New Page 0

CS 7301 (Spring 2004)

Information Assurance

COURSE DESCRIPTION

The course will start with an overview of security research topics introduced by the instructor, then followed by the student presentations. The students are required to read papers and make presentations.

COURSE LEARNING OBJECTIVES

The objective of this course is to familiarize students with research topics in information systems security. Over the past 20 years, a lot of in-depth security research works have been conducted. Due to the increasing demands on cyber security in recent and coming years, it is critical to make use of existing security research results and/or base on these results, build new security protection techniques. This course introduces major security concepts and techniques for protecting applications and data that reside on network computer systems.

MAJOR TOPICS

Topics covered in this course include

Techniques for Information Privacy Protection

Quick overview of encryption techniques
Data partitioning
Secure Computation

System Integrity

Intrusion tolerance techniques
VSS code

Key Agreement, Distribution, and Management

Access Control

Access control mechanisms, access control list, capabilities, role-based access control, delegation
Information flow theory

Statistical Database Security

Program Protection

Reference Texts (tentative draft)

Security in Computing, by Charles P. Pfleeger, Prentice Hall

Computer Security: Art and Science, by Matthew Bishop, Addison-Wesley, 2003, ISBN 0-201-44099-7

Cryptography Theory and Practice, Second Edition, by Doug Stinson, CRC Press, Inc., ISBN: 1584882069

Database Security, by Silvana Castano, Mariagrazia Fugini, Giancarlo Martella, and Pierangela Samarati, Addison-Wesley, 1994.

Information Security: An Integrated Collection of Essays, Edited by Marshall D. Abrams, Sushil Jajodia, and Harold J. Podell, IEEE Computer Society Press

The Foundations of Cryptography - a book in preparation, by Oded Goldreich, http://www.wisdom.weizmann.ac.il/~oded/foc-book.html