Class Schedule

Note: Plans more than one week in the future subject to change.

Date	Topic	Readings / Materials	Assignments
Week 1
01/06/2025	Introduction	None [ slides ]
01/08/2025	Measurement and Attack	Required reading (due 9am today): Heninger, et al.: Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices, USENIX Security 2012 Koscher, et al.: Experimental Security Analysis of a Modern Automobile , IEEE Symposium on Security and Privacy 2010
Week 2
01/13/2025	Design/Build and People	Required reading (due 9am today): Geambasu, et al.: Vanish: Increasing Data Privacy with Self-Destructing Data, USENIX Security 2009 Tseng, et al.: The Tools and Tactics Used in Intimate Partner Surveillance: An Analysis of Online Infidelity Forums, USENIX Security 2020
01/15/2025	Authentication and Usability	Required reading (due 9am today): Chiasson, et al.: A Usability Study and Critique of Two Password Managers, USENIX Security 2006 Bonneau, et al.: The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes, IEEE Symposium on Security and Privacy (Oakland) 2012
01/16/2025			Project groups due (11:30pm)
Week 3
01/20/2025	No Class	Martin Luther King Jr. Day
01/22/2025	System Design and Implementation	Required reading (due 9am today): Intro + Section 1 (skip/skim Sections 2+3) of Saltzer and Schroeder: The Protection of Information in Computer Systems, Proceedings of IEEE 1975 (HTML/Screen Reader accessible version is available at http://web.mit.edu/Saltzer/www/publications/protection/) Chen, et al.: Experimental Security Analysis of the App Model in Business Collaboration Platforms, USENIX Security 2022
01/23/2025			Project proposals due (11:30pm)
Week 4
01/27/2025	Developers and Development	Required reading (due 9am today): Wermke, et al.: Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects, IEEE Symposium on Security and Privacy 2022 Egele et al.: An Empirical Study of Cryptographic Misuse in Android Applications, CCS 2013
01/29/2025	Meetings	Meet to discuss projects
01/31/2025	Meetings	Meet to discuss projects
Week 5
02/03/2025	Ecosystem Studies	Required reading (due 9am today): Motoyama, et al.: Re: CAPTCHAs – Understanding CAPTCHA-Solving Services in an Economic Context, USENIX Security 2010 Levchenko, et al.: Click Trajectories: End-to-End Analysis of the Spam Value Chain, IEEE Symposium on Security and Privacy 2011
02/05/2025	Web Security	Required reading (due 9am today): Felt, et al.: Improving SSL Warnings: Comprehension and Adherence, CHI 2015 Singanamalla, et al.: Accept the Risk and Continue: Measuring the Long Tail of Government https Adoption, IMC 2020
02/06/2025			Two security reviews due (11:30pm)
Week 6
02/10/2025	Accessibility and Systems	Required reading (due 9am today): Naseri, et al.: AccessiLeaks: Investigating Privacy Leaks Exposed by the Android Accessibility Service, PETS 2019 Jang, et al: A11y Attacks: Exploiting Accessibility in Operating Systems, CCS 2014
02/12/2025	Peer Project Workshopping	None	Project workshopping materials due (10am -- BEFORE CLASS)
Week 7
02/17/2025	No Class	Presidents' Day
02/09/2024	Project Checkpoint Presentations	None	Project checkpoint writeup due (11:30pm)
Week 8
02/24/2025	Ethics and Research with At-Risk Users	Required reading (due 9am today): Kohno, et al.: Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations, USENIX Security 2023 (Written response not required) Bellini, et al: SoK: Safer Digital-Safety Research Involving At-Risk Users , IEEE S&P 2024
02/26/2025	AI Defenses and Attacks	Required reading (due 9am today): Shan, et al: Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models, USENIX Security 2023 Hönig, et al: Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI, arXiv 2024
Week 9
03/03/2025	AI, Privacy, and LLMs	Required reading (due 9am today): Lee, et al.: "I Don't Know If We're Doing Good. I Don't Know If We're Doing Bad": Investigating How Practitioners Scope, Motivate, and Conduct Privacy Work When Developing AI Products, USENIX Security 2024 Abdelnabi, et al.: Not What You’ve Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection, AISec 2023
03/05/2025	Anonymity	Required reading (due 9am today): Freedman and Morris: Tarzan: A Peer-to-Peer Anonymizing Network Layer, CCS 2002 Dingledine, et al.: Tor: The Second-Generation Onion Router, USENIX Security 2004
03/06/2025			Project report draft due (11:30pm)
Week 10
03/10/2025	Censorship	Required reading (due 9am today): Burnett and Feamster: Encore: Lightweight Measurement of Web Censorship with Cross-Origin Requests, SIGCOMM 2015 Fan, et al.: "Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China" (subject to change, no URL yet)
03/12/2025	No Class	Visit Days (PhD Program)
Finals Week
03/18/2025 (Tuesday) 10am-1pm - and - 03/19/2025 (Wednesday) 2:30-4:20pm	Final Project Presentations	(You will be asked to attend 3 presentations in addition to your own.)
03/19/2025			Final project report due (11:30pm)