ITIS 6200 / 8200: Principles of Information Security and Privacy

Course Policies and Expectations

Some text for this course's policies is based on material by Monica Linden, Neuroscience, Brown University; and Stephen Chong, David Malan, Computer Science, Harvard University.

General

We expect that you will do well in this course! 😀
We expect all students to stay up to date on the course material, either by reading the lecture notes and/or by attending lectures, as the assignments are based on material covered in lectures.
We expect you to complete the assigned paper reading before class and participate in the discussion.
We expect you to look after yourself: sleep, eat, and keep well.
We expect you to reach out to course staff if you are having any difficulty in the class.
We expect you to read the syllabus, be aware of course policies, and follow them.

Attendance

Attendance/Participation is a critical part of this class. All students are expected to attend lectures. Short in-class quizzes at the start of most lectures serve as attendance and participation checks.

Devices in class: electronic devices are allowed only if they improve your learning (e.g., note-taking). Non-study-related usage — talking on cell phones, gaming with laptops — is prohibited.

Attendance at office hours is encouraged but not required.

Code of Student Responsibility

Please refer to Code of Student Responsibility for expectations and guidelines from the university. Failure to follow these expectations may constitute a violation of the Code of Student Responsibility.

Due Date and Late Policy

All homework and project assignments must be submitted on Canvas. Assignments are due by 11:59PM on the due date. Late homework is accepted for up to 48 hours with a 10% per-day penalty based on the assignment's total possible points, as enforced by Canvas. Read and follow the lab/assignment submission guidelines on Canvas; failure to adhere to the required format or best practices may result in deductions.

In-class quizzes: no late submissions are allowed. To accommodate occasional issues, the lowest two quiz scores are dropped.

Exams

Exams are given in class and are open book: printed materials (lecture slides, papers, notes, and handwritten notes) are permitted. However, AI tools, cellphones, and internet access are not permitted, and a lockdown browser is required. Make-up exams are not guaranteed and will follow university policy; if you have circumstances such as accident, illness, or death in the immediate family, give me notice or proof well before the exam if at all possible.

Course Project

The course project is a group project with up to three students per group (the same groups used for the paper discussions). Each project includes three components: a design (identify a security problem; outline the system, protocol, or approach), an implementation (a non-trivial technical artifact or prototype), and an evaluation (experiments, case studies, or adversarial scenarios). Deliverables: a one-page proposal (by mid-term), a five-page final report (by final), executable code on GitHub, and a 10-minute presentation (8 minutes + 2 minutes Q&A), which is a major component of the project grade. All members are expected to contribute meaningfully. Research-oriented projects are welcome — discuss with the instructor.

Weekly Paper Discussions

Each week everyone reads one required research paper (about 17 pages on average); the group leading that week reads both papers for the week. Each group leads one 25–30 minute discussion during the semester. The reading list — every paper, a free PDF link, page count, required background, and discussion questions — is on the Paper Reading Schedule.

Everyone reads the Required paper before class; in three weeks (8, 10, 15) both papers are required of everyone (marked BOTH REQUIRED).
Groups claim a week through Canvas by 11:59pm Friday of the first week, first come, first served; unclaimed weeks are assigned.
Every non-leading group posts one discussion question (or observation) by 9:30 AM on the day of class.
Discussion leaders facilitate discussion rather than summarize, and present the contrast with the week's paired paper.
Grading (10% of the final grade): Understanding of the paper (30%), Organization & clarity (20%), Critical analysis (25%), Discussion leadership (25%). Unless otherwise determined, all members of a group receive the same grade.

The purpose is to read technical security literature critically — not to reproduce the research. You are not expected to follow every proof; you are expected to say what problem a paper attacks, what its key idea is, and where it falls short.

Collaboration and Academic Integrity

Discussion and the exchange of ideas are essential to doing academic work. You are encouraged to consult with your classmates as you work on problem sets. However, after discussions with peers or staff, make sure you can work through the problem yourself, and ensure any answers you submit are the result of your own efforts. Cite any books, articles, websites, or lectures that helped you, and list the names of students you collaborated with.

Do not pass solutions to problem sets nor accept them from another student. Do not post course materials (problem sets, solutions, exams, etc.) to websites or course-content archives. It is never okay to look up solutions to homework problems on the web. No cheating or copying from previous semesters, other students, or the Internet will be tolerated. Any form of cheating will receive 0 points in that task and I will report the case to the University. If you are ever in doubt, ask the course staff to clarify. See the university's Code of Student Academic Integrity.

Generative AI Tools

You may use AI tools for learning purposes only — to generate ideas and insights, explore alternative perspectives, or help you understand a paper (explain a concept, unpack notation, check your reading). If you use AI in this way, you must:

Disclose how you used AI in your submissions.
Not copy/paste AI output as your answer; always verify results and understand their limitations.

You cannot use AI tools to get answers to assignments, projects, or quizzes, or to generate your paper presentation, critical analysis, or discussion questions. AI tools, cellphones, and internet access are not permitted during exams.

Timely Feedback

Course staff will aim to return graded assignments, with solutions, to students within 10 days of when the assignment is turned in.

Diversity and Inclusion

I would like to create a learning environment that supports a diversity of thoughts, perspectives and experiences, and honors your identities (including race, gender, class, sexuality, religion, ability, etc.). If you have a name and/or set of pronouns that differ from your official records, please let me know. If your performance is being impacted by experiences outside of class, please come talk with me; Office of Identity, Equity, and Engagement and Office of Diversity & Inclusion are also excellent resources.

Non-Discrimination

No student will be discriminated against in this class based on age, race, nationality, religion, sexual orientation, gender identity/expression, veteran's status, country of origin, or group affiliation. Any student who does not behave respectfully may be asked to leave the classroom; continuous or repeated disrespectful behavior constitutes a violation of University Policy 406 and may be referred to the Office of Student Conduct or the Title IX Office.

Inclusive Learning and Accessibility

Your success in this class is important to me. If there are aspects of this course that prevent you from learning or exclude you, please let me know as soon as possible. I encourage you to visit the Office of Disability Services; if you need official accommodations, you have a right to have these met. The University Center for Academic Excellence provides academic counseling and peer tutors.

Mental Health

If you experience significant stress or worry, changes in mood, or problems eating or sleeping this semester, please do not hesitate to reach out to any of the course staff. Everyone can benefit from support during challenging times. The Center for Counseling and Psychological Services line 704‑687‑0311 is a support line (with after hour support) for students who have mental health concerns.

Ethics (From Berkeley CS161)

In this class, you will learn a lot about attacks. To defend against attacks, you must learn the techniques that attackers use.
It is usually okay to break into your own systems.
It is usually okay to break into someone else's systems with their explicit permission.
It is grossly unethical and exceedingly criminal to break into someone else's systems without their permission.