The 2002 International Symposium on Information Systems and Engineering (ISE'2002)

July 14 - 18, 2002
US Grant Hotel, San Diego, CA, USA


Tutorial Title: COMPUTER SECURITY

 

TUTORIAL SESSION

 

 

Title:  Computer  And Network  Security

 

Overview and Objectives

The proliferation of computers and communication networks has resulted in the ubiquity of computers in a wide variety of applications.  In several applications, the data which is processed and transmitted is valuable, critical, and strategic. However computers are vulnerable for attacks from various sources such as viruses, worms, hackers, and electronic eavesdroppers, which is detrimental to the smooth operations of the applications.  This calls for security mechanisms that allow safe, uninterrupted, and secure operations of computers and networks. 

This tutorial is intended to give a good overview of the principles and practices of various aspects of computer and network security.  The tutorial’s plan is as follows:

 

TOPIC                                                                                                                         TIME              

1.  Introduction to Computer Security. 

Security attacks; Security services; Network security                                               10 Minutes

 

2.  Conventional Encryption.

Block ciphers, DES (Data Encryption Standard);

IDEA; AES.                                                                                                           30 Minutes

 

3.  Public-Key Encryption.

Public-key cryptosystems; RSA algorithm;                                                              20 Minutes

Diffie – Hellman key exchange

 

4.  Key Exchange and Key Management.

Key exchange using conventional and public key                                                     30 Minutes

Schemes; Key exchange protocols; Digital certificates.

 

5.  Message Authentication and Hash Functions.

Authentication codes; Hash functions;                                                                      30 Minutes

Digital signatures; Authentication protocols

 

6.  Network Security.

Kerberos; Electronic mail security (PGP); Web security;                                         30 Minutes

Secure Electronic Transactions (SET).

 

7.  System Security.

Intruders, viruses, and worms; Firewalls.                                                                 30 Minutes

 

Benefits and Learning Objectives

This tutorial enables the participant to:

* get a good overview of various aspects of computer security.

* understand the major issues in computer security.

* get an insight into several key techniques at different levels of security.

* understand mechanisms in encryption, key management and authentication.

 

Required Background and Intended Audience

Students, Engineers, Scientists and Managers who want to understand the principles and techniques involved in various aspects of computer security.  Required background is elementary discrete mathematics.

 

Tutorial Duration :  3 Hours.

 

Method of Presentation:       PowerPoint using LCD projector. Tutorial notes will be made available. 

 

Presenter:  Dr. S.R. Subramanya

Computer Science Department

University of Missouri--Rolla

Rolla, MO, USA

Email: subra@umr.edu

 

Instructor's Biography

S.R. Subramanya received his Masters degree in computer science from Indiana University, Bloomington, and the doctoral degree in computer science from George Washington University, Washington, D.C.  He was the recipient of Richard Merwin memorial award at George Washington University in 1996, and Grant-In-Aid of Research award from Sigma-Xi in 1997.  He is currently an Assistant Professor at the University of Missouri--Rolla.  He has been teaching courses in Data Compression, Multimedia Information Systems, and Computer Security.  His research involves Multimedia data classification, indexing, and retrieval, Data Compression, and Parallel algorithms and architectures.  He has presented tutorials on Multimedia Systems and Computer Security at several conferences.  He has also developed course material for distance education on Multimedia Systems and Computer Security, which have been offered to employees at different Boeing facilities.  He has served as a reviewer, program committee member, and session chair of several International Conferences.  He has also been a reviewer for several journals.