CS155 Computer and Network Security

Course Syllabus

Spring 2021

 
Lecture 1:
Tue 3/30/21
(DB)
Course overview   [pdf, pptx]
Readings:

Part 1: Basics
 
Lecture 2:
Thu 4/ 1/21
(DB)
Control hijacking attacks: exploits   [pdf, pptx]
Readings:
 
Lecture 3:
Tue 4/ 6/21
(DB)
Control hijacking attacks: defenses   [pdf, pptx]
Readings:
 
Lecture 4:
Thu 4/ 8/21
(ZD)
Principle of least privilege, access control, and operating systems security   [pdf, key]
Readings:
 
Lecture 5:
Tue 4/13/21
(DB)
Isolation and sandboxing   [pdf, pptx]
Readings:
 
Lecture 6:
Thu 4/15/21
(inv)
Testing for vulnerabilities using fuzzing, static, and dynamic analysis: Brandon Azad   [pdf]
Readings:

Part 2: Web Security
 
Lecture 7:
Tue 4/20/21
(ZD)
Basic web security model   [pdf, key]
Readings:
 
Lecture 8:
Thu 4/22/21
(ZD)
Web application security   [pdf, key]
Readings:
 
Lecture 9:
Tue 4/27/21
(DB)
Brief overview of cryptography   [pdf, pptx]
Readings:
  • The BREACH attack: encryption and compression don't mix, by Gluck, Harris, and Prado
 
Lecture 10:
Thu 4/29/21
(DB)
Web session management   [pdf, pptx]
Readings:
 
Lecture 11:
Tue 5/ 4/21
(DB)
HTTPS: goals and pitfalls   [pdf, pptx]
Readings:

Part 3: Network security
 
Lecture 12:
Thu 5/ 6/21
(ZD)
Internet Protocol Security   [pdf, key]
Readings:
 
Lecture 13:
Tue 5/11/21
(ZD)
Internet Protocol Security Contd. and DDoS   [pdf, key]
Readings:
 
Lecture 14:
Thu 5/13/21
(ZD)
DoS Attacks and Network Defenses   [pdf, key]
Readings:

Part 4: Security of mobile platforms
 
Lecture 15:
Tue 5/18/21
(ZD)
Android and iOS: mobile platform security architecture   [pdf, key]
Readings:
 
Lecture 16:
Thu 5/20/21
(inv)
Topics in Android security: Ashwini Oruganti (Google)   [pdf]
Readings:

Part 5: Odds and ends
 
Lecture 17:
Tue 5/25/21
(DB)
Processor and microarchitecture security: Intel SGX and the Spectre attack   [pdf, pptx]
Readings:
 
Lecture 18:
Thu 5/27/21
(ZD)
Privacy, Anonymity, and Censorship   [pdf, key]
Readings:
 
Lecture 19:
Tue 6/ 1/21
(ZD,DB)
Recent Breaches + Security AMA with Dan and Zakir
 
Lecture 20:
Thu 6/ 3/21
(inv)
Final invited lecture: Diana Smetters (Google)   [pdf]