CS 465 Introduction to Security and Privacy

Schedule

Day

Topics

Reading

Assignments

Operating System Security

Week 1

Tue Jan 7

Homework: Slack and Current Events in Security

Thu Jan 9

Linux Journey, Text-Fu, User Management, Permissions, Processes

Week 2

Tue Jan 14

Operating systems background

Operating Systems: Three Easy Pieces, 4. Processes, 7. CPU Scheduling, 13. Address spaces

Homework: Linux Practice (due date relaxed to thursday)

Thu Jan 16

Access control

Operating Systems: Three Easy Pieces, 53. Intro Security, 55. Access Control

Software Security: Vulnerabilities and Malware

Week 3

Tue Jan 21

Race conditions and threads

Computer Security and the Internet, 6.0 - 6.1

Thu Jan 23

Project: Linux and Access Control

Week 4

Tue Jan 28

Computer Security and the Internet, 6.4, 6.6

Homework: Vulnerability Practice

Thu Jan 30

Shellcode and privilege escalation

Computer Security and the Internet, 6.7, 6.8

Service: Project: Service #1

Week 5

Tue Feb 4

Malware

Computer Security and the Internet, 7 (skim)

Project: Exploit and Patch

Software Security: Intro to Rust

Thu Feb 6

Learning Rust

The Rust Programming Language, 1-5

Week 6

Tue Feb 11

The Rust Programming Language, 6-10

Homework: Rust Practice 1

Encryption, Hashing, and Message Authentication

Thu Feb 13

Symmetric encryption

Computer Security and the Internet, 2.0 - 2.2
Exam 1 / Video Presentation review

Homework: Rust Practice 2

Fri Feb 14

Midterm Exam/Project Opens (Feb 15 - 21) - prompts in exam 1 on learningsuite

Week 7

Tue Feb 18

HOLIDAY - Monday Instruction

Homework: Rust Practice 3

Thu Feb 20

Hashing and message authentication

Computer Security and the Internet, 2.5 - 2.6

Fri Feb 21

Midterm Exam/Project Closes (Feb 15 - 21)

Week 8

Tue Feb 25

Public key cryptography

Computer Security and the Internet, 2.3 - 2.4

Homework: Mac And Encryption Order Report

Thu Feb 27

Elliptic Curve Cryptography

A (Relatively Easy To Understand) Primer on Elliptic Curve Cryptography

Week 9

Key Exchange and Authentication

Tue Mar 4

Diffie-Hellman key exchange

Computer Security and the Internet, 4.0 - 4.3

Thu Mar 6

Certificates

Computer Security and the Internet, 8.0 - 8.3, 8.5

Service: Project: Service #2

Week 10

Tue Mar 11

Computer Security and the Internet, 9.2

Thu Mar 13

Password authentication and account recovery

Computer Security and the Internet, 3.0 - 3.3, 3.6, 3.8

Homework: Certificates and TLS

Fri Mar 14

Project: Encrypted Communication

Week 11

Tue Mar 18

(Passwords continued) and Multi-factor authentication

Computer Security and the Internet, 3.4 - 3.5

Web Security

Thu Mar 20

Web background

Computer Security and the Internet, 9.0 - 9.1, 9.3

Week 12

Tue Mar 25

XSS, SQL injection

Computer Security and the Internet, 9.6 - 9.7

Thu Mar 27

Same-origin policy and CSRF attacks

Computer Security and the Internet, 9.4 - 9.5

Fri Mar 28

Project: Cracking Password vaults

Week 13

Tue Apr 1

SQLI, Same-origin policy and CSRF attacks, continued

Computer Security and the Internet, 9.4 - 9.7

Thu Apr 3

Social Engineering/Phishing

Computer Security and the Internet, 9.8

Week 14

Threat Modeling

Tue Apr 8

Threat modeling

Computer Security and the Internet, 1.0 - 1.2, 1.4 - 1.8

Wed Apr 9

Homework: Web vulnerabilities

Academic and Industry Talks

Thu Apr 10

Academic and Industry Talks: IoT Vulnerabilities, Social Engineering, Exploiting Video Decoders

Week 15

Tue Apr 12

Academic and Industry Talks: Invisible Vulnerabilities, Reverse Engineering, Glaze, Non-consensual image generation

Wed (last day of classes) Apr 16

Project: Final Project

Wed (last day of classes) Apr 16

Project: Extra Credit - social engineering

Finals Week

Project: Final Video Exam submission (beginning of finals through scheduled exam date/time)