• CS 166 --- Information Security
• Department of Computer Science
• San Jose State University
• Fall 2012

• Name: Mark Stamp
• Office: MQH 216
• Office hours: Friday 9:30am-noon
• Phone: 408-924-5094
• email: stamp@cs.sjsu.edu
  • Email is the best way to contact me
  • Please put "CS166" at the beginning of the subject line
• Greensheet: http://www.cs.sjsu.edu/faculty/stamp/CS166/syllabus/syllabusFall12.html
• Who am I?

• PowerPoint slides, errata, lecture videos, and other resources are available here. Previous semester lecture videos are available on You Tube.

• Approximate schedule (3 hours equals 1 week of class time):
  • Introduction
    • Chapter 1 (1 hour)
  • Crypto
    • Chapter 2: Crypto Basics (3 hours)
    • Chapter 3: Symmetric Key Crypto (4 hours)
    • Chapter 4: Public Key Crypto (4 hours)
    • Chapter 5: Hash Functions and Other Topics (4 hours)
  • Access Control
    • Chapter 7: Authentication (4 hours)
    • Chapter 8: Authorization (2 hour)
  • Protocols
    • Chapter 9: Simple Authentication Protocols (4 hours)
    • Chapter 10: Real-World Security Protocols (5 hours)
  • Software
    • Chapter 11: Software Flaws and Malware (4 hours)
    • Chapter 12: Insecurity in Software (4 hours)
    • Chapter 13: Operating Systems and Security (4 hours)
  
  
• Note: Due to time constraints, we omit Chapter 6 and various parts of the last three chapters.
  
  
• Other useful resources:
  • Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software, Michael Sikorski and Andrew Honig, No Starch Press, 2012. An excellent book for information on reverse engineering (whether for malware analysis or other purposes). Includes many hands-on exercises.
  • Software Reverse Engineering (SRE) website. This website, which was created by a former masters student, includes lots of good information and detailed exercises with solutions.
  • Network Security: Private Communication in a Public World, second edition, Charlie Kaufman, Radia Perlman, and Mike Speciner, Prentice Hall, 2002, ISBN: 0-13-046019-2. This book provides good coverage of cryptography and excellent coverage of several security protocols.
  • Security Engineering: A Guide to Building Dependable Distributed Systems, Ross Anderson, John Wiley & Sons, Inc., 2001, ISBN: 0-471-38922-6; see Ross Anderson's Security Engineering website http://www.cl.cam.ac.uk/~rja14/book.html, where you can obtain a free (and legal) copy of the 1st edition of the book. This is an excellent book for an overview of security in general, but it is not too focused or technically detailed.
  • Security in Computing, third edition, Charles P. Pfleeger and Shari Lawrence Pfleeger, Prentice Hall, 2003, ISBN: 0-13-035548-8. The strength of this book is its coverage of the security issues related to software. In particular, operating systems and some aspects of secure software engineering are covered well. This book also has some good, basic information on viruses.
  • Applied Cryptography: Protocols, Algorithms and Source Code in C, second edition, Bruce Schneier, John Wiley & Sons, Inc., 1995, ISBN: 0-471-11709-9. For better or for worse, in industry, this is the standard reference for all things cryptographic.
  • Counter Hack Reloaded: A Step-by-Step Guide to Computer Attacks and Effective Defenses, Ed Skoudis with Tom Liston, Prentice Hall, 2006, ISBN: 0-13-148104-5. There are many books that claim to provide information on how to foil hackers, but this is by far the best that I have seen. This is an updated version of the original Counter Hack, published in 2001.
  • Computer Viruses and Malware, John Aycock, Springer, 2006, ISBN: 0387302360. This book gives a good introduction to research topics related to malware. The book is well-written and surprisingly easy reading, given the technical nature of the material.

1. Test 1, 100 points. Date: Monday, October 1.
2. Test 2, 100 points. Date: Wednesday, November 7.
3. Homework, quizzes, class participation, and other work as assigned, 100 points.
4. Final, 100 points.
   • Section 01, Friday, December 14 from 9:45-noon
   • Section 02, Tuesday, December 18 from 9:45am-noon
   • The official finals schedule is here: http://info.sjsu.edu/static/schedules/final-exam-schedule-fall.html
5. Semester grade will be computed as a weighted average of the 4 major scores listed above.
6. No make-up tests or quizzes will be given and no late homework (or other work) will be accepted. Also, in-class work must be completed in the section that you are enrolled in.
7. Nominal Grading Scale:
   
   

   Percentage	Grade
   92 and above	A
   90 - 91	A-
   88 - 89	B+
   82 - 87	B
   80 - 81	B-
   78 - 79	C+
   72 - 77	C
   70 - 71	C-
   68 - 69	D+
   62 - 67	D
   60 - 61	D-
   59 and below	F

     CS166HMK assignmentnumber yourlastname last4digitofyourstudentnumber 

• Assignment 1: Due Wednesday, August 29
  Chapter 1, problems 1, 10, 11, 15, 17, 21.
  
  
• Assignment 2: Due Wednesday, September 5
  Chapter 2, problems 1, 5, 6, 8, 10, 12, 15, 22, 26, 28. Write the program for problem 12 before you solve problem 10, and use your program to help you solve problem 10.
  
  
• Assignment 3: Due Wednesday, September 12
  Chapter 3, problems 4, 9, 11, 13, 14, 23, 27, 29, 30, 31.
  
  
• Assignment 4: Due Wednesday, September 19
  Chapter 4, problems 1, 2, 3, 6, 8, 10, 22, 25, 27, 32, 37.
  
  
• Assignment 5: Due Wednesday, September 26
  Chapter 5, problems 3, 5, 12, 15, 17, 21, 22, 25, 26, 27, 33, 35, 42.
  
  
• Assignment 6: Due Wednesday, October 10 Friday, October 12
  Chapter 7, problems 10, 11, 13, 18, 21, 26, 28, 29, 31, 32, 37, 38.
  
  
• Assignment 7: Due Monday, October 22
  Chapter 8, problems 2, 3, 7, 10, 11, 13, 15, 20, 24, 25.
  
  
• Assignment 8: Due Monday, October 29
  Chapter 8, problems 26, 28, 31, 33, 34, and send a spoofed email to stamp@cs.sjsu.edu.
  Chapter 9, problems 7, 13, 15, 16.
  
  
• Assignment 9: Due Monday, November 5
  Chapter 9, problems 6, 9, 18, 19, 20, 27, 32, 36, 41.
  
  
• Assignment 10: Due Wednesday, November 21
  Chapter 10, problems 1, 2, 6, 10, 11, 13.
  
  
• Assignment 11: Due Monday, December 10
  Chapter 10, problems 14, 15, 24, 26, 32, 35, 38, 40, 42.
  Chapter 11, problems 11, 13, 15, 22, 34, 36, 43.
  Chapter 12, problems 2, 3, 7. For problem 3, you can use any Java decompiler.
  Extra credit: Chapter 12, problem 8.
  
  
• Assignment 12: Due TBD
  You are required to attend at least one of the masters defenses listed here. These will be scheduled during finals week, and the schedule should be finalized by the last week of class.
  
  

• No disruptive or annoying talking
• Turn off cell phones
• Class begins on time
• Class is not over until I say it's over
• Etc.

• Speaker: TBD
• Affiliation: TBD
• Title: TBD
• Date: TBD
• Abstract: TBD
  

• Academic integrity
  
  Your commitment as a student to learning is evidenced by your enrollment at San Jose State University. The University's Academic Integrity policy, located at http://www.sjsu.edu/senate/S07-2.htm, requires you to be honest in all your academic course work. Faculty members are required to report all infractions to the office of Student Conduct and Ethical Development. The Student Conduct and Ethical Development website is available at http://www.sa.sjsu.edu/judicial_affairs/index.html. Instances of academic dishonesty will not be tolerated. Cheating on exams or plagiarism (presenting the work of another as your own, or the use of another person's ideas without giving proper credit) will result in a failing grade and sanctions by the University. For this class, all assignments are to be completed by the individual student unless otherwise specified. If you would like to include your assignment or any material you have submitted, or plan to submit for another class, please note that SJSU's Academic Policy S07-2 requires approval of instructors.
  
  
• Campus Policy in Compliance with the American Disabilities Act
  
  If you need course adaptations or accommodations because of a disability, or if you need to make special arrangements in case the building must be evacuated, please make an appointment with me as soon as possible, or see me during office hours. Presidential Directive 97-03 requires that students with disabilities requesting accommodations must register with the Disability Resource Center (DRC) at http://www.drc.sjsu.edu/ to establish a record of their disability.