Melissa Danforth
Office: Sci III 338, 654-3180
Office Hours: MTWRF 2:00-3:00pm (or by appointment)
Email: melissa@cs.csubak.edu

Course web site: http://www.cs.csubak.edu/~melissa/ under Teaching menu
Moodle web site: http://moodle.cs.csubak.edu/moodle/course/view.php?id=81

Course meets MW 3:15 - 5:00pm and Tu 3:15 - 5:45pm in Sci III 315

This is a continuation of CMPS 376 Computer Networks. Topics covered will include system security, basic cryptography and network security. We will begin by investigating issues in system security such as security policies, assurance, vulnerabilities and trusted operating systems. We will then look at how systems interact on a network and at new security issues that a networked environment presents such as worms, bot nets and denial of service attacks. Methods to provide better security at both the system and network level will be discussed, along with how risk analysis, cost-benefit analysis and other concerns impact the choices administrators have in securing their systems. Ethics and legal issues related to security research will also be discussed, in particular, responsible methods for conducting and reporting security research. Labs will provide more hands-on experience with securing systems and particular issues with certain OSes and applications. Prerequisite: CMPS 376 TCP/IP Networking
Command-line Networking Tools 5 quarter units. 4 units lecture (200 minutes), 1 unit lab (150 minutes). Elective for CS Security Engineering, 2nd edition. Ross Anderson. Wiley, 2008. ISBN: 978-0-470-06852-6. The full first edition of the textbook and selected portions of the second edition are available as PDFs at the author's website: http://www.cl.cam.ac.uk/~rja14/book.html Melissa Danforth This course covers the following ACM/IEEE Body of Knowledge student learning outcomes:

CC-NC3: Network security

The course maps to the following performance indicators for Computer Science (CAC/ABET):

(CAC PIe2): Recognize and describe current issues in security.

Exact topics will be posted under the Calendar section of the course website. Lecture notes from the Spring 2012 class will also be posted on Moodle. Not applicable to this course. Students are responsible for their own attendance. The topics covered in lecture will be listed on the course website. Lab attendance is not required but is strongly encouraged. Not all labs in this course can be completed at home, so students should attend those labs or make alternate arrangements to use Sci III 315. Assignments may discussed in groups. If the assignment is a group assignment, the group turns in one assignment for the entire group. However, if the assignment is an individual assignment, each student must turn in their own work; no direct copying is allowed. You may discuss individual assignments with other students, but you must write up the assignment in your own words. Refer to the Academic Integrity policy in the campus catalog. The CEE/CS Tutoring Center in Sci III 324 is available for use by students in this course outside of class time on a first come, first serve basis. Priority in the lab is given to students who are completing assignments for CEE/CS courses. See the schedule on the door for hours the lab will be open.

There are also computers available in the CEE/CS Major Study Lounge in Sci III 341 (formerly the CEE/CS Library). This room is only open when faculty members are on campus, e.g. approximately 8am to 5pm on weekdays. If the door is currently locked, see Steve, Henry, myself, or another faculty member to unlock it.

Labs/Homework	35%
Midterm	30%
Final Project	35%

Homeworks and labs may be worked on and discussed in groups, but every student must turn in their own assignments in their own words. Refer to the Academic Integrity Policy above. Assignments will be posted online on the course website. The due date will be given with the assignment. Late labs are not accepted, however partial credit will be given for incomplete labs. Late homework is accepted, but it will be marked down 10% for every day it is late. If there is no late policy posted on the homework assignment, then the homework may be turned in up to three days late. Saturday and Sunday combined count as only one day late (e.g. if the assignment is due Friday and you turn it in Sunday, it will be marked as one day late). If there is a late policy posted on the assignment, then that policy will apply for that particular assignment. Assignments are submitted by by uploading the assignment to Moodle or by turning in a hardcopy of the assignment to the instructor.

If uploading, all files must be in plain text, OpenOffice or PDF format. Do NOT use Microsoft Office formats, particularly DOCX or XLSX, as they cannot be read by the instructor.

It is your responsibility to check Moodle to see if your assignment has been properly submitted. However, do not worry if you forgot to select "Submit for Marking", as I can see the last time you made a change to the assignment to see that it was submitted on time.

Monday May 12, 2014 during the lecture timeblock

A make-up midterm will only be given if you have to miss this midterm for serious and compelling reasons or if you schedule an alternative time for the midterm at least ONE WEEK in advance.

Each student will select a topic in security for the project. Potential topics will be discussed in class. Selected topics will be approved by the instructor to ensure that no topic gets duplicated amongst the class.

The project can be purely a survey of existing research or brief research into the topic. The project will be graded on a 10 page paper and a 20 minute presentation to the class on your topic (presentation time may be shortened to 15 minutes depending on the size of the class). This project will take the place of the final for the course.

Project presentations will be scheduled in the last week of class. The schedule will be posted to the Moodle website and the calendar section of the public website.

Project Paper Deadline: Wednesday June 11, 2014 by 11:55pm on Moodle

Melissa Danforth on 31 March 2014 Approved by CEE/CS Department on [date]
Effective Spring 2014