Syllabus CS 430 Introduction to Computer Security Winter 2016

Transcription

1 Syllabus CS 430 Introduction to Computer Security Winter 2016 Meeting Times Instructor TA Textbooks Lect: 3:00-3:50 M, Tu, Wed, Th, HB 106 Lab: 3:00-3:50 M, HB 203 Dr. Razvan Andonie, HB 214-E, Office hours Joseph Lemley, Information Security: Principles and Practice, 2 nd Edition, by Mark Stamp Objectives After completing this course you should be knowledgeable of the major technical security challenges in each of the following four areas: cryptography, access control, protocols, and software. Topics We will cover selected security topics in cryptography, access control, protocols, and software. In addition, we will cover special cybersecurity topics related to China, counterterrorism, and machine learning. Grading Projects, homework, and other work as assigned 50% Exams (2-25% each) 50% Grade Distribution: A A B B B C C C D D D F

2 Late submission of assignments is generally not accepted. No partial credit for late assignments will be offered. Resources The textbook website is at where you!ll find PowerPoint slides and Errata. Other Useful Resources! A Bug Hunter's Diary: A Guided Tour Through the Wilds of Software Security, Tobias Klein, No Starch Press, 2011.! Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software, Michael Sikorski and Andrew Honig, No Starch Press, 2012.! Software Reverse Engineering (SRE) website.! Network Security: Private Communication in a Public World, second edition, Charlie Kaufman, Radia Perlman, and Mike Speciner, Prentice Hall, 2002, ISBN: ! Security Engineering: A Guide to Building Dependable Distributed Systems, Ross Anderson, John Wiley & Sons, Inc., 2001, ISBN: ; see Ross Anderson's Security Engineering website where you can obtain a free (and legal) copy of the 1st edition of the book.! Security in Computing, third edition, Charles P. Pfleeger and Shari Lawrence Pfleeger, Prentice Hall, 2003, ISBN: ! Applied Cryptography: Protocols, Algorithms and Source Code in C, second edition, Bruce Schneier, John Wiley & Sons, Inc., 1995, ISBN: ! Counter Hack Reloaded: A Step-by-Step Guide to Computer Attacks and Effective Defenses, Ed Skoudis with Tom Liston, Prentice Hall, 2006, ISBN: ! Computer Viruses and Malware, John Aycock, Springer, 2006, ISBN. Course Schedule Date Topic Readings Assignments 1/5 Introduction Syllabus & Ch. 1 1/6 Preliminaries: Network Security Basics Appendix A-1 1/7 Preliminaries: Math Essentials 1/11 Lab Day 1/12 1/13 Crypto Basics: Classic Crypto Crypto Basics: Modern Crypto 1/14 Invited talk Appendix A-2 Ch 2 Read: Communication Theory of Secrecy Systems, by C. E. Shannon Ch 2 Project 1

3 1/18 1/19 1/20 Martin Luther King Jr. Day (no classes) Symmetric Key Crypto: Stream Ciphers (A 5/1, RC4) Symmetric Key Crypto: Block Ciphers (Feistel, DES, 3DES, AES, TEA, Block Cipher Modes, Integrity) Ch 3 Read: /germany/inside-the-nsa-s-waron-internet-security-a html Ch 3 1/21 Invited talk 1/25 Lab Day 1/26 1/27 1/28 Knapsack RSA, Diffie- Hellman Elliptic Curve Cryptography, Public Key Notation & Infrastructure 2/1 Lab Day 2/2 Midterm Exam Project 1 due Project 2 Project 2 due Project 3 2/3 Hash Functions Ch 5. Omit 5.6, /4 Hash Functions Ch 5. Omit 5.6, /8 Lab Day Project 3 due Project 4 2/9 Authentication Ch 7 /10-popular-password-crackingtools/ 2/10 Authorization Ch 8. Omit 8.4.1, 8.4.2, /11 Simple Authentication Protocols Ch 9. Omit 9.4

4 2/15 2/16 2/17 2/18 President's Day (no classes) Real-World Protocols (SSH, SSL, Kerberos) Real-World Protocols (WEP, GSM) Software Flaws and Malware 2/22 Lab Day 2/23 2/24 2/25 Software Flaws and Malware Insecurity in Software Insecurity in Software 2/29 Lab Day Ch 10. Omit Ch 10 Ch 11 Ch 11 Ch 12 Ch 12 Project 4 due Project 5 3/1 OS and Security Ch 13 3/2 OS and Security Ch 13 3/3 Cyberwarefare 3/7 Lab Day Project 5 due 3/8 3/9 Cyber Attacks and Countermeasures Machine Learning in Cybersecurity 3/10 Review Ch /15 Final Exam (2:00-3:30) Honor Code: All work turned in for credit, including exams and all components of the project, are to be the work of the student whose name is on the exam or project. For all project components, the student can receive assistance from individuals other than the instructor only to ascertain the cause of errors. Thus you can get help if you need it to figure out why something doesn't work. You just can't get help from anyone, other than the instructor or TA, to figure out how to make something work. All solutions turned in for credit are to be your individual work and should demonstrate your problem solving skills, not someone else's. Help each other understand and debug the programming assignments. However, you should write the code for your programs yourself. Writing it yourself is the only way you will learn. Since everyone is writing their own code, no two programs should be the same or so similar that I could convert one to the other by a simple mechanical transformation (e.g. changing variable names and comments). I consider this plagiarism and a violation of academic code. The following text should appear on all assignments:!i pledge that I have neither given nor received help from anyone other than the instructor for all program components included here.! First violation: Students must meet with the instructor. In most cases, the grade will be split between the authors of the copied programs.

5 Second violation: Students will receive no credit for the assignment, an incident letter will be placed on file in the Computer Science Department, and the matter referred to the Computer Science Department Chair. Class Attendance: Class attendance is expected and recorded. ADA Statement: Students with disabilities who wish to set up academic adjustment in this class should give me a copy of their "Confirmation of Eligibility for Academic Adjustment" from the Disability Support Services Office as soon as possible so we can discuss how the approved adjustment will be implemented in this class. Students without this form should contact the Disability Support Services Office, Buillon 205 or dssrecept@cwu.edu or Caveat: The schedule and procedures for this course are subject to change. It is the student's responsibility to learn of and adjust to changes.