This is the applied course that complements introductory
courses like Information Assurance (last taught as CS498sh) or
Computer Security (last taught as CS498cag).
In this course students work with security tools used in today's Internet
environment.
Topics taught in this class include.
- Secure Programming
- Least-privilege programming and impersonation
- Input cleanliness
- Worm anatomy
- OS security
- Windows ACLs and security policies
- Vista security additions
- SE Linux domain type enforcement policies
- Mandatory access controls in SE Linux and perhaps other OS's
- User identity
- Database Security
- Network Security
- Firewall configuration
- IPSec
- IPv6
- Access control servers
- Network intrusion detection and monitoring
- Honey pots
- Wireless security
- Network scanning
- Defensive system design
- Security architectures
- Penetration testing