Information and System Security (3-0-0)

Course Details:

  1. Overview of Computer Security - Confidentiality, Integrity, Availability, Policy and Mechanism, Assumptions and Trust, Assurance, Access Control Matrix
  2. Security Policies, Confidentiality Policies - Bell-LaPadula Model, Integrity Policies - Biba Integrity Model, Lipner's Integrity Matrix Model, Clark-Wilson Integrity Model, Chinese Wall Model
  3. Fundamentals of Cryptography and Cryptosystems - DES, Public Key Cryptography - Diffie-Helman, RSA, AES, Key Management, Cipher Techniques
  4. Authentication - Passwords, Challenge-Response, Biometrics
  5. System Design Principles, Identity, Access Control Mechanisms, Information Flow, Confinement Problem
  6. Introduction to Assurance, Building Systems with Assurance, Evaluating Systems
  7. Malicious Logic, Vulnerability Analysis, Auditing, Intrusion Detection
  8. Practical Aspects of Network Security, System Security, User Security, Program Security, Database Security


Suggested Text Books
Matt Bishop, Computer Security (Pearson Education)