COURSE INFORMATION

Course description.  Security issues in computing, communications, and electronic commerce. Goals and vulnerabilities; legal and ethical issues; basic cryptology; private and authenticated communication; electronic commerce; software security; viruses and other malicious code; operating system protection; trusted systems design; network security; firewalls; policy, administration and procedures; auditing; physical security; disaster recovery; reliability; content protection; privacy.

Textbook. There is no required or suggested textbook in this course, because there is no one book that covers the right material in an up-to-date fashion. Here are some good books about security, in case you're interested.

• Ross J. Anderson, Security Engineering. [Covers security in general, with many non-computing examples.]
• Dieter Gollmann, Computer Security. [General security textbook. Good for what it covers, but doesn't cover everything.]
• David Kahn, The Codebreakers. [History of cryptography. Not very technical.]
• Steven Levy, Crypto. [History of cryptography since 1970. Non-technical.]
• Niels Ferguson and Bruce Schneier, Practical Cryptography. [Focused coverage of applied cryptography, not the most rigorous.]
• Bruce Schneier, Applied Cryptography. [Very broad coverage of crypto and its applications. Approachable but not as rigorous as Stinson.]
• Douglas R. Stinson, Cryptography Theory and Practice (2nd edition). [Cryptography textbook. Math-intensive.]
• John Viega and Gary McGraw, Building Secure Software. [How to write software that will have fewer security bugs.]
• Michal Zalewski (lcamtuf), The Tangled Web: A Guide to Securing Modern Web Applications. [Web security. Strikes a good balance between conceptual exposition and messy detail.]

Lectures.  Lectures meet on Mondays and Wednesdays at 3pm in Friend 101

Piazza  We will be using the class Piazza board as the main vehicle for class discussion, announcements, and answering questions.

Homework Policy. Late homework will lose 10% of its value for every day of lateness. Homework more than seven days late will not be accepted.

No homework extensions will be given except in extraordinary circumstances (such as documented illness), and then only if the official university procedures are followed.

Collaboration policy.  This course permits many forms of collaboration, including help from course staff, classmates, and lab TAs. However, you must be careful to collaborate only as authorized below. Here is an executive summary.

Grading.  Grades will be computed by the following formula: 65% homework; 30% final exam; 5% other factors.

Staff, Office Hours and Other Help. 

	Instructor Ed Felten - felten@ Office: Sherrerd 302, (609) 258-5906 Office Hours: by arrangement