CSCE 5550 - Introduction to Computer Security - Fall 2023
Class hours
Lectures: Tuesdays and Thursdays, 2:30-3:50pm, NTDP B.185
Instructor: Kirill Morozov (Department of Computer Science and Engineering)
Office hours*: Tuesdays and Thursdays 4:00-5:00pm in NTDP F.283
Appointments at other timeslots are possible on request.
E-mail: Kirill [dot] Morozov [at] unt.edu
Teaching assistant: Sirisha Madh Talapuru
Office hours*: TBA
E-mail: sirishamadhtalapuru@my.unt.edu
The labs will use VMs that are to be run in Oracle VirtualBox https://www.virtualbox.org/.
|
Course Description
The aim of this course is to introduce the concepts and principles of computer security and privacy. It covers both theoretical and practical aspects of computer security, including security models and assurance, OS and network security, common security threats and countermeasures against them, cryptography, risk analysis and data privacy.
|
Course webpage
All lectures, assignments, and other materials will be posted on Canvas.
Submissions of the assignments must be made via Canvas as well.
Note: For all communications with instructors, the subject of your e-mails must start with "CSCE 5550".
|
Reference books:
- [Recommended] C.P. Pfleeger, S.L. Pfleeger, and J.Margulies, "Security in Computing", 5th Edition, Prentice Hall, 2015.
- [Recommended] M. Bishop, "Computer Security: Art and Science", 2nd Edition, Addison-Wesley, 2019.
- [Supplementary] W. Stallings and L. Brown, “Computer Security: Principles and Practice”, 4th Edition, Pearson, 2018.
|
Course schedule*
- Week 1 (Aug 22 and 24): Course introduction. Threat modeling.
- Week 2 (Aug 29 and 31): Fundamentals of secure systems. Network basics.
- Week 3 (Sep 5 and 7): Network security.
- Week 4 (Sep 12 and 14): Routing security. Firewalls. IDS.
- Week 5 (Sep 19 and 21): VPN. Access control in OS.
- Week 6 (Sep 26 and 28): OS security. Control hijacking attacks.
- Week 7 (Oct 3 and 5): Countermeasures against control hijacking. Malware defenses.
- Week 8 (Oct 10): Review lecture.
(Oct 12): Midterm Exam.
- Week 9 (Oct 17 and 19): Malware (cont). Access control policies and multilevel security.
- Week 10 (Oct 24 and 26): Access control policies (cont). Cryptography and applications.
- Week 11 (Oct 31 and Nov 2): Cryptography and applications (cont). Web security.
- Week 12 (Nov 7 and 9): Web security (cont). Database security.
- Week 13 (Nov 14 and 16): User identification. Wireless security.
- Thanksgiving Break (Nov 21 and 23): No class.
- Week 14 (Nov 28 and 30): Secure coding and software analysis. Data privacy and anonymization.
- Week 15 (Dec 5): IT security management. Legal aspects and ethics.
(Dec 7): Review lecture.
- Final Exam: Dec 12 (Tue), 1:30-3:30pm.
|
Grading*
- Homeworks – 15%
- Labs – 25%
- Programming project – 15%
- Mid-term exam – 20%
- Final exam – 25%
|
Course Policies
-
Grading: Assignments may be submitted up to 3 days late, with a penalty of 15% for each day.
No credit will be given after 3 days.
-
Academic Integrity: Cheating in exams/assignments, plagiarism in exams/assignments, collusion and falsification of academic records constitute academic dishonesty.
Students are responsible for being familiar with UNT’s Students Academic Integrity Policy: https://policy.unt.edu/policy/06-003.
Cheating/collusion/plagiarism in assignments/exams will result
in zero credit for them, possible “F” grade for the course, and possible disciplinary action.
-
Students with Disabilities: Students in need of academic accommodations for disability can refer
to the Office of Disability Access for initiating the required arrangements based on ADA terms.
Also, such the students are welcome to arrange an appointment with me to discuss their special needs
for academic accommodation (to ensure confidentiality).
|