CS686 Fall '96 -- Security Seminar

Goals

To demonstrate the need for a system-wide approach to security.

Schedule

• 25 Sep -- Introduction/Terminology/History (Jeff)
• 2 Oct -- Intro/History, continued --- Network Security Basics (Jeff)
• 9 & 16 Oct -- Case Study: Synergy (Architecture/Prototype) (Steve S.)

  References:

  Assuring Distributed Trusted Mach

  Providing Policy Control Over Object Operations in a Mach Based System

• 18 Oct -- Authentication/Key Management I (John McCorquodale)
• 23 Oct -- Authentication/Key Management II (John McCorquodale)
• 30 Oct -- (OSDI -- no class)
• 6 Nov -- Network Security/IETF Security Directions (Kevin Van Maren)

  References:

  IETF home page

  Security Working Groups

  RFC 1825 -- Security Archecture for IP

  RFC 1826 -- IP Authentication Header

  RFC 1827 -- IP Encapsulating Security Payload

• 13 Nov -- Electronic Commerce (Ajay Chitturi)

  References:

  NCSA Electronic Commerce White Paper

  Related papers and links

  Slides from the seminar

• 20 Nov -- Microsoft Internet Security Framework (Patrick Tullmann)

  References:

  Microsoft Internet Security White Paper

• 22 Nov -- Proof Carrying Code (w/AMPS Seminar) (Godmar Back)

  References:

  George Necula and Peter Lee's OSDI and POPL papers

• 27 Nov -- Policy Issues (Jay Lepreau)
• 4 Dec -- An Introduction to Larch (Eric Eide)
  
  
• Maybe sometime - Constraining Downloaded Code

  References:

  Building Systems that Flexibly Control Downloaded Executable Content

  Java Security: From HotJava to Netscape and Beyond

CS686 base page

Reference List

Good Background Reading

Improving the Security of Your Site By Attacking It

An enlightening look at Unix (in)security. Introduction to the SATAN web-based security analysis tool.

There Be Dragons

Interesting and entertaining description of AT&T's early efforts to determine the nature of attacks on their networks, and the tools they developed in the process.

Cryptography FAQ

RSA Data Security Inc's view of the world. Good introduction to the issues.

Godmar Back's Tutorial on RSA/PGP

Excellent overview of the public key system, and a mail package that uses it.

Security-Related Links

• Canadian Security Jump Page
• National Computer Security Association
• NIST Computer Security Clearinghouse
• Distributed Trusted Operating System Page
• ARIS - Architectures for Information Security
• RISKS Forum
• Microsoft Security Pages
• OSF security pages
• Common Criteria
• PGP

---

sjt@cs.utah.edu
Last modified on Nov 5 1996