CS 426: Computer Security

List of Topics (By Week):

Introduction. Issues of terminology and underlying themes. Included are issues of basic threats, vulnerabilities, and goals.
Risk analysis and policy formation. Issues of audit and control.
Personnel and Physical Security. Issues of how to protect physical information infrastructure, and how to select and protect personnel involved with security.
Encryption Basics. Substitution and permutation ciphers. Attacks on encryption. Block vs. stream ciphers.
Encryption II. Public key cryptography, digital signatures, escrowed and multi-keyed algorithms.
Applying encryption. Key management, electronic commerce and digital cash, end-to-end arguments.
Authentication and identification. Who are you and how do we know that?
Malicious code. Viruses, worms, etc. Message digests and scanning as protection methods.
Models of security. Defining security. Multi-level security. Labeling.
Assurance methods. Formal methods, penetration testing, monitoring, auditing.
Basic DB security. Coverage of locking, inference protection, and auditing.
Network Security I. This is coverage of problems related to computing in a network, including eavesdropping and intrusion.
Network Security II. Higher-level problems of security, including secure time, authentication, quality of service, etc.
Intrusion and misuse detection and response.
Issues of law and ethics. Discussion of legal issues relating to intellectual property, computer abuse, and law enforcement. Also discussion of additional ethical issues not discussed previously in the semester.

1998.08

Last Updated: Apr 25, 2017 4:48 PM