ITIS 6200 / 8200: Principles of Information Security and Privacy

Schedule

NOTE: The current schedule is tentative and subject to change. Nonetheless it gives an idea of the material to be covered in this course. The lecture notes are seeded from previous years' ITIS 6200, and will be updated immediately before and after each lecture. Some course materials are brought from the course CS 161: Computer Security at UC Berkeley.

Each week lists the one paper required of everyone. The group leading that week reads a second, paired paper as well. Full reading list, recommended papers, discussion questions and background notes are on the Paper Reading Schedule page.

Wk.	Date	Topic	Reading (required)	Assignments
Introduction
1	Tue 18-Aug	Introduction to Security & Cryptography	Saltzer & Schroeder, Protection of Information in Computer Systems Section I only · 8 pp	A1 release
Cryptography
2	Tue 25-Aug	One-time pad & Block Cipher	Mason et al., Automated Cryptanalysis of Two-Time Pads 10 pp
3	Tue 1-Sep	Block Cipher & Cryptographic Hashes	Leurent & Peyrin, SHA-1 is a Shambles 18 pp
4	Tue 8-Sep	MAC & Authenticated Encryption	Vaudenay, Security Flaws Induced by CBC Padding Sections 1–4, 6–7 · 7 pp
5	Tue 15-Sep	PRNG & Diffie-Hellman Exchange	Heninger et al., Mining Your Ps and Qs 16 pp
6	Tue 22-Sep	Public-Key Encryption & Digital Signatures & Certificates	Rivest, Shamir & Adleman, A Method for Obtaining Digital Signatures 15 pp
Midterm
7	Tue 29-Sep	MID-TERM EXAM (Covers lectures on Cryptography)	— no reading
Access Control
8	Tue 6-Oct	Access Control	BOTH REQUIRED Sandhu et al., Role-Based Access Control Models 10 pp Reardon et al., 50 Ways to Leak Your Data 20 pp
Web Security
9	Tue 13-Oct	Intro to Web and Cookies	Singh et al., Incoherencies in Web Browser Access Control Policies 16 pp
10	Tue 20-Oct	CSRF, XSS, SQL injection	BOTH REQUIRED Barth et al., Robust Defenses for Cross-Site Request Forgery 12 pp Steffens et al., Don't Trust The Locals 15 pp
Network Security
11	Tue 27-Oct	Intro to Network, ARP, TCP	Bellovin, Security Problems in the TCP/IP Protocol Suite 17 pp
12	Tue 3-Nov	Firewall, Intrusion Detection	Ptacek & Newsham, Insertion, Evasion, and Denial of Service Sections 1–4 · 13 pp
System Security
13	Tue 10-Nov	Intro to Memory layout, Stack, Heap	Aleph One, Smashing the Stack for Fun and Profit 25 pp
14	Tue 17-Nov	Memory vulnerabilities	Shacham, The Geometry of Innocent Flesh on the Bone Sections 1–3 · 12 pp
15	Tue 24-Nov	Memory vulnerabilities and mitigation	BOTH REQUIRED Abadi et al., Control-Flow Integrity 13 pp Carlini et al., Control-Flow Bending 16 pp
Project Presentation
16	Tue 1-Dec	Project presentation	— no reading
Final
17	Tue 8-Dec	Final Exam (8am-10:30am)	— no reading