CS 465 Introduction to Security and Privacy

Schedule

Day

Topics

Reading

Assignments

Introduction

Wed Jan 7

Homework: Slack and Current Events in Security

Thu Jan 8

Linux Journey, Text-Fu, User Management, Permissions, Processes

Homework: Linux Practice

Tue Jan 13

Operating Systems: Three Easy Pieces, 53. Intro Security, 55. Access Control, (Optional background if needed: 4. Processes, 7. CPU Scheduling, 13. Address spaces)

Project: Linux and Access Control

Thu Jan 15

Threat modeling

Computer Security and the Internet, 1.0 - 1.2, 1.4 - 1.8

Project: Threat modeling

Software Security: Vulnerabilities and Malware

Tue Jan 20

Race conditions and threads

Computer Security and the Internet, 6.0 - 6.1

Ethics: Ethics and Discipleship: Ethical Hacking

Thu Jan 22

Homework: Vulnerability Practice

Tue Jan 27

Computer Security and the Internet, 6.4, 6.6

Thu Jan 29

Computer Security and the Internet, 6.7, 6.8

Tue Feb 3

Malware

Computer Security and the Internet, 7 (skim)

Project: Exploit and Patch

Software Security: Rust and Cryptography

Thu Feb 5

Learning Rust Abbreviated

The Rust Programming Language, 1-5

Homework: Rust Practice 1

Tue Feb 10

Finish Rust lectures - Questions from Rust Practice 1

Homework: Rust Practice 2

Thu Feb 12

Computer Security and the Internet, 2.0 - 2.2
Computer Security and the Internet, 2.3 - 2.4

Homework: Rust Practice 3

Tue Feb 17

HOLIDAY - Monday Instruction - no cs465 class

Thu Feb 19

Hashing and message authentication

Computer Security and the Internet, 2.5 - 2.6

Homework: Mac And Encryption Order

Sat Feb 21

Mid-Term Exam (Saturday 21 - Tuesday 24th 11:59 PM)

Tue Feb 24

Elliptic Curve Cryptography
Post-Quantum Cryptography

Project: Encrypted Communication

Key Exchange and Authentication

Thu Feb 26

Diffie-Hellman key exchange

Computer Security and the Internet, 4.0 - 4.3

Tue Mar 3

Certificates

Computer Security and the Internet, 8.0 - 8.3, 8.5

Ethics: Ethics and the Vulnerability Disclosure Process

Thu Mar 5

Computer Security and the Internet, 9.2

Homework: Certificates and TLS

Tue Mar 10

Password authentication and account recovery

Computer Security and the Internet, 3.0 - 3.3, 3.6, 3.8

Thu Mar 12

Multi-factor authentication

Computer Security and the Internet, 3.4 - 3.5

Project: Cracking Password vaults

Web Security

Tue Mar 17

Web background

Computer Security and the Internet, 9.0 - 9.1, 9.3

Thu Mar 19

XSS, SQL injection

Computer Security and the Internet, 9.6 - 9.7

Homework: Web vulnerabilities

Tue Mar 24

Same-origin policy and CSRF attacks

Computer Security and the Internet, 9.4 - 9.5

Thu Mar 26

Phishing

Computer Security and the Internet, 9.8

Project: Web Exploit and Patch

Tue Mar 31

Social Engineering

Chris Pritchard - The Basics of Social Engineering - DEF CON 27 Social Engineering Village

Deeper Dive Into Interesting Topics

Thu April 2

Computer Security and the Internet, 8.6

Tue April 7

MAC's revisited / Length Extension Attacks, or why we use HMAC

(not really a reading, but for the lecture) Length Extension Discussion

Thu April 9

Academic and Industry Talks: Usable Security and Privacy

Tue April 14

Course Review and Overview

slides for course review

Spear-Phish Me! extra credit homework

Project: Extra Credit homework (see details in Canvas)

Final Project

Project: Final Project

Final Exam

Fri Apr 17

Final Exam Available Friday Apr 17 - Monday Apr 21