Course Syllabus

Spring 2023


Lecture 1: Mon 4/ 3/23 (DB)	Course overview [pdf, pptx] Readings: Reflections on Trusting Trust, Ken Thompson What is really going On inside your node_modules folder?
Part 1: System Security

Lecture 2: Wed 4/ 5/23 (DB)	Control hijacking attacks: exploits [pdf, pptx] Readings: Hacking blind, A. Bittau et al. Basic Integer Overflows, blexim Use after free exploit example, K. Winterborn Bypassing Browser Memory Protections, A. Sotirov, M. Dowd

Lecture 3: Mon 4/10/23 (DB)	Control hijacking attacks: defenses [pdf, pptx] Readings: Return oriented programming, H. Shacham et al. Control flow integrity, M. Abadi et al. ARM Memory Tagging Extension and How It Improves C/C++ Memory Safety, K. Serebryany

Lecture 4: Wed 4/12/23 (ZD)	Principle of least privilege, access control, and operating systems security [pdf, key] Readings: SetUID Demystified, Chen, Dean, and Wagner, 2002. Operating Systems Security, T. Jaeger, 2008. Chapter 4, Security in Ordinary Operating Systems.

Lecture 5: Mon 4/17/23 (DB)	Isolation and sandboxing [pdf, pptx] Readings: Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools, T. Garfinkel Efficient Software-Based Fault Isolation, Robert Wahbe, et al.

Lecture 6: Wed 4/19/23 (inv)	Testing for Vulnerabilities: guest speaker (Ned Williamson, Google) [pdf] Readings: How hackers look for bugs, by Dave Aitel An example: Exploiting Broadcom’s Wi-Fi Stack, by Gal Beniamini, Google project zero. Real world fuzzing, by Charlie Miller Effective Bug Discovery, vf. Ashcraft and Engler: Using Programmer-Written Compiler Extensions to Catch Security Holes. pdf, Sections 1-2. Bau, Wang, Bursztein, Mutchler and Mitchell: Vulnerability Factors in New Web Applications. pdf
Part 2: Web Security

Lecture 7: Mon 4/24/23 (ZD)	Web Security Model [pdf, key] Readings: Securing Browser Frame Communication. Adam Barth, Collin Jackson, and John C. Mitchell Analyzing and Defending Against Web-based Malware. J. Chang et al. Exposing private information by timing web applications. A. Bortz, D. Boneh, and P. Nandy Web workers Content Security Policies Sandboxed iFrames cors

Lecture 8: Wed 4/26/23 (ZD)	Web Attacks [pdf, key] Readings: Cross site scripting explained, Amit Klein SQL Injection attacks, Chris Anley Robust Defenses for Cross-Site Request Forgery. Adam Barth, Collin Jackson, and John C. Mitchell

Lecture 9: Mon 5/ 1/23 (ZD)	Web Defenses [pdf, key] Readings: Secure Session Management With Cookies for Web Applications. Chris Palmer Origin Cookies: Session Integrity for Web Applications. by Bortz et al.

Lecture 10: Wed 5/ 3/23 (DB)	Brief overview of cryptography [pdf, pptx] Readings: The BREACH attack: encryption and compression don't mix, by Gluck, Harris, and Prado

Lecture 11: Mon 5/ 8/23 (DB)	HTTPS: goals and pitfalls [pdf, pptx] Readings: ForceHTTPS: protecting high-security web sites from network attacks, by A. Barth and C. Jackson The case for short-lived certificates. by Topalovic et al.

Lecture 12: Wed 5/10/23 (DB)	Processor and microarchitecture security: Intel SGX and the Spectre attack [pdf, pptx] Readings: Shielding Applications from an Untrusted Cloud with Haven Spectre Attacks: Exploiting Speculative Execution Prime+Abort: A Timer-Free High-Precision L3 Cache Attack using Intel TSX
Part 3: Mobile Security

Lecture 13: Mon 5/15/23 (DB)	Android and iOS: mobile platform security architecture [pdf, key] Readings: TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones, Enck et al. iOS Security, iOS 10. How to fake a fingerprint and break into a phone.

Lecture 14: Wed 5/17/23 (inv)	Topics in Android security: guest speaker (Chris Steipp, Meta) [pdf] Readings: The Android Platform Security Model, 2019. A Large-Scale Study of Mobile Web App Security P. Mutchler, A. Doupe, J. Mitchell, C. Kruegel, and G. Vigna.
Part 4: Network Security and Privacy

Lecture 15: Mon 5/22/23 (ZD)	Internet Protocols [pdf, key] Readings: A look back at Security Problems in the TCP/IP Protocol Suite, S. Bellovin, ACSAC 2004. BGP Security in Partial Deployment, Lychev, Goldberg, Schapira, 2013. DNS cache poisoning, Steve Friedl

Lecture 16: Wed 5/24/23 (ZD)	Internet Security [pdf, key] Readings: A Security Evaluation of DNSSEC with NSEC3, J. Bau and J.C. Mitchell Distributed Firewalls, S. Bellovin Bro: A System for Detecting Network Intruders in Real-Time, V. Paxon

Holiday: Mon 5/29/23	Memorial Day — No Lecture

Lecture 17: Wed 5/31/23 (ZD)	DoS Attacks and Network Defenses [pdf, key] Readings: DDoS amplification attack statistics, 2017 The real cause of large DDoS - IP Spoofing, Marek Majkowski, 2018. Practical network support for IP Traceback, S. Savage, et al. A DoS-Limiting Network Architecture, Yang, Wetherall, and Anderson

Lecture 18: Mon 6/ 5/23 (ZD)	Privacy, Anonymity, and Censorship [pdf, key] Readings: Tor: the second-generation onion router

Lecture 19: Wed 6/ 7/23 (inv)	Final invited lecture: Niels Provos, Head of Security at Lacework

CS155 Computer and Network Security

Course Syllabus

Spring 2023