CZ4062 COMPUTER SECURITY (SYSTEM SECURITY) (3.0 AU)

This course introduces computer security mechanisms at an elementary level.
1. Concepts and Terminology: security; confidentiality, integrity and availability; security policies; security models; mandatory and discretionary access control; access control matrix, capabilities and access control lists; information flow;
2. Security Models: information flow policies; role-based access control
3. Implementation of Mechanisms: security mechanisms in hardware and operating systems; memory management, memory protection and logical protection; access control lists
4. User authentication: passwords, biometrics and user tokens; identity management
5. Case Studies: Intel processor family; Windows; Unix
6. Operating system vulnerabilities: how they can be exploited and how they can be prevented
7. Software security: buffer overflows and exploits; validati