COM-301: Computer security and privacy

About
Privacy
Disclaimer

Graph Chatbot

Lectures in this course (60)

Computer Security: Basics and Vocabulary

Introduces computer security basics, properties, policy, threat modeling, and key vocabulary for adversarial thinking.

Basics - Security Engineering Concepts

Covers security mechanisms, defense in depth, and methods to show systems are secure.

Principles I: Economy of Mechanism & Fail-safe Defaults

Discusses the 'economy of mechanism' and 'fail-safe default' principles in computer security.

Principles II: Complete Mediation, Open Design, Separation of Privilege

Discusses the 'complete mediation', 'open design', and 'separation of privilege' principles to enhance system security.

Security Principles: Least Privilege, Common Mechanism, Acceptability

Explores security principles like least privilege, common mechanism, and user acceptability to enhance system protection.

Security Principles: Work Factor & Compromise Recording

Explores the work factor and compromise recording principles in computer security, emphasizing cost evaluation and tamper-evident logs.

Access control: introduction

Covers the concept of access control in computer security, its importance, implementation, and policy decision approaches.

Discretionary Access Control I

Covers the implementation of Discretionary Access Control using Access Control Matrix and Lists.

Discretionary Access Control II

Explores alternative access control implementations and the confused deputy problem in access control systems.

Discretionary Access Control: Linux and Windows

Explores access control in Linux and Windows, covering Unix user identities, file access control lists, special users, super users, and Windows' discretionary access control lists.

Mandatory Access Control: Confidentiality Models

Explores the Bell La Padula model, covert channels, declassification challenges, and security properties in confidentiality models.

Mandatory Access Control - Integrity Models

Explores the Biba model for integrity, security level change, and the process of Sanitization, along with supporting principles.

Mandatory Access Control: Multi-property Security Models

Explores the Chinese Wall model for combining confidentiality and integrity, addressing conflicts of interest and multilateral security.

Applied Cryptography: Basics

Introduces applied cryptography basics, historical encryption methods, and the concept of perfect secrecy with the One Time Pad.

Applied Cryptography: Symmetric Confidentiality

Explores symmetric cryptography for confidentiality, covering stream ciphers, block ciphers, and their modes of operation.

Applied Cryptography: Symmetric Integrity

Explores symmetric cryptography for integrity, emphasizing Message Authentication Codes and different encryption approaches to ensure data confidentiality and integrity.

Applied Cryptography: Hash Functions

Explores hash functions and their crucial role in cryptography, digital signatures, and blockchain technology.

Applied Cryptography: Assymetric Cryptography

Introduces asymmetric cryptography, digital signatures, and hybrid encryption for secure communication.

Authentication: Basics

Covers the process of verifying identity, traditional methods like passwords, and modern approaches such as biometrics.

Authentication: Passwords

Covers the importance of passwords in authentication, including secure transfer, storage, and checking techniques.

Page 1 of 3