CS 594 Enterprise and Cloud Security
This course considers security and privacy from the perspective of enterprise and cloud applications. An underlying theme of the course is risk analysis for managing information security. The OCTAVE Allegro approach is considered as an example risk management process. Identity management, e.g., OpenID and SAML. Access control, e.g., RBAC, OAuth and XACML. Private and public key cryptography, and their use in secure Web services. WS-Security vs REST security. Multilevel and multilateral security: Bell-Lapadula, Biba, Clark-Wilson, Chinese Wall, BMA, information flow control (IFC). Network security: Firewalls, intrusion detection and honeynets, denial of service, worms and botnets. Cyber forensics: evidentiary requirements of forensics analysis after attacks have been detected. Finally, security and privacy aspects of cloud computing are considered. All security concepts are covered from first principles. Assignments involve building secure enterprise applications, including secure Web services and PKI.
Prerequisite
((
CS 526 or
CS 548 or
CS 549) and Graduate Student or at Least Junior) or permission of instructor
Distribution
Computer Science ProgramOffered
Fall Semester
Spring Semester