CS 5430
System Security
Surveys security for computers and communications networks, including policy issues (e.g., the national debates on cryptography policy) as well as technical approaches for implementing properties that comprise trustworthiness for a computing system: confidentiality, integrity, availability, and assurance. Discusses cryptographic protocols and other mechanisms for implementing authorization and authentication in hardware and in software.
Topics
- Read and discuss existing cybersecurity literature.
- Formulate security policies required for application trustworthiness.
- Find vulnerabilities in shared key and public key cryptographic protocols.
- Develop defenses and formalize assurance arguments for cryptographic protocols.
- Define discretionary and mandatory access control policies.
- Implement authorization policies by using access control lists and by using capabilities.
- Enforce non-interference by using information-flow labels.
- Implement isolation for virtual machines, processes, and compartments.
- Design reference monitors and rewriters for enforcing specific policies.
Official roster learning outcomes
Prerequisites & course information
background equivalent to: CS 4410.
Sources
- Course catalogue ↗2026-2027
- Catalogue entry ↗
Catalogue variants
- System Security · 4.0 · Graduate