• Section 5.3 of Pfleeger & Pfleeger's book: Only Section on "Models Proving Theoretical Limitations of Security Systems"
• Sections 5.4 and 5.5 of Pfleeger & Pfleeger's book; Only Orange Book and Common Criteria need to be studied for the Evaluation Criteria.
• Sections 3.1, 3.2 and 3.3 of Pfleeger & Pfleeger's book
• Chapter 19 of Matt Bishop's Book (Intro to Computer Security): A copy is available in the Library Reserves.
• Class Notes on Buffer Overflow and Secure Programming (topics covered through and including Nov. 8, 2006).

Questions? Please send mail to krishna@umbc.edu