Lectures      : MW 7:00P - 8:15P

Class Room   : NS 205
Office Hours : MW 5.30P - 6.30P

Resources

Government & Security Response

• National Security Agency, NIST
• US-CERT Vulnerability Notes Database, Breach DB

• Symantec Security Response
• BugTraq & Vulnerabilites , PacketStorm

Research & Conferences

• Computer Security History Project
• IEEE Security , IEEE Security Magazine , IEEE TDSC
• ACM TISSEC , ACM SIGSAC
• DEFCON , Black Hat , USENIX

Certification

• CISSP , CompTIA Security+, GIAC, CCNA
• http://eccouncil.org/index.htm

Free Books:

• Handbook of Applied Cryptography (HAC)
• The Code Book
• Information Security Bookshelf
• IDS with Snort
• Open Source Security Tools: A Practical Guide to Security Applications
• Intellectual Property in the Information Age
• MAX Security

Programming Resources

• CERT Secure Coding Standards
• Sample Crypto Codes (1, 2, 3)
• Secure Program Linux & Unix
• Java SE Sec, Java Crypt Implementation

Others

• Cartoons
• Forums (WinSec, Crypto)

Security in the News

• Digital Ants (Sep 21)

Week

Date

Tests

Lectures & Readings

Assignments

Due

• C490-Overview (pptx , pdf)
• C490-Sec-Survey

• Ch1-P1 (pptx , pdf) (covered till slide 21)

Reading

• Chapter 1
• Sec-Ch1-NSTISSI_4011
• Sec-Ch1-1967-SPComputing-Ware

Labor Day No Class

• Ch1-P1 (see 9/2) (completed)
• Ch1-P2 (pptx, 2 slide, handout) (covered till slide 5)
• Another Article
• Problem Solving - Loss of CIA

Assignment 1

Submit it using oncourse Assignments Link on the Left

• Ch1-P2 (see 9/9) (completed)

Lecture

• Problem Solving (Ch 1: 2,3,5,6,8,11,18)
• Ch2-P1-Classical Cryptography (pptx, pdf) (covered slide 11)

Reading

• Chapter 2
• Cryptography FAQ (Read Part 3 & 4 for sure)
• IEEE Article , Special Forces
• Surf thru: Prediction, Friedman, Cryptanalysis (1994, 2007, 2008), Legal Issues,  Sept 2009 CryptoGram

Others

• ACA, Code Book, HAC & Sample Codes links provided above
• Why is it harder than it looks?

Assignment 1

@ 7 p.m.

Lecture

• Ch2-P1-Classical Cryptography (see 9/16) (completed)

Quiz 1

(Ch 1)

Lecture

• Ch2-P2-Modern Cryptography

Reading

• Chapter 2 & 12 - Modern Cryptography

Others

• Is it unbreakable? DES Initial Analysis, NIST Competitions
• How can I break a cipher (2000)

Lecture

• Ch2/12-P2-Modern Cryptography (zip, pdf) (completed)

• Ch2/12-P3-Modern Cryptography (DES .zip)
• Exam 1 Discussion

Exam 1

(Everything except DES)

• Ch2/12-P4-Modern Cryptography (RSA .zip)

• Exam 1 Grading Discussion
• Ch3-P1-Program Security Vulnerabilities (.zip)
• Taxonomy, Viruses, BugTraq, SmashStack, Cafe Latte (.ppt, .pdf)

• Assignment Discussion
• Ch3-P1-Program Security Vulnerabilities (see 10/12)

Assignment 2 Part 2 (.zip)

Assignment 2 Part 2 Updated (.zip)

Printing Bits in C++ (.cpp)

• Ch3-P2-Buffer Overflow Attacks (.zip)

• Ch3-P2-Buffer Overflow Attacks (10/19)
• Ch3-P3-Program Security Vulnerabilities (.zip)

• Ch3-P3-Program Security Vulnerabilities (10/21)
• Ch3-P4-Program Security Controls (.zip)

• Ch3-P4-Program Security Controls (.zip)
• Chapter 3 Exercises (.pdf)
• Exam 2 Discussion

• Ch4-P1-MemoryProtection&AccessControl (.zip)

• Ch4-P1-MemoryProtection&AccessControl (.zip)
• Presentation topics (.txt)

• A3 (Exploitation .zip)
• [11/10] Typo in Assignment 3: date \T and time \T should be changed to date /T and time /T
  
• A4-Part1 (*NIX .zip)
• A4-Part2 (Win 7 .zip)

• Ch4-P1-MemoryProtection&AccessControl (.zip)

• Ch4-P1-MemoryProtection&AccessControl (.zip)

• Ch4-P2-Authentication (.zip)
• Ch5-P1-Trusted Systems (.zip)
• Problem Solving Ch4

• Network Security

• Snort
• Windows Forensics

• Legal & Ethical Issues

Exam 3

(tentative)

• Legal & Ethical Issues

• Edwin & Anne (Certification; Links 1,2,3,4)
• Alex & Bob (Snort; Links 1,2,3,4)
• Bruce & Jake (Nessus & NMap; Links 1,2,3,4)
• Wu & (WireShark; Links 1,2,3,4)
• Tim & Suresh (Orange Book; Links 1,2,3,4)
• Lana & Nathan (NIST Standards; Links 1,2,3,4)

• Review

Last Day of Classes