTS = 30H classes / 45H practical work + Homework   18h lectures in English (~ 2 slots de 1h30 / week)   + 12h “training” in ½-group: TP/ Exercises/complts

 given twice: 1 group in English + 1 group in French   => for each unit, choose either French or English, once!

  Courses slots of 1.30 hours per week per student:   8h-9h30 / 9h45- 11h15 / 11h30-13h   13h30/15 / 15h15-16h45 / 17h-18h30

  Additional tutoring (office hours)   on request: see your professors

Page 9: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Elèves-ingénieur (double-inscription)

  Programme = M2 + Cours ingénierie additionnels   Anglais suivi à l’ENSIMAG (+ 2eme langue)   Cours « smart card security » + NTC (ou dans le M2 MI)   module « projet professionnel » constitué :

  -   de la soutenance de stage 2A.   -  du REX, le 1er octobre pm (retour d'expériences sur les stages)

  un cours au choix:   dans le module «environnement et culture » : les lundi après 16h30   Ou dans le module « sciences et pratiques du management » (les 21, 22

et 23) (négociation partenariale, management de l'innovation, Les essentiels du management, Gestion de projet

  PFE (juin) + Thèse Master (sept)   + Sport, 3eme langue, …

Page 10: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Contacts and links   Academic supervisors:

  Director (UJF) Philippe Elbaz-Vincent [email protected]   Co-director (INP) Jean-Louis Roch [email protected]

  Administration: registration, timetable, …   UJF: Sylviane El Gares [email protected]   INP / ENSIMAG: Elena Leibowitch [email protected]

  Links   Planning, timetable: ADE

http://ade52-inpg.grenet.fr/ade/custom/modules/plannings/direct_planning.jsp?projectId=58&login=voirIMATEL&password=imatel&resources=895&days=0,1,2,3,4&displayConfId=6

  Kiosk: https://intranet.ensimag.fr/KIOSK/MasterCSCI/   M2P SCCI http://www-fourier.ujf-grenoble.fr/enseignement/-Master-M2P-S-C-C-I.html   MOSIG http://mosig.imag.fr/MainEn/Grenoble   ENSIMAG http://www.ensimag.fr

Page 11: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

M2 courses   Common core: cryptology and security [15 ECTS]

•  Models for security •  Symmetric and asymmetric cryptology - PKI infrastructures •  System administration and network security

  Elective specialization [12 ECTS] : choose one between   Security of Information Systems [12 ECTS]

•  Advanced system and network security •  Secure hardware architecture •  Distributed algorithms and fault-tolerance •  Secure infrastructure deployment project

  Cryptology, coding and multimedia applications [12 ECTS] •  Advanced cryptology: elliptic curves, cryptanalysis •  Multimedia applications, watermarking •  Coding and fault-tolerance

  Elective course unit [3 ECTS] : choose one between •  Smart card security; audit and normalization [3 ECTS] •  New trends in cryptology: quantum, biometrics, pairings [3 ECTS]

  Master thesis [30 ECTS]

  Note: early september: Specific optional introduction courses   Math [group theory,arithmetics]; linux & programming ; information systems [UML]

Page 12: Sécurité, Cryptologie et Codage des Systèmes d’Informationmoais.imag.fr/membres/jean-louis.roch/perso_html/tmp/2009-09-Ma… · 2008-2009 Brief history & organization Master

2008-2009

Proposition

parcours R crypto   Formation à la recherche en SCCI   Aspects fondamentaux, aussi bien math que info

  2 cours tronc commun (12 ECTS)   Cours sécurité système et réseau avancée [spécialité info, 6 ECTS]   Cours cryptologie avancée [spécialité math, 6 ECTS]   1 cours au choix dans le Master [6 ECTS]

  A priori lié soit à la”spécialité”: info / math-app /math

  M2R: Uniquement les cours obligatoires (pas les training)   Mais travail personnel/assignments supplémentaires pour les M2R

  Et évaluation différenciée (assignments et examen spécifique M2R)   Possibilité aux étudiants M2R de suivre les training en “auditeur

libre” ? (pas une contrainte au niveau horaire)   Cours terminés en janvier, projet final soutenu en juin