ITIS 6200 / 8200: Principles of Information Security and Privacy
Schedule
NOTE: The current schedule is tentative and subject to change. The lecture notes are seeded from previous years' ITIS 6200. Some course materials are brought from CS161: Computer Security at UC Berkeley. Each week lists the one paper required of everyone; the leading group reads a second paper too. Full details on the Paper Reading page.
| Wk. | Date | Topic | Reading (required) | Notes | Assignments |
|---|---|---|---|---|---|
| Introduction | |||||
| 1 | Tue 18-Aug | Introduction to Security & Cryptography | Saltzer & Schroeder, Protection of Information in Computer Systems Section I only · 8 pp | w1.pdf | |
| Cryptography | |||||
| 2 | Tue 25-Aug | Symmetric-Key Encryption & One-Time Pad | Mason et al., Automated Cryptanalysis of Two-Time Pads 10 pp | w2.pdf | |
| 3 | Tue 1-Sep | Block Ciphers & Operating Modes | Vaudenay, Security Flaws Induced by CBC Padding Sections 1–4, 6–7 · 7 pp | w3.pdf | |
| 4 | Tue 8-Sep | Cryptographic Hashes, MACs & Authenticated Encryption | Leurent & Peyrin, SHA-1 is a Shambles 18 pp | w4.pdf | |
| 5 | Tue 15-Sep | PRNG & Diffie-Hellman Exchange | Heninger et al., Mining Your Ps and Qs 16 pp | ||
| 6 | Tue 22-Sep | Public-Key Encryption & Digital Signatures & Certificates | Rivest, Shamir & Adleman, A Method for Obtaining Digital Signatures 15 pp Companion (2nd group): Three Lessons from Threema: Analysis of a Secure Messenger | ||
| Midterm | |||||
| 7 | Tue 29-Sep | MID-TERM EXAM (Covers lectures on Cryptography) | — no reading | ||
| Access Control | |||||
| 8 | Tue 6-Oct | Access Control | Sandhu et al., Role-Based Access Control Models 10 pp Companion (2nd group): Reardon et al., 50 Ways to Leak Your Data | ||
| Fall Break | |||||
| 9 | Tue 13-Oct | Fall Break (Student Recess) – No class | — no reading | ||
| Web Security | |||||
| 10 | Tue 20-Oct | Intro to Web and Cookies | Singh et al., Incoherencies in Web Browser Access Control Policies 16 pp | ||
| 11 | Tue 27-Oct | CSRF, XSS, SQL injection | Barth et al., Robust Defenses for Cross-Site Request Forgery 12 pp Companion (2nd group): Steffens et al., Don't Trust The Locals | ||
| Network Security | |||||
| 12 | Tue 3-Nov | Intro to Network, ARP, TCP | Bellovin, Security Problems in the TCP/IP Protocol Suite 17 pp | ||
| 13 | Tue 10-Nov | Firewall, Intrusion Detection | Ptacek & Newsham, Insertion, Evasion, and Denial of Service Sections 1–4 · 13 pp | ||
| System Security | |||||
| 14 | Tue 17-Nov | Intro to Memory layout, Stack, Heap | Aleph One, Smashing the Stack for Fun and Profit 25 pp | ||
| 15 | Tue 24-Nov | Memory Vulnerabilities & Mitigation | Abadi et al., Control-Flow Integrity 13 pp Companion (2nd group): Carlini et al., Control-Flow Bending | ||
| Project Presentation | |||||
| 16 | Tue 1-Dec | Project presentation | — no reading | ||
| Final | |||||
| 17 | Tue 8-Dec | Final Exam (8am-10:30am) | — no reading | ||