CS 166 Syllabus

CS 166 Course Syllabus

General information
- CS 166 --- Information Security
- Department of Computer Science
- San Jose State University
- Spring 2010
Instructor information
- Name: Mark Stamp
- Office: MQH 216
- Office hours: MW 6:45pm--8:30pm and 5:15pm--5:30pm, or by appointment
- Phone: 408-924-5094
- email: stamp@cs.sjsu.edu
  - Email is the best way to contact me
  - Please put "CS166" at the beginning of the subject line
- Greensheet: http://www.cs.sjsu.edu/faculty/stamp/CS166/syllabus/syllabusSpr10.html
- Who am I?
Textbook: We will use a manuscript that will become the second edition of Information Security: Principles and Practice, Mark Stamp, (Wiley InterScience, 2005, ISBN 0-471-73848-4).
- PowerPoint slides, errata, and resources for the textbook are available here.
- Approximate schedule (3 hours equals 1 week of class time):
  - Introduction
    - Chapter 1 (1 hour)
  - Crypto
    - Chapter 2: Crypto Basics (3 hours)
    - Chapter 3: Symmetric Key Crypto (4 hours)
    - Chapter 4: Public Key Crypto (4 hours)
    - Chapter 5: Hash Functions and Other Topics (4 hours)
  - Access Control
    - Chapter 7: Authentication (4 hours)
    - Chapter 8: Authorization (2 hour)
  - Protocols
    - Chapter 9: Simple Authentication Protocols (4 hours)
    - Chapter 10: Real-World Security Protocols (5 hours)
  - Software
    - Chapter 11: Software Flaws and Malware (4 hours)
    - Chapter 12: Insecurity in Software (4 hours)
    - Chapter 13: Operating Systems and Security (4 hours)
- Note: Due to time constraints, we omit Chapter 6 and much of Chapter 8 and various parts of the last three chapters.
- Other useful security books:
  - Network Security: Private Communication in a Public World, second edition, Charlie Kaufman, Radia Perlman and Mike Speciner, Prentice Hall, 2002, ISBN: 0-13-046019-2. This book has excellent coverage of selected security protocols and limited, but good, coverage of cryptography.
  - Security Engineering: A Guide to Building Dependable Distributed Systems, Ross Anderson, John Wiley & Sons, Inc., 2001, ISBN: 0-471-38922-6; see Ross Anderson's Security Engineering website http://www.cl.cam.ac.uk/~rja14/book.html for lots of interesting security information, and errata for his book. This book consists primarily of case studies illustrating security failures. The emphasis is on human factors, not technical issues.
  - Security in Computing, third edition, Charles P. Pfleeger and Shari Lawrence Pfleeger, Prentice Hall, 2003, ISBN: 0-13-035548-8. The strength of this book is its coverage of software security issues. In particular, operating systems and some aspects of secure software engineering are covered well. The book also has some dated, but reasonably good information on viruses.
  - Applied Cryptography: Protocols, Algorithms and Source Code in C, Second Edition, Bruce Schneier, John Wiley & Sons, Inc., 1995 (2nd edition), ISBN: 0-471-11709-9. This is a standard reference for real-world cryptography.
  - Computer Security, Dieter Gollmann, John Wiley & Sons, Inc., 1999, ISBN: 0471978442. This book is not particularly easy to read but Chapter 8, How Things Go Wrong, is good.
  - Counter Hack Reloaded: A Step-by-Step Guide to Computer Attacks and Effective Defenses, 2nd editions, Ed Skoudis and Tom Liston Prentice Hall, 2005, ISBN: 0131481045. There are many books that claim to provide information on how hackers operate and how to foil attacks, but this is by far the best of the bunch.
Student Learning Objectives: After completing this course you should be knowledgeable concerning the major technical security challenges in each of the following four areas: cryptography, access control, protocols, and software.
Grading:
1. Test 1, 100 points. Date: Wednesday, March 3.
2. Test 2, 100 points. Date: Wednesday, April 14.
3. Homework, quizzes, class participation, and other work as assigned, 100 points.
4. Final, 100 points.
  - Section 01, Friday, May 21 at 2:45pm
  - Section 02, Wednesday, May 19 at 5:15am
  - The official finals schedule is here: http://info.sjsu.edu/static/soc-spring/finals.html
5. Semester grade will be computed as a weighted average of the 4 major scores listed above.
6. No make-up tests or quizzes will be given and no late homework (or other work) will be accepted.
7. Nominal Grading Scale:
  
  Percentage Grade
  92 and above A
  90 - 91 A-
  88 - 89 B+
  82 - 87 B
  80 - 81 B-
  78 - 79 C+
  72 - 77 C
  70 - 71 C-
  68 - 69 D+
  62 - 67 D
  60 - 61 D-
  59 and below F
Homework: Homework is due typewritten (include source code, but not exe files) by 11:59pm on the due date. Each assigned problem requires a solution and an explanation (or work) detailing how you arrived at your solution. Cite any outside sources used to solve a problem. When grading an assignment, I may ask for additional information. Note that a subset of the assigned problems will be graded.

Zip your homework into a file named hmk.zip. Email your work to sjsu.cs166.sec1@gmail.com or sjsu.cs166.sec2@gmail.com (depending on your section). The subject line of your email must be of the form:
```
     CS166HMK assignmentnumber yourlastname last4digitofyourstudentnumber 
```
That is, the subject line must consist of four identifiers. There is no space within an identifier and each identifier is separated by a space.
- Assignment 1: Due Wednesday, February 3
  Chapter 1, problems 4, 10, 12, 13, 17, 21. The problems for chapter 1 can be found here. Also, the PowerPoint slides mentioned in problem 21 can be found here.
- Assignment 2: Due Wednesday, February 10
  Chapter 2, problems 1, 8, 11, 12, 24, 26, 29. The problems for chapter 2 can be found here.
- Assignment 3: Due Wednesday, February 17
  Chapter 3, problems 3, 6, 8, 13, 17, 18, 22, 34, 35, 36, 42. The textbook website is here.
- Assignment 4: Due Wednesday, February 24
  Chapter 4, problems 1, 2, 6, 7, 8, 10, 21, 25, 29, 30, 35, 36.
- Assignment 5: Due Wednesday, March 3
  Chapter 5, problems 3, 9, 10, 11, 15, 20, 21, 22, 28, 30, 33, 36, 39. The files mentioned in problems 21, 33, and 39 can be found here.
- Assignment 6: Due Wednesday, March 17
  Chapter 7, problems 5, 6, 9, 11, 13, 20, 21, 28, 32, 34, 35, 38.
- Assignment 7: Due Wednesday, March 24
  Chapter 8, problems 3, 5, 6, 10, 13, 15, 25, 26, 29, 36.
- Assignment 8: Due Wednesday, April 14
  Chapter 9, problems 1, 5, 8, 9, 20, 21, 22, 27, 37.
- Assignment 9: Due Wednesday, April 28
  Chapter 10, problems 1, 6, 10, 11, 13, 20, 22, 26, 27, 34.
  Chapter 12, problem 5.
- Assignment 10: Due Wednesday, May 5
  Chapter 10, problems 14, 15, 17, 40, 43, 44.
  Chapter 11, problems 21, 24, 27.
- Assignment 11: Due Wednesday, May 19
  Chapter 11, problems 5, 11, 29.
  Chapter 12, problems 4, 22, 28, 33.
  Chapter 13, problems 6, 18, 33.
Keys to success: Do the homework and attend class
Wireless laptop is required. Your laptop must remain closed (preferably in your backpack and, in any case, not on your desk) until I inform you that it is needed for a particular activity
Cheating will not be tolerated, but working together is encouraged
Student must be respectful of the teacher and other students.
- No disruptive or annoying talking
- Turn off cell phones
- Class begins on time
- Class is not over until I say it's over
- Etc.
Disability information and policies can be found here
Valid picture ID required at all times
Note that the last day to drop is Friday, February 5, and the last day to add is Friday, February 12
Guest lecture
- Speaker: TBD
- Title: TBD
- Date: TBD
- Time: TBD
- Location: TBD
- Abstract:
Other Stuff

Percentage	Grade
92 and above	A
90 - 91	A-
88 - 89	B+
82 - 87	B
80 - 81	B-
78 - 79	C+
72 - 77	C
70 - 71	C-
68 - 69	D+
62 - 67	D
60 - 61	D-
59 and below	F