Tentative Lecture Plan


Tentative lecture flow will be as follows. Some changes may occur depending upon the pace of the class. In the table below, texts highlighted in GREEN in Topics column represent notes I add after the class - in particular with regards to coverage.

Some helpful notes: Some previous experiences of the students and mine that may be helpful to you are as follows:

·         Students who have taken this course have felt that this is a very dense course - primary reason for it being dense is our goal to maintain the NSA IA standards.

·         In earlier offerings of this course, students who lacked strong mathematical background had found the first half of the course, which is focused on theoretical issues, quite challenging. Students are strongly recommended to read the materials before it is covered in the class. Most of the lecture materials will be similar to earlier offerings of the course, with updates and corrections.

·         The second half of the course content is much softer and less effort is needed to understand the concepts - but a lot of reading is required. This helps students to concentrate more on projects and labs/programming assignment.

·         The course is designed primarily with the overall security track in mind. The coverage is also expected to provide a foundational knowledge and broad understanding of security field, if this is the only course the student plan to take.

Tentative Course Schedule







Week 1

(Jan 6)

Introduction to the course;

Chap 1: Overview of Security

Chap 12: Design principles


(Lecture 1)

Week 2

(Jan 13)

No Class (Out of town).

Recorded lecture for the “Design Principles” part from Lecture 1



Week 3

(Jan 20)


Chap 2.2  Access Control Matrix


Access control in OS Unix

(Garfinkel book in Text book list in the main page)


Microsoft Reference (http://technet.microsoft.com/en-us/library/cc781716.aspx)



(Lecture 2.1)


Math Review

(Lecture 2.2)


Week 4

(Jan 27)




Chap 3 : HRU Access Control Model and results

Chap 4 - 6 : Security Policies, Confidentiality and Integrity Models


[Covered Lecture 2.2 & Covered till Slide 23 of Lecture 3]


Chap 4 - 6 : Security Policies, Confidentiality and Integrity Models


(Lecture 3)

Week 5

(Feb 3)


Chap 4 - 6 : Security Policies, Confidentiality and Integrity Models

Chap 7 : Hybrid Models: Clark Wilson, Chinese Wall,

[recommended readings:


 The Economic Impact of Role-Based Access Control”]


(Lecture 4)

(Lecture 5)

Week 6

(Feb 10)


Chap 9: Basic Cryptography and Network Security


(Quiz2: THERE WILL BE A QUIZ COVERING Lecture 3 onwards)



(Lecture 6)


Week 7

(Feb 17)


Continue Lecture 6 (Continue Lecture 6: from Cryptographic Checksum function)

Continue Lecture 6

Week 8

(Feb 24)

Chap 10, 11: Key management, Network security

(Lecture 7)

Week 9

(Mar 2)


Week 10

(Mar 9)

Spring Break  

Week 11

(Mar 16)


Continue Lecture 7 (After Slide 26)

Authentication & Identity (Chap 11)


(Lecture 8)

Week 12

(Mar 23)


Malicious code (Chapters: 19)

String Vulnerabilities and Race Conditions

(Chapter on String from Seacord’s Secure Programming in C/C++)


Vulnerability Classification, Risk Management


(Lecture 9)


(Lecture 10)

Week  13

(Mar 30)


(Continue Lecture 10)

Information Privacy (including Healthcare privacy)


(Lecture 11)

Week 14

(Apr 6)


(Continue Lecture 11)

IDS, Auditing, Firewalls (Chap 22, 21)

Legal Issues (Stallings book; Chap 18), Physical Security


(Lecture 12)


(Lecture 13)

Week  15

(Apr 13)


(Continue Lecture 13, Slide 15)

Healthcare Security

[References papers (Paper1, Paper2) ]


(Lecture 14)

Week  16

(Apr 20)


(Continue Lecture 14)


SQL Injection / Cross-site Scripting

Quick Review

(Lecture 15)

Week  16

(Apr 27)