CSCI 283/CSCI 172 - Computer Security I - Fall 2006 - George Washington University

Fall 2006 schedule: Tues., 7:10 - 9:40 pm, Rome 204

Text: Computer Security: Art and Science by Matt Bishop. Please check errata for your printing on the website.

Instructor: Poorvi Vora Office: 706 Philips. Office Hours: Tues: 1:30-4:30 pm; Thurs: 10:30 am-noon, 1-2:30 pm.

Grader: Yu-An (Meredith) Sun, email ysun Office: 720 G Office Hours: Wed 4-7:30pm and Tuesday 4:30pm to 7pm.

Homeworks are due by 6 pm on due date. Submit them in Blackboard. No other methods of submission will be accepted. Late HWs are not allowed.

283 and 172 will be graded separately. If you are an undergrad, please consult your adviser before choosing to take 283; graduate credit for 283 is not automatic for undergrads, but all those enrolled in 283 will be graded together.

Course Outline

Slides and notes on this website are not in final form till one week after the lecture covering the material. I often update notes and slides during and after the lecture


Week I, 5 Sept. 2006

Course Outline, Introduction, Classical Ciphers, Stream Ciphers.

Chapters 1, 9.1, 9.2.1, 9.2.2 (no index of coincidence or Kasiski attack), 11.2

Week II, 12 Sept. 2006

Introduction (complete), Classical Ciphers (complete),

Chapters 1, 9.1, 9.2.1, 9.2.2 (no index of coincidence or Kasiski attack)

Quiz 1

Week III, 19 Sept. 2006

Block Ciphers (slightly modified, Sept. 20), Public Key Cryptography

Chapters 9.2.3, 9.3, 9.4, 11.2.2

Quiz 2

Week IV, 26 Sept. 2006

Public Key Infrastructure.

Chapter 10, except 10.2.2, 10.3 and 10.5

HW 1 assigned. Due October 11, 6 pm ON BLACKBOARD

Quiz 3

Week V, 3 Oct. 2006

Access Control Matrix, Access Control Lists, Access Control: Capabilities, Access Control: Locks-Keys and Rings

Chapter 1, 15 upto page 398 (inclusive) excluding section 15.2.4

Quiz 4

Week VI, 10 Oct. 2006

Complete Access Control: Locks-Keys and Rings

Complete Public Key Infrastructure.

Avoiding Replay Attacks and Revision of Birthday Attack.

Begin Security Policy

Chapter 15 excluding section 15.2.4. Chapter 4 excluding 4.5. Read 4.6 on your own.

Quiz 5

Week VII, 17 Oct. 2006

Test 1 on material covered in Lectures I-V

Week VIII, 24 Oct. 2006

Security Policy, Schneier Attack Trees

Chapter 4 (except 4.5 and 4.6) from text

Week IX, 31 Oct. 2006

Security Policy Complete, Confidentiality Policy, Integrity Policy

HW 2 assigned. Due November 9 (typo on hard copy of HW), 6 pm ON BLACKBOARD
Chapters 5.1, 5.2.1, 6.1, 6.2, 7.1, 7.2 from text

Quiz 6

Week X, 7 Nov. 2006

Identity, Authentication

Chapters 14 (upto 14.5 only), 12.

HW 3 assigned. Due November 27, 6 pm ON BLACKBOARD
Quiz 7

Week XI, 14 Nov. 2006

Authentication,

Quiz 8

Week XII, 21 Nov. 2006

Covert Channels, Malware, part of Privacy (upto and including slide no 10)

Quiz 9
Chapters 22 (upto and including 22.5), Chapter 17 (pg 439-447, 17.3.1.2, 17.3.1.3.

Week XIII, 28 Nov. 2006

Privacy, Design Principles and Trusted OS, Risk Analysis,and Special Topics
Quiz 10
Solutions, Quiz 9
Solutions, Quiz 8

Week XIV, 5 Dec. 2006

Test 2 on Lectures: VI, VIII, IX, X, XI, XII


Last Modified 15:16:37, Saturday, 02 December, 2006, local time.