01-intro.pptx
- 1. Information Security Fall 2022 Introduction and Course Policies Tyler Bletsch Duke University
- 2. Instructor and TAs 2 • Muhammad Abdul Qayum
- 3. Course objective: Evolve your understanding of security • Theory: How do I think systematically about security? What constructs are available for me to use? How do I understand new threats and defenses not covered in the course? • Skills: What tools are commonly used to do the above? How can I manipulate data and automate things to make the above practical? • Practice: “Stick time”: Actually doing it. Both attacking and defending. Security Theory Skills Practice 3
- 4. Textbook • Text: Computer Security: Principles and Practice (4th Edition), by Stallings & Brown ISBN 1-292-22061-9 If you go to addall.com, you can search all online booksellersat once. 4
- 5. Grading Breakdown Marks % Sessional 30% Mid Exam 30% Final Exam 40% Partial credit is available – provide detail in your answers to seek it! Late homework submissions incur penalties as follows: • Submission is 0-24 hours late: total score is multiplied by 0.9 • Submission is 24-48 hours late: total score is multiplied by 0.8 • Submission is more than 48 hours late: total score is multiplied by the Planck constant (in J·s) ~6.6×10-34 ! 5
- 6. Homework Zero • Designed to get you familiar with UNIX in general and Linux in particular • UNIX skills are for more than this course – there’s a reason people use these tools! 6
- 7. Academic Misconduct • Academic Misconduct Refer to Duke Community Standard Homework content is individual – you do your own work Common examples of cheating: • Copying and rephrasing written answers from another student • Using code or answers from an outside source • I will not tolerate any academic misconduct! • “But I didn’t know that was cheating” is not a valid excuse All artifacts you submit must be entirely your own. 7
- 8. Goals of This Course 8 • Things you will understand after this course: Fundamental security objectives: Confidentiality, Integrity, and Availability How to develop and describe a threat model The types of security threats and attacks that must be dealt with How to distinguish among various types of intruders and their behavior patterns The poor programming practices that cause many security vulnerabilities Major networking protocols, standards, and tools Symmetric and asymmetric cryptography including message authentication User authentication How to reason about and implement security policies How to secure operating systems, databases, hypervisors, and cloud environments The role of firewalls, intrusion detection, and intrusion prevention systems Security auditing and forensics Social engineering attacks Ethical and legal aspects of security
- 9. Ethics in Security • There are three flavors of security practitioner in the world: White hat: Obey the law, work to make systems secure Black hat: Break the law, infiltrate (usually for profit) Grey hat: Does both (so still super unethical) • There is ONE flavor of security practitioner in this course: 9
- 10. OBE • What is OBE? • Program Educational Objectives (PEOs) • Program Learning Outcomes (PLOs) • Course learning outcomes (CLOs) of this course and Taxonomy levels involved • Contribution of this course to PLOs and PEOs • Course specifications and reference materials • Number/type/marks of sessional activities • Complex Engineering Problems • Open Ended Labs (in case Lab is part of course) • Assessment Methods and Evaluation Criteria • Continuous Quality Improvement • Expectations from Students in OBE
- 11. ASSESSMENT OF STUDENT BEHAVIOUR 1 The student maintains good personal hygiene. 2 The student maintains appropriate dressing. 3 The student demonstrates good time management. 4 The student demonstrates good communication. 5 The student demonstrates compliance with rules and regulations. 6 The student demonstrate integrity. 7 The student demonstrates consideration for others. 8 The student tries to make positive contribution.