 | CS 590-I: |  |
Directory of Topics
Course Description
This course is intended as a complement to CS 555, Data Security and Cryptography. It is an intro course in basic concepts in information security and management. It is not an in-depth course in cryptographic techniques or algorithms. Eventually, this course will become CS 526.
Catalog description: Basic notions of confidentiality, integrity, availability. Authentication models. Protection models. Security kernels. Audit. Intrusion detection. Operational security issues. Physical security issues. Personnel security. Policy formation and enforcement. Legal aspects. Identification and authentication in local and distributed systems. Classification and trust modeling. Risk assessment.
Course Schedule and Topics
The following is a schedule of topics by week. This is approximate, and may change based on class interest, availability of outside speakers, and other factors.
Date | Topic | Readings |
|---|---|---|
Introduction | Book, chapter 1 | |
Intro to Cryptography I | Book, chapter 2 | |
Intro to Cryptography II | Book, chapter 3 & 4 | |
Applications security | Book, chapter 5 | |
OS Security | Book, chapter 6 | |
Review and Catch-up | ||
Trusted systems | Book, chapter 7 | |
Network security | Book, chapter 9 | |
Administering security | Book, chapter 10 | |
Legal & Ethical concerns | Book, chapter 11 | |
Incident response, intrusion detection | ||
Computer crime investigation | ||
Review and conclusion | ||
7-9pm in GRIS 280 |
Course Details
Credit
3 class hours, 3 credit hours
Scheduling
Spring 2000, MWF 11:30-12:20No classes on Jan 17 (MLK Birthday), March 11-19 (Spring break).
Midterm is in class on March 10. Final exam is during the week of May1.
Location
REC 122
Instructor
Gene SpaffordOffice
REC 216-C (inside 217)Office Hours
- M 10-11, Th 1-3
- Also by appointment (arrange with <walls@cerias.purdue.edu>)
Phone
- 49-47825
Assistant
Kaichuan HeOffices
- CS G18
Office Hours
- T 2:30-5:30
F 2:30-5:30Phone
- x4-7848
Prerequisites
CS 503 (Operating Systems)
Grading
Item | Percentage |
|---|---|
Homeworks | |
Midterm | |
Final exam | |
Texts & Readings
Eventually, these will be placed on reserve in the Math/Science library (MATH).
Reading list to be augmented as the semester progresses
Textbook
Security in Computing (2nd Edition), by Charles P. Pfleeger, Prentice-Hall, 1997.
Auxiliary Texts
Intranet Security, by Linda McCarthy, Prentice-Hall, 1997.Applied Cryptography, by Bruce Schneier, John Wiley & Sons, 1995.
Practical Unix & Internet Security, Simson Garfinkel and Gene Spafford, O'Reilly, 1996.
@ Large: The Strange Case of the World's Biggest Internet Invasion, by David H. Freedman and Charles C. Mann, Simon & Schuster, 1997.
Web-based Readings
- Chapter 27 of Practical Unix & Intenet Security, Garfinkel & Spafford
- PFIRES Technical Report, CERIAS
- Reflections on Trusting Trust, Ken Thompson, from CACM,Vol. 27, No. 8, August 1984.
- The Internet Worm Program: An Analysis; ACM Computer Communication Review; ACM Press, New York, NY; 19(1), pp. 17-57, Jan 1989.
- An Analysis of the Internet Worm; Proceedings of the European Software Engineering Conference 1989; Springer-Verlag, Berlin, Germany; pp. 446-468, Sep 1989.
- A Simple Scheme to Make Passwords Based on One-Way Functions Harder to Crack;University of Arizona Technical Report TR94-34; 1994.
- The Design of a System Integrity Monitor: Tripwire; Gene Kim and Eugene H. Spafford; COAST TR 93-01; 1993.
- Writing, Supporting, and Evaluating Tripwire: A Publically Available Security Tool; Gene Kim and Eugene H. Spafford; COAST TR 94-04; 1994.
- CIAC description of denial of service attacks; DoE CIAC; 2000.
- Here is some information on the Beale Ciphers. Here is the text of the original pamphlet from 1885 describing the ciphers.
- Here is Presidential Executive Order 12958 on the policies for classification of government documents.
- A report (and associated appendix) on the security problems at DoE National Laboratories (e.g., Los Alamos).
- The report on John Deutch's misuse of classified systems. Sometimes the enemy of security is the person in charge of protecting it!
- Yet another GAO report on the problems with security in government systems because of no high-level support or accountability.
Web-based Resources
The CERIAS Hotlist
Homework
Due date | Assignment |
|---|---|
Friday, Feb 4 | 1.1, 1.5, 1.6, 1.10, 1.12, 2.2, 2.5, 2.9, 2.11, 2.17, 2.20, 2.23, 2.26 |
Monday, Feb 14 | 3.4, 3.5, 3.10, 3.11, 3.18, 3.19, 3.20, 4.7, 4.11, 4.18, 4.28, 4.30 |
Friday, March 3 | 5.2, 5.3, 5.8, 5.12, 5.13, 6.1, 6.2, 6.4, 6.12, 6.14, 6.17, 6.24 |
Friday, April 14 | 7.4, 7.5, 7.7, 7.11, 7.14, 7.18 |
Monday, April 17 | |
Monday, April 24 | 9.3, 9.6, 9.11, 9.21, 10.1, 10.2, 10.4, 10.5 |
Research Project
A research project will be announced later in the semester. This will be due during the last week of classes.
Miscellaneous Information
Students are encouraged to attend the weekly security seminar.
Course Policies
All of my courses operate under the same general policies and standards. My students are expected to study and understand these policies. Potential students are encouraged to check these out before signing up for one of my classes.