Class Schedule

Note: Plans more than one week in the future subject to change.

See Ed board for signup sheet for discussion leads.

Date	Topic	Readings / Materials	Assignments
Week 1
10/01/2020	Introduction	Keshev, et al.: How to Read a Paper
Week 2
10/06/2020	Attacks	Required reading (due 8am today): Checkoway, et al.: Comprehensive Experimental Analyses of Automotive Attack Surfaces, USENIX Security 2011 Silver, et al.: Password Managers: Attacks and Defenses, USENIX Security 2014
10/08/2020	People and Context Leads: Alex DeGrave + Ethan Weinberger	Required reading (due 8am today): Marczak et al.: When Government Hack Opponents: A Look at Actors and Technology, USENIX Security 2014 Chen and Roesner: Computer Security and Privacy in the Interactions Between Victim Service Providers and Human Trafficking Survivors, USENIX Security 2019
Week 3
10/13/2020	Authentication and Usability Leads: Sherry Yang + Aditya Kusupati	Required reading (due 8am today): Chiasson, et al.: A Usability Study and Critique of Two Password Managers, USENIX Security 2006 Bonneau, et al.: The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes, IEEE Symposium on Security and Privacy (Oakland) 2012
10/15/2020	Design and Build Leads: Kushal Jhunjhunwalla + Daniel Starikov	Required reading (due 8am today): Freedman and Morris: Tarzan: A Peer-to-Peer Anonymizing Network Layer, CCS 2002 Geambasu, et al.: Vanish: Increasing Data Privacy with Self-Destructing Data, USENIX Security 2009	Two security reviews due (11:30pm) Project groups due Friday (11:30pm)
Week 4
10/20/2020	Measure Leads: Josh Curtis + Dao Yi	Required reading (due 8am today): Motoyama et al.: Re: CAPTCHAs – Understanding CAPTCHA-Solving Services in an Economic Context, USENIX Security 2010 Durumeric et al.: The Matter of Heartbleed, IMC 2014
10/22/2020	Systems and Software Security Leads: Kyle Xiao + Josh Curtis	Required reading (due 8am today): Saltzer and Schroeder: The Protection of Information in Computer Systems, Proceedings of IEEE 1975 (also online at http://web.mit.edu/Saltzer/www/publications/protection/) Gold et al.: KVM/370 in Retrospect, IEEE Symposium on Security & Privacy (Oakland) 1984 [If having trouble accessing, search for it on google scholar] Optional reading: Cowan et al.: StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks, USENIX Security 1998	Project proposals due Friday (11:30pm) (Plan to meet with me during the following 1-2 weeks to discuss)
Week 5
10/27/2020	Applied Cryptography Leads: Alex Ching + Brandon Ko	Required reading (due 8am today): Egele et al.: An Empirical Study of Cryptographic Misuse in Android Applications, CCS 2013 Abadi and Needham: Prudent Engineering Practice for Cryptographic Protocols, IEEE Transactions on Software Engineering 1996 Optional reading: Anderson: Why Cryptosystems Fail, ACM CCS 1993 Bellare et al.: Authenticated Encryption in SSH: Provably Fixing the SSH Binary Packet Protocol, CCS 2002 Popa et al.: CryptDB: Protecting Confidentiality with Encrypted Query Processing, SOSP 2011
10/29/2020	Attacking Cryptography Leads: Eric Koegler + Kushal Jhunjhunwalla	Required reading (due 8am today): Heninger et al.: Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices USENIX Security 2012 Checkoway et al.: A Systematic Analysis of the Juniper Dual EC Incident CCS 2016 Optional reading:
Week 6
11/03/2020	Cancelled due to election day	None
11/05/2020	Web Security and More Usability Leads:Keegan Na + Keanu Vestil	Required reading (due 8am today): Felt, et al.: Improving SSL Warnings: Comprehension and Adherence, CHI 2015 Reis et al.: Site Isolation: Process Separation for Web Sites within the Browser, USENIX Security 2019 Optional reading: Bojinov, et al.: XCS: Cross Channel Scripting and its Impact on Web Applications, CCS 2009 Barth, et al.: The Security Architecture of the Chromium Browser, 2008 Whitten et al.: Why Johnny Cant Encrypt: A Usability Evaluation of PGP 5.0, USENIX Security 1999
Week 7
11/10/2020	Project Checkpoint Presentations	None	Project checkpoint writeup due (11:30pm)
11/12/2020	Peer Project Workshopping	None	Project workshopping materials due (9:45am - BEFORE CLASS)
Week 8
11/17/2020	Web Tracking and Anonymity Leads: Suchin Gururangan + Brandon Ko	Required reading (due 8am today): Englehardt and Narayanan, Online Tracking: A 1-million-site Measurement and Analysis, CCS 2016 Danezis et al.: Mixminion: Design of a Type III Anonymous Remailer Protocol, IEEE Symposium on Security and Privacy (Oakland) 2003 Optional reading: Dingledine, et al.: Tor: The Second-Generation Onion Router, USENIX Security 2004 Narayanan, et al.: Robust De-anonymization of Large Sparse Datasets (How To Break Anonymity of the Netflix Prize Dataset), Oakland 2008
11/19/2020	Side Channels Leads:Aditya Kusupati + Sherry Yang	Required reading (due 8am today): Ristenpart et al.: Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds, ACM CCS 2009 Yarom and Falkner, FLUSH+RELOAD: A High Resolution, Low Noise, L3 Cache Side-Channel Attack Optional reading: Asonov and Agrawal: Keyboard Acoustic Emanations, IEEE Symposium on Security & Privacy 2004 Berger et al.: Dictionary attacks using keyboard acoustic emanations, ACM CCS 2006 Zhuang et al.: Keyboard Acoustic Emanations Revisited, ACM Transactions on Information and Systems Security 2009 Song et al.: My Smartphone Knows What You Print: Exploring Smartphone-based Side-channel Attacks Against 3D Printers, ACM CCS 2016
Week 9
11/24/2020	Emerging Technologies Leads: Alex Ching + Dao Yi	Required reading (due 8am today): Lebeck et al.: Securing Augmented Reality Output, Oakland 2017 Ney et al.: Computer Security, Privacy, and DNA Sequencing: Compromising Computers with Synthesized DNA, Privacy Leaks, and More, USENIX Security 2017
11/26/2020	No Class -- Thanksgiving
Week 10
12/01/2020	Speculative Execution Attacks Leads: Daniel Starikov + Kyle Xiao	Fogh: Negative Result: Reading Kernel Memory From User Mode, July 2017 Horn: Reading privileged memory with a side-channel, January 2018 Kocher, et al.: Spectre Attacks: Exploiting Speculative Execution, IEEE Symposium on Security & Privacy (Oakland) 2019 Optional Reading: Koruyeh et al.:Spectre Returns! Speculation Attacks using the Return Stack Buffer, USENIX WOOT 2018 Yu et al.:Speculative Taint Tracking (STT): A Comprehensive Protection for Speculatively Accessed Data, ACM MICRO 2019 The many, many MDS-class attacks
12/03/2020	Adversarial Machine Learning Leads: Ethan Weinberger + Suchin Gururangan	Required reading (due 8am today): Carlini et al.: Hidden Voice Commands, USENIX Security 2016 Sharif et al.: Accessorize to a Crime: Real and Stealthy Attacks on State-of-the-Art Face Recognition, ACM CCS 2016 Optional reading: Goodfellow et al.: Explaining and Harnessing Adversarial Examples, ICLR 2015 Papernot et al.: SoK: Towards the Science of Security and Privacy in Machine Learning, IEEE EuroS&P 2018 Eykholt et al.: Robust Physical-World Attacks on Deep Learning Models, CVPR 2018	Project report draft due Friday (11:30pm)
Week 11
12/08/2020	Healthcare Technology Leads: Eric Koegler + Keanu Vestil	Required reading (due 8am today): Halperin et al.: Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses, IEEE S&P 2008 Rostami et al.: Heart-to-Heart (H2H): Authentication for Implanted Medical Devices, CCS 2013 Optional reading: Li et al.: Hijacking an Insulin Pump: Security Attacks and Defenses for a Diabetes Therapy System, IEEE Healthcom 2011 Denning et al.: Patients, Pacemakers, and Implantable Defibrillators: Human Values and Security for Wireless Implantable Medical Devices, ACM CHI 2010
12/10/2020	Security and Policy Leads: Keegan Na + Alex DeGrave	Required reading (due 8am today): Savage: Lawful Device Access without Mass Surveillance Risk: A Technical Design Discussion, CCS 2018 Diffie and Landau: The Export of Cryptography in the 20th Century and the 21st, The Handbook of the History of Information Security, 2005 Optional reading: Legal Restrictions on Cryptography, Web Security, Privacy & Commerce, 2nd Edition 2001 Cryptography Export Control Archives, 1996
Finals Week
12/16/2020	Final Project Presentations 4:30-6:20pm (Official final exam time) (Additional times may need to be scheduled)
12/17/2020			Final project report due (11:30pm)