Course Syllabus

Spring 2021


Lecture 1: Mon 3/28/22 (DB)	Course overview [pdf, pptx] Readings: Reflections on Trusting Trust, Ken Thompson What is really going On inside your node_modules folder?
Part 1: Basics

Lecture 2: Wed 3/30/22 (DB)	Control hijacking attacks: exploits [pdf, pptx] Readings: Hacking blind, A. Bittau et al. Basic Integer Overflows, blexim Use after free exploit example, K. Winterborn Bypassing Browser Memory Protections, A. Sotirov, M. Dowd

Lecture 3: Mon 4/ 4/22 (DB)	Control hijacking attacks: defenses [pdf, pptx] Readings: Return oriented programming, H. Shacham et al. Control flow integrity, M. Abadi et al. ARM Memory Tagging Extension and How It Improves C/C++ Memory Safety, K. Serebryany

Lecture 4: Wed 4/ 6/22 (ZD-Remote)	Principle of least privilege, access control, and operating systems security [pdf, key] Readings: SetUID Demystified, Chen, Dean, and Wagner, 2002. Operating Systems Security, T. Jaeger, 2008. Chapter 4, Security in Ordinary Operating Systems.

Lecture 5: Mon 4/11/22 (DB)	Isolation and sandboxing [pdf, pptx] Readings: Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools, T. Garfinkel Efficient Software-Based Fault Isolation, Robert Wahbe, et al.

Lecture 6: Wed 4/13/22 (inv)	Testing for vulnerabilities using fuzzing, static, and dynamic analysis: Brandon Azad [pdf] Readings: How hackers look for bugs, by Dave Aitel An example: Exploiting Broadcom’s Wi-Fi Stack, by Gal Beniamini, Google project zero. Real world fuzzing, by Charlie Miller Effective Bug Discovery, vf. Ashcraft and Engler: Using Programmer-Written Compiler Extensions to Catch Security Holes. pdf, Sections 1-2. Bau, Wang, Bursztein, Mutchler and Mitchell: Vulnerability Factors in New Web Applications. pdf
Part 2: Web Security

Lecture 7: Mon 4/18/22 (ZD)	Web Security Model [pdf, key] Readings: Securing Browser Frame Communication. Adam Barth, Collin Jackson, and John C. Mitchell Analyzing and Defending Against Web-based Malware. J. Chang et al. Exposing private information by timing web applications. A. Bortz, D. Boneh, and P. Nandy Web workers Content Security Policies Sandboxed iFrames cors

Lecture 8: Wed 4/20/22 (ZD)	Web Attacks [pdf, key] Readings: Cross site scripting explained, Amit Klein SQL Injection attacks, Chris Anley Robust Defenses for Cross-Site Request Forgery. Adam Barth, Collin Jackson, and John C. Mitchell

Lecture 9: Mon 4/25/22 (ZD)	Web Attacks and Defenses [pdf, key] Readings: Secure Session Management With Cookies for Web Applications. Chris Palmer Origin Cookies: Session Integrity for Web Applications. by Bortz et al.

Lecture 10: Wed 4/27/22 (DB)	Brief overview of cryptography [pdf, pptx] Readings: The BREACH attack: encryption and compression don't mix, by Gluck, Harris, and Prado

Lecture 11: Mon 5/ 2/22 (DB)	HTTPS: goals and pitfalls [pdf, pptx] Readings: ForceHTTPS: protecting high-security web sites from network attacks, by A. Barth and C. Jackson The case for short-lived certificates. by Topalovic et al.
Part 3: Hardware Security

Lecture 12: Wed 5/ 4/22 (DB)	Processor and microarchitecture security: Intel SGX and the Spectre attack [pdf, pptx] Readings: Shielding Applications from an Untrusted Cloud with Haven Spectre Attacks: Exploiting Speculative Execution Prime+Abort: A Timer-Free High-Precision L3 Cache Attack using Intel TSX
Part 3: Network Security and Privacy

Lecture 13: Mon 5/ 9/22 (ZD)	Internet Protocol Security [pdf, key] Readings: A look back at Security Problems in the TCP/IP Protocol Suite, S. Bellovin, ACSAC 2004. BGP Security in Partial Deployment, Lychev, Goldberg, Schapira, 2013. DNS cache poisoning, Steve Friedl

Lecture 14: Wed 5/11/22 (ZD)	Internet Protocol Security Contd. and DDoS [pdf, key] Readings: A Security Evaluation of DNSSEC with NSEC3, J. Bau and J.C. Mitchell Distributed Firewalls, S. Bellovin Bro: A System for Detecting Network Intruders in Real-Time, V. Paxon

Lecture 15: Mon 5/16/22 (ZD)	DoS Attacks and Network Defenses [pdf, key] Readings: DDoS amplification attack statistics, 2017 The real cause of large DDoS - IP Spoofing, Marek Majkowski, 2018. Practical network support for IP Traceback, S. Savage, et al. A DoS-Limiting Network Architecture, Yang, Wetherall, and Anderson

Lecture 16: Wed 5/18/22 (ZD)	Privacy, Anonymity, and Censorship [pdf, key] Readings: Tor: the second-generation onion router
Part 4: Security of mobile platforms

Lecture 17: Mon 5/23/22 (ZD)	Android and iOS: mobile platform security architecture [pdf, key] Readings: TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones, Enck et al. iOS Security, iOS 10. How to fake a fingerprint and break into a phone.

Lecture 18: Wed 5/25/22 (inv)	Topics in Android security: Chris Steipp (Meta) [pdf] Readings: The Android Platform Security Model, 2019. A Large-Scale Study of Mobile Web App Security P. Mutchler, A. Doupe, J. Mitchell, C. Kruegel, and G. Vigna.

Holiday: Mon 5/30/22	Memorial Day — No Lecture

Lecture 19: Wed 6/ 1/22 (inv)	Final invited lecture: Lea Kissner (Head of Privacy Engineering at Twitter)

CS155 Computer and Network Security

Course Syllabus

Spring 2021