Introduction to Data Security (CS 4389) 
     Time and Location      :            MW 7:00-8:15pm, ECSS 2.311
   Instructor: 
Murat Kantarcioglu
   Office Hours and Location     
Tue 16:30-18:30@ECSS 3.225


 
 
   Teaching Assistant: 

None

   Office Hours and Location     
None


 
     
        Prerequisites: 
  • CS/SE 4347             

Grading:

  • Homeworks   %20 (4 homeworks, each worth 5%)
  • Project           %20 (Group project that may require programming)
  • Midterm        %25 (Take home midterm)
  • Final              %25
  • Class Part.     %10 (Class Participation) 
        Course Topics: 
      • Please see the following course syllabus (pdf)


        Textbook: 

  •  Introduction to Computer Security by Matt Bishop Publisher: Addison-Wesley Professional (ISBN-10: 0321247442, ISBN-13: 978-0321247445

  
  Recommend Reading:
           

  • Database and Applications Security: Integrating Information Security and Data Management by Bhavani Thuraisingham Publisher: Auerbach Publications; first edition ISBN-10: 0849322243, ISBN-13: 978-0849322242


Course Outline:

01.11.10  Mon.

  • Overview of Information Security  (slides)

01.13.10  Wed.

  • Access control basics (slides)
  • Reading: Bishop Chapter 2 and Chapter 3 

01.18.10  Mon.

  • Martin Luther King Day. No Class.

01.20.10  Wed.

  • Access control basic cont. 

01.25.10  Mon.

  • Access control models (slides)
  • Reading: Bishop Chapter 4

01.27.10  Wed.

  • Access control models cont. (slides)
  • Reading: Bishop Chapter 5

02.01.10  Mon.

  • Integrity Models (slides)
  • Reading: Bishop Chapter 6

02.03.10  Wed.

  • Hybrid Models  (See access control slides)
  • Reading: Bishop Chapter 7

02.08.10  Mon.

  • Overview of Basic Cryptography (slides)
  • Reading: Bishop Chapter 8

02.10.10  Wed.

  • Overview of Basic Cryptography cont.
  • Homework one is available on Webct. It is due before class on 02.24.10

02.15.10  Mon.

  • Authentication Models (slides)
  • Reading: Bishop Chapter 11

02.17.10  Wed.

  • Authentication Models cont.

02.22.10  Mon.

  • Authentication Models cont.

02.24.10  Wed.

  • Database Security (slides)
  • Homework two is available on Webct. It is due before class on 03.10.10

03.01.10  Mon.

  • Database Security cont.

03.03.10  Wed.

  • Database Security cont.

03.08.10  Mon.

  • Design Principles (slides)
  • Reading: Bishop Chapter 12

03.10.10  Wed.

  • Access control for  distributed systems (slides)
  • Take home midterm is available on Webct. It is due on 03.12.10 on before midnight.

03.15.10  Mon.

  • Spring break. No classes

03.17.10  Wed.

  • Spring break. No classes.

03.22.10  Mon.

  • Access control for distributed systems cont.
  • Class project is available on Webct.
    • Project is due on 05.03.10 before class.
  • Homework three is available on Webct.
    • HW3 is due on 04.05.10 before midnight

03.24.10  Wed.

  • Access control for distributed systems cont.

03.29.10  Mon.

  • Access control for distributed systems cont.

03.31.10  Wed.

04.05.10  Mon.

04.07.10  Wed.

  • Data Anonymization cont.

04.12.10  Mon.

04.14.10  Wed.

  • SQL Injection Attacks cont.
  • Homework four is available on Webct.
    • HW4 is due on 05.05.10 before midnight.

04.19.10  Mon.

  • Introduction to  Malicious Logic (slides)
  • Reading: Bishop Chapter 19

04.21.10  Wed.

  • Introduction to  Malicious Logic cont.

04.26.10  Mon.

  • Intrusion Detection (slides)
  • Reading: Bishop Chapter 22

04.28.10  Wed.

05.03.10  Mon.

  • Project Presentations.

05.10.10  Mon.

  • FINAL EXAM,  at 7pm,  in class, closed notes.