Information and System Security (3-0-0)

Course Details:

  1. Overview of Computer Security - Confidentiality, Integrity, Availability, Policy and Mechanism, Assumptions and Trust, Assurance, Access Control Matrix
  2. Security Policies, Confidentiality Policies - Bell-LaPadula Model, Integrity Policies - Biba Integrity Model, Lipner's Integrity Matrix Model, Clark-Wilson Integrity Model, Chinese Wall Model
  3. Fundamentals of Cryptography and Cryptosystems - DES, Public Key Cryptography - Diffie-Helman, RSA, AES, Key Management, Cipher Techniques
  4. Authentication - Passwords, Challenge-Response, Kerberos
  5. Secure System Design Principles
  6. Introduction to Assurance, Building Systems with Assurance, Evaluating Systems
  7. Malicious Logic, Vulnerability Analysis, Auditing, Intrusion Detection
  8. Database Security
  9. Secure Multi-party Computation


Suggested Text Books
Matt Bishop, Computer Security (Pearson Education)
Stallings, Cryptography and Network Security