Class Schedule

Note: Plans more than one week in the future subject to change.

Date	Topic	Extra Readings / Materials	Assignments
Week 1
2026-01-05	Course Intro	How to Read a Paper slides
2026-01-07	Picking Threat Models	Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds Experimental Security Analysis of a Modern Automobile
Week 2
2026-01-12	Developers and Security	Understanding security mistakes developers make: Qualitative analysis from Build It, Break It, Fix It “They’re not that hard to mitigate”: What Cryptographic Library Developers Think About Timing Attacks
2026-01-14	Web Security	Improving SSL Warnings: Comprehension and Adherence Site Isolation: Process Separation for Web Sites within the Browser
Week 3
2026-01-19	No class: Holiday
2026-01-21	Privacy and Anonymity Online	Tor: The Second-Generation Onion Router Online Tracking: A 1-million-site Measurement and Analysis cookie ghostwriting canvas fingerprinting Bruisable Onion fingerprintjs	Project Proposal Due (11:59pm) Project Groups Due (11:59pm)
Week 4
2026-01-26	Microarchitectural Security	Last-Level Cache Side-Channel Attacks are Practical Reading privileged memory with a side-channel (Don't review. Useful alternative version of Spectre.) Spectre Attacks: Exploiting Speculative Execution
2026-01-28	ML and Security 1	"I Don't Know If We're Doing Good. I Don't Know If We're Doing Bad": Investigating How Practitioners Scope, Motivate, and Conduct Privacy Work When Developing AI Products Defeating Prompt Injections by Design “Where Are We On Cyber?” – A Qualitative Study On Boards’ Cybersecurity Risk Decision Making
Week 5
2026-02-02	No class: David out of town
2026-02-04	Spectre Again	Phantom: Exploiting Decoder-detectable Mispredictions Inception: Exposing New Attack Surfaces with Training in Transient Execution (extra, no review) Pathfinder: High-Resolution Control-Flow Attacks Exploiting the Conditional Branch Predictor (extra, no review) Intel IBRS
Week 6
2026-02-09	ML and Security 2	Vulnerability Detection with Code Language Models: How Far Are We? Towards Making Systems Forget with Machine Unlearning
2026-02-11	Ethics and Security	The Moral Character of Cryptographic Work Conducting Cybersecurity Research Legally and Ethically (no review) HEXACON 2025 Keynote (last 3 minutes, no review)
Week 7
2026-02-16	No class: Holiday
2026-02-18	Project Checkpoints		Project Checkpoint Presentation Due (11:59pm)
Week 8
2026-02-23	Breaking Crypto in the Wild	Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices BREACH: REVIVING THE CRIME ATTACK CRIME/TIME Blackhat talk (don't review, may be helpful) Trail of Bits: Don't use RSA Censys (Internet Scanning)
2026-02-25	Mobile Security	Android Permissions Demystified No Privacy Among Spies: Assessing the Functionality and Insecurity of Consumer Android Spyware App, Android permissions: user aention, comprehension, and behavior
Week 9
2026-03-02	Accessibility and Security	AccessiLeaks: Investigating Privacy Leaks Exposed by the Android Accessibility Service A11y Attacks: Exploiting Accessibility in Operating Systems
2026-03-04	Censorship	Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China Encore: Lightweight Measurement of Web Censorship with Cross-Origin Requests	Security Reviews Due (11:59pm)
Week 10
2026-03-09	Anonymity Again	Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries Robust De-anonymization of Large Sparse Datasets
2026-03-11	Online abuse and more	The Tools and Tactics Used in Intimate Partner Surveillance: An Analysis of Online Infidelity Forums Anti-Privacy and Anti-Security Advice on TikTok: Case Studies of Technology-Enabled Surveillance and Control in Intimate Partner and Parent-Child Relationships	Final Project DRAFT paper (Due Friday, not Wednesday) Due (11:59pm)
Week 11
2026-03-16	Presentations
2026-03-18	Final Reports due		Project final report Due (11:59pm)