Re: FYI: Re: University degrees on 'IT-security'

Guenther Pernul (guenther@ifs.univie.ac.at)
Thu, 17 Nov 94 13:31:22 +0100

Thank you for your response on my inquiry on IT-security related courses
and university programs. In the case you are interested in the results
please find them below. In addition to the E-mails included I have got 
information, brochures or videos on their programs from London School 
of Economics and Political Science, California State Polytechnic 
University Pomona, Queensland University of Technology, 
Royal Holloway - University of London (Zergo).

Regards, Guenther
----------------------------------------------------------------------------
Dr. Guenther Pernul         	          email: guenther@ifs.univie.ac.at
Department of Information Engineering	  Tel: + (43) 1-432367      office
University of Vienna			  Fax: + (43) 1-430197
Liebigg. 4/3-4				   
A-1010  Vienna, Austria
----------------------------------------------------------------------------	

--------------------------------------cut here-----------------------------

Bradley Broom <broom@bohr.fit.qut.edu.au>

The Queensland University of Technology (QUT) will be offering a
new Master of Information Technology (M.It.) degree from 1995. The degree
can include several units in Computer and Network Security.

If no one has already informed you of the details, ask for more!

Cheers,
Brad.

--------------------------------------

JP Backhouse <J.P.BACKHOUSE@lse.ac.uk>

has sent me a booklet on their programs at the
London School of Economics & Political Science

---------------------------------------

Jennifer Seberry <jennie@osiris.cs.uow.edu.au>

We have security courses in our undergraduate degree and
it is possible to do a whole security strand as part of
our coursework master of computer science.

---------------------------------------

Jim Truitt <jtruitt@dw3f.ess.harris.com>

Hello Dr Guenther Pernul,

Currently I am at University Of Tasmania in Australia doing a Bachelor
Degree In Applied Computing. 

The University here does not have a specialised degree in IT Security, but
they do offer a 1 Semester of 14 weeks lecture on the subject unit called
"Computer Security". 

This 14 weeks of lecture covers on topics such as :

  1.  Threats, Vulnerabilities, Countermeasures
  2.  3 basic principles : Confidentiality, Integrity & Availability
  3.  Unix security
  4.  PC security
  5.  Database security
  6.  Encryption & Crytography
  7.  File Access Control
  8.  Physical, Procedural, Hardware/Software security
  9.  Network security
 10.  Disaster Recovery Plan
 11.  Security Ethics 


There's also an advanced subject unit called "Advanced Computer Security"
for honours year students.

---------------------------------------

Matt Bishop <bishop@cs.ucdavis.edu>


Dear Guenther,
   While we do not have an official degree in "IT Security",
we have a very active computer security group, and people
in it do focus their MS or Ph.D. research in that area.
   Relevant courses are:

ECS 253. Cryptography and Data Security 
Methods of protecting data in computer and communication systems
from unauthorized disclosure and modification.  Introduction to
mathematical principles of security with applications to operating
systems, database systems,and computer networks.

ECS 261. Program Verification

Methods of proving correctness of programs with respect to formal
specifications, with attention to those suited for employing 
automated deduction. Logic background, symbolic execution, techniques
suited to iterative programming, methods from denotational semantics,
termination, dynamic logic and proofs of concurrent programs.

ECS 262. Formal Specification

Formal specification of modules, and its relationship to top-down
programming development and verification.  Abstract data types, 
together with methods for specifying them.  Implementations and proofs
of implementation.  Using specifications to reason about programs.  
Parameterized types.  Constructing good formal specifications.

---------------------------------------

Ed Dawson <dawson@fit.qut.edu.au>

Dear  Guenter

>From my understanding you are seeking information on  degrees in information 
security area. In the  School of Data  Communications  within the Faculty of 
Information Technology at Queensland University of Technology we have several 
subjects in this area.

1. Undergraduate Level: (i) Introduction to Cryptology
                         (ii) Computer Security
2. Postgraduate  Level: (i) Network  Security
                         (ii) Advanced Topics in Cryptology
                         (iii) Operating Systems Security
                         (iv) Risk Analysis

The postgraduate level courses  can be  combined with project work to  give 
students a Master of Information Technology  degree in ssecurity area.

As  well though the Information Security  Research Centre  (ISRC),  which is a
Unversity Centre included in the SSchool of Data Communications, we offer  PhD
and MSSc programs in information ssecurity.  Currently,  we have 20 students 
enrolled in such programs.

---------------------------------------

Petra Wangsadihardja PH914@aol.com

Dear Dr. Pernul,
I'm a graduate student from California State Polytechnic Pomona. I'm majoring
in EDP Audit (MSBA). Our program cover heavily on the privacy and security.
We have an excellent program here at Calpoly, Pomona. If you are interested
on getting more information you can contact one of the professors:
Prof. Fred Gallegos  his address is FGALLEGOS@CSUPOMONA.EDU
Prof. Dan Manson his address is
DMANSON@CSUPOMONA.EDU
I am one of their student my name is Petra Wangsadihardja, my e-mail address
at school is PWANGSADIHAR@CSUPOMONA.EDU
you may mention my name when contacting them. We also have a video clip about
our program you may ask a copy of that video from them. Lastly, if you have
access to MOSAIC you can search on CalPoly pomona and we have a brief
information about our program too. I can give you more information but I
think this would be enough for now. If need more infromation don't hesitate
to contact me or my professors, we are happy to help you to the best we can.

---------------------------------------

Rei Safavi-Naini <rei@osiris.cs.uow.edu.au>

WE have two subjects here related to computer security.
1. An intoduction to Cryptography and computer security
undergraduate level
2. Advanced topics in computer security
graduate level

1 is a structured course with emphasis on cryptographic techniques
2 is mostly seminar oriented and covers a broad range of topics in security

I can send you more details on these. 

I am lso intersted in the results of your survey and appreciate if you
keep me posted on your progress on this.

---------------------------------------

ab606@freenet.carleton.ca (Ted Reinhardt)


The Public Service of Canada sponsors a University program called the
Institute.  It is offered jointly by several Universities.  They offer a
course
on IT Sec at the undergrad level.

---------------------------------------

Fred Gallegos fgallegos@csupomona.edu

Dr. Pernul

I will be sending you three items which will help you

An MSBA Graduate Project which rexamined our MSBA(EDP Audit) 
   curriculum at Cal Poly
A Video tape about the MSBA Program

A NIST published study about Computer Security course in the US
(Noted I will furnished extract.. you can order info direct
or telenet into NIST)
I have a graduate of our program currently in Europe working
for Enrst & Young in Paris, France..... 
you might invite her to talk about the program
her name is Isabelle Prieve-Theisen

Her graduate research project was a comparison of BIG SIX 
computer audit tools and techniques

hope that helps...

you should also contact

Dr. Ron Weber in Australia

Dr. Harold Highland in NY

Dr. A. Faye Borthick of Georgia State Univ

Dr. Allen Friedberg from Florida Atlantic Univ.

Dr. Dan Kneer of Arizona State University


---------------------------------------

Deborah Frincke, frincke@cs.uidaho.edu

Dr. Pernul,
We offer two computer security courses at the University of
Idaho.  One is a course on Computer Security Concepts.
This course focuses on the mathematics/models behind security
techniques.  The second, Contemporary Network Security, emphasizes
implementation issues and modern security-relevant topics.
I'd be happy to send you more details if you are interested.

You should definitely contact someone at University of California,
Davis to discuss their program. They have active research groups
in network security, formal verification, viruses, etc.  I'd
suggest either Professor Matt Bishop (bishop@cs.ucdavis.edu),
Professor Karl Levitt (levitt@cs.ucdavis.edu), or Todd Heberlein
(heberlei@cs.ucdavis.edu).

I imagine you already plan to obtain information from Gene Spafford
at Purdue (spaf@cs.purdue.edu).

I'd be intererested in seeing your results.

---------------------------------------

jcd@cupido.inesc.pt (Jose Delgado)

As far as I'm aware, there is no degree in Portugal on that specific
topic. This is a theme now being picked up in some courses in the MSc at
my university, but merely as an advanced topic. Of course, students are
free to use this theme for their theses.

I'll try to find out more, mainly about criptography, a much older
topic, and I'll get back to you.

Try to contact Prof. Carlos Belo (d1704@alfa.ist.utl.pt). He teaches a
course on security in communication networks at the MSc level. I expect
that he knows the scenario at IST security wise much better than I do.

---------------------------------------

k0m@mrwa.wa.gov.au (Kevin McCaw)

The Curtin University of Technology;
School of Information Systems, Department of Business Studies; Bently,
Western Australia (formerly the Western Australian Institute of Technology)

has Post Graduate and Masters in Computer Security. Contact Heinz Dreher,
Hyperware Research Laboritory, Curtin University of Technology.

(I'll try to dig up their e-mail address for you when I get a chance).

internet address of "Heinz Dreher@IS Staff@CURTIN@ba1.curtin.edu.au."
	which is hard to send across the internet so you can use the alias
	dreher@ba1.curtin.edu.au. 
	(or Heinz=Dreher%IS=Staff%CURTIN@ba1.curtin.edu.au. which gets the
	spaces and extra "@"s over the internet).

	Further to the previous message, Curtin's head lecturer in security
	is Helen James and her internet address is james@ba1.curtin.edu.au.
	(or the full address Helen=James%IS=Staff%CURTIN@ba1.curtin.edu.au.).


---------------------------------------

Manuel Medina medina@ac.upc.es

I personally teach just a course on IT-security for under- and post-graduated
students.
I will forward you its content in a following message.
Concerning other experiences in Spain, I know a couple of persons in Madrid
that could help you:
Justo Carracedo: carracedo@diatel.upm.es
He is leading the COST-225 project, and you can also contact all its
members through the distribution list: cost-225@diatel.upm.es

In Portugal I do not know any special course, bu you may ask:
Pedro Viga: pmv@tina.inesc.pt
Pedro Sousa: pms@nicotina.insec.es

---------------------------------------

spaf@cs.purdue.edu (Gene Spafford)

IFIP WG 11.8 is devoted to computer security education.  I believe
they already have an index of various programs around the world
offering computer security-related degrees, although it may not be
complete.

Harold Highland is the chair of 11.8.  His e-mail address is
highland@dockmaster.ncsc.mil 

---------------------------------------

viiveke@isy.liu.se (Viiveke)

Here at the University of Linköping in Sweden you can only get 5 points in
all (40 points = one year) in Basic computer security and Cryptology within
the 4.5 years M. Sc. in Engineering programme and 3 years B Sc in
Engineering programme.
In Stockholm there is a full programme, but I hope they answer for themselves.

Viiveke Fak
Senior lecturer at the Dept of El Eng at Linköping University

---------------------------------------