CSCI E-170 Reading

Lecture 01: Introduction

required reading:

RFCs

• Security Architecture for the Internet Protocol - Kent at al - RFC 4301 - Dec 2005 - sections 1-3
• Security Mechanisms for the Internet - Bellovin et all - RFC 3631 - Dec 2003

Other documents

• Kerckhoffs' principle - Wikipedia
• Secrecy, Security, and Obscurity - Schneier (2002)
• A Look Back at "Security Problems in the TCP/IP Protocol Suite" Bellovin (2004)
• Why Information Security Is Hard -- An Economic Perspective - Anderson (2001)
• The Eight Rules of Security - Epp - 2003
• Statement of Principle - Sterling
• The Six Dumbest Ideas in Computer Security - Ranum
• The New Face of Cybercrime - Fortify - 2007
• Google Effects on Memory: Cognitive Consequences of Having Information at Our Fingertips - Sparrow et al (2011)

optional reading:

Documents that may be of interest

• Virus Highlights Need for Improved Internet Management - GAO - 1989
• Internet Security Glossary, Version 2 - Shirey, RFC 4949, Aug 2007
• Current Operational Security Practices in Internet Service Provider Environments - Kaeo, RFC 4778, Jan 2007
• Cisco Annual Security Report
• European International Academic Networking A 20 Year Perspective, Kirstein, 2004

Books that may be of interest

• Security and Usability: Designing Secure Systems that People Can Use - Cranor & Garkfinkel - O'Reilly - 2005 - ISBN 0-596-00827-9