4040-840 Security and Trust

all-inOne, section 2.

2. General Information

Course Title:: 4040-840 Security and Trust

Instructors:: Dr. Stanislaw P. Radziszowski(spr@cs.rit.edu)
Dr. Hans-Peter Bischof (hpb@cs.rit.edu)

Office:

spr:70-3657
hpb: 70-3005

Telephone:

spr: (585) 475-5193
hpb: (585) 475-5568

Office Hours:

spr: office hours: M 4-5pm, TR 8-9pm (if nobody comes by 8:15pm I may go home), or send email
hpb: T/R: 10-12
and by appointment, or send email

Course Home Page:
http://www.cs.rit.edu/~hpb/Lectures/20112/S_T
CS Home Page http://www.cs.rit.edu/ PhD Home Page http://www.rit.edu/~gccis/index.php3?dir=phd/&var=phdindex

2.1. Please Read This Paragraph

You will learn in this course patterns how to defend and how find out vulnerabilities of a system. Do not try this.

2.2. Syllabus

You may find the syllabus here.

2.3. Course Goals

The goal of the course is to introduce students to security and trust problems and solutions in a computer system.

Topics include

cryptography,
network security,
policies and procedures,
access control,
secure software engineering, and
human factors of security.

2.4. Texts

William Stallings: Cryptography and Network Security (4th Edition) (Hardcover), ISBN: 0-131-873164
Charles P. Pfleeger and Shari L. Pfleeger: Security in Computing, ISBN: 0-130- 35548-8
Bruce Schneier (2000). Secrets & Lies - Digital Security in a Networked World John Wiley & Sons, 2000, ISBN 0-471-25311-1
Egger, F.N. & D. Abrazhevich (2001). Security & Trust: Taking Care of the Human Factor. Electron ic Payment Systems Observatory Newsletter, Vol. 9, Joint Research Center of the European Commiss ion, Seville (Spain). http://www.ecommerce.com/research/publications/epso.htm
Diller, S., Lin, L., and Tashjian, V. "The Evolving Role of Security, Privacy and Trust in a Dig itized World." HCI Handbook. (http://research.umbc.edu/~asears/HCIHandbook/diller.html see www.a ndrewpatrick.ca for several other links to security and trust sites
Smith, S. "Position Paper: Effective PKI Requires Effective HCI." accessed from the web: www.cs.dartmouth.edu/~sws/papers/hci.pdf
Papers provided by the instructor

2.5. Grading

Exams:          50%
Case Studies:   50%

2.6. Home Works

The homeworks are done in teams of two. The teams may have to meet with a grader or a instuctor.

Each team member must be able to explain the solution to her/him. The grade for each project is based on the correctness, your explanation, and the quality of the solution. The grades can differ for each student on the same team.

2.7. Case Studies

There will be two case studies. The students have to choose the case study in week 1 and in week 4. The teams have to give a presentation in week 4 and week 8.

The choosing of the case study will follow this algorithm:

1.   The instructor(s) will put numbered pieces of paper in a hat (1..n)
2.   Each team pulls out a piece of paper of the hat
3.   The choosing of the case studies is done in
     order of the numbers on the paper each team pulled out

The case studies and are done in teams of two. The teams may have to meet with a grader or a instuctor. Each team has to do a theoretical and an applied case study.

2.8. Other Things

Course Organization

lectures
homework
cheating

Academic Honesty

--: Code of Conduct
--: You may help each other freely to complete homework's as the purpose of the homework's is to increase your understanding.
--: This does not mean that someone else can do your homework for you. Any homework you submit must contain your significant intellectual contribution.
--: The corollary is that you may not do someone else's work for them either. A willing supplier of the material is as guilty of academic dishonesty as the receiver.
--: Any help you receive from someone must be acknowledged in the work submitted. Failure to acknowledge the source of a significant idea or approach is considered plagiarism and not allowed.

Academic dishonesty is dealt with severely:

--: You will receive a grade of F for the course.
--: A note describing the details of your case will become part of your academic record.
--: Repeated offenses or more serious violations may result in suspension or
--: Violations of the Code of Conduct... can also result in suspension, expulsion and even criminal charges.