Notes:
| Date | Topic and Slides | Readings | Assignments |
|---|---|---|---|
| Week 1 | |||
| 03/27/2017 | Course overview [slides] | None | |
| 03/29/2017 | Introduction to security [slides] | Daswani, Chapter 1 | |
| 03/31/2017 | Software security: Buffer overflows [slides] | Daswani, Chapter 6 | |
| Week 2 | |||
| 04/03/2017 | Software security: Buffer overflows continued [slides] | Daswani, Chapter 6 Recommended: Smashing the Stack for Fun and Profit and Exploiting Format String Vulnerabilities and Once Upon a free() |
Sign the Ethics Form by 11:59pm! |
| 04/05/2017 | Software security: Miscellaneous [slides] | Daswani, Chapter 3 | |
| 04/07/2017 | Guest lecture: Karl Koscher, UW CSE | None | Homework #1 due (11:59pm) [details] |
| Week 3 | |||
| 04/10/2017 | Software security: Misc, Principles [slides] | None | |
| 04/12/2017 | Cryptography: Intro [slides] | None | |
| 04/14/2017 | Cryptography: Symmetric Encryption [slides] | Daswani, Chapter 12 | Lab #1 checkpoint due (11:59pm) [details] |
| Week 4 | |||
| 04/17/2017 | Cryptography: Hash functions and MACs [slides] | Daswani, Chapter 15 | |
| 04/19/2017 | Guest lecture: Shrirang Mare, UW CSE, on authentication and passwords [slides] | Daswani, Chapter 9 | |
| 04/21/2017 | Cryptography: Asymmetric key crypto (start) [slides] | Daswani, Chapter 13 | |
| Week 5 | |||
| 04/24/2017 | Cryptography: Asymmetric key crypto (finish) [slides] | Daswani, Chapter 14 | |
| 04/26/2017 | Guest lecture: Emily McReynolds, UW Tech Policy Lab |
None | |
| 04/28/2017 | Guest lecture: Xi Wang, UW CSE | None | Lab #1 due (11:59pm) [details] |
| Week 6 | |||
| 05/01/2017 | Crypto meets Web Security: Certificates and SSL/TLS [slides] | None | |
| 05/03/2017 | Web Security: SSL/TLS and Browser Security Model [slides] | Daswani, Chapter 7 | |
| 05/05/2017 | Web Security: Web application security (XSS) [slides] | Daswani, Chapter 8 and 10 | Homework #2 due (5pm) [details] |
| Week 7 | |||
| 05/08/2017 | Guest lecture: Jared Moore on web application security [slides] | None | |
| 05/10/2017 | Web Security: Web application security (SQL injection, CSRF, session management) [slides] | Daswani, Chapters 8 and 10 Recommended: Advanced SQL Injection, XSS Cheat Sheet |
|
| 05/12/2017 | Web Security: Loose Ends [slides] | None | Final Project Deadline #1 (11:59pm) [details] |
| Week 8 | |||
| 05/15/2017 | Web Privacy: Third-party tracking [slides] | None | |
| 05/17/2017 | Mobile Platform Security (start) [slides] | Understanding Android Security | |
| 05/19/2017 | Guest lecture: Jon McClintock, Principal Security Engineer at Amazon |
None | Lab #2 Due (8pm) [details] |
| Week 9 | |||
| 05/22/2017 | Guest lecture: David Aucsmith | None | |
| 05/24/2017 | Mobile Platform Security (finish) [slides] | None | |
| 05/26/2017 | Usable Security (start) [slides] | None | |
| Week 10 | |||
| 05/29/2017 | No class (holiday) | None | |
| 05/31/2017 | Usable Security (finish), Anonymity [slides] | None | Final Project Deadline #2 (11:59pm) [details] |
| 06/02/2017 | Loose Ends [slides] | None | Lab #3 due (8pm) [details] |
| Finals Week | |||
| 06/05/2017 | (No class, finals week) | ||
| 06/07/2017 | (No class, finals week) | Final Projects Due (11:59pm) [details] |