| # | date | topic | notes |
|---|---|---|---|
| 1. | Fri, Oct 1 | Introduction: what is computer security | |
| 2. | Discussion: Trust, risk analysis, non-technical threats | ||
| Mon, Oct 4 | no class (SANS Network Security) | ||
| 3. | Wed, Oct 6 | Robust programming rules and examples | |
| 4. | Fri, Oct 8 | Robust programming rules and examples (con't) | |
| Discussion: Social engineering | |||
| 5. | Mon, Oct 11 | Vulnerability models, attack models, relationship | homework #1 due |
| 6. | Wed, Oct 13 | Penetration analyses, Flaw Hypothesis Methodology | project part 1 due |
| 7. | Fri, Oct 15 | Intrusion detection | last day to add course |
| 8. | Discussion: Classical cryptography; ROT-13, DES | ||
| Mon, Oct 18 | no class (National Information Systems Security Conf.) | ||
| 9. | Wed. Oct 20 | Public-key cryptography; Diffie-Hellman; RSA | last day to drop course |
| 10. | Fri, Oct 22 | Access control matrix; security policies | |
| Discussion: Policies at UC Davis | |||
| 11. | Mon, Oct 25 | Security policies (con't) | homework #2 due |
| 12. | Wed, Oct 28 | Authentication: passwords, crypt(3), attacks | |
| 13. | Fri, Oct 29 | Users, groups, roles | project part 2 due |
| Discussion: Review for midterm | |||
| 13. | Mon, Nov 1 | midterm | |
| 14. | Wed, Nov 3 | Access control lists, capabilities, locks and keys | last day to change to P/NP or S/U grading |
| 15. | Fri, Nov 5 | Access rings, PACLs | |
| Discussion: Go through midterm; S/Key | |||
| 16. | Mon, Nov 8 | Malicious logic: Trojan horses, viruses, worms | homework #3 due |
| 17. | Wed, Nov 10 | Defending against malicious logic; property-based testing | |
| 18. | Fri, Nov. 12 | Auditing and logging | |
| Discussion: Examples of famous malicious logic; isolation | |||
| 19. | Mon, Nov. 15 | Secure systems; design hierarchy; trusted operating systems | |
| 20. | Wed, Nov. 17 | Network security; cryptography as a tool | |
| 21. | Fri, Nov. 19 | Analyzing network protocols | |
| Discussion: Cryptographic protocols; X.509 failure | |||
| 22. | Mon, Nov 22 | Security in network administration | homework #4 due |
| 23. | Wed, Nov 24 | Security in system administration | |
| Fri, Nov 26 | no class (Thanksgiving) | ||
| Discussion: none (Thanksgiving) | |||
| 24. | Mon, Nov 29 | Security in system use | |
| 25. | Wed, Dec 1 | Security in programming; principles and design | |
| 26. | Fri, Dec 3 | Security in programming: UNIX implementation | |
| Discussion: UNIX security tools | |||
| 27. | Mon, Dec 6 | Denial of service | homework #5 due |
| 28. | Wed, Dec 8 | Computability; HRU result, Take-Grant | |
| 29. | Fri, Dec 10 | to be determined | project part3 due |
| Discussion: Review for final | |||
| Tue, Dec 14 | final exam |
Please note that this syllabus is tentative and subject to change. If you want to hear about a topic not listed above, or that you are not sure we'll cover, please let me know!
Send email to
cs153@csif.cs.ucdavis.edu.
Department of Computer Science
University of California at Davis
Davis, CA 95616-8562