CS 343: Computer & Information Security

Date	Topic and reading
Week 1
Mon, Feb 02	Security mindset [slides] Reading Bruce Schneier. The Security Mindset. Ed Felton. The Security Mindset and “Harmless Failures”. Tadayoshi Kohno. How to think like a security professional.
Wed, Feb 04	Computer security ethics [slides] Reading ACM. ACM Code of Ethics and Professional Conduct. Dittrich et al.. Building an Active Computer Security Ethics Community. Electronic Frontier Foundation. A “Grey Hat” Guide.
Fri, Feb 06	Target Architecture [slides] No reading
Week 2
Mon, Feb 09	Finish target architecture No reading
Wed, Feb 11	Control flow I [slides] No reading
Fri, Feb 13	Control flow II [slides] Reading Aleph One. Smashing The Stack For Fun And Profit.
Week 3
Mon, Feb 16	Project 1 demo and Integer overflows [slides] Reading blexim. Basic Integer Overflows.
Wed, Feb 18	Format string vulnerabilities [slides] Reading scut/team teso. Exploiting Format String Vulnerabilities.
Fri, Feb 20	Format string vulnerabilities part 2 No reading
Week 4
Mon, Feb 23	Heap control data [slides] Reading MaXX. Vudo - An object superstitiously believed to embody magical powers.
Wed, Feb 25	Control-flow hijacking defenses [slides] No reading
Fri, Feb 27	Code reuse attacks [slides] No reading
Week 5
Mon, Mar 02	Return-to-libc [slides] No reading
Wed, Mar 04	Return-oriented programming [slides] Reading H. Shacham. The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86).
Fri, Mar 06	Return-oriented programming: Gadget construction Reading S. Checkoway. Return-oriented programming worksheet.
Week 6
Mon, Mar 09	Malware [slides] No reading
Wed, Mar 11	Malware Defense [slides] No reading
Fri, Mar 13	Finding vulnerabilities [slides] No reading
Week 7
Mon, Mar 16	Finding vulnerabilities 2 [slides] No reading
Wed, Mar 18	Passwords and Authentication [slides] No reading
Fri, Mar 20	Passwords and Authentication 2 [slides] No reading
Week 8
Mon, Mar 23	No class: spring break No reading
Wed, Mar 25	No class: spring break No reading
Fri, Mar 27	No class: spring break No reading
Week 9
Mon, Mar 30	Access Control [slides] No reading
Wed, Apr 01	Exam review [slides] No reading
Fri, Apr 03	Exam 1 No reading
Week 10
Mon, Apr 06	Web Security [slides] No reading
Wed, Apr 08	Browser Security I [slides] No reading
Fri, Apr 10	Browser Security II [slides] No reading
Week 11
Mon, Apr 13	Message Integrity I [slides] No reading
Wed, Apr 15	Message Integrity II [slides] No reading
Fri, Apr 17	Pseudorandom Numbers and Confidentiality [slides] Reading T. Hühn. Myths about /dev/urandom.
Week 12
Mon, Apr 20	Pseudorandom Numbers and Confidentiality 2 [slides] No reading
Wed, Apr 22	Public Key Cryptography I [slides] No reading
Fri, Apr 24	Public Key Cryptography II [slides] No reading
Week 13
Mon, Apr 27	SSH, SSL, and IPsec [slides] No reading
Wed, Apr 29	CAs and HTTPS Attacks No reading
Fri, May 01	Anonymity and Privacy I No reading
Week 14
Mon, May 04	Anonymity and Privacy II No reading
Wed, May 06	TBA No reading
Fri, May 08	TBA No reading
Final Exam
Fri, May 15	Final exam from 09:00–11:00