INF 453 / INF 553: Information Security and Privacy

Course Information

Class: Tuesday 2:45pm-5:35pm
Classroom: BB-205 (Updated)
Instructor: Amir Masoumzadeh
Office Location: LI-96H
Office Hours: Friday 10am-12pm (updated)
Email: amasoumzadeh [at] albany [dot] edu (Always, include "INF453" or "INF553" in the subject of your email.)
Prerequisites: INF 306, Information Security and Assurance
Required Reading: [SB14] Computer Security: Principles and Practice (3rd Edition), W. Stallings and L. Brown, 2014, ISBN-13: 978-0133773927
Additional Readings: [Anderson08] Security Engineering: A Guide to Building Dependable Distributed Systems (2nd Edition), Ross J. Anderson, 2008, ISBN-13: 978-0470068526 (Available for free on the Author's website)

Policies

These are the highlights of the policies. Check out the complete policies in INF453/INF553 syllabus.

Readings and Assignments

Reading is an important part of the class. The readings indicated for each class session are due before the class.
Unless mentioned otherwise, homework assignments are due by the end of the specified day, submitted through Blackboard.
If you decide to submit your homework late, it will be subject to 10% penalty per day late for up to 5 days. No assignment will be accepted after 5 days past the deadline.

Grading

Readiness Assurance Tests: 10%
In-Class Activities: 15%
Midterm Exam: 20%
Homework Assignments: 25%
Final Exam: 25%
Team Member Performance: 5%

Lecture and Assignment Schedule

The schedule will be regularly updated during the course of the semester. It is your responsibility to review the schedule regularly.

Note: Any reading marked with "AR:" indicates additional reading.

Date	Topic	Reading	Assignment
Jan. 26	Introduction	[SB14] Chapter 1 (pp. 12-36)
Feb. 2	Unit 1: Cryptography RAT 1	[SB14] Chapter 2 (pp. 41-67) AR: [Anderson08] Chapter 5 - .1, .2, .4, .6, and .7 AR: [SB14] Chapters 20 and 21
Feb. 9	Unit 1 continued Unit 2: Authentication & Access Control RAT 2	[SB14] Sections 3.1-3.6 (pp. 73-105) [SB14] Chapter 4 (pp. 114-150) AR: [Anderson08] Chapter 4 - up to 4.3	Homework 1 due Feb. 12
Feb. 16	Unit 2 continued		Lab 1 due Feb. 19 Lab 2 due Feb. 19
Feb. 23	Unit 2 continued	[SB14] Chapter 4 AR: [Anderson08] Chapter 4 - up to 4.3	Homework 2 due Feb. 26
Mar. 1	Unit 3: Malwares and Software Security RAT 3	[SB14] Chapter 6 (pp. 200-235)
Mar. 8	Midterm	Midterm will be based on the Introduction and Units 1-3 (Chapters 1-4&6 from [SB14]).
Mar. 15	Spring Break (No Class)
Mar. 22	Unit 3 continued	[SB14] Chapter 11 AR:[SB14] Chapter 10
Mar. 29	Unit 4: Network Security RAT 4	[SB14] Chapter 7 (pp. 240-263)
Apr. 5	Unit 4 continued	[SB14] Chapter 8 (pp. 268-299)	Homework 3 due Apr. 10
Apr. 12	Unit 4 continued	[SB14] Chapter 9 (pp. 304-329)
Apr. 19	Unit 5: Security Management RAT 5	[SB14] Chapter 14 (pp. 486-507)	Homework 4 due Apr. 24
Apr. 26	Unit 6: Information Privacy RAT 6	[SB14] Section 19.3 (pp. 621-626) Section "Principles" from FTC Fair Information Practice Principles Section "The Privacy Principles" from OECD Privacy Principles L. Sweeney, "K-Anonymity: A Model for Protecting Privacy"	(Optional) Homework 5 due May 1
May 3	Review Session for Final Exam
May 12	Final Exam will be on Thursday May 12th, 8am-10am.