CS 4740/6740 is a mixed undergraduate and graduate-level course on network security covering a diverse range of topics at all layers of the networking stack, from physical to application-level security. The course focuses on the intersection between systems security principles and networking, from abstract models to their application in systems code, the Web, and mobile platforms. There is a pronounced emphasis on practical techniques for both defending and attacking systems in support of the high-level goal to impart the “attacker mindset.”

Prerequisites

The official prerequisite for this course is Fundamentals of Computer Networking, or an equivalent course. In addition, familiarity with (or the willingness to learn) UNIX systems, a scripting language such as Ruby or Python, C, and x86 assembly will be useful.

Meetings

Class meets weekly on Wednesdays 6-9 PM in 108 WVH.

Grading

Grades will be assigned based on points awarded for completion of projects, quizzes, and exams. There will be four projects assigned over the course of the semester, a midterm, and a final exam. In addition, quizzes will be given periodically, to be completed during class. Projects can be completed in groups, while the midterm, final, and quizzes must be completed individually. The tentative point distribution is as follows.

Projects	40% (4 x 10%)
Quizzes	10%
Participation	5%
Midterm exam	15%
Final exam	30%

Late assignments will not be accepted unless an agreement is reached with the professor. Separate scales for undergraduates and graduates will be used, and grades may be subject to a curve.

Policies

Students should be familiar with the University Appropriate Use and Academic Integrity policies.

Additionally, due to the sensitive nature of the material covered in this course, a few words on scope are in order. Attack-oriented experiments performed as part of the course projects must be restricted to the computing resources provided for completion of these projects. Alternatively, students can perform these projects using personal resources so long as the experiments are solely executed on personal equipment. “Personal resources” includes attacking systems, target systems, and all intermediary systems and networks.

In particular, attacks performed against University resources or the Internet at large are expressly prohibited.