Course meets MWF 3:10 - 4:20pm and T 3:10 - 5:40pm in Sci III 315 This is a continuation of CMPS 376 Computer Networks. Topics covered will include system security, basic cryptography and network security. We will begin by investigating issues in system security such as security policies, assurance, vulnerabilities and trusted operating systems. We will then look at how systems interact on a network and at new security issues that a networked environment presents such as worms, bot nets and denial of service attacks. Methods to provide better security at both the system and network level will be discussed, along with how risk analysis, cost-benefit analysis and other concerns impact the choices administrators have in securing their systems. Ethics and legal issues related to security research will also be discussed, in particular, responsible methods for conducting and reporting security research. Labs will provide more hands-on experience with securing systems and particular issues with certain OSes and applications. CMPS 376 Security Engineering, 2nd edition. Ross Anderson. Wiley, 2008. ISBN: 978-0-470-06852-6.

The full first edition of the book and selected portions of the second edition are available as PDFs at the author's website: http://www.cl.cam.ac.uk/~rja14/book.html