Tentative Lecture Plan

 

Tentative lecture flow will be as follows. Some changes may occur depending upon the pace of the class. In the table below, texts in GREEN in Topics column represent notes I add after the class - in particular with regards to coverage.

Some helpful notes: Some previous experiences of the students and mine that may be helpful to you are as follows:

·         Students who have taken this course have felt that this is a very dense course - primary reason for it being dense is our goal to maintain the NSA IA standards.

·         In earlier offerings of this course, students who lacked strong mathematical background had found the first half of the course, which is focused on theoretical issues, quite challenging. Students are strongly recommended to read the materials before it is covered in the class. Most of the lecture materials will be similar to earlier offerings of the course, with updates and corrections.

·         The second half of the course content is much softer and less effort is needed to understand the concepts - but a lot of reading is required. This helps students to concentrate more on projects and labs/programming assignment.

·         The course is designed primarily with the overall security track in mind. The coverage is also expected to provide a foundational knowledge and broad understanding of security field, if this is the only course the student plan to take.

Tentative Course Schedule

 

 

Lecture/Date

 

Topics

Slides

Week 1

(Aug 28)

 

Introduction to the course;

Chap 1: Overview of Security

 

[Covered till Slide 23 Slides]

(Lecture 1)

(PDF)

 

 

Week 2

(Sept 4)

Chap 12: Secure Design Principles

Chap 2.2  Access Control Matrix

 

Access control in OS

 

Unix (Garfinkel book in Text book list in main page)

 

Microsoft Reference(http://technet.microsoft.com/en-us/library/cc781716.aspx)

 

[Covered till Slide 29 Slides]

(Lecture 2)

(PDF)

Week 3

(Sept 11)

Mathematical Review

(Bishop's brown book has intro on these topics - Logic, Induction and Lattice)

+ Chapter 2

 

(Lecture 3.1)

(PDF)

 

(Lecture 3.2)

(PDF)

Week 4

(Sept 18)

 Chap 3 : HRU Access Control Model and results

 (Lecture 4)

(PDF)

Week 5

(Sept 25)

Guest lecture by Amirreza (Continued Lecture 4 and Information Privacy)

 

Privacy materials: Click1, Click2

 (Lecture 5)

 

Week 6

(Oct 2)

Note: There is a quiz today !!

Chap 4 - 6 : Security Policies, Confidentiality and Integrity Models (continued from last week)

Chap 9: Basic Cryptography and Network Security

 

(Lecture 6)

(PDF)

 

(Lecture 7)

(PDF)

 

(Oct 9)

 Fall Break (No Class)

Week 8

(Oct 16)

 

 Basic Cryptography and Network Security (Contd. By Amir)

 

Week 9

(Oct 23)

 Midterm

 

Week 10

(Oct 30)

 Key management, Network security

 (Lecture 8)

(PDF)

 

Week 11

(Nov 6)

Lecture 9: Authentication, identity, vulnerability analysis (Chap 11, 20)

Lecture 10: IDS, Auditing, Firewalls (Chap 22, 21)

 

 (Lecture 9)

(PDF)

 (Lecture 10)

(PDF)

Week 12

(Nov 13)

Chap 6, 7 : Integrity Models, Hybrid Models, RBAC (for RBAC refer to NIST Standard paper in Reading List)

[recommended reading “The Economic Impact of Role-Based Access Control”]

 (Lecture 11)

(PDF)

Week 13

(Nov 20)

 

Malicious code (Chapters: 19)

Secure coding

(Chapter on String and Integer in the following book available online:

http://proquest.safaribooksonline.com/programming/cplusplus/9780768685923)

(Lecture 12)

(PDF)

Week 14

(Nov 27)

Note: There is a quiz today !!

Risk Analysis

Legal Issues (Stallings book)

Chap 18: Evaluation standards

 (Lecture 13)

(PDF)

Week 15

(Dec 4)

 

Week 16

(Dec 11)

Final Exam