1. Slide 01-1COMP 7370, Auburn University COMP 7370 Advanced Computer and Network Security Dr. Xiao Qin Auburn University http://www.eng.auburn.edu/~xqin xqin@auburn.edu

2. Slide 01-2COMP 7370, Auburn University Introduce Yourselves Name M.S. or Ph.D. student Your research interests Your ongoing research projects Industry or academia jobs Why are you taking COMP7970?

3. Slide 01-3COMP 7370, Auburn University Today’s Goal: Course Objectives Course Content & Grading Answer your questions about COMP 7970

4. Slide 01-4COMP 7370, Auburn University COMP 7370: Semester Calendar http://www.eng.auburn.edu/~xqin/courses/comp7370 See the class webpage for the most up to date version!

5. Slide 01-5COMP 7370, Auburn University

6. Slide 01-6COMP 7370, Auburn University

7. Slide 01-7COMP 7370, Auburn University

8. Slide 01-8COMP 7370, Auburn University

9. Slide 01-9COMP 7370, Auburn University What will you get out of Comp 7370? Students who have completed this course should be capable of doing the following: –Understand fundamental issues in computer and network security –Understand reasons for policies, settings, and configurations in the practicum. –Improve technical writing and oral presentation skills.

10. Slide 01-10COMP 7370, Auburn University Will it be worthwhile?

11. Slide 01-11COMP 7370, Auburn University Will it be worthwhile?

12. Slide 01-12COMP 7370, Auburn University Will it be worthwhile?

13. Slide 01-13COMP 7370, Auburn University Will it be worthwhile?

14. Slide 01-14COMP 7370, Auburn University Topic Coverage There are no texts for this course. Handouts, book chapters, and papers will be used as supplement course material. The course material will be posted online. Covers (These topics may change) –cryptography, –design principles, –access control, –security policies, –key management, –assurance, –malicious logic, –vulnerability analysis, –network security.

15. Slide 01-15COMP 7370, Auburn University Attendance Class attendance is mandatory. This is a graduate class; therefore, students will have to actively participate in class. It is believed that if you miss many classes (more than 6), there is a strong likelihood that you will not pass the class. Please notify me in advance if you will attend conferences, research meetings, or the like.

16. Slide 01-16COMP 7370, Auburn University Course Syllabus Prerequisite: OS no exams Grading – Mid-term Exam 20% –Final Exam 20% –Homework Assignments15% –Presentation 15% –Project Assignments 30%

17. Slide 01-17COMP 7370, Auburn University Course Syllabus (cont.) Scale – Letter grades will be awarded based on the following scale. This scale may be adjusted upwards if it is necessary based on the final grades. – A [90~100], B [80~90], C [70~80], D [60~70], F [0~60]

18. Slide 01-18COMP 7370, Auburn University Office Hours and Exams Office hours: Monday 9:50-11:50AM

19. Slide 01-19COMP 7370, Auburn University Am I going to read papers to you? NO! Papers provide a framework and complete background, so lectures can be more interactive. –You do the reading –We’ll discuss it Projects will go “beyond”

20. Slide 01-20COMP 7370, Auburn University Am I going to read papers to you? (cont.) NO! Choose the recommended topics. Provide some background on these topics. Suggest some sample research questions. Provide platform assistance. Guide your efforts.

21. Slide 01-21COMP 7370, Auburn University Publish, publish and publish... COMP7970 Storage Systems 14 graduate students 10 research projects; 10 technical papers 4 technical papers were submitted to Int’l conferences 4 technical papers have potential to be submitted 2 great team projects

22. Slide 01-22COMP 7370, Auburn University Recommended Topics Energy-aware security services Storage system security Detection of DoS attacks Authentication Cryptography Location Privacy Vulnerability analysis for networked systems Covert Channels Detection

23. Slide 01-23COMP 7370, Auburn University Research Problem Statement Topic. –I am studying secure services for storage systems Research question or original objective. –so I can create energy-aware security services for storage systems. Who cares? –so the storage system community Why should they care? –will better understand how to provide more flexible, secure and integrated services for storage systems.

24. Slide 01-24COMP 7370, Auburn University Four Panel Slide – Example 1 Project Name –Project Name –Auburn University –Logo Approach –Energy overhead of security services –Make tradeoffs between security and energy efficiency. –Adaptive control of security services in storage systems. Problem Statement –Measure energy consumption of confidentiality services –Challenged by making tradeoff between energy conservation and security. Plans and Progress –Energy overhead model –Prototype. –Adaptive controller.

25. Slide 01-25COMP 7370, Auburn University Questions Please ask at any time!