Principles and practice of building and administering secure systems. Authentication and access control. Operating system security. Program security, database security. Key management. Information flow. Assurance. Vulnerability analysis and intrusion detection.