Class Schedule

Note: Plans more than one week in the future subject to change.

Date	Topic	Readings / Materials	Assignments
Week 1
01/08/2019	Introduction	None
01/10/2019	Attacks	Required reading (due 8am today): Checkoway, et al.: Comprehensive Experimental Analyses of Automotive Attack Surfaces, USENIX Security 2011 Silver, et al.: Password Managers: Attacks and Defenses, USENIX Security 2014
Week 2
01/15/2019	People and Context	Required reading (due 8am today): Marczak et al.: When Government Hack Opponents: A Look at Actors and Technology, USENIX Security 2014 Redmiles: "Should I Worry?" A Cross-Cultural Examination of Account Security Incident Response, IEEE Symposium on Security and Privacy (Oakland) 2019
01/17/2019	Authentication and Design [slides]	Required reading (due 8am today): Bonneau, et al.: The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes, IEEE Symposium on Security and Privacy (Oakland) 2012 Ross, et al.: Stronger Password Authentication Using Browser Extensions, USENIX Security 2005 Optional reading (no writeup required): Mickens: This World Of Ours (funny column on security), 2014	Project groups due (11:59pm)
Week 3
01/22/2019	Design and Build	Required reading (due 8am today): Cowan, et al.: StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks, USENIX Security 1998 Geambasu, et al.: Vanish: Increasing Data Privacy with Self-Destructing Data, USENIX Security 2009	Two security reviews due (11:59pm)
01/24/2019	Measure [slides]	Required reading (due 8am today): Motoyama et al.: Re: CAPTCHAs – Understanding CAPTCHA-Solving Services in an Economic Context, USENIX Security 2010 Durumeric et al.: The Matter of Heartbleed, IMC 2014	Project proposals due (11:59pm) (Plan to meet with me during the following 1-2 weeks to discuss)
Week 4
01/29/2019	Applied Crypto (Yoshi Kohno)	Required reading (due 8am today): Please read all three papers (the first is short; skip proofs in the second), but you must only do two discussion board posts (one for paper #3, and one for your choice of paper #1 or paper #2). Ylonen: SSH - Secure Login Connections over the Internet, USENIX Security 1996 Bellare et al.: Authenticated Encryption in SSH: Provably Fixing the SSH Binary Packet Protocol, CCS 2002 Egele et al.: An Empirical Study of Cryptographic Misuse in Android Applications, CCS 2013
01/31/2019	Web Security [slides]	Required reading (due 8am today): Bojinov, et al.: XCS: Cross Channel Scripting and its Impact on Web Applications, CCS 2009 Barth, et al.: The Security Architecture of the Chromium Browser, 2008
Week 5
02/05/2019	Class cancelled (weather)	None
02/07/2019	Web Privacy	Required reading (due 8am today): Englehardt and Narayanan, Online Tracking: A 1-million-site Measurement and Analysis, CCS 2016 Andreou et al., Investigating Ad Transparency Mechanisms in Social Media: A Case Study of Facebook’s Explanations, NDSS 2018
Week 6
02/12/2019	Class cancelled (weather)	None
02/14/2019	Project Checkpoint Presentations	None	Project checkpoint writeup due (11:59pm)
Week 7
02/19/2019	Peer Project Workshopping	None	Project workshopping materials due (9:45am -- BEFORE CLASS)
02/21/2019	Systems and Mobile Security	Required reading (due 8am today): Parno, et al.: Bootstrapping Trust in Commodity Computers, Oakland 2010 Baumann, et al.: Shielding Applications from an Untrusted Cloud with Haven, OSDI 2014 Enck et al.: TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones, OSDI 2010
Week 8
02/26/2019	Physical Security (Karl Koscher)	None
02/28/2019	No class today I recommend using this time to work with your project groups!	None
Week 9
03/05/2019	Usable Security	Required reading (due 8am today): Whitten et al.: Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0, USENIX Security 1999 Felt, et al.: Improving SSL Warnings: Comprehension and Adherence, CHI 2015
03/07/2019	Anonymity [slides]	Required reading (due 8am today): Dingledine, et al.: Tor: The Second-Generation Onion Router, USENIX Security 2004 Narayanan, et al.: Robust De-anonymization of Large Sparse Datasets (How To Break Anonymity of the Netflix Prize Dataset), Oakland 2008	Project report draft due (11:59pm)
Week 10
03/12/2019	Side Channels and Adversarial Machine Learning [slides]	Required reading (due 8am today): Goodfellow et al.: Explaining and Harnessing Adversarial Examples, ICLR 2015 Kocher, et al.: Spectre Attacks: Exploiting Speculative Execution, IEEE Symposium on Security & Privacy (Oakland) 2019
03/14/2019	Emerging Technologies	Required reading (due 8am today): Lebeck, et al.: Securing Augmented Reality Output, Oakland 2017 Fernandes, et al.: Security Analysis of Emerging Smart Home Applications , Oakland 2016
Finals Week
03/18/2019 (Monday!) 10:30am-12:20pm	Final Project Presentations (Official final exam time) Location: CSE2 371
03/20/2019	(No meeting)		Final project report due (11:59pm)