Information Trust Institute: University of Illinois at Urbana-Champaign

Short Course: Introduction to Cryptography and Information Assurance

COURSE DESCRIPTION:

This course provides a comprehensive introduction to information assurance and applied cryptography. The course is intended for students and employees who wish to improve their technical understanding of security and cryptography concepts. The course will include an introduction to standard terminology related to information assurance, security policies and mechanisms, cryptography and cryptanalysis (including symmetric and public key cryptosystems), and key distribution and management. In addition to cryptography and its applications, the course will also present security mechanisms with respect to protecting operating systems (access control, authentication, and auditing), as well as computer networks (Firewalls, VPNS, IDS, Anti-Virus mechanisms, etc.) and discuss protection models, trusted operating systems, DoD classifications, NIST common criteria, and standard models of confidentiality and integrity properties.

PREREQUISITE: Operating Systems, Computer Networks, and Abstract Algebra.

HIGH-LEVEL COURSE OUTLINE AND TIMETABLE:

6 web or live sessions of 50 minutes including quizzes, discussions, and examples.

1. Introduction: Cryptography and Information Assurance
   1. Security Policies vs. Mechanisms
   2. Integrity, Confidentiality, Availability
   3. Access Control, Authentication, Auditing
   4. Information Security vs. Communication Security, Secrecy, Authentication
2. Cryptography and Cryptanalysis
   1. Brief History
   2. Symmetric Key Cryptography- Substitution and Permutation Ciphers, Block Ciphers and Stream Ciphers, Cryptanalysis
   3. Introduction to Information Theory, Diffusion, Confusion, and Perfect Secrecy
   4. DES and AES
3. Public Key Cryptography
   1. Cryptosystems Based on Finite Fields and Discrete Logarithms
   2. RSA and Prime Number Factoring
   3. One Way Functions, Hash Functions, Digital Signatures
4. Authentication, Authorization, Key Distribution and Management
   1. Pitfalls of Using Public Key Encryption and Digital Signatures for Authentication
   2. Security Handshakes and Authentication Protocols
   3. Kerberos and PKI
   4. Key Distribution and Management
5. Security Mechanisms
   1. Access Control Models
   2. Network Security- Firewalls, VPNs
   3. IDS and Anti Virus protection
6. Trusted Operating systems
   1. Definitions of Security Properties
   2. Modeling of Secure Systems (HRU, MLS, BLP, Biba, Clark-Wilson, Chinese Wall Information Flow Models, Availability Models)
   3. DoD Classifications TCSEC, NIST Standards (CC and PP)

Instructor Biography

Roy H. Campbell is Abbasi Professor in Computer Science in the Department of Computer Science at the University of Illinois. He is an IEEE Fellow, a member of the ACM, and a member of IFIP Working Group 10.3. He received his Honors B.S. Degree in Mathematics, with a Minor in Physics, from the University of Sussex in 1969 and his M.S. and Ph.D. Degrees in Computer Science from the University of Newcastle upon Tyne in 1972 and 1976, respectively. In 1976 he joined the faculty of the University of Illinois. He has supervised the completion of 31 Ph.D. dissertations and over 123 M.S. theses. He is the author of over 228 research papers on security, programming languages, software engineering, operating systems, distributed systems, and networking.  His past research accomplishments include path expressions, various deadline and error recovery mechanisms for asynchronous processes, the Choices object-oriented operating system, the VDP protocols for streaming audio and video used by Vosaic LLC, dynamic TAO, 2K (a distributed object operating system), UIUC Sesame (a Java implementation of Sesame security protocols), and the Seraphim active security policies.  His current research projects include the Gaia project on active spaces, authentication for mobile sensors, security interoperability, security policies, and active security in active networks. He is an active participant in the department's distance learning program.

Professor Campbell is director of the NSA-designated University of Illinois Center of Academic Excellence in Information Assurance Education.