CSCI 283/CSCI 172 - Computer Security I - Fall 2005 - George Washington University

Fall 2005 schedule: Tues., 7:10 - 9:40 pm, Gelman 607

Text: Computer Security: Art and Science by Matt Bishop. Please check errata for your printing on the website.

Instructor: Poorvi Vora Office: 706 Philips. Office Hours: 2-5 pm, Tues.

Grader: Yu-An (Meredith) Sun, email ysun Office: 720 G Office Hours: 12:30-2, and 5-6:30, Tues. and 4-7 Thurs.

Homeworks are due by 6 pm on the day they are due which is now the day after class . Submit them in Blackboard. No other methods of submission will be accepted.

In-semester test brought forward by two weeks. The test will be on 18 October and not on 1 November as mentioned in first handout. See new handout.


Week I, 6 Sept. 2005

Course Outline

Introduction

Access Control Matrix

Access Control Lists

Chapters 1 and 2 from text.

Week II, 13 Sept. 2005

Access Control: Capabilities

Access Control: Locks-Keys and Rings

Basic Results: HRU, Take-Grant Models

Chapter 15 from text. Do not do Chapter 3 from text, use only slides for Basic Results.

Reading:
Niklas Frykholm. Countermeasures against buffer overflow attacks.
MH Harrison, WL Ruzzo, and JD Ullman. Protection in operating systems. Communications of the ACM, 19(8), pages 461--471, 1976

Week III, 20 Sept. 2005

Security Policy

Security Policy Addendum. These are extra slides that contain some diagrams that students found useful when I presented them in class.

HW 1 Due 27 September 2005 by midnight, as a special case. HWs are usually due by 6 pm

Chapter 4 (except 4.5 and 4.6) from text

Week IV, 27 Sept. 2005

Part 1: We completed the Security Policy material from Week III.

Confidentiality

Integrity and Hybrid Models

Chapters 5.1, 5.2.1, 6.1, 6.2, 7.1, 7.2 from text

Week V, 4 October 2005

Classical Ciphers Some slides removed from original set

HW 2 Problems 1, 2 and 4 due 12 October 2005 by 6 pm; Problems 3 and 5 due 26 October 2005 by 6 pm.

HW 3 Due 28 October 2005 by 6 pm. Ciphertext, HW 3

HW 4 Due 2 November 2005 by 6 pm.
Sample input, HW4, Problem 1
Sample Output, HW 4, Problem 1
Sample input, HW 4, Problem 2
Sample Output, HW4, Problem 2
Note that some typos in HW 4 were fixed, on Saturday, 29 October.

Chapters 9.1, 9.2.1, 9.2.2 from text

Week VI, 11 October 2005

Part 1: Complete Classical Ciphers from Week V.

Block Ciphers

Security properties of BLP corrected in slides, see Confidentiality

Chapter 9.2.3.


HW 3 deadline delayed by two days because of CS 212 test on same day as two HW submissions, and because a number of students are probably taking CS 212. New deadline for HW3: 28 October 6 pm.

Week VII, 18 October 2005

Test. Material covered by end of class, 4 October 2005.

Week VIII, 25 October 2005

Part 1: Midterm Results and Solutions.

Part 2: Complete Block Ciphers from Week VI.

Public Key Cryptography

Chapter 9.3.1

Week IX, 1 November 2005

Part 1: Complete Public Key Cryptography

Public Key Infrastructure

HW 5 assigned. Due 16 November 6 pm

Chapters 9.3, 9.4, Digital signatures only from slides, not from text, 10.1, 10.2.3

Week X, 8 November 2005

Complete Public Key Infrastructure

Stream Ciphers.

Time Permitting: Identity.

Chapters 10.4, 11.2, 14 (upto 14.5, time permitting)

Week XI, 15 November 2005

Complete Identity.

Authentication

Chapters 14 (upto 14.5 only), 12.

HW 6 assigned. Due 2 December.

Week XII, 22 November 2005

Malicious Logic

Risk Analysis and Ethical Issues

Chapters: 22 - upto and including 22.5.

Week XIII, 29 November 2005

Information Flow and Covert Channels

Database Privacy

Steganography.

References

L. Sweeney. ``k-anonymity: a model for protecting privacy''. International Journal on Uncertainty, Fuzziness and Knowledge-based Systems, 10 (5), 2002; 557-570. PDF

L. Sweeney. ``Achieving k-anonymity privacy protection using generalization and suppression''. International Journal on Uncertainty, Fuzziness and Knowledge-based Systems, 10 (5), 2002; 571-588. PDF

``Statistical Policy Working Paper 22 - Report on Statistical Disclosure Limitation Methodology'', Chapter 2, Federal Committee on Statistical Methodology, May 1994. PDF

Week XIV, 6 December 2005

Final: Lectures 6, 8-13.


Last Modified 19:53:29, Wednesday, 20 September, 2006, local time.