CS 343: Computer & Information Security — Spring 2026

Course Description

This course is an introduction to computer security. It will cover a variety of topics with special emphasis on software vulnerabilities, exploitation techniques, and mitigation measures. It is designed as a projects-based course where you will get hands-on experience with the topics covered in the course.

Assessment

Your course grade will be determined by class participation, projects and two exams, equally weighted. There are no other assignments. See the schedule for dates.

• 10% Class participation
• 70% Projects
• 20% Exams

Programming Projects

The programming projects are meant as a way to get hands-on experience with computer security concepts. You will find that there is quite a difference between conceptually understanding how to exploit a given vulnerability and actually producing a working exploit.

The programming projects are designed to be done in groups of 2. (Working alone is allowed, but discouraged.) Each project will have both programming and writing components. Both group members are expected to participate fully in both the programming and writing.

• Project 1: Memory Safety
• Project 2: Return-oriented Programming
• Project 3: Reverse Engineering
• Project 4: Crypto Fun

Course Materials

Required Texts

There are no required textbooks.

Resources

Here are some resources you may find helpful while working on the projects.

• Intel 64 and IA-32 Architecture Software Developer Manuals. These manuals tell you everything you’ll want to know about how modern Intel x86 processors work. In particular, you’re probably going to want Volumes 2A, 2B, and 2C: Instruction Set Reference.
• X86 Opcode and Instruction Reference. This page gives a handy way to look up each x86 instruction by opcode.
• ARM Architecture Reference Manual ARMv7-A and ARMv7-R edition. ARM manual for the processor we’ll be looking at. It requires registering to download (or a quick Google search).
• ARM and Thumb-2 Instruction Set Quick Reference Card

Course Policies

Prerequisites

Students are expected to enter this course with a basic knowledge of systems programming, data structures. Some knowledge of C, C++, assembly, and compilers will be helpful, but the relevant information will be covered in the course or in provided references.

Attendance Policy

Class attendance is not mandatory; however, research indicates that students who attend class are more likely to be successful. You are strongly encouraged to attend every class. Lectures are not recorded. If you are unable to attend class, you should consider asking a classmate to take notes for you.

Missed or Late Work Policy

Projects are due by 23:59 on the day specified on each project page. You have 3 late days that you can use throughout the semester. Each day that a project is late decreases the number of late days you and your partner have left. If you run out of late days, projects turned in late will receive a score of 0. There will be no exceptions to this policy without prior approval from Prof. Checkoway.

Collaboration Policy

You are allowed, and encouraged, to work in groups of size two on all projects. You are free to have different groups for different projects. You are not allowed to work with anyone outside your group. Doing so is academic misconduct.

Academic Integrity Policy

You must adhere to the Oberlin College Academic Integrity Policy. Please familiarize yourself with the Honor Code.

Religious Holiday Observance Policy

Students wishing to be excused from class in order to observe religious holidays must follow the Oberlin College Religious Holiday Observance Policy.