CSC 603: Access Control in the Cloud
- Instructor: Linh B. Ngo
- Office: UNA 138
- Office Hours Fall 2022:
- MWF : 11:00AM-12:00PM (in-person and online)
- TR : 11:00AM-12:00PM (online)
- Email: lngo AT wcupa DOT edu
- Phone: 610-436-2595
Course Description
This course discusses role-based and attribute-based access control (RBAC and ABAC) and their application in cloud computing systems. More specifically, we learn how RBAC and ABAC are used to specify and manage access policies on the wide range of resources available in the cloud, and how RBAC and ABAC can be used to enforce other complex access control scenarios. Hands-on practices are developed using Kubernetes and its access control API.
Learning Objectives
The following are clear, measurable and observable outcomes from taking this course:
- Be able to understand the basic concepts of access control in information security.
- Be able to understand and differentiate between role-based and attribute-based access control
- Be able to apply RBAC/ABAC principles in securing cloud infrastructures.
Recommended Text
- Role-based Access Control by David F. Ferraiolo, D. Richard Kuhn, and Ramaswamy Chandramouli. 2nd Ed, 2007.
- Attribute-based Access Control by Vincent C. Hu, David F. Ferraiolo, Ramaswamy Chandramouli, and D. Richard Kuhn. 2018.
Evaluation Policy
| Assessment | % of Final Grade | CSLO | CSPO |
|---|---|---|---|
| Assignments | 60% | 1,2 | 1, 2 |
| Group Presentations | 30% | 1 | 1, 2 |
| Class Participation | 10% | 1 | 1 |
Grade Scale:
| Grade | Quality Points | Percentage | Equivalents Interpretation |
|---|---|---|---|
| A | 4 | - | Superior graduate attainment |
| A- | 3.67 | - | - |
| B+ | 3.33 | - | Satisfactory graduate attainment |
| B | 3 | - | - |
| B- | 2.67 | - | - |
| C+ | 2.33 | - | Attainment below graduate expectations |
| C | 2 | - | - |
| C- | 1.67 | - | - |
| F | 0 | < 70% | Failure |
D grades are not used. Refer to the Graduate Catalog for description of NG (No Grade), W, & other grades.
Assessments:
- Assignments: Be able to understand and implement complete software program based on pseudocode.
- Presentation: Be able to read and understand research papers on advanced data structures.
- Partition: A mixture of attendance check and degree of participation in class discussion
Note
Assignments that are late are assessed a 10% per day late penalty. Saturday and Sunday are each days.
```
University Policies
Academic & Personal Integrity
It is the responsibility of each student to adhere to the university’s standards for academic integrity. Violations of academic integrity include any act that violates the rights of another student in academic work, that involves misrepresentation of your own work, or that disrupts the instruction of the course. Other violations include (but are not limited to): cheating on assignments or examinations; plagiarizing, which means copying any part of another’s work and/or using ideas of another and presenting them as one’s own without giving proper credit to the source; selling, purchasing, or exchanging of term papers; falsifying of information; and using your own work from one class to fulfill the assignment for another class without significant modification. Proof of academic misconduct can result in the automatic failure and removal from this course. For questions regarding Academic Integrity, the No-Grade Policy, Sexual Harassment, or the Student Code of Conduct, students are encouraged to refer to the Department Undergraduate Handbook, the Undergraduate Course Catalog, the Ram’s Eye View, or the University Website.
Accomodations for Students with Disabilities
West Chester University is committed to providing equitable access to the full WCU experience for Golden Rams of all abilities. Students should contact the Office of Educational Accessibility (OEA) to establish accommodations if they have had accommodations in the past or if they believe they may be eligible for accommodations due to a disability, whether or not it may be readily apparent. There is no deadline for disclosing to OEA or for requesting to use approved accommodations in a given course. However, accommodations can only be applied to future assignments or exams; that is, they can’t be applied retroactively. Please share your letter from OEA as soon as possible so that we can discuss accommodations. If you have concerns related to disability discrimination, please contact the university’s ADA Coordinator in the Office of Diversity, Equity, and Inclusion or 610-436-2433
The University’s Americans with Disabilities policy is available on the website. If you encounter an area of this course that is not accessible to you, please contact me.
University-Excused Absences Policy
Students are advised to carefully read and comply with the University-Excused Absences Policy, including absences for university-sanctioned events, contained in the WCU Undergraduate Catalog. In particular, please note that the responsibility for meeting academic requirements rests with the student, that this policy does not excuse students from completing required academic work, and that professors can require a fair alternative to attendance on those days that students must be absent from class in order to participate in a University-Sanctioned Event.
Reporting Incidents of Sexual Violence
West Chester University and its faculty are committed to assuring a safe and productive educational environment for all students. In order to comply with the requirements of Title IX of the Education Amendments of 1972 and the University’s commitment to offering supportive measures in accordance with the new regulations issued under Title IX, the University requires faculty members to report incidents of sexual violence shared by students to the University's Title IX Coordinator. The only exceptions to the faculty member's reporting obligation are when incidents of sexual violence are communicated by a student during a classroom discussion, in a writing assignment for a class, or as part of a University-approved research project. Faculty members are obligated to report sexual violence or any other abuse of a student who was, or is, a child (a person under 18 years of age) when the abuse allegedly occurred to the person designated in the University Protection of Minors Policy. Information regarding the reporting of sexual violence and the resources that are available to victims of sexual violence is set forth at the WCUPA Sexual Misconduct website.
Inclusive Learning Environment and Anti-Racist Statement
Diversity, equity, and inclusion are central to West Chester University’s mission as reflected in our Mission Statement, Values Statement, Vision Statement and Strategic Plan: Pathways to Student Success. We disavow racism and all actions that silence, threaten, or degrade historically marginalized groups in the U.S. We acknowledge that all members of this learning community may experience harm stemming from forms of oppression including but not limited to classism, ableism, heterosexism, sexism, Islamophobia, anti-Semitism, and xenophobia, and recognize that these forms of oppression are compounded by racism.
Our core commitment as an institution of higher education shapes our expectation for behavior within this learning community, which represents diverse individual beliefs, backgrounds, and experiences. Courteous and respectful behavior, interactions, and responses are expected from all members of the University. We must work together to make this a safe and productive learning environment for everyone. Part of this work is recognizing how race and other aspects of who we are shape our beliefs and our experiences as individuals. It is not enough to condemn acts of racism. For real, sustainable change, we must stand together as a diverse coalition against racism and oppression of any form, anywhere, at any time.
Resources for education and action are available through WCU’s Office for Diversity, Equity, and Inclusion (ODEI), DEI committees within departments or colleges, the student ombudsperson, and centers on campus committed to doing this work (e.g., Dowdy Multicultural Center, Center for Women and Gender Equity, and the Center for Trans and Queer Advocacy).
Guidance on how to report incidents of discrimination and harassment is available at the University’s Office of Diversity, Equity and Inclusion.
Emergency Preparedness
All students are encouraged to sign up for the University’s free WCU ALERT service, which delivers official WCU emergency text messages directly to your cell phone. For more information, visit https://www.wcupa.edu/wcualert. To report an emergency, call the Department of Public Safety at 610-436-3311.
Electronic Mail Policy
It is expected that faculty, staff, and students activate and maintain regular access to University provided e-mail accounts. Official university communications, including those from your instructor, will be sent through your university e-mail account. You are responsible for accessing that mail to be sure to obtain official University communications. Failure to access will not exempt individuals from the responsibilities associated with this course.