• CS 265, Information Security
• Department of Computer Science
• San Jose State University
• Fall 2008 semester

1. Name: Mark Stamp
2. Office: MQH 216
3. Office hours: Monday, 10:30am - noon and 1:00pm - 3:30pm, or by appointment
4. Phone: 408-924-5094
5. email: stamp@cs.sjsu.edu
   • Email is the best way to contact me
   • Please put "CS265" at the beginning of the subject line
6. Greensheet: http://www.cs.sjsu.edu/faculty/stamp/CS265/syllabus/syllabusFall08.html
7. Who am I?

• PowerPoint slides, errata, and resources for the textbook are available here.

• Approximate schedule (3 hours equals 1 week of class time):
  • Introduction
    • Chapter 1 (1 hour)
  • Crypto
    • Chapter 2: Crypto Basics (3 hours)
    • Chapter 3: Symmetric Key Crypto (4 hours)
    • Chapter 4: Public Key Crypto (4 hours)
    • Chapter 5: Hash Functions and Other Topics (4 hours)
  • Access Control
    • Chapter 7: Authentication (4 hours)
    • Chapter 8: Authorization (2 hour)
  • Protocols
    • Chapter 9: Simple Authentication Protocols (4 hours)
    • Chapter 10: Real-World Security Protocols (5 hours)
  • Software
    • Chapter 11: Software Flaws and Malware (4 hours)
    • Chapter 12: Insecurity in Software (4 hours)
    • Chapter 13: Operating Systems and Security (4 hours)
  
  
• Note: We omit most of Chapter 8 and parts of the last three chapters.
  
  
• Recommended Textbook: Applied Cryptanalysis: Breaking Ciphers in the Real World, Mark Stamp and Richard M. Low, Wiley-IEEE Press, May 2007, ISBN: 047011486X. This book contains detailed discussion of several cryptanalytic attacks. These attacks are "applied", in the sense that each attack can be implemented to break a real-world cipher system. This book is a good source for cryptanalysis project topics.
  
  
  • Powerpoint slides, errata, and resources for this book can be found here.
  
  
• Other useful security books:
  • Reversing: Secrets of Reverse Engineering, Eldad Eilam, Wiley, 2005, ISBN: 0764574817. This is the best book available on reverse engineering software. The book also discusses various software protection techniques.
  • Network Security: Private Communication in a Public World, second edition, Charlie Kaufman, Radia Perlman and Mike Speciner, Prentice Hall, 2002, ISBN: 0-13-046019-2. This book provides good coverage of cryptography and excellent coverage of several security protocols.
  • Security Engineering: A Guide to Building Dependable Distributed Systems, Ross Anderson, John Wiley & Sons, Inc., 2001, ISBN: 0-471-38922-6; see Ross Anderson's Security Engineering website http://www.cl.cam.ac.uk/~rja14/book.html, where you can obtain a free (and legal) copy of the book. This is an excellent book for an overview of security in general, but it is not very focused or technically detailed.
  • Security in Computing, third edition, Charles P. Pfleeger and Shari Lawrence Pfleeger, Prentice Hall, 2003, ISBN: 0-13-035548-8. The strength of this book is its coverage of the security issues related to software. In particular, operating systems and some aspects of secure software engineering are covered well. This book also has some good basic information on viruses.
  • Applied Cryptography: Protocols, Algorithms and Source Code in C, second edition, Bruce Schneier, John Wiley & Sons, Inc., 1995, ISBN: 0-471-11709-9. For better or for worse this is the standard reference for cryptography, particularly in industry.
  • Counter Hack Reloaded: A Step-by-Step Guide to Computer Attacks and Effective Defenses, Ed Skoudis with Tom Liston, Prentice Hall, 2006, ISBN: 0-13-148104-5. There are many books that claim to provide information on how to foil hackers, but this is by far the best that I have seen. This is an updated version of the original Counter Hack, published in 2001.
  • Computer Viruses and Malware, John Aycock, Springer, 2006, ISBN: 0387302360. This book gives a good introduction to research topics related to malware. The book is well-written and surprisingly easy reading, given the technical nature of the material. However, it is somewhat uneven in its coverage, with many interesting topics only mentioned in passing, and some of the more lengthy discussions allocated to topics of marginal interest (at least to me).

1. Test 1, 100 points. Date: Thursday, October 2.
2. Test 2, 100 points. Date: Thursday, November 13.
3. Homework, quizzes, class participation and other work as assigned, 100 points. Note that a subset of the assigned problems will be graded.
4. Project, 100 points. Due Tuesday, November 25. Presentations will be Thursday, December 11, beginning at 3:00pm.
   
5. Final, 100 points.
   • Section 01, Wednesday, December 17 at 2:45pm
   • Section 02, Tuesday, December 16 at 5:15pm
   • The official finals schedule is here: http://info.sjsu.edu/web-dbgen/narr/soc-fall/rec-232.html
6. Semester grade will be computed as a weighted average of the 5 major scores listed above.
7. No make-up tests or quizzes will be given and no late homework or project (or other work) will be accepted.
8. Nominal Grading Scale:
   
   

   Percentage	Grade
   92 and above	A
   90 - 91	A-
   88 - 89	B+
   82 - 87	B
   80 - 81	B-
   78 - 79	C+
   72 - 77	C
   70 - 71	C-
   68 - 69	D+
   62 - 67	D
   60 - 61	D-
   59 and below	F

     CS265HMK assignmentnumber yourlastname last4digitofyourstudentnumber 

• Assignment 1: Due Thursday, September 11
  Chapter 2, Problems 2, 3, 10, 14. For problem 10, you may use online resources, but you must cite your source(s) and briefly describe the algorithm(s). For problem 14, provide pseudo-code for an automated attack on this type of double transposition, assuming that the dimensions of the matrix are known.
  
  
• Assignment 2: Due Thursday, September 18
  Chapter 3, Problems 6, 10, 15, 23, 26. For problem 26, you will need the file alice.bmp.
  
  
• Assignment 3: Due Thursday, September 25
  Chapter 4, Problems 1, 4, 9, 14, 15, 17.
  
  
• Assignment 4: Due Thursday, October 2
  Chapter 5, Problems 4, 8, 10, 14, 19. The files you need for problem 19 can be found here.
  
  
• Assignment 5: Due Thursday, October 16
  Chapter 7, Problems 7, 10, 11, 12, 13, 22, 23
  
  
• Assignment 6: Due Thursday, October 23
  Chapter 8, Problems 1, 5, 6, 10, 15. Also, develop your own CAPTCHA program. Write a summary of your CAPTCHA program, including a brief discussion of possible attacks.
  
  
• Assignment 7: Due Thursday, October 30
  Chapter 8, Problems 18, 20, 21, 22, 25, 26
  
  
• Assignment 8: Due Thursday, November 13
  Chapter 9, Problems 3, 5, 8, 10, 15, 22
  
  
• Assignment 9: Due Tuesday, November 25
  Chapter 10, Problems 6, 13, 15, 16, 22, 23. For problem 22, clearly illustrate the attack and explain why this does not break the authentication.
  
  
• Assignment 10: Due Thursday, December 4
  Chapter 11, Problems 6, 8, 13, 14, 17. For problem 17, the file you need can be found here.
  
  
• Assignment 11: Due Tuesday, December 16
  Chapter 12, Problems 4, 5, 17, 22. For problem 5, the file you need can be found here.
  Chapter 13, Problems 3, 12, 16, 20

• No extra credit is anticipated
  
  
• Keys to success: Do the homework, do high quality work on the projects, attend class
  
  
• Cheating will not be tolerated...
  
  
• ...but working together is encouraged
  
  
• Student must be respectful of the teacher and other students.
  • No disruptive or annoying talking
  • Turn off cell phones
  • Class begins on time
  • Class is not over until I say it's over
  • Etc.
  
  
  
• Valid picture ID required at all times
  
  
• Why study security?
  
  
• Master's student defenses
  • Student: Jeet Morparia
    
  • Title: PEER-TO-PEER BOTNETS: ANALYSIS AND DETECTION
    
  • Date: Monday, December 15
    
  • Time: 10:00 am
    
  • Location: MH 229
  
  
  • Student: Anilkumar Panicker
    
  • Title: BOTNETS AND DISTRIBUTED DENIAL OF SERVICE ATTACKS
    
  • Date: Monday, December 15
    
  • Time: 11:00 am
    
  • Location: MH 229
  
  
  • Student: Sharmidha Govindaraj
    
  • Title: PRACTICAL DETECTION OF METAMORPHIC COMPUTER VIRUSES
    
  • Date: Monday, December 15
    
  • Time: noon
    
  • Location: MH 229
  
  
  • Student: Heather Kwong
    
  • Title: CRYPTANALYSIS OF THE SIGABA CIPHER
    
  • Date: Monday, December 15
    
  • Time: 1:00 pm
    
  • Location: MH 229
  
  
  • Student: Priti Desai
    
  • Title: TOWARDS AN UNDETECTABLE COMPUTER VIRUS
    
  • Date: Friday, December 19
    
  • Time: 10:30 am
    
  • Location: MH 229
  
  
• Guest lecture
  
  
  • Speaker: TBD
    Title: TBD
    Date: TBD
    Time: TBD
    Location: TBD
    
    

• University, College, or Department Policies:
  • Academic integrity statement (from Office of Judicial Affairs): "Your own commitment to learning, as evidenced by your enrollment at San Jose State University and the University's Academic Integrity Policy requires you to be honest in all your academic course work. Faculty are required to report all infractions to the Office of Judicial Affairs." The policy on academic integrity can be found here.
  • Campus policy in compliance with the Americans with Disabilities Act: "If you need course adaptations or accommodations because of a disability, or if you need special arrangements in case the building must be evacuated, please make an appointment with me as soon as possible, or see me during office hours. Presidential Directive 97-03 requires that students with disabilities register with DRC to establish a record of their disability."
  • Academic Honesty: Faculty will make every reasonable effort to foster honest academic conduct in their courses. They will secure examinations and their answers so that students cannot have prior access to them and proctor examinations to prevent students from copying or exchanging information. They will be on the alert for plagiarism. Faculty will provide additional information, ideally on the green sheet, about other unacceptable procedures in class work and examinations. Students who are caught cheating will be reported to the Judicial Affairs Officer of the University, as prescribed by Academic Senate Policy S04-12.
  
  
  
• Appendix:
  • You are responsible for understanding the policies and procedures about add/drops, academic renewal, withdrawal, etc. found here.
  • Expectations about classroom behavior; see Academic Senate Policy S90-5 on Student Rights and Responsibilities.
  • A definition of plagiarism can be found here.
  • If you would like to include in your paper any material you have submitted, or plan to submit, for another class, please note that SJSU's Academic Integrity policy S04-12 requires approval by instructors.
  • The name and contact information for the librarian liaison. (I have no idea.)
  • Evacuation plan for the classroom: Exit the classroom through the door, go down the nearest stairs and exit the building.