CS 343: Computer & Information Security

Date	Topic and reading
Week 1
Mon, Aug 31	Security mindset [slides] No reading
Wed, Sep 02	Computer security ethics [slides] No reading
Fri, Sep 04	Control flow [slides] No reading
Week 2
Mon, Sep 07	No class: Labor day No reading
Wed, Sep 09	Control flow II [slides] Reading Aleph One. Smashing The Stack For Fun And Profit.
Fri, Sep 11	Control flow III [slides] No reading
Week 3
Mon, Sep 14	Project 1 Demo No reading
Wed, Sep 16	Integer overflows [slides] Reading blexim. Basic Integer Overflows.
Fri, Sep 18	Format string vulnerabilities [slides] Reading scut/team teso. Exploiting Format String Vulnerabilities.
Week 4
Mon, Sep 21	Format string vulnerabilities part 2 No reading
Wed, Sep 23	Heap control data [slides] Reading MaXX. Vudo - An object superstitiously believed to embody magical powers.
Fri, Sep 25	Control-flow hijacking defenses [slides] No reading
Week 5
Mon, Sep 28	No class: Yom Kippur No reading
Wed, Sep 30	Code reuse attacks [slides] No reading
Fri, Oct 02	Return-to-libc [slides] No reading
Week 6
Mon, Oct 05	Return-oriented programming [slides] Reading H. Shacham. The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86).
Wed, Oct 07	Return-oriented programming: Gadget construction Reading S. Checkoway. Return-oriented programming worksheet.
Fri, Oct 09	Return-oriented programming Reading S. Checkoway. Return-oriented programming worksheet.
Week 7
Mon, Oct 12	Malware [slides] No reading
Wed, Oct 14	Malware Defense [slides] No reading
Fri, Oct 16	Finding vulnerabilities [slides] No reading
Week 8
Mon, Oct 19	Passwords and Authentication [slides] No reading
Wed, Oct 21	Passwords and Authentication 2 [slides] No reading
Fri, Oct 23	Project 2 Demo No reading
Week 9
Mon, Oct 26	Access Control [slides] No reading
Wed, Oct 28	Exam review [slides] No reading
Fri, Oct 30	Exam 1 No reading
Week 10
Mon, Nov 02	Web Security [slides] No reading
Wed, Nov 04	Browser Security I [slides] No reading
Fri, Nov 06	TBA No reading
Week 11
Mon, Nov 09	Browser Security II [slides] No reading
Wed, Nov 11	Message Integrity I [slides] No reading
Fri, Nov 13	Message Integrity II [slides] No reading
Week 12
Mon, Nov 16	Pseudorandom Numbers and Confidentiality [slides] Reading T. Hühn. Myths about /dev/urandom.
Wed, Nov 18	Pseudorandom Numbers and Confidentiality 2 [slides] No reading
Fri, Nov 20	Public Key Cryptography I [slides] No reading
Week 13
Mon, Nov 23	Public Key Cryptography II [slides] No reading
Wed, Nov 25	No class: Thanksgiving No reading
Fri, Nov 27	No class: Thanksgiving No reading
Week 14
Mon, Nov 30	SSH, SSL, and IPsec [slides] No reading
Wed, Dec 02	CAs and HTTPS Attacks [slides] No reading
Fri, Dec 04	Anonymity and Privacy I [slides] No reading
Week 15
Mon, Dec 07	Anonymity and Privacy II [slides] No reading
Wed, Dec 09	No class: Reading period No reading
Fri, Dec 11	No class: Reading period No reading