Application of security tot he computing science classroom

ABSTRACT

The author of this paper was a practicing security professional for over ten years in government and industry before accepting a position in academia where he now teaches software engineering and computer security topics in graduate and undergraduate level programs. Lessons learned in the transition are presented along with some insights with respect to the depth and breath that today's computer science student is exposed to with respect to INFOSEC topics. A recommendation for incorporating computer security training into modern day computer science programs is provided

REFERENCES

• 1: Marshall D. Abrams , Sushil G. Jajodia , H. J. Podell, Information Security: An Integrated Collection of Essays, IEEE Computer Society Press, Los Alamitos, CA, 1995
• 2: Anderson, J.P. (1973) Computer Security Technology Planning Study. ESD-TR-73-51, vol 1. Hanscom AFB, Mass
• 3: Bell, D.E. and LaPadula, L.J. (1975) Secure Computer Systems: Unified Exposition and Multics Interpretation. MTR-2997, MITRE Corp.
• 4: Commission of the European Communities. (1991) Information Technology Security Evaluation Criteria (ITSEC), Provisional Harmonized Criteria: version 1.2. Office for Official Publications of the European Communities. Luxembourg.
• 5: Congress, US. (1988). Computer Security Act of 1987, PL 100-235.
• 6: Dorothy Elizabeth Rob Denning, Cryptography and Data Security, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1982
• 7: Dorothy E. Denning, Information warfare and security, Addison-Wesley Longman Ltd., Essex, UK, 1998
• 8: Dimitrov, R. & Gleeson, M (1998). Challenges and New Technologies for Addressing Security in High Performance Distributed Environments. Proceedings of the 21st National Information Systems Security Conference 457-468.
• 9: DOD 5200.28-STD. (1985) DoD Trusted Computer System Evaluation Criteria.
• 10: Morrie Gasser, Building a secure computer system, Van Nostrand Reinhold Co., New York, NY, 1988
• 11: lrvine, C.E., Warren, D.F., and Clark, P.C. (1997) The NPS CIPR Graduate Program in INFOSEC: Six Years of Experience. 20 th National Information Systems Security Conference (Baltimore, MD). 22-30.
• 12: Cynthia E. Irvine , Shiu-Kai Chin , Deborah Frincke, Integrating Security into the Curriculum, Computer, v.31 n.12, p.25-30, December 1998 [doi>10.1109/2.735847]
• 13: Johnson, Deborah G. (1994). Computer Ethics, Second Edition, Prentice-Hall, Engelwood Cliffs, New Jersey.
• 14: Butler W. Lampson, A note on the confinement problem, Communications of the ACM, v.16 n.10, p.613-615, Oct. 1973 [doi>10.1145/362375.362389]
• 15: Lunt T.F., et al. (1988) Secure Distributed Data Views: Security Policy and Interpretation for Database Management System for a Class A1 DBMS. RADC-TR-89-313, vol 1. Rome Labs, Rome N.Y.
• 16: Charles P. Pfleeger, Security in computing, Prentice-Hall, Inc., Upper Saddle River, NJ, 1988
• 17: Charles P. Pfleeger, Security in computing, Prentice-Hall, Inc., Upper Saddle River, NJ, 1996
• 18: Shari Lawrence Pfleeger, Software engineering: theory and practice, Prentice-Hall, Inc., Upper Saddle River, NJ, 1998
• 19: Rita C. Summers, Secure computing: threats and safeguards, McGraw-Hill, Inc., Hightstown, NJ, 1997
• 20: William Stallings, Cryptography and network security (2nd ed.): principles and practice, Prentice-Hall, Inc., Upper Saddle River, NJ, 1998

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education
          Subjects: Computer science education

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS

  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education
          Subjects: Curriculum
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS

General Terms:
Design, Human Factors, Management, Performance, Security, Theory