| Date | Topic | |
| Tue Aug 26 | Introduction to the course and overview of project topics | |
| Thu Aug 28 | Overview of project topics and access control matrix models | |
| Tue Sep 2 | Access control matrix models | |
| Thu Sep 4 | Role-Based Access Control | |
| Tue Sep 9 | The proposed NIST RBAC standard and constraints | |
| Thu Sep 11 | Trust management: PolicyMaker and KeyNote | |
| Tue Sep 16 | Guest lecture: evolution of access control in practice | David Ferraiolo |
| Thu Sep 18 | X-GTRBAC: An XML-based policy specification framework and architecture for enterprise-wide access control | Rafae |
| Tue Sep 23 | Trust management: SPKI and logic-based semantics for TM languages | |
| Thu Sep 25 | Trust management: SDSI and RT | |
| Tue Sep 30 | Trust management: RT & Summary of Trust Management | |
| Thu Oct 2 | Security models | |
| Tue Oct 7 | Clark-Wilson model and the Chinese Wall Security Policy | |
| Thu Oct 9 | Guest lecture: | Dr. Will Winsborough |
| Tue Oct 14 | October break. No class. | |
| Thu Oct 16 | Document access control | Marina Bykova |
| Tue Oct 21 | Distributed chain discovery in RT0 | Ziad El Bizri |
| Thu Oct 23 | Constraint Languages in RBAC | Klorida Miraj |
| Tue Oct 28 | Admin models and security analysis of RBAC | Mahesh Tripunitara |
| Thu Oct 30 | Guest lecture: Database Access Control | Prof. Chris Clifton |
| Tue Nov 4 | SELinux: security architecture | Brian Denny |
| Thu Nov 6 | SELinux: policy language | Jacques Thomas |
| Tue Nov 11 | Mandatory access controls in secure operating systems | Paul Williams |
| Thu Nov 13 | Application access control | Brian Carrier |
| Tue Nov 18 | XRML and XACML | Yuhui Zhong |
| Thu Nov 20 | Access control of XML documents | Sarah Caruthers |
| Tue Nov 25 | Resource usage analysis | Sundar Jeyaraman |
| Thu Nov 27 | Thanksgiving. | |
| Tue Dec 2 | Rafae, Sarah | |
| Thu Dec 4 | Ziad, Yuhui, Sundar | |
| Tue Dec 9 | Brian Carrier, Marina, Jacques | |
| Thu Dec 11 | Paul, Klorida, Brian Denny |