4003-471/4005-784 Privacy & Security

Last Updated 2007/02/01 12:39:43

Go To:


Description *
Instructor *
Syllabi *
Contents *
Assignments *
Links

What's New

2007/02/01:
- Due to a conflict (I must be somewhere off campus at 8:30pm that day), I must cancel my 8-9pm office hour next Tuesday (February 6). I apologize for any inconvenience this may cause.
2007/01/08:
- Our ``final exam'' (end-of-quarter wrap-up session) has been scheduled for Thursday, March 1, 2007, 10:15-12:15, 70-1445.
2006/12/21:
- IMPORTANT: Campus Safety has just informed us that the RIT campus will be "shut down" for the first week of break, from 2006/12/23 (Saturday) until 2007/01/02 (Tuesday). During this time, students will not be allowed into campus buildings, and our lab access security system will be disabled. Lab access will be denied to everyone during this time, including faculty and staff, so even if you could get into the building you would not be able to use any of the labs.
- I've sent a test message to my mailing list for this course. The list contains everyone's CS email address. You should find a copy in your incoming CS email, or wherever you forward your CS email to (if you have set up email forwarding). If you don't receive the test message, please let me know.
2006/12/07:
- The first homework assignment has been posted.
2006/12/04:
- Welcome back to RIT!

Description

This course provides students with an introduction to the issues surrounding security of computer systems and privacy concerns in an increasingly information-based society. The class will consider numerous social issues in computing, including risks and liability involved in using information as well as ethical concerns. Case studies will be used to illustrate both common and historic problems in computer security. Where appropriate, programming exercises will be used to improve understanding of security issues. Exercises may involve group as well as individual projects.

Instructor

Name:	Warren R. Carithers
Office:	3617 Golisano (70-3617)
Phone:	(585) 475-5393
Email:	wrc AT cs.rit.edu

Syllabi

4003-471 Syllabus (undergraduate)
4005-784 Syllabus (graduate)

Course Contents

Below is a rough outline of the topics we will cover. This may change depending on the events of the quarter.

Privacy & Ethics
- General concepts - intellectual property, information
- Major issues - ethics, social responsibility, liability, risks
- Legal issues
- Attacks - personal, corporate
- Defenses
Security
- Overview - types of security (physical, electronic)
- Policies vs. mechanisms
- Computer-specific
  - Operating Systems issues - security models, protection mechanisms
  - Networking aspects - protocols, physical issues
  - Software - common problems
  - Attacks - types, effects, characteristics
  - Defenses - tools, resources
- Other
  - Physical security
  - Policy development and enforcement
Case Studies
- Electronic commerce
- Password security
- Social engineering
- Classic attacks - Morris worm, sendmail, UCB fingerd, etc.