Systems and Usable Security

This course will give an understanding of the principles of systems security from application viewpoint. Student will obtain hands-on experience on security threats and counter-measures. Goal is to study various types of threats, operating systems security, advanced topics on network security, web security and usable security. After the completion of the course, the student will have understanding of practical aspects of security and will be able to analyze and design the secure systems.PRE-REQUISITE :Computer Networks, Operating Systems, Discrete MathematicsINDUSTRY SUPPORT :Cyber Security is an important aspect for every organization currently. Having knowledge about the threats and possible countermeasures will immensely benefit any organization in todays world.INTENDED AUDIENCE :Final year undergraduate students of Computer Science and Engineering discipline.

Week 1:Introduction: Computer security concepts, threats, attacks; Malicious Software: Types of Malicious Software (Malware), Vulnerability, Exploits, Social Engineering–SPAM E-mail, Zombie, Bots, Keyloggers, Phishing, Spyware.Week 2:Operating System Security: System Security Planning, Application Security, Linux/Unix Security, Windows Security, Virtualization SecurityWeek 3:Web Security: Secure E-mail and S/MIME, Domain Keys Identified Mail, Secure Sockets Layer (SSL) and Transport Layer Security (TLS), HTTPS, IPv4 and IPv6 Security, Public-Key Infrastructure and Federated Identity Management.Week 4:Usable Security: Introduction to Privacy, Trust and Semantic Security, Visualizing Privacy, Web Browser Security and Privacy, Authentication and Text Passwords, Biometrics and Graphical Passwords.