CS155 Computer and Network Security

Course Syllabus

Spring 2020

 
Lecture 1:
Tue 4/ 7/20
(DB)
Course overview   [pdf, pptx]
Readings:

Part 1: Basics
 
Lecture 2:
Thu 4/ 9/20
(DB)
Control hijacking attacks: exploits   [pdf, pptx]
Readings:
 
Lecture 3:
Tue 4/14/20
(DB)
Control hijacking attacks: defenses   [pdf, pptx]
Readings:
 
Lecture 4:
Thu 4/16/20
(ZD)
Principle of least privilege, access control, and operating systems security   [pdf, key]
Readings:
 
Lecture 5:
Tue 4/21/20
(DB)
Isolation and sandboxing   [pdf, pptx]
Readings:
 
Lecture 6:
Thu 4/23/20
(inv)
Testing for vulnerabilities using fuzzing, static, and dynamic analysis: Fraser Brown   [pdf, key]
Readings:

Part 2: Web Security
 
Lecture 7:
Tue 4/28/20
(ZD)
Basic web security model   [pdf, key]
Readings:
 
Lecture 8:
Thu 4/30/20
(ZD)
Web application security   [pdf, key]
Readings:
 
Lecture 9:
Tue 5/ 5/20
(DB)
Web session management   [pdf, pptx]
Readings:
 
Lecture 10:
Thu 5/ 7/20
(DB)
Overview of cryptography   [pdf, pptx]
Readings:
 
Lecture 11:
Tue 5/12/20
(DB)
HTTPS: goals and pitfalls   [pdf, pptx]
Readings:

Part 3: Network security
 
Lecture 12:
Thu 5/14/20
(ZD)
Internet Protocol Security   [pdf, key]
Readings:
 
Lecture 13:
Tue 5/19/20
(ZD)
Internet Protocol Security Contd. and DDoS   [pdf, key]
Readings:
 
Lecture 14:
Thu 5/21/20
(ZD)
DoS Attacks and Network Defenses   [pdf, key]
Readings:

Part 4: Security of mobile platforms
 
Lecture 15:
Tue 5/26/20
(ZD)
Android and iOS: mobile platform security architecture   [pdf, key]
Readings:
 
Lecture 16:
Thu 5/28/20
(inv)
Topics in Android security: Himanshu Dwivedi and Pavan Walvekar.   [pdf]
Readings:

Part 5: Odds and ends
 
Lecture 17:
Tue 6/ 2/20
(DB)
Processor security: Intel SGX and the Spectre attack   [pdf, pptx]
Readings:
 
Lecture 18:
Thu 6/ 4/20
(ZD)
Privacy, Anonymity, and Censorship   [pdf, key]
Readings:
 
Lecture 19:
Tue 6/ 9/20
(inv)
Final invited lecture: Royal Hensen, Google