ECS 235B, Winter 2022: Foundations of Computer and Information Security
Announcements
Mar 14 at 12:25pm:
Office Hour In Person and On Zoom for March 14, 2023
Mar 1 at 8:42am:
No Office Hour on Wednesday, March 1
Feb 1 at 12:34am:
Office Hours over Zoom for the Rest of the Week
Jan 31 at 10:17am:
Office Hour Today, January 31
Jan 27 at 1:21pm:
Office Hour Today, Friday January 27, 2023
Jan 25 at 11:08am:
Office Hours Today, Wednesday January 25
Jan 24, 12:38pm:
Office Hours by Zoom Today
Jan 23, 9:56am:
Error in Problem 2, Homework 1
Jan 6, 12:18am:
TA’s Office Hours Zoom Links
Class Information
General Information
Syllabus
All About Homework
Term Project
Homework
Example Homework Answer
Homework #1 Revision #1
,
Extra Credit #1
(due Jan. 24, 2023)
Original Homework #1
Homework #2
,
Extra Credit #2
(due Feb 7, 2023)
Homework #3
,
Extra Credit #3
(due Feb 23, 2023)
Homework #4
,
Extra Credit #4
(due Mar 14, 2023)
Project
Project Selection
(due Jan 26 at 11:55pm)
Project Progress Report
(due Feb 14 at 11:55pm)
Completed Project
(due Mar 24 at 10:00am)
Handouts
Papers are on
Canvas
for copyright reasons
Example Homework Answer
Bell-LaPadula Symbols
Table of Notation for Noninterference and Nondeducibility
Lecture Outlines
Lecture # 1
(Jan 10)
Lecture # 2
(Jan 12)
Lecture # 3
(Jan 17)
Lecture # 4
(Jan 19)
Lecture # 5
(Jan 24)
Lecture # 6
(Jan 26)
Lecture # 7
(Jan 31)
Lecture # 8
(Feb 2)
Lecture # 9
(Feb 7)
Lecture #10
(Feb 14)
Lecture #11
(Feb 16)
Lecture #12
(Feb 21)
Lecture #13
(Feb 23)
Lecture #14
(Feb 28)
Lecture #15
(Mar 2)
Lecture #16
(Mar 7)
Lecture #17
(Mar 9)
Lecture #18
(Mar 14)
Modules
Audio versions are PowerPoint with recordings, and are
large
Administrative Material
(
audio version
)
Basic Components
(
audio version
)
Reference Monitors
(
audio version
)
Access Control Matrix
(
audio version
)
Attribute-Based Access Control Matrix
(
audio version
)
HRU Result
(
audio version
)
Take-Grant Model Rules
(
audio version
)
Sharing in the Take-Grant Model
(
audio version
)
Stealing in the Take-Grant Model
(
audio version
)
Schematic Protection Model
(
audio version
)
Expressiveness
(
audio version
)
Typed Access Matrix Model
(
audio version
)
Security Policies
(
audio version
)
Security Policy Languages
(
audio version
)
Precise and Secure Policies
(
audio version
)
Lattices
(
audio version
)
Confidentiality Policies and the Bell-LaPadula Model
(
audio version
)
Bell-LaPadula Model
(
audio version
)
Applying the Bell-LaPadula Model
(
audio version
)
Tranquility
(
audio version
)
The Controversy and System Z
(
audio version
)
Integrity Requirements and the Biba Model
(
audio version
)
Clark-Wilson Model
(
audio version
)
Trust Models
(
audio version
)
Constraint-Based Availability Models
(
audio version
)
State-Based Availability Models
(
audio version
)
Network Flooding
(
audio version
)
Chinese Wall Model
(
audio version
)
Clinical Information Systems Security Policy
(
audio version
)
Originator-Control Access Control
(
audio version
)
Role-Based Access Control
(
audio version
)
Traducement
(
audio version
)
Break-the-Glass Policies
(
audio version
)
Policy Composition
(
audio version
)
Introduction to Noninterference
(
audio version
)
Security Policy and the Unwinding Theorem
(
audio version
)
Access Control Matrix Revisited
(
audio version
)
Generalized Noninterference
(
audio version
)
Policy Composition I
(
audio version
)
Nondeducibility
(
audio version
)
Restrictiveness
(
audio version
Side Channels
(
audio version
)
Introduction to Assurance
(
audio version
)
Building Systems with Assurance
(
audio version
)
Design Assurance Techniques
(
audio version
)
Implementation Assurance Techniques
(
audio version
)
Entropy
(
audio version
)
Introduction to Information Flow
(
audio version
)
Implementation Flow Policies
(
audio version
)
Confinement Problem
(
audio version
)
Isolation
(
audio version
)
Covert Channels
(
audio version
)
Detecting Covert Channels
(
audio version
Analyzing Covert Channels
(
audio version
)
Mitigating Covert Channels
(
audio version
)
Design Principles
(
audio version
)
Program Security
(
audio version
)
Evaluating Systems
(
audio version
)
