Notes:
Date | Topic and Slides | Recommended Readings | Assignments |
---|---|---|---|
Week 1 | |||
09/27/2017 | Course overview [slides] | None | |
09/29/2017 | Introduction to security [slides] | Daswani, Chapter 1 | |
Week 2 | |||
10/02/2017 | Guest lecture: David Aucsmith | None | |
10/04/2017 | Software security: Buffer overflows [slides] | Daswani, Chapter 6 | Sign the Ethics Form by 11:59pm! |
10/06/2017 | Software security: Buffer overflows continued [slides] | Daswani, Chapter 6 Recommended: Smashing the Stack for Fun and Profit and Exploiting Format String Vulnerabilities and Once Upon a free() |
Homework #1 due (8pm) [details] |
Week 3 | |||
10/09/2017 | Software security: Buffer overflow defenses [slides] | Daswani, Chapter 3 | |
10/11/2017 | Software security: Misc, Principles [slides] | None | |
10/13/2017 | Cryptography: Intro [slides] | None | Lab #1 checkpoint due (8pm) [details] |
Week 4 | |||
10/16/2017 | Cryptography: Symmetric encryption [slides] | Daswani, Chapter 12 | |
10/18/2017 | Cryptography: Symmetric encryption [slides] | Daswani, Chapter 12 | |
10/20/2017 | Cryptography: Hash functions and MACs [slides] | Daswani, Chapter 15 | |
Week 5 | |||
10/23/2017 | Cryptography: Asymmetric key crypto [slides] | Daswani, Chapters 13 and 14 | Lab #1 due (8pm) [details] |
10/25/2017 | Guest lecture: Emily McReynolds, UW Tech Policy Lab |
None | |
10/27/2017 | Guest lecture: Earlence Fernandes, UW CSE | None | |
Week 6 | |||
10/30/2017 | Cryptography meets Web Security: Finish assymetric key crypto; Web certificates [slides] | None | |
11/01/2017 | Web Security: SSL/TLS and browser security model [slides] | Daswani, Chapter 7 | |
11/03/2017 | Web Security: Browser security mode (finish); Web application security (XSS) [slides] | Daswani, Chapters 8 and 10 | Homework #2 due (8pm) [details] |
Week 7 | |||
11/06/2017 | Guest lecture: Jared Moore on web application security [slides | worksheet | solutions] | Daswani, Chapters 8 and 10 | |
11/08/2017 | Web Security: Web application security [slides] | Daswani, Chapters 8 and 10 Recommended: Advanced SQL Injection, XSS Cheat Sheet |
|
11/10/2017 | No class (Veterans Day) | Final Project Deadline #1 (8pm) [details] | |
Week 8 | |||
11/13/2017 | Web Security: Loose ends [slides] | None | |
11/15/2017 | Web Privacy [slides] | None | |
11/17/2017 | Guest lecture: David Molnar, Microsoft Research [slides] | ||
Week 9 | |||
11/20/2017 | Authentication [slides] | Daswani, Chapter 9 | |
11/22/2017 | No class (Thanksgiving) -- we will have an alternate video assignment as part of HW3 | Lab #2 due (8pm) [details] (Updated from 11/20) |
|
11/24/2017 | No class (Thanksgiving) | ||
Week 10 | |||
11/27/2017 | Mobile Platform Security [slides] | ||
11/29/2017 | Guest lecture: Christoph Kern, Google [similar slides here and here] | ||
12/01/2017 | Mobile Platform Security [slides] | Final Project Deadline #2 (8pm) [details] | |
Week 11 | |||
12/04/2017 | Usable Security [slides] | ||
12/06/2017 | Anonymity [slides] | ||
12/08/2017 | Loose Ends [slides] | Homework #3 due (8pm) [details] | |
Finals Week | |||
12/11/2017 | No class (finals week) | ||
12/13/2017 | No class (finals week) | Final Project Due (11:59pm) [details] |