COMP/IT 424: Security
Fall 2014

http://soltys.cs.csuci.edu/homepage/comp424-f14
[http://bit.ly/1pWtLja]

• Instructor:
  • Michael Soltys
  • email: michael.soltys@csuci.edu
  • office: BTW 2265
• Class Schedule: MWF 12:00-12:50 in BELL 1611.
• Course Description: Security systems in Operating Systems, Databases, and Computer Networks. Analysis of Formal Security Models. Introduction to Cryptography, specifically Public Key Security.
• Learning Outcomes: Upon completion of the course, the student will be able to:
  • Describe modern security protocols
  • Design security protocols
  • Assess vulnerabilities of a computer system and corresponding threats
  • Explain impediments to security
  • Assess the comparative strengths of cryptographic systems
  • Synthesize and articulate ideas clearly and convincingly in oral and written form
• Prerequisites: [COMP 151 or IT 221] and [COMP 362 or IT 421]
• Textbooks:
  

  Charlie Kaufman, Radia Perlman and Mike Speciner Network Security: Private Communication in a Public World. 2nd edition 2002 Published by Prentice Hall

• Grading:
  • 6 Assignments worth 10% each: There will be one homework assignment roughly every two weeks; the assignments must be submitted as a PDF file through CSUCI Blackboard; assignments cannot be emailed. The due dates of the assignment are as follows: September 12 and 26; October 10 and 24; November 7, 26. The assignments will be made available approximately two weeks before their due date. You are encouraged to work in groups of 2 or 3 (but not bigger) — you should submit one assignment per group. Each assignment will consist of 2 theoretical questions, and one programming problem. The programming problem will consist of a short Python code to be handed in with the assignment.
  • 1 midterm worth 20% — date TBA.
  • 1 final exam worth 20% — date TBA.
• How to avoid plagiarism: As mentioned above, the assignments may be written in groups. Each group has to work independently of the other groups; verbal discussions of problems among groups are allowed, but you should not show written notes or code, and you should not leave such discussions with written notes.
• Attendance: Students are encouraged but not required to attend the lectures. The assignments will be posted online. The midterm and the final exam will be written in class.
• Students with disabilities: Cal State Channel Islands is committed to equal educational opportunities for qualified students with disabilities in compliance with Section 504 of the Federal Rehabilitation Act of 1973 and the Americans with Disabilities Act (ADA) of 1990. The mission of Disability Accommodation Services is to assist students with disabilities to realize their academic and personal potential. Students with physical, learning, or other disabilities are encouraged to contact the Disability Accommodation Services office at (805) 437-8510 for personal assistance and accommodations. Please discuss your arrangements with the instructor as soon as possible.
• Check this web page regularly for announcements.

Announcements:

• Nov 24: The final exam for COMP/IT 424 will be written in two parts (usual classroom, and usual lecture time):
  • Friday, December 5, Part I
  • Monday, December 8, Part II
• Nov 14: Homework 6, due November 26, the last homework, has been posted below and on Blackboard.
• Nov 14: The batch of slides that we are currently going through (Public Key Cryptography) has been posted in the Reading List.
• Nov 14: On Friday November 21 there will be no normal lecture, but instead please attend the following talk:
  Title: Usability & Accessibility in Human-Computer Interaction
  Presenter: Li Liu, PhD
  Place: Broome 1670
  Time: Friday November 21 at 3pm
  Short Bio: Dr. Li Liu received his Ph.D. in Computer Science from the University of Alabama in 2010. He worked in both industry and academia. He is now an assistant professor in Digital Media at Utah Valley University where he teaches web technology and video game development. His research is to pioneer prototypes for novel human-computer interface.
  Abstract: Human-computer interaction (HCI) involves the study, planning, design and uses of the interfaces between users and computers. Unlike other types of engineering where designers can always rely on laws of physics and gravity to make designs work, interface design is difficult in part because everything requires interpretation. It is not uncommon to see that a design that works for one task or one user might not be appropriate for another since human performance is the most variable component in human-computer interaction. In this class, we will learn how to model human performance and principles that can be applied to design interactive system. We will also discuss why understanding human capabilities and limitations is imperative for creating an effective system design.
• Nov 10: We will have a speaker on Nov 12:
  Name: Rob Heilman
  Organization: Support the Test Management Resource Center (TRMC) which is a staff office to the Office of the Secretary of Defense (OSD). TRMC manages the test resources within the DoD, has oversight of all DoD test infrastructure (including the Sea Range at Point Mugu), authors the Strategic Plan for Test Resources for the DoD, manages a Test & Evaluation, Science and Technology (S&T) investment program along with a test oriented product investment program - and finally - manages a STEM program with the objective of establishing a persistent flow of test technology and talent into the DoD test community.
  Speaker's Background: An engineer that worked within the DoD for over 25 years, retiring this year as a senior manager after serving in numerous capacities, including Program Manager, Project Manager, Investment Manager, and Management oversight of all Navy Test Infrastructure. Currently based out of Washington, DC, though spent over 20 years at Point Mugu. Latter part of career focused on Information Technology and Autonomy initiatives.
  Discussion Abstract: Short discussion on careers in the test community of DoD Current internship opportunities sponsored by TRMC for positions at Point Mugu for this Summer
• Nov 7: For homework 5:

  So imagine you have a file of 8 characters, and a window of size 3.
  
  abcdefgh
  
  so your windows would be:
  
  abc
   bcd
    cde
     def
      efg
       fgh
  
  and so you would output 6 rolling sums.
  

• Nov 5: Instead of the usual lecture on Friday Nov 7, please attend the lecture by Kanika Grover 10am in Broome 2325 (Security and privacy of broadcasting transmission in wireless vehicular ad hoc networks), and the lecture by Jason Isaacs 3pm in Broome 2325 (Bayesian localization and mapping using GPS SNR measurements).
• Nov 3: We will have a speaker on Nov 14:
  Name of Speaker: Dave Zych
  Affiliation: RICO Technologies
  Position at company: Software Engineer
  Date/Time/Place: Nov 12, 12pm, BEL 1611
  
  Abstract of talk:
  Most programming students have many questions about where and how to find a job in the software field, as well as what it's like to work at a software company. This session will first go over what RICO Technologies does along with Dave's responsibilities and experiences at RICO. After that he'll cover some pointers on finding a job after college, including a few resume tips, how to approach interviews and getting through the first day at a new job. The session will finish with a few interactive examples of the types of problems RICO solves.
• Oct 29: Homework 5 posted below; due November 7.
• Oct 21: We will not have a lecture on Friday October 24th, as the instructor is attending the CSU Chair's conference in Long Beach.
• Oct 20: Read this: Stop worrying about mastermind hackers. Start worrying about the IT guy. from the Washington Post.
• Oct 20: COMP/IT 424 final exam is on December 15th, 10:30-12:30pm, in BELL 1611.
• Oct 15: On Monday October 20 we are going to have a guest lecturer, Nick Rakoczy, who is going to talk about the following: A recent graduate's experience and thoughts on the software engineering job market, resumes, and interviewing skills. A basic overview of Maven: dependencies, the build chain, and why you'll either love it or hate it.
• Oct 12: Reminder: the midterm will take place on Friday October 17, in class. On Monday and Wednesday we are going to be reviewing the material we have seen thus far.
• Oct 4: Jesse Thomas won the crypt() hash callenge (the first hash in the entry below); read about it here. The second challenge is an MD5 hash — much harder! For more information about the Apache specific MD5, read the Apache Password Formats page.
• Oct 3: Challenges:
  • 3zLNGMUzkNwak
  • security2014:$apr1$KDpxgXJu$XrHCSHuyYKHOYNap5iVwI1
• Oct 1: The midterm will take place on October 17th, during the usual lecture time. It will be 50 minutes long, and consist of 3 written questions (based on the material presented in the lectures).
• Sept 25: You can read about shellshock here.
• Sept 25: Homework 3 has been posted below and on Blackboard.
• Sept 17: Homework 1 has been graded. Don't hesitate to talk with me (when I return) if you have any concerns. In general, the Homework was very well done, with most grades in the high 20s (it was out of 30).
• Sept 11: I am attending a conference, and so our lectures will reconvene on September 22. Please work on homework 2 during this week.
• Sept 9: Homework 2 has been posted below, and on Blackboard.
• Sept 8: Here is a very good source for learning Python: Think Python, by Allen B. Downey.
• Sept 5: In today's lecture we started on chapter 3 in the textbook. We are going to examine DES next.
• Sept 5: Home Depot hacking incident. You can follow me at @MichaelMSoltys for news and commentary on security and other Computer Science related topics.
• Aug 30: The first homework has been posted below; each member of every team should submit the final copy (containing the names of all the team members). You must use CSUCI Blackboard by the due date. Emailed assignments will not be accepted.
• Aug 30: At the end of first week, you should read the textbook up to, and including, section 2.2 (Breaking an Encryption Scheme).
• Aug 28: For next week, please read articles 1. and 2. on the Reading List.
• Aug 27: Reading List; you will be given the login credentials in class.
• Aug 12: First day of class is August 25.

Assignments, Midterm and Exam:

• Homework 1 due on September 12.
• Homework 2 due on September 26.
• Homework 3 due on October 10.
• Midterm on October 17.
• Homework 4 due on October 24.
• Homework 5 due on November 7.
• Homework 6 due on November 26.