Short Courses on Multi-level and Network Security from UC Berkeley

U.C. Berkeley Continuing Education in Engineering Announces 2 Short Courses on Computer and Network Security MULTI-LEVEL SECURITY: Information Security Issues for Effective Systems Development (February 28-March 1, 1996) Course Description This intensive course presents a comprehensive approach to Information Technology (IT) security issues for effective systems development. Technology and policy issues for secure operations employing both Computer Security (COMPUSEC) and Communications Security (COMSEC) components of Information Security (INFOSEC) are presented. Contemporary issues addressed include: encryption, key escrow, and key management for authentication, integrity, and confidentiality; digital signature; challenges in developing international criteria; database issues such as polyinstantiation and access control beyond the Orange Book. Discussions will include INFORMIX OnLine/Secure, Trusted Oracle7, and design approaches for computer and database systems. Broader issues will also be presented, such as integrating security with computer, database, and network systems design and development requirements; and evaluating the degree of security available for a given computer, database and/or network system. Extensive practical advice for trusted system integration is provided. PRACTICAL SECURITY IN A NETWORKED ENVIRONMENT (March 4-6, 1996) Course Description This course addresses practical issues and concepts of information security. Understanding cryptographic issues for internetworking is essential. The security services of two commercial software products for a distributed environment are presented--NetWare 4 and Windows NT 3.X. Network security architecture issues are presented. These issues include Internet firewalls that are critical to the protection of information resources in a networked environment. This course includes developments in security standards for open systems, such as the development of security in EDI standards for Message Handling Systems (MHS), and EDI secure Messaging specifications--X.400 and X.435. Security application issues are discussed in medical information systems, Executive Information Systems, international internetworking, and Privacy Enhanced Mail (PEM). A case studies reinforce the lessons learned. Practical advice is emphasized. This course focuses on network security with UNIX and non-UNIX platforms via computer networks. This integration requires a review of UNIX security risk and available security controls. Critical Practical issues include: TCP/IP from non-UNIX platforms; UNIX security architecture; firewalls; X Windows security; integration of UNIX-based systems with other IT (information technology) environments; MVS (Multiple Virtual Storage); DOS (Disk Operating System)/Windows 95; Novell NetWare 4.X; Window s NT 3.X. INSTRUCTOR for both courses: Harold J. Podell, Ph. D., has attained international recognition as a lecturer on computing and communications security. Drs. Abrams and Podell's first book Computer and Network Security: Tutorial (IEEE Computer Society Press) is acknowledged as a definitive text in this field. Their second volume, with Dr. Sushil Jajodia, Information Security: An Integrated Collection of Essays is quickly assuming similar stature. Dr. Podell has been influential in the review of system controls for information technology (IT) applications in distributed environments. His analysis interests also focus on network security standards developed by the U.S. National Computer Security Center, the U.S. National Institute of Standards and Technology, and the International Organization for Standardization. His experience includes DBMS benchmark testing for the U.S. National Flight Data Center; architectural development of an Internal Revenue Service on-line processing system; and DBMS analyses supporting the World Wide Military Command and Control System (WWMCCS). He was previously with the MITRE Corporation and is currently an Assistant Director, Office of Special Investigations, U.S. General Accounting Office. For more information (complete course outlines, hotel information, etc.) send your postal address or fax to: Harvey Stern or Loretta Lindley U.C. Berkeley Extension/Southbay 800 El Camino Real Ste. 150 Menlo Park, CA 94025 Tel: (415) 323-8141 Fax: (415) 323-1438 email: southbay@garnet.berkeley.edu