This course examines the security and privacy issues associated with information systems. These are cost/risk tradeoffs to be made. Discussed topics include technical , physical and administrative methods of providing security , access control, identification, and authentication. Encryption is examined, including Data Encryption Standards (DES) and public key crypto-systems. Management consideration such as key protection and distribution, orange book requirements, and CSE data security standards are covered. Privacy issue is covered, as is current cryptographic research. The topics to be covered include ; Authentication, Access Control, Encryption, Intrusion Detection, Entropy and Uncertainty, Key Management , Privacy issues, The State -of-the-Art and Research Topics on Information Privacy and Security. Prerequisite: COMP 280 or Instructor Approval. (F;S;SS)