0CI01(01712560): Information Security Engineering(Fall 2016)


Time: Thursdays 8:30-11:30 am

Location: 3305, Teaching Builing, DaXing

Class web site: http://sunhp.org/ise2016

Instructor: Huiping Sun (sunhp(at)ss.pku.edu.cn)

TA: No

Textbook: Ross Anderson. Security Engineering. Second Edition. Wiely. 2008.

Course Description

Although most of traditional cryptography and security techology are relatively well understood, the knowledge and practice of how to apply user's economical, psychological and social factor into security is insufficient.

The course covers the basics of economics, psychology and socialology of security, and introduces password, biometrics, CAPTCHA, physical protection, reputation and others technology, in the meantime, analyses how to implement information security engineering in some critical information systems and applications such as crowdsource, payment, smartphone, social network.

Course Schedule

Date

Topics

Readings

September 22

01. Course Overview [Slides]

  • Ross Anderson. Security Engineering (Second Edition). Chapter 1: What Is Security Engineering?

September 22

02. Economics of Information Security [Slides]

September 29

03. Usable Security [Slides]

October 6

04. Graphical Password [Slides][PassApp-Slides]

October 13

05. Password Manager

[Jun Zhang, Kai Wang, Zhilai Mao]

October 13

06. Text Password [Slides]

October 20

07. Biometrics [Slides]

October 27

08. Human Computation [Slides]

[Xiaolin Qin, Haotian Hao, Xiaolong Liu, Meiyouyou Yuan]

November 3

09. Password Vaults

[Shihai Chen , Shinai Yang ]

November 3

10. CAPTCHA [Slides]

November 10

11. Reputation [Slides]

[Dong Pan]

November 17

12. Project Progress Presentation

13. Physical Protection [Slides]

  • Ross Anderson. Security Engineering (Second Edition). Chapter 11: Physical Protection
  • Ross Anderson. Security Engineering (Second Edition). Chapter 14: Security Printing and Seals
  • Ross Anderson. Security Engineering (Second Edition). Chapter 16: Physical Tamper Resistance

November 24

14. Fingerprinting

[Haoran Hu, Bingyan Wang, Tengfei Chen]

November 24

15. Privacy [Slides]

  • Ross Anderson. Security Engineering (Second Edition). Chapter 23: The Bleeding Edge

December 1

16. Password Policy

[Menglin Li, Ruihua Xie, Chao Feng, Baichuan Li]

December 8

17. Social Authentication

[Min Li, FangFang Yang, Yihong Liu]

December 8

18. Social Networks Security [Slides]

December 15

19. Access Control [Slides]

  • Ross Anderson. Security Engineering (Second Edition). Chapter 4: Access Control
  • Ross Anderson. Security Engineering (Second Edition). Chapter 8: Multilevel Security
  • Ross Anderson. Security Engineering (Second Edition). Chapter 9: Multilateral Security

December 22

20. Bitcoin I [Slides]

December 29

21. Bitcoin II [Slides]

January 5

22. Final Project Presentations

TBD

Course Grading

The grading scheme is as follows:

Course Projects