Course Contents
The course will introduce students into the current methods
and practical tools applied for system testing in order to evaluate the system from the
computer security viewpoint. It will review different application areas such as intrusion
detection and monitoring systems, access control and biological authentication, increasing
system and information survivability, network attacks and defense. The students will be
required to undertake research on the topic assigned and to implement a small project.
The course will be run in a seminar format. The students will be working in teams. It will combine the instructors lectures and introduction into the topics with weekly presentations prepared by the students. Each team will meet once a week with the instructor to discuss the progress. Every member of the team has to give a presentation.
My idea is to give students some flexibility in doing their projects.
The course project for the undergraduate students might
include testing, evaluation and reporting the results for some computer security products
(e.g. firewalls) testing.
The course project for the graduate students might
include either of the following:
incorporating of more advanced research based on the bibliography search, review,
generalization and producing some recommendations
-
testing, evaluation and comparison of a few similar security products with
reporting their advantages and disadvantages and developing an improvement plan
-
theoretical development including mathematical investigation and computer
simulation
Date | Lectures and presentations | Submissions due |
Week 1 | Topic 1 "What are we going to
measure and test? (terminology) Guest Lecture "Software Risk Management" by Tim Lister, NOTE the date: Friday, 12/03, 1 - 2 pm at the Auditorium, 70-1400 |
|
Week 2 | Topic 2: Security Analysis Process | |
Week 3 | Topic 3 "Computer security policy evaluation" | |
Topic 4 "Password and access control policy testing" | ||
Week 4 | Topic 5 "Access control security
models" Topic 6 "Security policy models" |
Jan 5: Assignment 2 is due |
Week 5 | Topic 7 "Assurance implementation" | 01/12 Quiz |
Week 6 | Topic 8 "System hardening and patching" | |
Topic 9 "Security metrics" | ||
Week 7 | Topic 10
"Security
metrics from the economics point of view"
|
|
Week 7 | Topic 11 "Exploiting vulnerabilities through fault injection" | 01/26 Quiz |
Week 8 | Topic 12 "Auditing" | 01/31 Lab 3 is due |
Week 8 | Test 02/02 | |
Week 9 | Case studies | |
Week 9 | Case studies | |
Week 10 | Case studies | |
Week 10 Wed 02/16 | ||
Week 11, Mon 02/21 | Project discussions | |
Week 11 Wed 02/23 | Project discussions |