DESCRIPTION :

ITIS 6200/8200 is a 3-credit course. Topics include security concepts and mechanisms; security technologies; authentication mechanisms; mandatory and discretionary controls; basic cryptography and its applications; intrusion detection and prevention; information systems assurance; anonymity and privacy issues for information systems. 

1. Security Concepts
• Confidentiality
• Integrity
• Availability
• Usage
2. Security Mechanism
• Prevention
• Detection and recovery
• Tolerance
3. Security Attacks and Threats
4. Authentication
• Password
• Dictionary attack
• Password management
• Strong authentication
• Biometrics
• Authentication in commercial systems
5. Access Control
• MAC
• DAC
• RBAC
6. Cryptography
• Secret-key encryption
• Public-key encryption
• Public-key digital signatures
• Message Digests
• Public-key certificate
• Key agreement protocols
7. Network Security Technologies
• Secure Network Protocols
• IPSec
• Intrusion Detection Concepts
• Web security
8. Information Assurance
• US Orange Book
• International Common Criteria
9. Principles of Information Privacy Anonymity
• Models for information privacy
• Overview of legal and regulatory privacy frameworks
10. Security Education, Training, and Awareness (SETA)
11. Audit
12. Physical security

READINGS:

• RECOMMENDED TEXT BOOK
• Computer Security by Matt Bishop, Addison Wesley

• REFERENCES
• Information Security by Marshall Abrams et al., IEEE
• Security in Computing by Pfleeger, Prentice Hall
• Fundamental of Computer Security Technology by Edward Amoroso, Prentice Hall
• Network Security by Kauffman
• Cryptography and Network Security William Stalling
• Common Criteria for Information Technology Security Evaluation by ISO, 2000
• Privacy in the Information Age by Fred Cate, Brookings Institution
• The Electronic Privacy Papers by Bruce Schneier and David Banisar, John Wiley and Sons, Inc.

GRADING POLICY:

Grades are based on exams 60% (30% each) and class assignment/group project (report and project presentation) 40%.

Each group consists of at most three students and topic should be chosen in mutual agreement with Professor. Each group is also required to present their project to the whole class. And the final report should be submitted--at least 15 pages, 12 point, and double space. Class presentation MUST demonstrate the concepts of security topic clearly including some research reasoning. It will be 20 minutes presentation with at most 10-15 PPT slides. Students should submit a brief proposal (at least 3 pages, 12 pointt, single space) of term project by February 7, 2008 or earlier in class. Student must take initiative to make sure this happens in timely manner. In addition, all Ph.D students should present research paper(s) in class.  

PROPOSAL AND TERM PAPER STRUCTURE

• Objectives
• Description of project
• Background and related works
• Your approach and architecture
• Results or Implementation
• Discussion and Conclusion
• References

IMPORTANT DATES :

First Day of Classes	January 10, 2008.
Proposal Due	February 7, 2008.
Midterm	February 28, 2008.
Spring Break	March 3-8, 2008.
Class Presentation	April 17 and April 24, 2008.
Last Day of Classes	April 24, 2008.
Term Paper Due	May 8, 2008.
Final Exam	May 1, 2008.

ACADEMIC INTEGRITY

Students have the responsibility to know and observe the requirements of the UNC Charlotte Code of Student Academic Integrity (Catalog p. 375). This code forbids cheating, fabrication, or falsification of information, multiple submission of academic work, plagiarism, abuse of academic materials, and complicity in academic dishonesty. There are no special requirements regarding academic integrity in this course. The code will be strictly enforced and is binding on the students. Grade and academic evaluations in this course include a judgment that the student's work is free from academic dishonesty of any type; and grades in this course therefore should be and will be adversely affected by academic dishonesty. Students who violate the code can be expelled from UNC Charlotte. The normal penalty for a first offense is zero credit on the work involving dishonesty and further substantial reduction of the course grade. In almost all cases the course grade is reduced to an F. Copies of the Code can be obtained from the Dean of Students Office. Standards of academic integrity will be enforced in this course. Students are expected to report cases of academic dishonesty to the instructor immediately.