Computer Security: 2009-2010
Information
|
Lecturer |
|
|
Degrees |
Hilary Term — MSc in Computer Science Part B — Honour School of Mathematics and Computer Science Part B — Honour School of Computer Science |
|
Term |
Hilary Term 2010 (16 lectures) |
Overview
Security is a major topic in Computer Science, with far-reaching implications in an increasingly networked world. This course covers some of the fundamental principles of computer security.Learning outcomes
At the end of the course, the student will:
- understand the need for, and the different aspects of, computer security;
- understand some of the technical solutions to problems of security;
- be able to evaluate proposals for security architectures.
This is a course for Computer Scientists, not System Administrators: don't expect to learn how to build "secure" websites, nor how to install firewalls; do expect to learn the underlying principles.
Synopsis
Introduction to Security
Access Control
Operating Systems
Introduction to Cryptography
Introduction to Secure Protocols
Cryptographic Functions
More on Protocols
Models of security
Protocol Design Principles
Further Cryptography
Advanced Protocols
This course has an average of 0.5 hours per week of practical work, all of which is scheduled to be done in the last five weeks of the course.
Syllabus
Aspects of security, security models, operating systems security, cryptography, security protocols, security and the world wide web.Reading list
Unfortunately there is no course book that really covers the syllabus. However, the following might be useful.- Bruce Schneier. Applied Cryptography: Protocols, Algorithms, and Source in C. Wiley, 1995. A classic. Pleasant to read, but a bit dated, and not completely reliable in details.
- Charlie Kaufman, Radia Perlman and Mike Speciner. Network Security. Private Communication in a Public World. Prentice Hall 2002. Balanced textbook, written with in an easy, amusing style. Covers the most important topics of the course.
- Ross Anderson. Security Engineering. Second Edition. Wiley, 2008. An impressive scope of the material, but treated, as the title says, from an engineering point of view, which is not the intent of our course. Very informative reading, though.
- Peter Ryan, Steve Schneider, Michael Goldsmith, Gavin Lowe and Bill Roscoe. Modelling and Analysis of Security Protocols. Addison Wesley, 2001. A formal look at protocols, suitable for those familiar with CSP.
- Wenbo Mao. Modern Cryptography - Theory & Practice. Prentice Hall 2004. A broad and accessible overview of the cryptographic aspects of security.