comp527

Introduction

This class will focus on computer security in real systems. We will cover theory and practice for the design of secure systems (formal modelling, hardware and compiler-enforced safety, software engineering processes, tamper-resistant and tamper-reactive hardware, firewalls, cryptography, and more). We will also discuss how and why each of these techniques fail.

There will be reading assigned before every class, usually chapters from the book or papers available online somewhere. You’re expected to read them.  You should also subscribe to this blog with your favorite RSS reading tool.  If there are changes in the schedule or other important announcements, they’ll appear here.

Texts

The required text for this class is Security Engineering, 2nd Edition by Ross Anderson.  On that page, you’ll notice that the first edition of the book is online, gratis.  You may find that useful.  Yes, it’s a big book.  It’s detailed.  It’s worth owning.

The optional text for this class is The Handbook of Applied Cryptography by Menezes, van Oorschot and Vanston.  It’s available online, gratis.  We’ll link to those pages from the course syllabus when appropriate.  You don’t need to buy this book.

Pre-requisites

((Comp311 or Comp412) and (Comp421 or Comp429)) or (consent of the instructor).

Lecture schedule

See the course schedule page. If we need to make last-minute changes, you’ll also see a message on the course blog.

Office hours

• Dan Wallach (DH 3004) Tu 4:00-5:00 (i.e., after class)
• TAs
  • Michael Dietz (DH 3002) Th 4:00-5:00

Accommodations

Any student with a documented disability needing academic adjustments or accommodations is requested to speak with me during the first two weeks of class. All discussions will remain confidential. Students with disabilities should also contact Disabled Student Services in the Ley Student Center.