Computer System Security

Catalog description

This course offers a broad study of computer system security, starting with fundamental principles and moving toward specific types of vulnerabilities, attacks, and defense mechanisms. The focus areas include software security, web security, and hardware security. In software security, the course examines classical vulnerabilities and attacks on privileged programs and their countermeasures. We will discuss buffer overflow attack, format string vulnerability, race condition vulnerability, and reverse shells. In web security, topics include cross-site request forgery (CSRF), cross-site scripting (XSS), SQL injection, and clickjacking attacks and their countermeasures. In hardware security, the course addresses vulnerabilities in modern processors, including Meltdown and Spectre attacks. To reinforce these concepts, students will be engaged in hands-on assignments that explore both attack methods and defense strategies. Prerequisite(s): ECE 152 FOR LEVEL UG WITH MIN. GRADE OF C AND ECE 37100 FOR LEVEL UG WITH MIN. GRADE OF C AND ECE 46810 FOR LEVEL UG WITH MIN. GRADE OF C- (MAY BE TAKEN CONCURRENTLY) Course Learning Outcomes 1. Explain the fundamental concepts of cybersecurity. 2. Analyze software vulnerabilities such as buffer overflow attack, format string vulnerabilities, and race condition vulnerability, along with their countermeasures. 3. Evaluate attacks on web application, including CSRF, XSS, SQL injection, and clickjacking, and describe their defenses. 4. Design and implement secure system and web applications. 5. Explain vulnerabilities in modern processor architectures and discuss available countermeasures. View Class Schedule