CS 465 Introduction to Security and Privacy

Schedule

Day

Topics

Reading

Assignments

Introduction

Wed Sep 4

Introduction

Operating System Security

Fri Sep 6

Docker and Linux Command Line

Linux Journey, Text-Fu, User Management, Permissions, Processes

Homework: Linux Practice

Mon Sep 9

Operating systems background

Operating Systems: Three Easy Pieces, 4. Processes, 7. CPU Scheduling, 13. Address spaces

Project: Linux and Access Control

Wed Sep 11

Access control

Operating Systems: Three Easy Pieces, 53. Intro Security, 55. Access Control

Software Security: Vulnerabilities and Malware

Fri Sep 13

Race conditions and threads

Computer Security and the Internet, 6.0 - 6.1

Mon Sep 16

Integer Vulnerabilities

Computer Security and the Internet, 6.2

Wed Sep 18

Stack overflows

Computer Security and the Internet, 6.3

Homework: Vulnerability Practice

Fri Sep 20

Computer Security and the Internet, 6.4, 6.6

Project: Exploit and Patch

Mon Sep 23

Shellcode and privilege escalation

Computer Security and the Internet, 6.7, 6.8

Wed Sep 25

Malware

Computer Security and the Internet, 7 (skim)

Software Security: Rust and Cryptography

Fri Sep 27

Learning Rust

The Rust Programming Language, 1-5

Homework: Rust Practice 1

Mon Sep 30

Learning Rust

Homework: Rust Practice 2

Wed Oct 2

Learning Rust

Homework: Rust Practice 3

Fri Oct 4

Symmetric encryption

Computer Security and the Internet, 2.0 - 2.2

Mon Oct 7

Public key cryptography

Computer Security and the Internet, 2.3 - 2.4

Wed Oct 9

Hashing and message authentication

Computer Security and the Internet, 2.5 - 2.6

Fri Oct 11

Elliptic Curve Cryptography

A (Relatively Easy To Understand) Primer on Elliptic Curve Cryptography

Project: Encrypted Communication

Mon Oct 14

HOLIDAY - ACM CCS

Wed Oct 16

HOLIDAY - ACM CCS

Key Exchange and Authentication

Fri Oct 18

Diffie-Hellman key exchange

Computer Security and the Internet, 4.0 - 4.3

Mon Oct 21

Certificates

Computer Security and the Internet, 8.0 - 8.3, 8.5

Wed Oct 23

Computer Security and the Internet, 9.2

Homework: Certificates and TLS

Fri Oct 25

Password authentication

Computer Security and the Internet, 3.0 - 3.2, 3.6, 3.8

Mon Oct 28

Account recovery, CAPTCHAs, SSO

Computer Security and the Internet, 3.3, 3.7, 4.7

Wed Oct 30

Multi-factor authentication

Computer Security and the Internet, 3.4 - 3.5

Web Security

Fri Nov 1

Web background

Computer Security and the Internet, 9.0 - 9.1, 9.3

Project: Cracking Password vaults

Mon Nov 4

Same-origin policy and CSRF attacks

Computer Security and the Internet, 9.4 - 9.5

Homework: Burp Suite

Wed Nov 6

XSS, SQL injection

Computer Security and the Internet, 9.6 - 9.7

Homework: Web vulnerabilities

Fri Nov 8

Phishing

Computer Security and the Internet, 9.8

Network Security

Mon Nov 11

Networking background

Wed Nov 13

Firewalls

Computer Security and the Internet, 10.0 - 10.2

Fri Nov 15

SSH, VPNs, IPsec

Computer Security and the Internet, 10.3 - 10.5

Project: Web Exploit and Patch

Mon Nov 18

Intrusion detection and scanners

Computer Security and the Internet, 11.0 - 11.3

Wed Nov 20

DoS, address resolution attacks

Computer Security and the Internet, 11.4 - 11.5

Threat Modeling

Fri Nov 22

Threat modeling

Computer Security and the Internet, 1.0 - 1.2, 1.4 - 1.8

Mon Nov 25

HOLIDAY - Thanksgiving

Wed Nov 27

HOLIDAY - Thanksgiving

Fri Nov 29

HOLIDAY - Thanksgiving

Mon Dec 2

Threat modeling practice

Project: Threat modeling

Additional Topics

Wed Dec 4

Academic and Industry Talks: IoT Vulnerabilities, Social Engineering

Fri Dec 6

Academic and Industry Talks: Jailbreaking LLMs, Exploiting Video Decoders, Invisible Vulnerabilities

Mon Dec 9

Academic and Industry Talks: Protective Technology, Reverse Engineering

Wed Dec 11

Academic and Industry Talks: Usable Security and Privacy

Final Project

Wed Dec 13

Project: Final Project