CSC 405 -- Introduction to Computer Security

CSC 405 Introduction to Computer Security

Fall 2006

(This page will be changed frequently. Check before class.)

Lab 3 posted.

Study guide for the final exam

Instructor:

Dr. Peng Ning

Office hours:	3:45pm -- 4:45pm on Mondays and Wednesdays
Office phone:	(919) 513-4457
Fax:	(919) 515-7896
Email address:	pning (a) ncsu.edu
Homepage:	http://www.csc.ncsu.edu/faculty/ning

Teaching assistant:

Yuzheng Zhou

Office hours:	Tuesdays, 1pm - 3pm; EBII, Room 3234
Email address:	yzhou3 (a) unity.ncsu.edu

Class location:

EB I - 1007

Day and time:

Mondays, Wednesdays, 2:20pm -3:35pm.

Course Syllabus:

CSC405-Syllabus.pdf

Mailing list:

csc405-001@wolfware.ncsu.edu

Web page:

http://courses.ncsu.edu/csc405/lec/001/

Message Board:

http://courses.ncsu.edu/csc405/

Lab Resources:

Visit the Lab page.

Note on assignments:

You must use text editor (e.g. MS Word) to complete your homework. Handwritten submissions are not accepted. You should submit hard copies unless otherwise specified.

All work is to be performed individually unless otherwise specified. For the collaborative problems, you are encouraged to form teams of 1-3 members (of students in this class) to cooperate only on those problems. After discussing the problems, please write up your answers individually. Indicate the names of the other members in your team, if any.

You get no extra credit for working alone where collaboration is permitted.

Schedule of classes

Date	Topics	Reading Assignment (Complete before class. Reading assignments are given in the order of importance for each lecture.)	Homework Assignment	Handout
08/23/06	T1. Introduction	Chapter 1		pps, pdf
08/28/06	T2. Basic cryptography	Chapter 2 (pages 35--69)		pps, pdf
08/30/06	Guest Lecture T2. Basic cryptography (Cont'd)	Chapter 2 (pages 69--89)
09/04/06	No Class (Labor Day)
09/06/06	T2. Basic cryptography (Cont'd)	(Optional) Chapter 10	HW1 (Due by 09/20/06) TA's reference Solution	pps, pdf
09/11/06	T3. Program security	Chapter 3 (pages 95--108)		pps, pdf
09/13/06	T3. Program security (Cont'd)	Chapter 3 (pages 108--136)	Lab 1 (Due by 09/25/06)
09/18/06	T3. Program security (Cont'd)	Chapter 3 (pages 137--149)		pps, pdf
09/20/06	T3. Program security (Cont'd)	Chapter 3 (pages 150--175) Optional: StackGuard, TaintCheck, Vigilante	HW2 (Due by 10/04/06) TA's reference Solution
09/25/06	T3. Program security (Cont'd)
09/27/06	T4. Security in conventional OS	Chapter 4 (pages 180--194)		pps, pdf
10/02/06	T4. Security in conventional OS (Cont'd)	Chapter 4 (pages 194--204)	Lab 2 (Due by 10/23/06)
10/04/06	T4. Security in conventional OS (Cont'd)	Chapter 4 (pages 204--208)		pps, pdf
10/09/06	T4. Security in conventional OS (Cont'd)	Chapter 4 (pages 209--226)	HW3 (Due by 10/23/06) TA's reference Solution
10/11/06	Mid-term review
10/16/06	Mid-term exam	Grade Distribution
10/18/06	T5. Multi-level security and trusted operating systems	Chapter 5 (pages 229--250) Part 1A of The Protection of Information in Computer Systems by Jerome Saltzer and Michael Schroeder.		pps, pdf
10/23/06	Review of Mid-Term Exam T5. Multi-level security and trusted operating systems (Cont'd)	Chapter 5 (pages 250--273) David D. Clark and David R. Wilson. “A Comparison of Commercial and Military Computer Security Policies.” In IEEE S&P 1987. David FC. Brewer and Michael J. Nash. “The Chinese Wall Security Policy.” in IEEE S&P 1989.
10/25/06	T5. Multi-level security and trusted operating systems (Cont'd)	Chapter 5 (pages 273--305)	HW4 (Due by 11/20/06) TA's reference Solution
10/30/06	TA's lab session
11/01/06	Guest Lecture (John Sezer)
11/06/06	T5. Multi-level security and trusted operating systems (Cont'd)		Lab 3 (Implementation due by 11/20/06; demo due by 11/30/06)
11/08/06	T5. Multi-level security and trusted operating systems (Cont'd)
11/13/06	T5. Multi-level security and trusted operating systems (Cont'd)			TA's slides on lab pps, pdf
11/15/06	T5. Multi-level security and trusted operating systems (Cont'd)
11/20/06	T5 (Cont'd) T6. Database security	Chapter 6 (pages 309--359)		pps, pdf
11/22/06	No class (Thanksgiving)
11/27/06	T6. Database security (Cont'd)		HW5 (Due by 12/06/06) TA's reference Solution
11/29/06	T6. Database security (Cont'd)			pps, pdf
12/04/06	T6. Database security (Cont'd)			pps, pdf
12/06/06	Final review
12/15/06	Final Exam (1pm -- 4pm)	Grade Distribution