CS 343: Computer & Information Security

Date	Topic and reading
Week 1
Mon, Feb 02	Security mindset [slides] Reading Bruce Schneier. The Security Mindset. Ed Felton. The Security Mindset and “Harmless Failures”. Tadayoshi Kohno. How to think like a security professional.
Wed, Feb 04	Computer security ethics Reading ACM. ACM Code of Ethics and Professional Conduct. Dittrich et al.. Building an Active Computer Security Ethics Community.
Fri, Feb 06	Control flow No reading
Week 2
Mon, Feb 09	Control flow II Reading Aleph One. Smashing The Stack For Fun And Profit.
Wed, Feb 11	Control flow III No reading
Fri, Feb 13	Project 1 Demo No reading
Week 3
Mon, Feb 16	Integer overflows Reading blexim. Basic Integer Overflows.
Wed, Feb 18	Format string vulnerabilities Reading scut/team teso. Exploiting Format String Vulnerabilities.
Fri, Feb 20	Format string vulnerabilities part 2 No reading
Week 4
Mon, Feb 23	Heap control data Reading MaXX. Vudo - An object superstitiously believed to embody magical powers.
Wed, Feb 25	Control-flow hijacking defenses No reading
Fri, Feb 27	Code reuse attacks No reading
Week 5
Mon, Mar 02	Return-to-libc No reading
Wed, Mar 04	Return-oriented programming Reading H. Shacham. The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86).
Fri, Mar 06	Return-oriented programming: Gadget construction Reading S. Checkoway. Return-oriented programming worksheet.
Week 6
Mon, Mar 09	Malware No reading
Wed, Mar 11	Malware Defense No reading
Fri, Mar 13	Finding vulnerabilities No reading
Week 7
Mon, Mar 16	Passwords and Authentication No reading
Wed, Mar 18	Passwords and Authentication 2 No reading
Fri, Mar 20	Project 2 Demo No reading
Week 8
Mon, Mar 23	No class: spring break No reading
Wed, Mar 25	No class: spring break No reading
Fri, Mar 27	No class: spring break No reading
Week 9
Mon, Mar 30	Access Control No reading
Wed, Apr 01	Exam review No reading
Fri, Apr 03	Exam 1 No reading
Week 10
Mon, Apr 06	Web Security No reading
Wed, Apr 08	Browser Security I No reading
Fri, Apr 10	Browser Security II No reading
Week 11
Mon, Apr 13	Message Integrity I No reading
Wed, Apr 15	Message Integrity II No reading
Fri, Apr 17	Pseudorandom Numbers and Confidentiality Reading T. Hühn. Myths about /dev/urandom.
Week 12
Mon, Apr 20	Pseudorandom Numbers and Confidentiality 2 No reading
Wed, Apr 22	Public Key Cryptography I No reading
Fri, Apr 24	Public Key Cryptography II No reading
Week 13
Mon, Apr 27	SSH, SSL, and IPsec No reading
Wed, Apr 29	CAs and HTTPS Attacks No reading
Fri, May 01	Anonymity and Privacy I No reading
Week 14
Mon, May 04	Anonymity and Privacy II No reading
Wed, May 06	TBA No reading
Fri, May 08	TBA No reading