Course Calendar Fall 2002

By Month: August September October November December
By Exam (these are approximate dates!): Exam #1 Exam #2 Exam #3 Exam #4
Twenty-seven 85-minute classes covering:

Fundamentals
Role-based access control
Formal reasoning about access control, delegation, and credentials

Back to Table of Contents

August

2 Classes
Topics Covered: Fundamentals


Mondays	Wednesdays
Class 1 26: Fundamentals Outline of Course [OC02] Basic security properties (Chapter 1) Conventional Encryption: (Chapter 3.1 - 3.3, 3.7) DES, Electronic Code Book, Cipher Block Chaining What was covered in class: Course outline Feistel ciphers	Class 2 28: Fundamentals Confidentiality: (Chapter 5.1 - 5.3) Placement of Encryption, Traffic Confidentiality, Key Distribution What was covered in class: Introduction to key distribution protocols Needham Schroeder secret key protocol Introduction to BAN logic

September

7 Classes
Topics Covered: Fundamentals, Role-Based Access Control


Mondays	Wednesdays
2: No Class (Labor Day)	Class 3 4: Fundamentals Public-Key Cryptography (Chapter 6.1 - 6.3) Principles of Public-Key Cryptosystems, RSA, Key Management Message Authentication and Hash Functions (Chapter 8.1 - 8.4) Authentication requirements, authentication functions, message authentication codes, hash functions Hash Functions (Chapter 9.2) Secure Hash Algorithm (SHA-1) What was covered in class Analysis of Needham-Schroeder Protocol with shared keys using the BAN logic
Class 4 9: Fundamentals Digital Signatures and Authentication Protocols (Chapter 10.1 - 10.3) Digital signatures, authentication protocols, digital signature standard What was covered in class Conclusion of BAN analysis of Needham-Schroeder protocol Introduction to digital signatures & public-key certificates	Class 5 11: Fundamentals Authentication Applications (Chapter 11.1 - 11.2) Kerberos, X.509 Authentication Service What was covered in class Description of Kerberos in BAN logic Using predicate calculus to describe cryptographic protocols and algorithms
16: No Class (Yom Kippur)	Class 6 18: Exam #1 Fundamentals: Focus on textbook through Chapter 11 BAN logic
Class 7 23: Role-Based Access Control [FBK99] Properties Examples What was covered in class Definitions and properties of RBAC	Class 8 25: Role-Based Access Control [FBK99] Properties Examples What was covered in class Proof of theorem 1: Consistency of static separation of duty (SSD) and containment. Two non-empty roles, i and j, can be mutually exclusive only if they are incomparable within the role hierarchy poset.
Class 9 30: Calculus for Access Control [HK00] Sections 1-3 Modal Logic and Model What was covered in class Notation of the calculus Kripke structures Example illustrating possible worlds

October

9 Classes
Topics Covered:


Mondays	Wednesdays
	Class 10 2: Calculus for Access Control [HK00] Sections 1-3 Modal Logic and model What was covered in class Modal logic and its relationship to the calculus
Class 11 7: Axioms for Principals and Statements [LABW92] Section 3, [HK00] Sections 4.1 - 4.3 Statements, Principals, Handoff, and Credentials What was covered in class Modal logic and its relationship to the calculus	Class 12 9: Channels and Encryption [LABW92] Section 4 Encryption, Encryption Channels Broadcast Encryption Channels, Node-to-Node Secure Channels What was covered in class Encryption channels
Class 13 14: Exam #2 Role-Based Access Control Modal Logic and model for access control calculus Basic Axioms	Class 14 16: Names [LABW92] Group Names What was covered in class Encryption channels
Class 15 21: Roles and Programs [LABW92] Section 6, [HK00] Sections 4.4 - 4.5 Program Loading, Booting What was covered in class Guest lecture by Polar Humenn on roles (Chin at conference in Taiwan)	Class 16 23: Delegation [ABLP93] Sections 5 - 6.1, [LABW92] Section 7, [HK00] Section 4.6 Delegation with and without certificates Encoding Delegations What was covered in class Guest lecture by Polar Humenn on roles (Chin at conference in Taiwan)
Class 17 28: Interprocess Communication [LABW92] Section 8 Delegation at login What was covered in class Description of roles in the calculus	Class 18 30: Access Control Decisions [ABLP93] Section 6.2, [LABW92] Section 9 Representing ACLs, grammar for ACLs, examples What was covered in class Description of roles in the calculus

November

7 Classes
Topics Covered:


Mondays	Wednesdays
Class 19 4: Reasoning About Credentials and Certificates [WABL94] Sections 1 - 4.3 Authentication and Authorization Credentials Manager Boot and Login Certificates What was covered in class Delegation and certificates	Class 20 6: Exam #3 (Original Date - now delayed to 18 November) Channels and Encryption Group Names Roles and Programs Delegation Interprocess Communication What was covered in class Delegation and certificates
Class 21 11: Reasoning About Credentials and Certificates [WABL94] Sections 1 - 4.3 Authentication and Authorization Credentials Manager Boot and Login Certificates	Class 22 13: Extensions to the Logic [HK00] Section 6
Class 23 18: Exam #3 Modal Logic and model for access control calculus Relating/formal proofs of basic axioms of the calculus in the modal logic Reasoning about roles, certificates, and delegations in the principal calculus	Class 24 21: Applications
Class 25 25: Open	27: No Class (Thanksgiving Break)

December

2 Classes
Topics Covered:


Mondays	Wednesdays
Class 26 2: Open	Class 27 4: Last Class (Course Evaluation)
9: Exam #4 Access Control Decisions Reasoning About Credentials and Certificates Extensions Applications

Updated September 11, 2002