Computer Security System Security

AY2014/2015 Semester 1

This course introduces computer security mechanisms at an elementary level. 1. Concepts and Terminology: security; confidentiality, integrity and availability; security policies; security models; mandatory and discretionary access control; access control matrix, capabilities and access control lists; information flow; 2. Security Models: information flow policies; role-based access control 3. Implementation of Mechanisms: security mechanisms in hardware and operating systems; memory management, memory protection and logical protection; access control lists 4. User authentication: passwords, biometrics and user tokens; identity management 5. Case Studies: Intel processor family; Windows; Unix 6. Operating system vulnerabilities: how they can be exploited and how they can be prevented 7. Software security: buffer overflows and exploits; validati