CS 487: Secure Computer Systems

Date	Topic and reading
Week 1
Mon, Aug 28	Security mindset [slides] No reading
Wed, Aug 30	Computer security ethics [slides] No reading
Fri, Sep 01	Control flow [slides] No reading
Week 2
Mon, Sep 04	No class: Labor day No reading
Wed, Sep 06	Control flow II [slides] Reading Aleph One. Smashing The Stack For Fun And Profit.
Fri, Sep 08	Project demo No reading
Week 3
Mon, Sep 11	Integer overflows [slides] Reading blexim. Basic Integer Overflows.
Wed, Sep 13	Format string vulnerabilities [slides] Reading scut/team teso. Exploiting Format String Vulnerabilities.
Fri, Sep 15	Heap control data [slides] Reading MaXX. Vudo - An object superstitiously believed to embody magical powers.
Week 4
Mon, Sep 18	Control-flow hijacking defenses [slides] No reading
Wed, Sep 20	Code reuse attacks [slides] No reading
Fri, Sep 22	Return-oriented programming [slides] Reading H. Shacham. The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86).
Week 5
Mon, Sep 25	Return-oriented programming: Gadget construction Reading S. Checkoway. Return-oriented programming worksheet.
Wed, Sep 27	Malware [slides] No reading
Fri, Sep 29	Project 1 work in class day No reading
Week 6
Mon, Oct 02	Malware Defense [slides] No reading
Wed, Oct 04	Project 1 review No reading
Fri, Oct 06	Finding vulnerabilities [slides] No reading
Week 7
Mon, Oct 09	Passwords and Authentication [slides] No reading
Wed, Oct 11	Passwords and Authentication 2 No reading
Fri, Oct 13	Project 2 demo No reading
Week 8
Mon, Oct 16	Access Control [slides] No reading
Wed, Oct 18	Web Security [slides] No reading
Fri, Oct 20	Projector issues; class canceled No reading
Week 9
Mon, Oct 23	Browser Security [slides] No reading
Wed, Oct 25	Exam review [slides] No reading
Fri, Oct 27	Exam 1 No reading
Week 10
Mon, Oct 30	Message Integrity [slides] No reading
Wed, Nov 01	Exam solutions and Message Integrity 2 No reading
Fri, Nov 03	Pseudorandom Numbers and Confidentiality [slides] Reading T. Hühn. Myths about /dev/urandom.
Week 11
Mon, Nov 06	Pseudorandom Numbers and Confidentiality 2 No reading
Wed, Nov 08	Public Key Cryptography No reading
Fri, Nov 10	Project demo No reading
Week 12
Mon, Nov 13	Project work day No reading
Wed, Nov 15	Public Key Cryptography 2 [slides] No reading
Fri, Nov 17	SSH, SSL, and IPsec [slides] No reading
Week 13
Mon, Nov 20	CAs and HTTPS Attacks [slides] No reading
Wed, Nov 22	CAs and HTTPS Attacks 2 No reading
Fri, Nov 24	No class: Thanksgiving No reading
Week 14
Mon, Nov 27	Cryptocurrencies [slides] No reading
Wed, Nov 29	Cryptocurrencies 2 No reading
Fri, Dec 01	Class canceled/project work day No reading
Week 15
Mon, Dec 04	Anonymity and Privacy [slides] No reading
Wed, Dec 06	Exam review [slides] No reading
Fri, Dec 08	Exam 2 No reading