Data and Applications Security (CS 6348) 
 
   Time and Location :  F 4pm-6:[email protected] 2.201
     
Instructor                             :   Murat Kantarcioglu
Office Hours & Location :   Friday 9am-10am, [email protected] 3.225
 
       Teaching Assistant           :     Nidhi Solanki         
Office Hours & Location : Thursday/Friday 1:00 pm - 3:00 [email protected] 1.202 D

Prerequisites                  :   CS 5343
            
                        

Grading:

  •   Homework   %15 (3 homework, each worth 5%)
  •   Project         %25 (Group project (up to 3 people) that requires programming)
  •   Midterm       %25
  •   Final            %35 (All topics covered included)

 

   Course Topics: (tentative)
The course will teach principles, technologies, tools and trends for data
and applications security. Please see the course syllabus for details.

         
           Textbook:    
      

   Introduction to Computer Security by Matt Bishop 
Publisher: 13th Printing Addison-Wesley Professional
(ISBN-10: 0-201-44099-7, ISBN-13: 978-0-201-44099-7)

 Course Outline:

 

08.28.15

  • Overview of Information Security
  • Access control basics
  • Reading: Bishop Chapter 2 & 13
09.04.15
  • Access Control Foundations
  • Reading: Bishop Chapter 3

09.11.15

  • Access control models
  • Reading: Bishop Chapter 4
09.18.15
  • Access control models cont.
  • Reading: Bishop Chapter 5

09.25.15

  • Integrity Models
  • Reading: Bishop Chapter 6
10.02.15
  • Hybrid Models
  • Homework One is available on elearning, due 10/16/15 midnight
  • Reading: Bishop Chapter 7

10.09.15

  • Basic Cryptography Overview
  • Authentication
  • Reading: Bishop Chapter 9 & 12
10.16.15
  • Database Security
  • Reading:  Please read the following overview paper (pdf)
  • Homework Two is available on elearning, due 10/30/15 midnight.
  • Project Description is available on elearning
10.23.15
  • Midterm !!!!
10.30.15
  • Access control in distributed systems
  • Reading:  Please read the following overview paper

11.06.15

  • SQL and Code injection attacks
  • Reading: Please see the tutorial from Oracle.

11.13.15

  • Introduction to Data Privacy
  • Reading: K-annonymity, l-diversity, differential-privacy, privacy-preserving distributed data mining
  • Homework Three is available on elearning,  due 11/30/15, noon.
11.20.15
  • Introduction to Data Privacy cont.
11.21.15
  • Extra Class today at ECSS 2.412 starting 4pm !!!
  • Policy, legal etchics and compliance
  • Economics of data security and privacy
  • Reading:  T.b.d.

11.27.15

  • Thanksgiving Holiday

12.04.15

  • FINAL exam will be administered during the last class. 
  • To comply with university regulations, I will schedule an additional class on November 21st.