CS 645 - Fall 2019 - Security and Privacy in Computer Systems (section 001)

Exams

• Midterm exam (in KUPF 209 on 10/22/19 at 2:30pm). The exam will cover lectures 1 through 7.
  The exam will be closed books and closed notes.
• The final exam is scheduled on December 16, 2019 (Monday) between 2:30 - 5:00pm in KUPF 118.
  The final exam covers all the material (lectures 1 - 14), and will be closed books and closed notes.

Class schedule: Tuesday 2:30 - 5:20 pm (KUPF 209).

Instructor: Reza Curtmola ; Email: ; Office: GITC 4317B
Office hours (GITC 4317B): Mon 5-6pm, Thu 4-5pm.

Important dates
(note that project dates are tentative and may change)

Date	Event
10/01/19	Project 1 posted
10/15/19	Project 1 due
10/22/19	Midterm exam
11/05/19	Project 2 posted
11/19/19	Project 2 due
11/26/19	Project 3 posted
12/10/19	Project 3 due
12/16/19	Final exam (2:30pm in KUPF 118)

Course Syllabus

Overview
The course covers fundamental principles of building secure systems and techniques to protect data privacy. Topics include access control mechanisms, operating system and filesystem security, malicious code threats and software security, trusted computing, content protection, and database security. The course will also study existing technical approaches to protecting privacy, including Web anonymizers and anti-censorship tools, as well as policy and legal aspects of privacy.

A tentative list of topics includes:

• Introduction (security goals, overview of course topics, overview of attacks)
• Crypto crash course
• Access control mechanisms
• Operating system and filesystem security
• Software security, Secure Programming
• Malicious code, Malware, Rootkits
• Trusted computing
• Introduction to security of networked systems
• Web security, privacy and anonymity on the Web
• Content protection, Software obfuscation, Digital rights management
• Database security
• Security of electronic voting
• Computer crime - laws and ethics, Security & privacy policy (Sarbanes Oxley, HIPAA)
• Miscellaneous topics: side-channel attacks, gaming security, information assurance (common criteria), risk analysis

Who should take this course
Graduate students interested in understanding the fundamental principles of building secure systems and techniques to protect data privacy.
The course is also an excellent starting point for finding research topics for M.S. and Ph.D. theses.

Prerequisites
There are no specific course prerequisites for the course, but students are expected to enter this course with a basic knowledge of operating systems, networking, algorithms, and data structures.
Also, students should be able to program in Java and C/C++.

Textbook:
"Introduction to Computer Security", by M. Goodrich and R. Tamassia,
Addison Wesley, 2010, ISBN: 0321512944

In addition, course material will include research articles from electronic databases such as:
ACM Digital Library, IEEE Xplore, Science Direct

Grading policy:

3 mini-projects	45%
Midterm exam	25%
Final exam	30%
Class participation	up to 10%

Academic integrity

The NJIT Academic Integrity Code will be upheld, and any violations will be brought to the immediate attention of the Dean of Students.

The syllabus may be modified at the discretion of the instructor or in the event of extenuating circumstances.
Students will be notified in class of any changes to the syllabus.