SYSC 4810
Introduction to Network and Software Security
Fundamental concepts, terminologies, and theories of computer security; principles underlying common security controls; various types of threats and attacks on networks and software systems, how they work, and controls for dealing with them; security risk assessment and management; legal and ethical aspects of computer security.
2020
Topics
- Security Concepts: Confidentiality, Integrity, Availability, Threats, Attacks, Assets.
- Fundamental Security Design Principles.
- Attack Surfaces and Attack Trees.
- Security Strategies, Policies, and Implementations: Prevention, Detection
- Recovery.
- Cryptography: Symmetric vs. Asymmetric, Hashing, Digital Signatures, Key
- Management.
- User Authentication: Passwords, Tokens, Biometrics.
- Access Control Principles: Subjects, Objects, Access Rights, Role-Based vs.
- Attribute-Based.
- Trusted Computing and Multilevel Security.
- Malicious Software: Viruses, Worms, Trojans, Bots, Spam, Phishing, Backdoors
- Rootkits.
- Wireless Network Security and Mobile Device Security.
- Software Security: Buffer Overflows, Handling Inputs/Outputs, Secure
- Programming.
- System Security: Operating Systems, Cloud, IoT Security.
- Security Management, Risk Assessment, and Threat Modeling.
- Security Controls, Plans, and Procedures.
- Security Evaluation and Assurance.
Prerequisites & course information
Precludes additional credit for COMP 4108 , CSEC 3108 . Prerequisite(s): fourth-year standing in Communications, Computer Systems, or Software Engineering. Lectures three hours a week, problem analysis one and a half hours a week.