CIS 410/510: Computer Security

Spring 2003

Lecture Notes

• lecture 1
• lecture 2
• lecture 3
• lecture 4 (revised for the part of cryptographic hash function - 5/7/03)
• lecture 5
• lecture 6
• lecture 7
• lecture 8
• lecture 9
• lecture 10 (review (I))
• lecture 11
• lecture 12
• lecture 13
• lecture 14
• lecture 15(review (II))

Class Projects

• Jeremy Ludwig, Improving Chat Security through Keystroke Recognition
• James Hiebert, Reputable Anonymity
• Max Skorodinsky, Efficient Hybrid Authentication for a Wired MONET
• Dirk Singels, Securing the Redundancy in P2P (web page unavailable)
• Xun Kang, Xiaofang Zhang, Secuing Clustered Clients
• Melanie Grieb, PPP: Pretty Private Pine (web page unavailable)
• Dong Ki Kim, Secure Message Exchanger
• Tyrel Datwyler, A Native Cryptographic File System for Linux
• Thomas Adams, Password Authentication and Key Exchange (web page unavailable)

Homework Solutions by Jin Zhang

• Homework 1 Solutions, 4/22
• Homework 2 Solutions, 4/29
• Homework 3 Solutions, 5/6
• Homework 4 solutions, 5/13
• Homework 5 solutions, 5/20
• Homework 6 solutions, 6/4

Realtime Announcement

• 5/20: Web page access from outside of uoregon.edu is disabled. If this causes a problem to you, let me know your domain or IP address prefix if you need to access the page from outside of campus.
• 5/20: No class on 5/27 as I'll be in DC for a meeting. Homework 6 is due 5/29.
• 5/16: The grades for the midterm may not be ready for query by this Friday 5/16. (They will be distributed in the coming Tuesday.) If you think you have done so poorly that you are very eager to know your grade by tomorrow in order to decide whether or not to change the grading of the class to P/NP or even withdraw the class, let me know your name. I'll try to have your midterm graded ASAP.
• 4/22: Every project team please build a web page for your project, and send me your pointer. I'll include them on this page, so every team can learn your peer team's work.
• 4/22: Jin's office hour on Monday is changed to 3:30 to 4:30 (due to her own class reschduling)
• 3/5: The class capacity is increased.
• 3/2: No class on April 1st and 3rd as I'll be in a conference. To make up, in week 2 and 3, the class time will be extended to be 10:00 am - 11:59 am instead of 10-11:20am.
• 2/25: The enrollment capacity has been reached quickly. For those who still want to join the class, I'll see if the capacity can be raised.
• 2/25: Students who do not have a reachable email address registered at Duckweb please do so ASAP; otherwise, you may lose important messages from the instructor and I'll not be responsible for that.

Course Info

• CRN: 35933(CIS410), 35934(CIS510)
• Prerequisites for 410: CIS 314. Knowledge on CIS 415 and 432 will be helpful, but not indispensable for an "A" grade.
  
• Prerequisites for 510: CIS 432, 415, or instructor approval.
  
  
• Time: Tuesdays and Thursdays, 10:00 - 11:20 a.m.
  
• Location: 102 Deady Hall
  
• Office Hours: Tuesdays, 11:30 - 12:30 a.m., 334 Deschutes
  
  
• Web page: http://www.cs.uoregon.edu/classes/cis410sec
  
• Textbook: "Computer Security: Art and Science" by Matt Bishop

Description

• Security policies on access control, confidentiality, integrity, etc.
• Cryptography that discusses the classical cryptography, public key cryptography, strong one-way hash function, and digital signature.
• Key management and cipher techniques.
• Design and implementation of security mechanisms.
• Introduction to assurance
• Malicious logic and intrusion detection
• Practice on network security and system security

Spring 2003 Schedule

• Week 1 (4/1,3): Class info; overview of computer security, and access control matrix (ch 1, and ch 2.1-2.3)
• Week 2 (4/8, 4/10): Security policies, including confidentiality policies (ch 4.1-4.5, ch 5.1-5.2.2)
• Week 3 (4/15,17): Basic cryptography (ch 9)
• Week 4 (4/22,24): Key management (ch 10.1-10.4)
• Week 5 (4/29,5/1): Digital signature, cipher techniques and authentication (ch 10.6, ch 11.1-11.2, ch 12)
• Week 6 (5/6,8): Design and implementation of security mechanisms (ch 13, 15.1-15.3); class material review (I)
• Week 7 (5/13,15): midterm on 5/13; assurance (ch 18, 21)
• Week 8 (5/20,22): Malicious logic and intrusion detection (ch 22, 25)
• Week 9 (5/27,29): Midterm and homework review. No class on 5/27.
• Week 10 (6/3,5): Network security (ch 26); Class material review (II)
• Final exam: 6/10, Tuesday, 8:00-10:00 a.m., 102 Deady Hall (Note the time is different from class time!!)

CIS 410 Grading Policy:

CIS 510 Grading Policy:

Important Note:

I also plan to offer another course "CIS 410/510 Network Security" in the coming fall term, for which this course will be the prerequisite.