[Status: Draft; Subject to change]
For the abbreviation of recommend readings, see the Textbook section in the course page.
| Date | Topic | Note | Assignment Release (00:00 EST time) |
Assignment Deadline (23:59 EST time) |
|---|---|---|---|---|
| Thu 01/22 | Syllabus, Policy, and Course overview | [slides]; [SB] Chap 1; [An] Chap 1-2, 4; The Security Mindset by Bruce Schneier |
||
| Tue 01/27 | Cryptography I: Overview; Algorithm analysis & discrete probability recap; | [slides]; [SB] Chap 2.1 & 20.1; [An] Chap 5.1-5.2; [FS] Chap 1-2 |
||
| Thu 01/29 | Cryptography II: Symmetric Encryption: Stream Ciphers & Block Ciphers overview | slides; [SB] Chap 20.4; [An] Chap 5.4; Communication Theory of Secrecy Systems by Shannon |
||
| Tue 02/03 | Cryptography III: Symmetric Encryption: Block Ciphers; DES & AES; Block Cipher modes. | [slides]; [SB] Chap 20.2, 20.3, 20.5; [An] Chap 5.5; [FS] Chap 3-4 |
HW1 & Lab1 release | |
| Thu 02/05 | Cryptography IV: Message Integrity; Authenticated Encryption; Hash Functions | [slides]; [SB] Chap 21.1 - 21.3; [An] Chap 5.6; [FS] Chap 5-6 |
||
| Tue 02/10 | Cryptography V: Key Exchange; Public Key algorithms; Digital signature; Certificate. | [slides]; [SB] Chap 21.4 - 21.5; [An] Chap 5.7; [FS] Chap 11-12; New Directions in Cryptography by Whitfield Diffie and Martin E. Hellman |
||
| Thu 02/12 | Cryptography VI: A peek into the frontiers | [slides]; Menezes' course on Kyber and Dilithium; Shamir's talk |
||
| Tue 02/17 | Authentication I: Password-based Auth | [slides]; [SB] Chap 3; [An] Chap 4.1-4.3 |
HW1 & Lab1 Due | |
| Thu 02/19 | Authentication II: Token & Biometric-based Auth | [slides]; [SB] Chap 3; [An] Chap 17 |
||
| Tue 02/24 | Access Control | [slides]; [SB] Chap 4.1-4.10; [An] Chap 6.2, 9 |
||
| Thu 02/26 | Web Security I: HTTP Basics; Cookies & Sessions; Same-Origin Policy. | [slides]; [Du] Chap 11; Browser Security Handbook by Google |
HW2 & Lab2 Release | |
| Tue 03/03 | Web Security II: Same-Origin Policy Cont'; Cross-Site Request Forgery (CSRF); Cross-Site Scripting (XSS) | [slides]; [Du] Chap 12-13 |
||
| Thu 03/05 | Web Security III: Command Injection; SQL Injection. | [slides]; [Du] Chap 14; [SB] Chap 5.1-5.4 Hacking Google Bard |
||
| Tue 03/10 | Midterm Review | [slides] | ||
| Thu 03/12 | (In Class) Midterm Exam | HW2 & Lab2 Due | ||
| Tue 03/17 | Spring break: No class | |||
| Thu 03/19 | Spring break: No class | |||
| Tue 03/24 | Network Security I: Basic Concepts; Ethernet; IP; ARP. | [slides]; [Du] Chap 19 |
||
| Thu 03/26 | Network Security II: TCP and DNS | [slides]; [Du] Chap 20, 23; Security problems in the TCP/IP protocol suite by Steven Bellovin; A Look Back at "Security Problems in the TCP/IP Protocol Suite by Steven Bellovin; SAD DNS Explained |
HW3 & Lab3 Release | |
| Tue 03/31 | Network Security III: DDoS | [slides]; [SB] Chap 7; IP spoofing for large DDoS |
||
| Thu 04/02 | Network Security IV: Network Defense: IPSec, VPN, TLS, and Firewall | [slides]; TLS illustrated; The TLS chapter of HPBN book; [SB] Chap 8-9; [Du] Chap 21, 22 |
||
| Tue 04/07 | Network Security V: Privacy and Anonymity | [slides]; [ Tor paper ]; [ The AdTech Book ]; The Off-the-Record Communication paper, and an expository blog post; SoK: Secure Messaging |
||
| Thu 04/09 | Software Security I: Linux Process Basics | [slides]; [Du] Chap 1; What Every Programmer Should Know About Memory |
HW3 & Lab3 Due | |
| Tue 04/14 | Software Security II: Assembly basics and Intro to Memory Errors | [slides]; [Du] Chap 3-4; The SoK paper; What Every Programmer Should Know About Memory | HW4 & Lab4 Release | |
| Thu 04/16 | Software Security III: Stack-based Buffer Overflow | [slides]; [Du] Chap 4; The Stack smashing paper; Buffer Overflows: Attacks and Defenses for the Vulnerability of the Decade |
||
| Tue 04/21 | Software Security IV: Return-Oriented Programming (ROP) | [slides]; [Du] Chap 5; ROP paper I |
||
| Thu 04/23 | Software Security V: Return-Oriented Programming Cont' | [slides]; [Du] Chap 5; ROP paper II; Blind ROP |
||
| Tue 04/28 | Micro-architecture Security I: Basics | [slides]; [Du] Chap 17; Tutorials by Intel: I, II |
HW4 & Lab4 Due | |
| Thu 04/30 | Micro-architecture Security II: Meltdown and Spectre. | [slides]; [Du] Chap 17, 18; Meltdown and Spectre paper |
||
| Tue 05/05 | Final Review | |||
| Thu 05/07 | Final Exam | Time: 11:45 AM - 2:45 PM. Location: NSC 222 |