Document 7601294

Download Report

Transcript Document 7601294

COMP 7370
Advanced Computer and Network Security
Dr. Xiao Qin
Auburn University
http://www.eng.auburn.edu/~xqin
[email protected]
COMP 7370, Auburn University
Slide 01-1
Introduce Yourselves
•
•
•
•
•
•
Name
M.S. or Ph.D. student
Your research interests
Your ongoing research projects
Industry or academia jobs
Why are you taking COMP7970?
COMP 7370, Auburn University
Slide 01-2
Today’s Goal:
• Course Objectives
• Course Content & Grading
• Answer your questions about COMP 7970
COMP 7370, Auburn University
Slide 01-3
COMP 7370: Semester Calendar
See the class webpage for the most up to date version!
http://www.eng.auburn.edu/~xqin/courses/comp7370
COMP 7370, Auburn University
Slide 01-4
COMP 7370, Auburn University
Slide 01-5
COMP 7370, Auburn University
Slide 01-6
COMP 7370, Auburn University
Slide 01-7
COMP 7370, Auburn University
Slide 01-8
What will you get out of Comp 7370?
• Students who have completed this course
should be capable of doing the following:
– Understand fundamental issues in computer and
network security
– Understand reasons for policies, settings, and
configurations in the practicum.
– Improve technical writing and oral presentation
skills.
COMP 7370, Auburn University
Slide 01-9
Will it be worthwhile?
COMP 7370, Auburn University
Slide 01-10
Will it be worthwhile?
COMP 7370, Auburn University
Slide 01-11
Will it be worthwhile?
COMP 7370, Auburn University
Slide 01-12
Will it be worthwhile?
COMP 7370, Auburn University
Slide 01-13
Topic Coverage
• There are no texts for this course. Handouts, book
chapters, and papers will be used as supplement course
material. The course material will be posted online.
• Covers (These topics may change)
–
–
–
–
–
–
–
–
–
cryptography,
design principles,
access control,
security policies,
key management,
assurance,
malicious logic,
vulnerability analysis,
network security.
COMP 7370, Auburn University
Slide 01-14
Attendance
• Class attendance is mandatory. This is a
graduate class; therefore, students will have to
actively participate in class. It is believed that if
you miss many classes (more than 6), there is a
strong likelihood that you will not pass the
class. Please notify me in advance if you will
attend conferences, research meetings, or the
like.
COMP 7370, Auburn University
Slide 01-15
Course Syllabus
• Prerequisite: OS
• no exams
• Grading
– Mid-term Exam
– Final Exam
– Homework Assignments
– Presentation
– Project Assignments
20%
20%
15%
15%
30%
COMP 7370, Auburn University
Slide 01-16
Course Syllabus (cont.)
• Scale
– Letter grades will be awarded based on the
following scale. This scale may be adjusted
upwards if it is necessary based on the final grades.
– A [90~100], B [80~90], C [70~80], D [60~70], F
[0~60]
COMP 7370, Auburn University
Slide 01-17
Office Hours and Exams
Office hours: Monday 9:50-11:50AM
COMP 7370, Auburn University
Slide 01-18
Am I going to read papers to you?
• NO!
• Papers provide a framework and complete
background, so lectures can be more
interactive.
– You do the reading
– We’ll discuss it
• Projects will go “beyond”
COMP 7370, Auburn University
Slide 01-19
Am I going to read papers to you?
(cont.)
• NO!
•
•
•
•
•
Choose the recommended topics.
Provide some background on these topics.
Suggest some sample research questions.
Provide platform assistance.
Guide your efforts.
COMP 7370, Auburn University
Slide 01-20
Publish, publish and publish ...
•
•
•
•
COMP7970 Storage Systems
14 graduate students
10 research projects; 10 technical papers
4 technical papers were submitted to Int’l
conferences
• 4 technical papers have potential to be
submitted
• 2 great team projects
COMP 7370, Auburn University
Slide 01-21
Recommended Topics
•
•
•
•
•
•
•
•
Energy-aware security services
Storage system security
Detection of DoS attacks
Authentication
Cryptography
Location Privacy
Vulnerability analysis for networked systems
Covert Channels Detection
COMP 7370, Auburn University
Slide 01-22
Research Problem Statement
• Topic.
– I am studying secure services for storage systems
• Research question or original objective.
– so I can create energy-aware security services for
storage systems.
• Who cares?
– so the storage system community
• Why should they care?
– will better understand how to provide more flexible,
secure and integrated services for storage systems.
COMP 7370, Auburn University
Slide 01-23
Four Panel Slide – Example 1
• Project Name
• Approach
– Project Name
– Auburn University
– Logo
• Problem Statement
– Measure energy consumption
of confidentiality services
– Challenged by making
tradeoff between energy
conservation and security.
– Energy overhead of security
services
– Make tradeoffs between
security and energy
efficiency.
– Adaptive control of security
services in storage systems.
• Plans and Progress
– Energy overhead model
– Prototype.
– Adaptive controller.
COMP 7370, Auburn University
Slide 01-24
Questions
Please ask at any time!
COMP 7370, Auburn University
Slide 01-25