Course Contents

The course will introduce students into the current methods and practical tools applied for system testing in order to evaluate the system from the computer security viewpoint. It will review different application areas such as intrusion detection and monitoring systems, access control and biological authentication, increasing system and information survivability, network attacks and defense. The students will be required to undertake research on the topic assigned and to implement a small project.

The course will be run in a seminar format. The students will be working in teams. It will combine the instructor’s lectures and introduction into the topics with weekly presentations prepared by the students. Each team will meet once a week with the instructor to discuss the progress. Every member of the team has to give a presentation.

My idea is to give students some flexibility in doing their projects.

The course project for the undergraduate students might include testing, evaluation and reporting the results for some computer security products (e.g. firewalls) testing.

The course project for the graduate students might include either of the following:

                     incorporating of more advanced research based on the bibliography search, review, generalization and producing some recommendations

-                      testing, evaluation and comparison of a few similar security products with reporting their advantages and disadvantages and developing an improvement plan

-                      theoretical development including mathematical investigation and computer simulation

Date Lectures and presentations Submissions due
Week 1 Topic 1 "What are we going to measure and test? (terminology)

Guest Lecture "Software Risk Management" by Tim Lister,

NOTE the date: Friday, 12/03, 1 - 2 pm at the Auditorium, 70-1400

Week 2 Topic 2: Security Analysis Process
Week 3 Topic 3 "Computer security policy evaluation"
Topic 4 "Password and access control policy testing"
Week 4 Topic 5 "Access control security models"

Topic 6 "Security policy models"

Jan 5: Assignment 2 is due
Week 5 Topic 7 "Assurance implementation" 01/12 Quiz
Week 6 Topic 8 "System hardening and patching"
Topic 9 "Security metrics"
Week 7 Topic 10 "Security metrics from the economics point of view"

 

Week 7 Topic 11 "Exploiting vulnerabilities through fault injection" 01/26 Quiz
Week 8 Topic 12 "Auditing" 01/31 Lab 3 is due
Week 8 Test 02/02
Week 9 Case studies
Week 9 Case studies
Week 10 Case studies
Week 10 Wed 02/16
Week 11, Mon 02/21 Project discussions
Week 11 Wed 02/23 Project discussions