CIS 483: Introduction to Computer & Network Security

Syllabus

Objectives

The objectives of this course are to systematically study theories, principles and techniques of computer and network security. Students will learn basic cryptography, fundamentals of computer/network security, risks faced by computers and networks, security mechanisms, operating system security, secure systems design principles, and network security principles.

Outcomes

After completion of the course, students should be able to:

• Understand and explain the risks faced by computer systems and networks.
• Identify and analyze security problems in computer systems and networks.
• Explain how standard security mechanisms work.
• Develop security mechanisms to protect computer systems and networks.
• Write programings that are more secure.
  
• Use cryptography algorithms and protocols to achieve computer security.

Instructor and TA

Instructor Wenliang (Kevin) Du Office: 3-127 SciTech Email address: wedu@ecs.syr.edu Office hours: TBA

Texts

• We use online articles and lecture notes as our main texts.

Grading

• 60%: Projects
• 40%: Final Exam
  

Schedule

• Introduction
  • Class introduction: syllabus, policies, and projects
    
  • An overview of computer security

---

• Unix Security 
  • Password, users, groups, etc.
  • File permissions.
  • Set-UID programs
    

---

• Software Vulnerabilities and Malicious Programs
  
  • Format String Vulnerability
    
  • Buffer Overflow Vulnerability
    
  • Race Condition Vulnerability
    
  • Input Validation Vulnerability
    
  • Trojan Horses, Viruses, and Worms

---

• Network Attacks and Defense
  • Phishing and Pharming Attacks
  • Cross-site Scripting Attacks
  • SQL Injection Attacks
  • Denial-of-Service Attacks and Countermeasures
  • Firewalls
  • Intrustion Detection Systems

  ---

• System Security 
  • Authentication and Password
  • Access Control
  • Sandboxing
  • Design Principles

---

• Basic Cryptography 
  • Secret Key Encryption
    
  • Public Key Encryption
    
  • One-way Hash Function
    
  • Digital Signature, Message Authenticaiton Code
    
  • Key Exchange