Course Syllabus

Instructor: 

Prof. Zhou Li (Engineering Hall 3227)

Course Info:

Mon, Wed, Fri 9:00AM - 9:50AM, DBH 1429

Office hour: Mon 3pm-5pm (by appointment if needed)

Prerequisite:

Basic knowledge of OS, network and applications.

Knowledge of programming language, especially C.

The student needs to have a machine that can run virtual machine (Ubuntu 16.04 VM, see details).

Course Description:  

This course will teach the principles and practices of system security as applied to software-, network-, and hardware-layer. It covers the foundations and techniques of analyzing the security of systems and building secured systems. In addition to the content described by the textbook, the course will also let students have hands-on experiences by playing attacks and defense in an emulated environment.

Main questions to be discussed in this lecture:

• What does real-world cyber-attack look like?
• What techniques are available to make system secured?
• What security and privacy principles should we follow?

What are we going to do during this lecture:

• We will follow chapters in the required textbook.
• We will also demonstrate the real attacks and defenses in the recommended lab textbook.

Textbook:     

	Textbook A Security in Computing, 5th edition (required) Author: Charles P. Pfleeger, Shari Lawrence Pfleege and Jonathan Margulies Publisher: Prentice Hall; 5 edition (February 5, 2015)
	Textbook B COMPUTER SECURITY, A Hands-on Approach (recommended) Author: Wenliang Du Publisher: CreateSpace Independent Publishing Platform; 1 edition (October 12, 2017)

Course Policies:

• Attendance at lecture and discussion sections is required. It is the student's responsibility to make prior arrangements with the instructor for any absence known in advance. 
• Assignments are listed on the "Assignments" page. They are assigned on a weekly or bi-weekly basis and the due dates are indicated during lectures. You are encouraged to discuss with other students, and refer to course materials, but need to write down your own answers/code.
• Late policies:  Home work turned in after the due date/time will not be graded and will receive no credit.  Make-up assignments can only be arranged for absence due to medical (or similar) reasons. Proper documentation is required. Caveat: You will have one chance (only one!) to submit assignment late without asking for permission (no later than 24 hours).
• Academic Honesty: The complete policy statement on academic honesty is published in the UCI Schedule of Classes. Under no circumstances are students allowed to work together on any of the examinations. Cheating is a dishonest representation of the course work, including but not limited to cheating on an exam, fraudulently presenting lab exercises or assignments by someone else as one's own, or getting someone else to take the course. It is a serious academic offense that will not be tolerated. Cheaters can expect to receive a failing grade and will be punished under University regulations.

Grading Policies:

Tentative Class Schedule:

• Week 1: Class Introduction & basic security principles, crypto (chapter 1 & 2)
• Week 2: Crypto and software vulnerabilities (chapter 1, 12 and 3)
• Week 3: Software vulnerabilities (chapter 3)
• Week 4: Operating Systems (chapter 5)
• Week 5: Mid-term and Operating Systems (chapter 5) 
• Week 6: Network security (chapter 6)
• Week 7: Web (chapter 4)
• Week 8: Database and Cloud computing (chapter 7 and 8)
• Week 9: Privacy (chapter 9)
• Week 10: Management and incidents, emerging topics (chapter 10 and 13)
• Week 11: Final exam

Make-up sessions

• Privacy part 1, recorded 05/27/2019 [slides], video can be found under YuJa 2.0->classes->EECS 195
• Privacy part 2, recorded 06/01/2019 [slides], video can be found under YuJa 2.0->classes->EECS 195