Skip to content

CSC 302: Computer Security II

Instructor

  • Instructor: Linh B. Ngo
  • Office: UNA 138
  • Office Hours:
  • TR: 11:00AM - 12:30PM (in office)
  • MW: 11:00AM - 12:30PM (Zoom - information will be posted in D2L)
  • Email: lngo AT wcupa DOT edu
  • Phone: 610-436-2595

Course Information

  • The course runs from January 23, 2023 until May 13, 2023.

Required Materials:

  • Introduction to Computer Security, Michael T. Goodrich & Roberto Tamassia, Addison Wesley, ISBN-10: 0321-51294-4, ISBN-13: 978-0-321-51294-9.

Resources and Accessibility:

  • For general technical support, students can contact WCU IT HelpDesk at 610-436-3350 or via email: helpdesk@wcupa.edu.
  • For distance education support, students can contact WCU Distance Education Services at 610-436-3373 or via email: distanceed@wcupa.edu.
  • A Discord server will be created and invitation link made available inside D2L. Technical questions specific to online competition platforms used in the course can be sent via email to the instructor or posted on the Discord server.

Course Description

This course will provide an introduction to critical and diverse topics in computer security, such as security requirements, attack models, cryptography, authentication, system security, etc.

Prerequisites

  • Computer Security & Ethics (CSC 301).
  • Data Communications and Networking I (CSC 335).

Learning Objectives

Course Student Learning Outcomes (CSLO)

  1. Understand important topics of computer security, such as security concepts, principles, components, architectures, ethical and legal issues (CSPO 4)
  2. Design, implement and evaluate a secure network system (CSPO 2)
  3. Apply mathematical foundations, algorithm principles, and computer science theory in topics such as cryptographic operations and security architecture (CSPO 5)
  4. Work effectively both independently and in teams through hands-on lab activities and team projects (CSPO 3)
  5. Find technical information from the web and other sources when they do assignments and project (CSPO 3)

CS Program Objectives (CSPO):

  1. Design, implement, and evaluate a computing-based solution to meet a given set of computing requirements in the context of the program’s discipline.
  2. Communicate effectively in a variety of professional contexts.
  3. Recognize professional responsibilities and make informed judgements in computing practice based on legal and ethical principles
  4. Function effectively as a member or leader of a team engaged in activities appropriate to the program’s discipline.

CS/ABET Program Outcomes (ABET):

  1. ABET 1: Analyze a complex computing problem and to apply principles of computing and other relevant disciplines to identify solutions (CSLO 1).
  2. ABET 2: Design, implement, and evaluate a computing-based solution to meet a given set of computing requirements in the context of the program’s discipline (CSLO 2, 3).

Assessments and Grading:

Method of Evaluation

```{list-table} Method of Evaluation :header-rows: 1 :name: method-of-evaluation

    • Assessment
  • \% of Final Grade
  • Course Objectives Assessed
  • Program Objectives Assessed
  • ABET Objectives Assessed
    • Assignments
  • 30\%
  • CSLO 1, 2, 3
  • CSPO 1
  • ABET 2
    • Labs
  • 30\%
  • CSLO 4, 5
  • CSPO 2
  • ABET 5
    • Quizzes
  • 20\%
  • CSLO 1, 5
  • CSPO 1
  • ABET 1, 2
    • Exams
  • 20\%
  • CSLO 1, 5
  • CSPO 1
  • ABET 5 
    ### Grade Scale:

| Grade   |   Quality Points | Numeric   | Interpretation   |
|:--------|-----------------:|:----------|:-----------------|
| A       |             4    | 100-93    | Excellent        |
| A-      |             3.67 | 92-90     | -                |
| B+      |             3.33 | 89-87     | Superior         |
| B       |             3    | 86-83     | -                |
| B-      |             2.67 | 82-80     | -                |
| C+      |             2.33 | 79-77     | Average          |
| C       |             2    | 76-73     | -                |
| C-      |             1.67 | 72-70     | -                |
| D+      |             1.33 | 69-67     | Below Average    |
| D       |             1    | 66-63     | -                |
| D-      |             0.67 | 62-60     | -                |
| F       |             0    | <= 60     | Failure          |

Refer to the [Grading Information section](https://catalog.wcupa.edu/undergraduate/academic-policies-procedures/grading-information/) 
section of the Undergraduate Catalog for description  of NG (No Grade), 
W, Z, and other grades. 

### Midterm and Final Exam:
- Midterm Exam will be disseminated the week before Spring Break. 
- Final Exam date will be scheduled according to the University's Final 
Exam Schedule for Spring 2023. 

### Lateness Policy:
Assignments that are late are assessed a 10% per day late penalty. 
Saturday and Sunday are each days.

## University Policies 

### Academic & Personal Integrity
It is the responsibility of each student to adhere to the university’s standards 
for academic integrity. Violations of academic integrity include any act that 
violates the rights of another student in academic work, that involves misrepresentation 
of your own work, or that disrupts the instruction of the course. Other violations include 
(but are not limited to): cheating on assignments or examinations; plagiarizing, which 
means copying any part of another’s work and/or using ideas of another and presenting 
them as one’s own without giving proper credit to the source; selling, purchasing, or 
exchanging of term papers; falsifying of information; and using your own work from one 
class to fulfill the assignment for another class without significant modification. 
Proof of academic misconduct can result in the automatic failure and removal from this 
course. For questions regarding Academic Integrity, the No-Grade Policy, Sexual Harassment, 
or the Student Code of Conduct, students are encouraged to refer to the 
[Department Undergraduate Handbook](https://www.wcupa.edu/sciences-mathematics/computerScience/undergrad.aspx), 
the [Undergraduate Course Catalog](https://catalog.wcupa.edu/undergraduate/), 
the [Ram’s Eye View](https://www.wcupa.edu/_services/STU/ramsEyeView/), or 
the [University Website](https://www.wcupa.edu).  

### Accomodations for Students with Disabilities 
West Chester University is committed to providing equitable access to the full WCU experience 
for Golden Rams of all abilities. Students should contact the [Office of Educational Accessibility (OEA)](https://www.wcupa.edu/universityCollege/OEA/) to establish accommodations if they have had accommodations in the past or if they believe they may be eligible for accommodations due to a disability, whether or not it may be readily apparent. There is no deadline for disclosing to OEA or for requesting to use approved accommodations in a given course. However, accommodations can only be applied to future assignments or exams; that is, they can’t be applied retroactively. Please share your letter from OEA as soon as possible so that we can discuss accommodations. If you have concerns related to disability discrimination, please contact the university’s ADA Coordinator in the [Office of Diversity, Equity, and Inclusion](https://www.wcupa.edu/_admin/diversityEquityInclusion/) or 610-436-2433

The [University’s Americans with Disabilities policy](https://www.wcupa.edu/_admin/diversityEquityInclusion/adaPolicy.aspx) 
is available on the website.  If you encounter an area of this course that is not accessible to 
you, please contact me.  

### University-Excused Absences Policy 

Students are advised to carefully read and comply with the University-Excused Absences Policy, including 
absences for university-sanctioned events, contained in the WCU Undergraduate Catalog. 
In particular, please note that the **responsibility for meeting academic requirements rests 
with the student**, that this policy does not excuse students from completing required academic 
work, and that professors can require a **fair alternative** to attendance on those days 
that students must be absent from class in order to participate in a University-Sanctioned Event.

### Reporting Incidents of Sexual Violence 
West Chester University and its faculty are committed to assuring a safe and productive 
educational environment for all students. In order to comply with the requirements of 
Title IX of the Education Amendments of 1972 and the University’s commitment to offering 
supportive measures in accordance with the new regulations issued under Title IX, the 
University requires faculty members to report incidents of sexual violence shared by 
students to the University's Title IX Coordinator. The only exceptions to the faculty 
member's reporting obligation are when incidents of sexual violence are communicated 
by a student during a classroom discussion, in a writing assignment for a class, or 
as part of a University-approved research project. Faculty members are obligated to 
report sexual violence or any other abuse of a student who was, or is, a child (a 
person under 18 years of age) when the abuse allegedly occurred to the person designated 
in the University Protection of Minors Policy. Information regarding the reporting of 
sexual violence and the resources that are available to victims of sexual violence is 
set forth at the [WCUPA Sexual Misconduct website](https://www.wcupa.edu/_admin/diversityEquityInclusion/sexualMisconduct/default.aspx).  

### Inclusive Learning Environment and Anti-Racist Statement

Diversity, equity, and inclusion are central to West Chester University’s mission as 
reflected in our [Mission Statement, Values Statement, Vision Statement](https://www.wcupa.edu/president/valuesAndVision.aspx) 
and [Strategic Plan: Pathways to Student Success](https://www.wcupa.edu/president/strategicPlan/default.aspx). 
We disavow racism and all actions that silence, threaten, or degrade historically 
marginalized groups in the U.S. We acknowledge that all members of this learning 
community may experience harm stemming from forms of oppression including but not 
limited to classism, ableism, heterosexism, sexism, Islamophobia, anti-Semitism, 
and xenophobia, and recognize that these forms of oppression are compounded by racism. 

Our core commitment as an institution of higher education shapes our expectation 
for behavior within this learning community, which represents diverse individual 
beliefs, backgrounds, and experiences. Courteous and respectful behavior, 
interactions, and responses are expected from all members of the University. 
We must work together to make this a safe and productive learning environment 
for everyone. Part of this work is recognizing how race and other aspects of 
who we are shape our beliefs and our experiences as individuals. It is not 
enough to condemn acts of racism. For real, sustainable change, we must stand 
together as a diverse coalition against racism and oppression of any form, 
anywhere, at any time. 

Resources for education and action are available through WCU’s 
[Office for Diversity, Equity, and Inclusion](https://www.wcupa.edu/_admin/diversityEquityInclusion/changeBeginsHere.aspx) 
(ODEI), DEI committees within departments or colleges, the student [ombudsperson](https://www.wcupa.edu/_services/STU/studentOmbuds/), 
and centers on campus committed to doing this work (e.g., [Dowdy Multicultural Center](https://www.wcupa.edu/_services/multicultural/), 
[Center for Women and Gender Equity](https://www.wcupa.edu/_services/women-gender-equity/), and the 
[Center for Trans and Queer Advocacy](https://www.wcupa.edu/_services/transAndQueer/)). 

Guidance on how to report incidents of discrimination and harassment is available at the University’s 
[Office of Diversity, Equity and Inclusion](https://www.wcupa.edu/_admin/diversityEquityInclusion/).

### Emergency Preparedness

All students are encouraged to sign up for the University’s free WCU ALERT service, 
which delivers official WCU emergency text messages directly to your cell phone. 
For more information, visit https://www.wcupa.edu/wcualert. To report an emergency, 
call the Department of Public Safety at 610-436-3311.

### Electronic Mail Policy 

It is expected that faculty, staff, and students activate and maintain regular 
access to University provided e-mail accounts. Official university communications, 
including those from your instructor, will be sent through your university e-mail 
account. You are responsible for accessing that mail to be sure to obtain official 
University communications. Failure to access will not exempt individuals from 
the responsibilities associated with this course.

## Resources for Student Success 

### Expectations for Student Success in Distance Education 

An online course uses technology to provide you, the student, with greater flexibility 
regarding when and where you learn.  To be a successful online learner you must 
capitalize on this increased flexibility by doing the following. 
- `Self-Motivation and Self-Discipline`: Active participation in online activities is expected. 
This means that you login to the course frequently, engage with the provided materials, and read 
and respond to communications in a timely and thoughtful manner.  Online courses require you to 
take more responsibility for your learning.    
- `Planning and Organization`: You will need disciplined work habits, effective time management 
skills, and the ability to work both alone and collaboratively if you wish to be successful 
in an online course.  You should expect to devote 9 to 12 hours per week to this course.  
You may find that you need to work harder than you would in a traditional lecture class.   
- `Communication Skills`: In an online course communication takes place primarily through 
the written word.  You need strong English reading and writing skills to express your 
thoughts.  Online courses also expect you to proactively reach out to your instructor 
for assistance when you need it.  Finally, pay attention to communication guidelines 
and be respectful of your fellow students when you communicate.        

### Minimum Student Technical Skills

You are expected to be competent in the use of computers, the World Wide Web, and commonly 
used software programs such as the Microsoft Office Suite of applications and Adobe PDF readers. 
In addition, you should be able to utilize a web-camera and microphone.  You should have a basic 
understanding of how to use the common elements of the university learning management system.

Students without experience using the university’s learning management system (Desire2Learn) 
can contact the Student Help Desk to arrange instruction, can contact Distance Education 
Support, or can complete tutorials in [Navigating Digital Learning](https://d2l.wcupa.edu/d2l/home/2513024). 

Hours for support services may vary.  Check their websites for times of operation.  

- General Technical Support: Contact the WCU IT Helpdesk at 610-436-3350 or email helpdesk@wcupa.edu
- Distance Education Support: Contact The Office of Digital Learning & Innovation at 610-436-3373 or email distanceed@wcupa.edu 
- Additional technical support information will be provided for tools as needed throughout the course.

### Accessibility Policies, Privacy Policies, and Support Site Information:

This course uses a variety of tools.  To access a tool’s accessibility and privacy policy, 
navigate to the [Distance Education Accessibility and Privacy Policies website](https://www.wcupa.edu/DistanceEd/resourcesandpolicies.aspx).  

### Student Academic and Support Services

Student academic and support services provided by the university can be found on the 
[Ram’s Eye View Services website](https://www.wcupa.edu/_services/STU/ramsEyeView/services.aspx).

### Library Resources for Distance Education Students

The West Chester University Library makes resources available to distance education students. 
Please review their [Library Services for Distance Students website](https://library.wcupa.edu/distance) 
for specific information.

## Course Topics and Schedules:

- Quizzes are typically disseminated once a week. 

```{list-table} Topics and Tentative Schedule
:header-rows: 1
:name: topic-schedule

* - Week
  - Topic
  - Assessments
* - 1
  - Security at a Glance 
  - 
* - 
  - Introduction to Linux
  - 
* - 2
  - Introduction to SEED Labs
  -
* - 
  - 
  - 
* - 3
  - Introduction to OS
  - 
* - 4
  - OS Administration
  - 
* - 5
  - OS Hardening
  - 
* - 6
  - Bash Scripting
  - 
* - 7
  - 
  - 
* - 8
  - Network Security Concepts
  - 
* - 9
  - Network Vulnerabilities
  - 
* - 10
  - Midterm
  - 
* - 11
  - Introduction to Cryptography
  - 
* - 12
  - Symmetric Cryptography
  - 
* - 13
  - Integrity
  - 
* - 14 
  - Key Generation 
  - 
* - 15
  - Key Exchange
  -