[Status: Draft; Subject to change]
For the abbreviation of recommend readings, see the Textbook section in the course page.
| Date | Topic | Note | Assignment Release (00:00 EST time) |
Assignment Deadline (23:59 EST time) |
|---|---|---|---|---|
| Tue 08/26 | Syllabus, Policy, and Course overview | [slides]; [SB] Chap 1; [An] Chap 1-2, 4; The Security Mindset by Bruce Schneier |
||
| Thu 08/28 | Cryptography I: Overview; Algorithm analysis & discrete probability recap; | [slides]; [SB] Chap 2.1 & 20.1; [An] Chap 5.1-5.2; [FS] Chap 1-2 |
||
| Tue 09/02 | Cryptography II: Symmetric Encryption: Stream Ciphers & Block Ciphers overview | slides; [SB] Chap 20.4; [An] Chap 5.4; Communication Theory of Secrecy Systems by Shannon |
||
| Thu 09/04 | Cryptography III: Symmetric Encryption: Block Ciphers; DES & AES; Block Cipher modes. | [slides]; [SB] Chap 20.2, 20.3, 20.5; [An] Chap 5.5; [FS] Chap 3-4 |
HW1 & Lab1 release | |
| Tue 09/09 | Cryptography IV: Message Integrity; Authenticated Encryption; Hash Functions | [slides]; [SB] Chap 21.1 - 21.3; [An] Chap 5.6; [FS] Chap 5-6 |
||
| Thu 09/11 | Cryptography V: Key Exchange; Public Key algorithms; Digital signature; Certificate. | [slides]; [SB] Chap 21.4 - 21.5; [An] Chap 5.7; [FS] Chap 11-12; New Directions in Cryptography by Whitfield Diffie and Martin E. Hellman |
||
| Tue 09/16 | Authentication I: Password-based Auth | [slides]; [SB] Chap 3; [An] Chap 4.1-4.3 |
||
| Thu 09/18 | Authentication II: Token & Biometric-based Auth | [slides]; [SB] Chap 3; [An] Chap 17 |
HW1 & Lab1 Due (02/19) | |
| Tue 09/23 | Access Control I | [slides]; [SB] Chap 4.1-4.4; [An] Chap 6.2 |
||
| Thu 09/25 | Access Control II | [slides]; [SB] Chap 4.5-4.10; [An] Chap 9 |
HW2 & Lab2 Release | |
| Tue 09/30 | Web Security I: HTTP Basics; Cookies & Sessions; Same-Origin Policy. | [slides]; [Du] Chap 11; Browser Security Handbook by Google |
||
| Thu 10/02 | Web Security II: Same-Origin Policy Cont'; Cross-Site Request Forgery (CSRF); Cross-Site Scripting (XSS) | [slides]; [Du] Chap 12-13 |
||
| Tue 10/07 | Web Security III: Command Injection; SQL Injection. | [slides]; [Du] Chap 14; [SB] Chap 5.1-5.4 Hacking Google Bard |
||
| Thu 10/09 | Midterm Review | [slides] | HW2 & Lab2 Due | |
| Tue 10/14 | Fall break: No class Exam | |||
| Thu 10/16 | (In Class) Midterm | |||
| Tue 10/21 | Network Security I: Basic Concepts; Ethernet; IP; ARP. | [slides]; [Du] Chap 19 |
||
| Thu 10/23 | Network Security II: TCP and DNS | [slides]; [Du] Chap 20, 23; Security problems in the TCP/IP protocol suite by Steven Bellovin; A Look Back at "Security Problems in the TCP/IP Protocol Suite by Steven Bellovin; SAD DNS Explained |
HW3 & Lab3 Release | |
| Tue 10/28 | Network Security III: DDoS | [slides]; [SB] Chap 7; IP spoofing for large DDoS |
||
| Thu 10/30 | Network Security IV: Network Defense: IPSec, VPN, TLS, and Firewall | [slides]; TLS illustrated; The TLS chapter of HPBN book; [SB] Chap 8-9; [Du] Chap 21, 22 |
||
| Tue 11/04 | Network Security V: Privacy and Anonymity | [slides]; [ Tor paper ]; [ The AdTech Book ]; The Off-the-Record Communication paper, and an expository blog post; SoK: Secure Messaging |
||
| Thu 11/06 | Software Security I: Linux Process Basics | [slides]; [Du] Chap 1; What Every Programmer Should Know About Memory |
HW3 & Lab3 Due | |
| Tue 11/11 | Software Security II: Assembly basics and Intro to Memory Errors | [slides]; [Du] Chap 3-4; The SoK paper; What Every Programmer Should Know About Memory | HW4 & Lab4 Release | |
| Thu 11/13 | Software Security III: Stack-based Buffer Overflow | [slides]; [Du] Chap 4; The Stack smashing paper; Buffer Overflows: Attacks and Defenses for the Vulnerability of the Decade |
||
| Tue 11/18 | Software Security IV: Return-Oriented Programming (ROP) | [slides]; [Du] Chap 5; ROP paper I |
||
| Thu 11/20 | Software Security V: Return-Oriented Programming Cont' | [slides]; [Du] Chap 5; ROP paper II; Blind ROP |
||
| Tue 11/25 | Micro-architecture Security I: Basics | [slides]; [Du] Chap 17; Tutorials by Intel: I, II |
HW4 & Lab4 Due | |
| Thu 11/27 | Thanksgiving. No class | |||
| Tue 12/02 | Micro-architecture Security II: Meltdown and Spectre. | [slides]; [Du] Chap 17, 18; Meltdown and Spectre paper |
||
| Tue 12/04 | Final Review | |||
| Fri 12/12 | Final Exam (for both section B & C) | Time: 8:00-11:00 AM. Location: NSC 225 |