CS 2530: Computer and Network Security

Spring 2009

[ Home ] [ Policies ] [ Lectures ] [ Homework ] [ Project ]

General Information

Instructor:
    Prof. Adam J. Lee
    Office: 5325 Sennott Square
    Email: adamlee -at- cs.pitt.edu
    Phone: 412-624-8416
    Office hours: M 1-2, W 1:30-2:30

Lecture:

MW 4:00 - 5:15 PM, 6516 SENSQ

Textbook:
    Matt Bishop
    Computer Security: Art and Science
    Addison-Wesley

Optional references:

Ross Anderson, Security Engineering, Wiley
Charles Pfleeger and Shari Lawrence Pfleeger, Security in Computing, Prentice Hall
Bruce Schneier, Applied Cryptography, Wiley

Announcements

[2/24/09] A short description of my expectations regarding your project progress report has been posted on the project page. We will discuss this in lecture on 2/25.
[2/9/09] Homework 3 is posted and will be due on February 18.
[1/20/09] Homework 2 is posted and will be due on January 28.
[1/8/09] Homework 1 is posted and will be due on January 14.
[1/1/09] Welcome to CS 2530! Please check this web page at least 2-3 times per week for important announcements.

Course Description

The goal of the proposed course is to provide our graduate students the necessary background and hands on experience to do well in systems research or advanced development with an emphasis on security.

Prerequisites: CS 1550 or consent of instructor

Grading:

25% Midterm
25% Homework
40% Project
10% Subjective

Tentative Syllabus

Introduction: CIA properties; vulnerabilities, threats, and attacks; design principles
Policy Models: MAC/DAC; Bell-LaPadula, Biba, Clark/Wilson, Chinese Wall, etc.
Cryptography: Symmetric key algorithms, public key cryptography, secret sharing and threshold cryptography
Authentication: Protocols and mechanisms
Authorization: Identity based, attribute based, etc.
OS and Application Security: Integrity of mechanism, malicious logic
Network Security: Attacking protocols, denial of service, intrusion detection
Advanced Topics: Decided based upon student interest