OBJECTIVE/DESCRIPTION:

This course will provide the student with an (1) overview of the area of security in databases, and (2) provide for enough background so that a term project can be developed. The ultimate goal is to have a conference paper ready to be submitted by early 2002, as well as a taxonomy of recent papers and issues in the area.

The course will consist of a series of discussions on the topics listed below, using the book (also listed below) as a general guideline. Throughout the course recent relevant research papers will also be read/discussed. The discussions in this course should also include Prof. Sylvia Osborn (Dept. of Computing Science, Univ. of Western Ontario, and general chair of the most recent IFIP Working Group 11.3 Conference on Database Security) who has already agreed to do so, and with whom we intend to stabilish a closer relationship for further collaboration.

TOPICS:

• Introduction to Information Security.
• Security Models.
• Security Mechanisms.
• Security Software Design.
• Intrusion Detection Systems.
• Statistical Database Protection.
• New Issues on Database Systems.

TEXTBOOK and REFERENCES:

• S.Castano, M. Fugini, G. Martella and P. Samarati, Database Security, Addison-Wesley/ACM Press, 1994.
• Research papers will also be selected from a variety of journals and conference proceedings.