|
T. Andrew Yang
|
Last
updated: 8/20: Test 1 time
corrected 8/19/2024: first posted |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
CSCI 4323
Computer Security fall 2024 (8/19 – 11/26 + final exam)
Time
(Classroom) Tuesdays
& Thursdays, 11:30am – 12:50pm (Delta 201) Course Description: Introduction to
encryption and decryption; security mechanisms in computer architectures,
operating systems, database, networks, and introduction to network security. Prerequisite:
CSCI 1370 Software Development with Java, or equivalent. Course Objectives: Introduction
to encryption and decryption; security mechanisms in computer programs,
operating systems, databases, networks, administration of computer security,
and legal/ethical issues in computer security. This course provides
foundation knowledge for further advanced study of security issues in
computer systems and applications. Learning Outcome:
-
Understand the five
security components (confidentiality, integrity, authenticity, availability, and
nonrepudiability), and apply them when evaluating a given security mechanism.
-
Understand the process
of developing a secure application, including development of security
policies, sample policy languages, relationship between security policies and
mechanisms, and different types of security mechanisms. -
Understand basic
cryptography (encryption and decryption) and major cryptographical protocols,
including symmetric and asymmetric cryptography, message digests, HMAC,
digital signatures, digital certificates, key exchange, and key storage, etc.
-
Develop sample
applications using security protocols provided by a given language such as
Java (JCA, JCE). -
Understand legal and
ethical issues in computer security (privacy issues, Computer Security Act,
HIPPA, etc.). -
Have an overall
understanding of some security applications, including authentication, access
control, network security, and system security. Class Format: Lectures are combined with discussions. Students
are expected to be active participants, by studying the relevant chapters
and/or research papers, and participating at in-class discussions. Lifelong learning “Education is not
something you can finish.” (Isaac Asimov) A note about Bloom's
Taxonomy and your learning …
(source:
https://tips.uark.edu/using-blooms-taxonomy/
) Instructor:
Dr. T. Andrew Yang -
Email address: yang@uhcl.edu -
Web site: https://sceweb.uhcl.edu/yang -
Office: Delta
174 -
Phone: (281)
283-3835 (Please leave a message if not available.) -
Drop-in
Office Hours Tuesdays: 10:00am-11:30am Wednesdays: 12:00-1:00pm Thursdays: 10:00am-11:30am o In-person:
D174 o
via Zoom meetings, click this link during
the posted office hours: https://uhcl.zoom.us/j/93285948037?pwd=U3NJMmhMaWVjZy9INUxwbS9ENDBvZz09 -
To communicate with the
professor, you are
encouraged to email your questions or issues to yang@uhcl.edu
and, if necessary, set up a time with the professor to have an online
meeting. Emails are typically replied within 24 hours. If you have not
received a response within 24 hours, either send a reminder email or leave a
message at (281) 283-3835. -
Using emails
effectively: Emailing
has become an indispensable tool in most work places. Emails
without a subject line or the signature line will be considered as
potentially malicious and be discarded.
Here is a sample subject line: "CSCI 4323 Lab #1, question 3". The
signature line should have your full name and the name of the class. Although
email messages tend to be informal, please check the grammar and spelling of
your messages to ensure their legibility. Try
to provide sufficient details in your email message, such as the problem(s)
you have encountered, the solution(s) you have tried, and the outcome you
have got from these solution(s). Teaching assistant info and office hours
Required Text: B: Matt Bishop. Introduction to Computer Security. Addison Wesley. 2004. (ISBN: 0321247442) + Instructor's handouts in the class and/or on the Web Recommended Text: D: Wenliang Du, Computer
& Internet Security: A Hands-on Approach, 2nd Edition, May 1, 2019. ISBN10: 1733003932, ISBN13: 9781733003933. Resources:
NOTE:
The following schedule will be adhered to as closely as possible,
although changes are probable. Always check with your instructor if you are
not sure about what would be covered next week.
Attendance Policy: You are
expected to attend all classes. If you have ever missed a class, be sure to
watch the recorded session to learn what had been covered. It is your
responsibility to get hold of whatever may have been discussed in the class.
+ Class
Participation: Participating in the
class is expected. You should ask or answer questions during the in-class or
online discussions. Grading Scale: The
accumulated points from all the categories determine a person's final grade. There
will be no extra-credit projects.
Grading
policy: -
All students are graded the same way according to the grading scale
posted above. -
Unless a grading error is found in an exam or assignment, a student’s
grade will NEVER be changed once it is assigned. -
No extra projects or assignments would be given to an individual
student to help improve his/her grades. Advices: o Your grades will be
continually updated in the Blackboard. It is your obligation to monitor your
grade-in-progress regularly, and immediately ask questions or seek help if
you are concerned. o Once a grade is assigned
and posted (in the Blackboard), a student may appeal for correction of the
assigned grade (if a grading error is found) within a week. After
that, the grade is finalized. o Never bother to appeal for
a change of your grade once it is finalized; the best and proper time of
improving your chance of earning a good grade is before it is finalized. Quizzes,
Tests, and Exams: Both analytic and synthetic abilities are emphasized. Being able
to apply the learned knowledge toward problem solving is also highly
emphasized in the tests. Unless
due to unexpected, documented emergency, no makeup tests or quizzes will be
given. Assignments
will be posted on the class web site as well as in the Blackboard. The due
date and time of each assignment is specified when it is published in the
Blackboard. -
Identification
page: All assignments must have
your name, and course name/number/section number (e.g., CSCI 4323) at the top
of the first page. -
Proper
organization of submitted material: If
your submission include multiple documents, combine all of them into a single
document (for example, a single PDF or ZIP). -
Order!
Order! Arrange the solutions
following the sequence of the questions. Write the question number at the
top-right corner of each page. -
Word
processing: It is required that you
type your reports (e.g., print them using a printer). Use a word processor
and appropriate typesetting and/or drawing tools to do the assignments. Spellcheck
the whole document before printing it. You may lose points due to spelling
or grammatical errors. A note about problem-solving: An important part of problem solving is correct understanding of the
given problem. -
Try to have a good grasp of
the problem before starting the process of finding the solution(s). -
Use any resources, including
the instructor, the TA, your classmates/friends, and online resources to
ensure that you have correctly understood the given problem. -
While trying to figure out
the solution(s), continue to verify your understanding of the problem. -
Read the given instructions
carefully before taking any action; while preparing
your solutions, be sure to follow the given instructions. NOTE: When a grade is assigned, the grade can
only be appealed within a week after
the grade has been posted. Always review a graded lab or test immediately and, if
needed, talk to the instructor within a week. Academic Honesty Policy: NOTE:
Unless
otherwise specified, all assignments, projects, quizzes, tests and exams are
individual work. Students should take caution not to violate the academic
honesty policy specified by the university. Per the UHCL
academic honesty policy, plagiarism is defined as follow. Plagiarism: a. Incorporating the work
or idea of another person into one’s own work without acknowledging the
source of that work or idea. b. Attempting to receive
credit for work performed by another person, including papers obtained in
whole or part from individuals or other sources. c. Copying copyrighted
computer programs or data files belonging to someone else. Visit http://cse.uhcl.edu/yang/citing.htm for more information about cited references. Instructor's Notes: -
Important: If you think you have lost some points due to
grading errors, make sure you approach the instructor within a week after the assignment, project, or test
has been graded. -
To get the most
out of this class, you need to read the textbooks and spend time using
computers regularly. Be prepared for a class by previewing the material to
be covered in that class and participate in discussions and problem-solving
exercises, if applicable, in the class. -
Taking
notes and understanding what
are covered in classes are essential for successfully passing the exams. -
As a student
being trained to become a professional person, you are expected to behave
according to the professional codes of conduct (e.g., the IEEE
Code of Conduct) or code of ethics (e.g., the ACM Code of Ethics). As
a starting point, listed below are some of the common behaviors that do not
conform to the codes of ethics: - Being
regularly late for the class. - Chatting
with another person while the instructor or someone is giving a speech in
class. - Being
regularly late when submitting assignments. - Asking
the instructor or the TA for a favor when submitting a late assignment. - Checking
out others’ answers during an exam. - Continuing
to write when an exam’s time is up, or submitting an online exam past the due
time. - Violating
academic honesty when working on the assignments or exams. - Using
others’ write-up without proper citing when writing a paper or report. - …
Go to the Index UHCL
Covid-related Policies and Information (Fall 2021) The documentation
below contains language approved by the Office of General Council from UH
System for inclusion in all syllabi. Face
Covering Policy Presence in
Class · Are
NOT exhibiting any Coronavirus Symptoms that makes you think that you
may have COVID-19 · Have
NOT tested positive or been diagnosed for COVID-19 · Have
NOT knowingly been exposed to someone with COVID-19 or suspected/presumed
COVID-19 If you are
experiencing any COVID-19 symptoms that are not clearly related to a
pre-existing medical condition, do not come to class. Please see Student Protocols for what to do if you experience
symptoms and potential exposure for what to do if you have potentially
been exposed to COVID-19. The Covid-19
Reporting Forms for
students are easily accessible and you are encouraged to report a diagnosis
or an exposure. COVID-19
Information Vaccinations Reasonable
Academic Adjustments/Auxiliary Aids Recording
of Class Syllabus
Changes Resources
for Online Learning UHCL Email Go to the Index |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
