{"id":75,"date":"2019-03-28T11:32:36","date_gmt":"2019-03-28T15:32:36","guid":{"rendered":"https:\/\/sites.bu.edu\/braude\/?page_id=75"},"modified":"2019-03-28T11:40:41","modified_gmt":"2019-03-28T15:40:41","slug":"met-cs-895-developing-secure-systems","status":"publish","type":"page","link":"https:\/\/sites.bu.edu\/braude\/courses\/met-cs-895-developing-secure-systems\/","title":{"rendered":"MET CS 895 Developing Secure Systems"},"content":{"rendered":"

Last updated: Monday, <\/em>May 5, 2006<\/em>.\u00a0 The most recent updates are usually in red type<\/em><\/p>\n

Description:<\/strong> This course is designed for Information professionals who intend to be experts in security policies, procedures, and techniques.\u00a0 It provides the basis for specialization in areas of security.<\/p>\n\n\n\n\n\n\n\n\n
Background of Instructors red if changed<\/td>\nLearning Objectives red if changed<\/td>\n<\/tr>\n
Evaluation of Students red if changed<\/td>\nPlagiarism red if changed<\/td>\n<\/tr>\n
Forum red if changed<\/td>\nPolicies for class red if <\/em>changed<\/td>\n<\/tr>\n
Home page for Eric Braude<\/td>\nTextbooks and Materials red if changed<\/td>\n<\/tr>\n
Homework and due dates red if changed<\/td>\nTopics, Class Dates, and Readings red if changed<\/td>\n<\/tr>\n
How to Contact Eric Braude red if changed<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
    \n
  • Meeting Time: Wednesdays Noon\u00a0 through 3:00 pm EST<\/li>\n
  • Meeting Place: Andover<\/li>\n
  • Prerequisites: The prerequisites are as follows, but can be superseded with the consent of the instructor.<\/li>\n<\/ul>\n
      \n
    • \n
        \n
      • A course in or experience with programming, preferably in Java, C++ or C#<\/li>\n
      • Knowledge of data communication fundamentals<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
        Learning Objectives<\/strong>: Students will \u2026<\/p>\n
          \n
        • Understand the principles of security<\/li>\n
        • Recognize and evaluate security threats<\/li>\n
        • Understand the source of security threats<\/li>\n
        • Understand the basics of security-aware design and development<\/li>\n
        • Plan for security threat mitigation<\/li>\n<\/ul>\n
          \n

          Textbook and Materials<\/h3>\n

          \u201cSecurity in Computing,\u201d Third Edition (Hardcover) by Charles P. Pfleeger, Shari Lawrence Pfleeger; Prentice Hall PTR (December 2, 2002); ISBN: 0130355488<\/p>\n

          Reference Material<\/p>\n

          An Alternative to the Textbook:<\/p>\n

          Computer Security (Paperback) by Dieter Gollmann; John Wiley & Sons; 2 edition (January 18, 2006); ISBN: 0470862939<\/p>\n

          Security in Networks:<\/p>\n

          Network Security Essentials (2nd Edition); by William Stallings; Prentice Hall; 2 edition (November 20, 2002); ISBN: 0130351288<\/p>\n

          Policy (Not technical)<\/p>\n

          Information Security Policies and Procedures: A Practitioner’s Reference, Second Edition; by Thomas R. Peltier; AUERBACH; 2 edition (May 20, 2004); ISBN: 0849319587<\/p>\n

          Design (Very technical)<\/p>\n

          Secure Systems Development with UML; by Jan J\u00fcrjens; Springer; 1 edition (November 23, 2004)<\/p>\n

          ISBN: 3540007016<\/p>\n

          \n

          Background of Instructors<\/h3>\n

          Please see the links as shown.<\/p>\n

          Background of Eric Braude<\/span><\/p>\n

          Background of Lou Chitkushev<\/p>\n

          Background of Suresh Kalathur<\/p>\n

          Background of Anatoly Temkin<\/p>\n

          \n

          Evaluation of Students<\/h3>\n

          There will be a midterm, a final, and homework assignments.\u00a0 The exact weights will be determined during the first third of the course, and will be in the following range.<\/p>\n\n\n\n\n\n\n
          <\/td>\nweight<\/strong><\/td>\n<\/tr>\n
          Midterm <\/em><\/strong><\/td>\n35-50%<\/td>\n<\/tr>\n
          Final <\/em><\/strong><\/td>\n35-50%<\/td>\n<\/tr>\n
          Homework\u2019s <\/em><\/strong><\/td>\n10-30%<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          Parts of assignments are evaluated equally unless otherwise stated.<\/p>\n

          Late homework is not accepted unless there is a reason why it was impossible to perform the work. In that case, the written reason should be attached to the homework, which will be graded on a pass\/fail basis.<\/p>\n

          Please also read detailed information about grade averaging method.<\/strong><\/p>\n

          Plagiarism<\/strong><\/p>\n

          Please cite all references and uses of the work of other.\u00a0 All instances of plagiarism must be reported to the College for action.\u00a0 See plagiarism policy and reference.<\/p>\n

          Topics, Class Dates,<\/strong> and Readings<\/strong><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
          Class<\/span><\/strong><\/p>\n

          #<\/span><\/strong><\/td>\n

          		Date<\/span><\/strong><\/td>\nInstructor<\/span><\/strong><\/td>\nTextbook Readings<\/span><\/strong><\/td>\nTopic<\/span><\/strong><\/td>\n<\/tr>\n
          1<\/td>\nMay 3<\/td>\nEric Braude<\/td>\nChapter 1<\/strong><\/p>\n

          Chapters 3 and 9 are additional background<\/td>\n

          		The Context of Security<\/strong><\/p>\n

          A review of the threat environment<\/td>\n<\/tr>\n

          2<\/td>\nMay 10<\/td>\nEric Braude<\/td>\nChapter 8<\/strong><\/p>\n

          Except 8.2<\/p>\n

          <\/strong><\/td>\n

          		Policies and Procedures<\/strong><\/p>\n

          We will review the kinds of overall policies and specific procedures that organizations devise in order to counter security threats.<\/td>\n<\/tr>\n

          3<\/td>\nMay 17<\/td>\nEric Braude<\/td>\nChapter 9 is general background<\/td>\nSecurity Among Web Services<\/strong><\/p>\n

          This class reviews various methods for designing securely on the Internet, from HTTPS to the WS-Security specifications.<\/td>\n<\/tr>\n

          4<\/td>\nMay 24<\/td>\nEric Braude<\/td>\nPages <\/strong>160-162,<\/td>\nSpecifying Secure Requirements Designs<\/strong><\/p>\n

          How design notations, including the Unified Modeling Language, can specify security.<\/td>\n<\/tr>\n

          5<\/td>\nMay 31<\/td>\nLou Chitkushev<\/td>\nChapter 8<\/strong><\/td>\nDeveloping Security in Distributed Systems<\/strong><\/td>\n<\/tr>\n
          6<\/td>\nJune 7<\/td>\nAnatoly Temkin<\/td>\nChapters 2 and 10<\/strong> <\/strong><\/td>\nApplying Cryptographic Elements <\/strong><\/p>\n

          Encryption, conventional and public key; message digest and digital signature; key management<\/td>\n<\/tr>\n

          7<\/td>\nJune 14<\/td>\nLou Chitkushev<\/td>\nChapter 8<\/strong><\/p>\n

          <\/strong><\/td>\n

          		Developing Network Security<\/strong><\/p>\n

          Authentication systems, security standards, Kerberos, public key infrastructure; IPsec, SSL\/TLS; PEM, S\/MIME; PGP; Firewalls<\/td>\n<\/tr>\n

          8<\/td>\nJune 21<\/td>\nEric Braude<\/td>\n <\/strong><\/td>\nMidterm<\/strong><\/td>\n<\/tr>\n
          9<\/td>\nJune 28<\/td>\nEric Braude<\/td>\n <\/strong><\/td>\nApplying Language Level Security; <\/strong><\/p>\n

          Testing for Security<\/strong><\/p>\n

          Security policies and permissions, access control, secure class loading, security management<\/td>\n<\/tr>\n

          10<\/td>\nJuly 5<\/td>\nEric Braude<\/td>\nSection 8.2<\/strong><\/p>\n

          <\/strong><\/td>\n

          		Developing Security Risk Analyses<\/strong><\/p>\n

          Definitions, factors, risk types<\/td>\n<\/tr>\n

          11<\/td>\nJuly 12<\/td>\nEric Braude<\/td>\nSection 8.2<\/strong><\/p>\n

          <\/strong><\/td>\n

          		Applying Security Risk Analysis<\/strong><\/p>\n

          Risk calculations; trade-offs<\/td>\n<\/tr>\n

          12<\/td>\nJuly 19<\/td>\nSuresh Kalathur<\/td>\nChapter 4<\/strong><\/p>\n

          <\/strong><\/td>\n

          		Developing Protection in General Purpose Operating Systems<\/strong><\/p>\n

          Access control lists; file protection; authentication<\/td>\n<\/tr>\n

          13<\/td>\nJuly 26<\/td>\nSuresh Kalathur<\/td>\nChapter 5<\/strong><\/p>\n

          <\/strong><\/td>\n

          		Designing Trusted Operating Systems <\/strong><\/p>\n

          Security policies; security models; assurance; examples<\/td>\n<\/tr>\n

          14<\/td>\nAugust 2<\/td>\nEric Braude<\/td>\n <\/strong><\/td>\nFinal<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
          Forum<\/strong><\/p>\n

          Web Site: http:\/\/groups.yahoo.com\/group\/895Su06\/<\/p>\n\n\n\n\n\n\n
          Post message:<\/td>\n895Su06@yahoogroups.com<\/td>\n<\/tr>\n
          Subscribe:<\/td>\n895Su06-subscribe@yahoogroups.com<\/td>\n<\/tr>\n
          Unsubscribe:<\/td>\n895Su06-unsubscribe@yahoogroups.com<\/td>\n<\/tr>\n
          List owner:<\/td>\n895Su06-owner@yahoogroups.com<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          <\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

          Last updated: Monday, May 5, 2006.\u00a0 The most recent updates are usually in red type Description: This course is designed for Information professionals who intend to be experts in security policies, procedures, and techniques.\u00a0 It provides the basis for specialization in areas of security. Background of Instructors red if changed Learning Objectives red if changed […]<\/p>\n","protected":false},"author":2828,"featured_media":0,"parent":22,"menu_order":12,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/sites.bu.edu\/braude\/wp-json\/wp\/v2\/pages\/75"}],"collection":[{"href":"https:\/\/sites.bu.edu\/braude\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sites.bu.edu\/braude\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sites.bu.edu\/braude\/wp-json\/wp\/v2\/users\/2828"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.bu.edu\/braude\/wp-json\/wp\/v2\/comments?post=75"}],"version-history":[{"count":1,"href":"https:\/\/sites.bu.edu\/braude\/wp-json\/wp\/v2\/pages\/75\/revisions"}],"predecessor-version":[{"id":76,"href":"https:\/\/sites.bu.edu\/braude\/wp-json\/wp\/v2\/pages\/75\/revisions\/76"}],"up":[{"embeddable":true,"href":"https:\/\/sites.bu.edu\/braude\/wp-json\/wp\/v2\/pages\/22"}],"wp:attachment":[{"href":"https:\/\/sites.bu.edu\/braude\/wp-json\/wp\/v2\/media?parent=75"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}