• CS 265 --- Cryptography and Computer Security
• Department of Computer Science
• San Jose State University
• Spring 2012

• Name: Mark Stamp
• Office: MQH 216
• Office hours: Tuesday & Thursday 10:15am-noon
• Phone: 408-924-5094
• email: stamp@cs.sjsu.edu
  • Email is the best way to contact me
  • Please put "CS265" at the beginning of the subject line
• Greensheet: http://www.cs.sjsu.edu/faculty/stamp/CS265/syllabus/syllabusSpr12.html
• Who am I?

• PowerPoint slides, errata, lecture videos, and other resources are available here. Previous semester lecture videos are available on You Tube.

• Approximate schedule (3 hours equals 1 week of class time):
  • Introduction
    • Chapter 1 (1 hour)
  • Crypto
    • Chapter 2: Crypto Basics (3 hours)
    • Chapter 3: Symmetric Key Crypto (4 hours)
    • Chapter 4: Public Key Crypto (4 hours)
    • Chapter 5: Hash Functions and Other Topics (4 hours)
  • Access Control
    • Chapter 7: Authentication (4 hours)
    • Chapter 8: Authorization (2 hour)
  • Protocols
    • Chapter 9: Simple Authentication Protocols (4 hours)
    • Chapter 10: Real-World Security Protocols (5 hours)
  • Software
    • Chapter 11: Software Flaws and Malware (4 hours)
    • Chapter 12: Insecurity in Software (4 hours)
    • Chapter 13: Operating Systems and Security (4 hours)
  
  
• Note: Due to time constraints, we omit Chapter 6 and various parts of the last three chapters.
  
  
• Recommended Textbook: Applied Cryptanalysis: Breaking Ciphers in the Real World, Mark Stamp and Richard M. Low, Wiley-IEEE Press, May 2007, ISBN: 047011486X. This book contains detailed discussion of several cryptanalytic attacks. These attacks are "applied", in the sense that each attack can be implemented to break a real-world cipher system. This book is a good source for the cryptanalysis project. Several copies of this book are on reserve at the SJSU King Library.
  
  
  • Powerpoint slides, errata, and resources for this book can be found here.
  
  
• Other useful security books:
  • Reversing: Secrets of Reverse Engineering, Eldad Eilam, Wiley, 2005, ISBN: 0764574817. This is the best book available on reverse engineering software. The book also discusses various software protection techniques.
  • Network Security: Private Communication in a Public World, second edition, Charlie Kaufman, Radia Perlman and Mike Speciner, Prentice Hall, 2002, ISBN: 0-13-046019-2. This book provides good coverage of cryptography and excellent coverage of several security protocols.
  • Security Engineering: A Guide to Building Dependable Distributed Systems, Ross Anderson, John Wiley & Sons, Inc., 2001, ISBN: 0-471-38922-6; see Ross Anderson's Security Engineering website http://www.cl.cam.ac.uk/~rja14/book.html, where you can obtain a free (and legal) copy of the book. This is an excellent book for an overview of security in general, but it is not very focused or technically detailed.
  • Security in Computing, third edition, Charles P. Pfleeger and Shari Lawrence Pfleeger, Prentice Hall, 2003, ISBN: 0-13-035548-8. The strength of this book is its coverage of the security issues related to software. In particular, operating systems and some aspects of secure software engineering are covered well. This book also has some good basic information on viruses.
  • Applied Cryptography: Protocols, Algorithms and Source Code in C, second edition, Bruce Schneier, John Wiley & Sons, Inc., 1995, ISBN: 0-471-11709-9. For better or for worse this is the standard reference for cryptography, particularly in industry.
  • Counter Hack Reloaded: A Step-by-Step Guide to Computer Attacks and Effective Defenses, Ed Skoudis with Tom Liston, Prentice Hall, 2006, ISBN: 0-13-148104-5. There are many books that claim to provide information on how to foil hackers, but this is by far the best that I have seen. This is an updated version of the original Counter Hack, published in 2001.
  • Computer Viruses and Malware, John Aycock, Springer, 2006, ISBN: 0387302360. This book gives a good introduction to research topics related to malware. The book is well-written and surprisingly easy reading, given the technical nature of the material. However, it is somewhat uneven in its coverage, with many interesting topics only mentioned in passing, and some of the more lengthy discussions allocated to topics of marginal interest (at least to me).

1. Test 1, 100 points. Date: Thursday, March 1.
2. Test 2, 100 points. Date: Thursday, April 12 Tuesday, April 17. The test review is located here and the solutions are here.
3. Homework, quizzes, class participation and other work as assigned, 50 points.
4. Cryptanalysis Project, 100 points. Your project topic is due Tuesday, February 7 and the completed project is due Thursday, March 22. Note that a written report is required, but no oral report.
   
5. SRE Project, 50 points. Your project topic is due Tuesday, April 10 and the completed project is due Thursday, May 10. Presentations will be given beginning on the due date. Note that an oral report is required, but no written report.
   
6. Final, 100 points.
   • Section 01, Tuesday, May 22 from 7:15-9:30am
   • Section 02, Tuesday, May 22 from 12:15-2:30pm
   • The official finals schedule is here: http://info.sjsu.edu/static/soc-spring/final-exam-schedule-spring.html
7. Semester grade will be computed as a weighted average of the major scores listed above.
8. No make-up tests or quizzes will be given and no late homework or project (or other work) will be accepted.
9. Nominal Grading Scale:
   
   

   Percentage	Grade
   92 and above	A
   90 - 91	A-
   88 - 89	B+
   82 - 87	B
   80 - 81	B-
   78 - 79	C+
   72 - 77	C
   70 - 71	C-
   68 - 69	D+
   62 - 67	D
   60 - 61	D-
   59 and below	F

     CS265HMK assignmentnumber yourlastname last4digitofyourstudentnumber 

• Assignment 1: Due Tuesday, January 31
  Chapter 1, problems 1, 8, 10, 11, 13, 15, 16, 17. The problems for chapter 1 can be found here.
  
  
• Assignment 2: Due Tuesday, February 7
  Chapter 2, problems 1, 5, 7, 8, 11, 12, 13, 16, 19, 22, 26. Solve problems 12 and 13 before problem 11, and use your program from 13 to solve 11.
  
  
• Assignment 3: Due Tuesday, February 14
  Chapter 3, problems 2, 3, 4, 8, 9, 11, 14, 16, 22, 27, 30, 31, 43. Note that there is a typo in problem 30, part b, which should read "Use the TEA cipher to encrypt Alice.jpg in CBC mode…". For problem 30, part a, encrypt Alice.bmp using both ECB and CBC mode. For problem 30, part b, encrypt Alice.jpg using both ECB and CBC mode.
  
  
• Assignment 4: Due Tuesday, February 21
  Chapter 4, problems 2, 3, 6, 8, 10, 14, 20, 23, 25, 32, 35. Before attempting problem 32, read item number 12 on the errata list found here.
  
  
• Assignment 5: Due Tuesday, February 28
  Chapter 5, problems 2, 5, 8, 13, 16, 17, 21, 22, 25, 26, 28, 33, 35, 42, 43.
  
  
• Assignment 6: Due Tuesday, March 13
  Chapter 7, problems 6, 9, 11, 13, 14, 21, 24, 25, 29, 32, 37, 38.
  
  
• Assignment 7: Due Thursday, March 22
  Chapter 8, problems 2, 3, 7, 10, 11, 15, 20, 25, 26, 29, 33, and send a spoofed email to stamp@cs.sjsu.edu.
  
  
• Assignment 8: Due Tuesday, April 10
  Chapter 9, problems 6, 7, 9, 13, 16, 18, 20, 21, 24, 27, 31, 32, 36.
  
  
• Assignment 9: Due Thursday April 26
  Chapter 12, problems 1, 2, 7, 8, 12, 14. Also, decompile a Java class file of your choice (using a tool such as Cafebabe) for which you have the corresponding Java source file. Comment on the similarities and differences between the decompiled file and the original source file.
  
  
• Assignment 10: Due Tuesday, May 8
  Chapter 10, problems 1, 5, 6, 10, 11, 13, 14, 15, 17, 18, 21, 26, 27, 32, 34.
  
  
• Assignment 11: Due Tuesday, May 22
  Chapter 11, problems 6, 13, 14, 15, 17, 18, 22, 24, 28, 32, 35, 36, 43.
  
  
• Assignment 12: Due TBD
  You are required to attend at least one of the masters defenses listed here. These will be scheduled during finals week, and the schedule should be finalized by the last week of class.
  
  

• The last day to drop is Monday, February 6, and the last day to add is Monday, February 13
  
  
• No extra credit is anticipated
  
  
• Keys to success: Do high quality work on the projects, do the homework, and attend class
  
  
• Wireless laptop is required. Your laptop must remain closed (preferably in your backpack and, in any case, not on your desk) until I inform you that it is needed for a particular activity
  
  
• Cheating will not be tolerated...
  
  
• ...but working together is encouraged
  
  
• Student must be respectful of the teacher and other students.
  • No disruptive or annoying talking
  • Turn off cell phones
  • Class begins on time
  • Class is not over until I say it's over
  • Etc.
  
  
• Valid picture ID required at all times
  
  
• Why study security?
  
  
• Guest lecture
  
  
  • Speaker: TBD
  • Affiliation: TBD
  • Title: TBD
  • Date: TBD
  • Abstract: TBD
    

• Academic integrity
  
  Your commitment as a student to learning is evidenced by your enrollment at San Jose State University. The University's Academic Integrity policy, located at http://www.sjsu.edu/senate/S07-2.htm, requires you to be honest in all your academic course work. Faculty members are required to report all infractions to the office of Student Conduct and Ethical Development. The Student Conduct and Ethical Development website is available at http://www.sa.sjsu.edu/judicial_affairs/index.html. Instances of academic dishonesty will not be tolerated. Cheating on exams or plagiarism (presenting the work of another as your own, or the use of another person's ideas without giving proper credit) will result in a failing grade and sanctions by the University. For this class, all assignments are to be completed by the individual student unless otherwise specified. If you would like to include your assignment or any material you have submitted, or plan to submit for another class, please note that SJSU's Academic Policy S07-2 requires approval of instructors.
  
  
• Campus Policy in Compliance with the American Disabilities Act
  
  If you need course adaptations or accommodations because of a disability, or if you need to make special arrangements in case the building must be evacuated, please make an appointment with me as soon as possible, or see me during office hours. Presidential Directive 97-03 requires that students with disabilities requesting accommodations must register with the Disability Resource Center (DRC) at http://www.drc.sjsu.edu/ to establish a record of their disability.