Computer Security CSc 38000–Fall 2023

The City College of CUNY Department of Computer Science

Instructor: Prof. Nelly Fazio
Lectures: Tu/Th, 2:00–3:15pm, SH 75
Office hours: T/Th, 12:30–1:30pm or by appointment, SH-279
Email: fazio AT cs DOT ccny DOT cuny DOT edu [Put CSc380 in Subject line]

[ Course Description | List of Topics | Textbook | Work Load & Grading | CUNY Academic Integrity Policy | Programming Assignment | Weekly Schedule ]

Course Description

Prerequisites: CSC 22000 AND CSC 21100 OR (CSC 21000 AND EE 21000)

List of Topics

• Introduction to Computer Security
  • Basic concepts: vulnerabilities, threat models, adversaries, security goals
• Cryptography
  • Information security goals: confidentiality, integrity, authentication
  • Basic primitives: hash functions, one-way functions
  • Symmetric primitives: encryption, message authentication codes
  • Public-key primitives: asymmetric encryption, digital signatures
  • Cryptographic protocols: key exchange, key distribution, authentication
• Network Security
  • Networking background
  • Network security threats: viruses, worms, spoofing, snooping, denial of service
  • Network security defenses: crypto (SSL/TLS, SSH), firewalls, intrusion detection systems
• Operating System Security
  • Resource separation and memory protection
  • Access control, authentication and authorization
  • Audit logs and accountability
• Software Security
  • Buffer overflow and other implementation flaws
  • Isolation and sandboxing techniques
  • Software engineering best practices: defensive programming, fail-safe defaults, least-privilege and privilege-separation principles
• Additional Topics (as times permits)
  • Anonymity and privacy, cryptocurrencies, ...

Textbook

• Computer Security: Principles and Practice. (5nd Edition)
  William Stallings and Lawrie Brown. Prentice Hall, 2008.

• A Course in Cryptography. Raphael Pass and abi shelat. Available on-line

Work Load & Grading

• Work load
  2.5 hrs/week: Class attendance
  2.5 hrs/week: Readings
  5.0 hrs/week: Programming Assignments
• Grading
  10%: Class attendance
  20%: Programming Assignments
  30%: Midterm (Oct 26 - tentative)
  40%: Final (Dec 14)

CUNY Academic Integrity Policy

You must write all the code you hand in for the programming assignments, except for code that we give you as part of the assignment. You are not allowed to look at anyone else's solution. You may discuss the assignments with other students, but you may not look at or copy each others' code. You may not use code that might be available online.

Cheating will not be tolerated. If you cheat, you risk losing your position as a student in the department and the college. CUNY policy on academic integrity can be found here. Failure to understand and follow these rules will constitute cheating, and will be dealt with as per university guidelines.

Programming Assignments

Late Assignment Policy: Late assignments will not be accepted.

Weekly Schedule (tentative)

Copyright © Nelly Fazio