Course meets MWF 12:30pm - 1:55pm in Sci 414 and T 1:00pm - 3:25pm in Sci 414 This is a continuation of CMPS 376 Computer Networks. Topics covered will include system security, basic cryptography and network security. We will begin by investigating issues in system security such as security policies, assurance, vulnerabilities and trusted operating systems. We will then look at how systems interact on a network and at new security issues that a networked environment presents such as worms, bot nets and denial of service attacks. Methods to provide better security at both the system and network level will be discussed, along with how risk analysis, cost-benefit analysis and other concerns impact the choices administrators have in securing their systems. Ethics and legal issues related to security research will also be discussed, in particular, responsible methods for conducting and reporting security research.

Labs will provide more hands-on experience with securing systems and particular issues with certain OSes and applications. It will not focus on breaking into systems, but will provide some insight into red teaming.

CMPS 376 and MATH 202 (or the equivalent of differential and integral calculus) Security Engineering, 1st edition. Ross Anderson. Wiley, 2001. ISBN: 978-0-471-38922-4. Website: http://www.cl.cam.ac.uk/~rja14/book.html