Course Home Lectures Assignments Submitting Homework

COMS W4187 — Security Architecture and Engineering — Spring '07

TuTh 01:10-02:25 PM
210 Mudd (OK, Room 1024 if you prefer)

Homework Policy
Computer security concepts and mechanisms; measures employed in countering such threats. Concepts and tools available in order to assume an appropriate security posture. Foundations of security. Identification, authentication, authorization. Software design for security and assurance. Hardware assists. Security architecture; design for security. Security tradeoffs.

  • What is security?
  • Security models (Bell-Lapadula, Biba, etc.)
  • Designing for/with security
  • Identity, authentication, authorization, audit
  • Device and software authentication
  • Assurance
  • Confinement
  • Software security
  • Hardware features
  • Random number generators
  • Biometrics
  • Security for large-scale distributed systems
  • Security architecture
  • Engineering tradeoffs


Most readings will be from primary sources. There will be some material from Security Engineering, Ross Anderson, Wiley, 2001, ISBN 0471389226. I expect that most people will prefer to use the online copy, given the nature of the material.

There will be a few suggested readings from Introduction to Computer Security, Matt Bishop, Addison-Wesley, 2005, ISBN 0-321-24744-2. I do believe that you buy the book (and I have not ordered copies); I have put it on reserve in the library.


Elli Androulaki


You must be able to program in C or C++.

You should have a decent knowledge of computer architecture. Operating Systems (W4118) and Introduction to Cryptography (W4261) are helpful but not required.

Homework Policy

There will be approximately five homework assignments, each consisting of a written part (30%) and a programming part (70%).

Unless otherwise instructed, all homeworks must be written in C or C++. Java is not acceptable; don't bother asking.


Homeworks 50%
Midterm 20%
Final 30% May 8, 1:10-4:00 (tentative)

All exams are open book. This means that there won't be any "define Foo" questions. Most questions will ask you to think and to integrate material from different lectures.

Final grades are curved.


Unless there is significant sentiment to the contrary, I will not use Courseworks except for the gradebook and the discussion list. All lectures and homework assignments will be posted on this web site.