CS 465 Introduction to Security and Privacy

Schedule

Day

Topics

Reading

Assignments

Introduction

Thu Sep 4

Linux Journey, Text-Fu, User Management, Permissions, Processes

Homework: Linux Practice

Tue Sep 9

Operating Systems: Three Easy Pieces, 53. Intro Security, 55. Access Control, (Optional background if needed: 4. Processes, 7. CPU Scheduling, 13. Address spaces)

Project: Linux and Access Control

Thu Sep 11

Threat modeling

Computer Security and the Internet, 1.0 - 1.2, 1.4 - 1.8

Project: Threat modeling

Software Security: Vulnerabilities and Malware

Tue Sep 16

Race conditions and threads

Computer Security and the Internet, 6.0 - 6.1

Ethics: Ethics and Discipleship: Ethical Hacking

Thu Sep 18

Homework: Vulnerability Practice

Tue Sep 23

Computer Security and the Internet, 6.4, 6.6

Thu Sep 25

Computer Security and the Internet, 6.7, 6.8

Tue Sep 30

Disciple Scholar lecture, Jared Spataro, Microsoft, 1170 TMCB

Thu Oct 2

Malware

Computer Security and the Internet, 7 (skim)

Project: Exploit and Patch

Software Security: Rust and Cryptography

Tue Oct 7

Learning Rust Abbreviated

The Rust Programming Language, 1-5

Homework: Rust Practice 1

Thu Oct 9

Questions from Rust Practice 1
Symmetric encryption
Public key cryptography

Computer Security and the Internet, 2.0 - 2.2
Computer Security and the Internet, 2.3 - 2.4

Homework: Rust Practice 2

Tue Oct 14

HOLIDAY - No Class

Wed Oct 15

Homework: Rust Practice 3

Thu Oct 16

Questions from Rust Practice 2
Questions from Rust Practice 3
Hashing and message authentication

Computer Security and the Internet, 2.5 - 2.6

Homework: Mac And Encryption Order

Tue Oct 21

Elliptic Curve Cryptography
Post-Quantum Cryptography

Project: Encrypted Communication

Key Exchange and Authentication

Thu Oct 23

Diffie-Hellman key exchange

Computer Security and the Internet, 4.0 - 4.3

Tue Oct 28

Certificates

Computer Security and the Internet, 8.0 - 8.3, 8.5

Ethics: Ethics and the Vulnerability Disclosure Process

Thu Oct 30

Computer Security and the Internet, 9.2

Homework: Certificates and TLS

Tue Nov 4

Password authentication and account recovery

Computer Security and the Internet, 3.0 - 3.3, 3.6, 3.8

Thu Nov 6

Multi-factor authentication

Computer Security and the Internet, 3.4 - 3.5

Project: Cracking Password vaults

Web Security

Tue Nov 11

Web background

Computer Security and the Internet, 9.0 - 9.1, 9.3

Thu Nov 13

XSS, SQL injection

Computer Security and the Internet, 9.6 - 9.7

Homework: Web vulnerabilities

Tue Nov 18

Same-origin policy and CSRF attacks

Computer Security and the Internet, 9.4 - 9.5

Thu Nov 20

Phishing

Computer Security and the Internet, 9.8

Project: Web Exploit and Patch

Tue Nov 25

Social Engineering (no class, watch video)

Chris Pritchard - The Basics of Social Engineering - DEF CON 27 Social Engineering Village

Thu Nov 27

HOLIDAY - Thanksgiving

Advanced Topics

Tue Dec 2

Academic and Industry Talks: Usable Security and Privacy

Thu Dec 4

Tue Dec 9

Final Project

Wed Apr 23

Project: Final Project