CSE P 590 (Winter 2007)

Computer Security

Time: Thursdays, 6:30pm--9:30pm
Location: EEB 045

Instructors, Teaching Assistants, and Office Hours

Instructor: Tadayoshi Kohno.
Email: yoshi at cs.washington.edu.
Office Hours: Tuesdays, 2:30--3:20pm
Instructor: John Manferdelli.
Email: jmanfer at microsoft.com.
Office Hours: Thursdays, 5--6:15pm, CSE 444. (None on Feb 1, 2007.)
TA: Anna Gringauze.
Email: annagrin@cs.washington.edu.
Office Hours: Thursdays, 4:30--5:30pm, CSE 216.
TA: Thach Nguyen.
Email: ncthach at cs.washington.edu.

Textbooks

Required: Computer Security (2nd Edition) by Dieter Gollmann.
Recommended: Information Security by Mark Stamp.
Recommended: Security Engineering by Ross Anderson. Available online at http://www.cl.cam.ac.uk/~rja14/book.html.
Recommended: Handbook of Applied Cryptography by Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone. Available online at http://www.cacr.math.uwaterloo.ca/hac/.

Wiki

The URL for the class Wiki is: https://cubist.cs.washington.edu/ComputerSecurity/index.php/Main_Page.
You should use the Wiki to discuss any questions you have about the homework assignments, as well as any questions you have about the material covered in class. You will also be required to post your product reviews on the class Wiki.
IMPORTANT: You should create an account for yourself on the class Wiki by the start of class on Jan 18. After Jan 18, we will restrict edit access to only those who have created accounts.

Mail

There is a course mailing list; go here to sign up. We plan to only use the mailing list for announcements. Please use the Wiki to discuss the lectures, the homeworks, etc. We will monitor the discussion on the Wiki. IMPORTANT: Sign up for the class mailing list ASAP.
If you need to send us (the instructors and TAs) an email, please (1) send the email to all of us and (2) prepend the subject line with: "[CSEP590]".

Grading

The following list the number of points (out of 400) that will be allocated for each of the course requirements. To compute your grade for the course, divide your total number of points by 100 and round.

200 points (50%) --- Eight homeworks assignments.
- Approximately 25 points for each homework assignment.
- You will submit your homeworks electronically using the UW Catalyst Tools. IMPORTANT: Please make sure that you can access the Catalyst Tools ASAP.
- To receive credit, you must turn in your homework before class on the day the homework is due.
84 points (21%) --- Three product reviews and in-class presentations.
- 20 points for each written review.
- 8 points for each presentation.
- You will automatically lose 5 points if the written review is not added to the class Wiki on time, and 1 point for every two additional hours that your review is late (up to a total of minus 10 points).
- Please read this page to understand the product reviews portion of the course requirements.
36 points (9%) --- Six in-class evaluations of other students' presentations.
- 6 points for each evaluation.
- You must turn in your evaluations at the end of class in order to receive credit.
80 points (20%) --- Final exam --- take home, due 6:30pm on March 15. Because of the snow day, the final is now a take home. Please submit it using the Catalyst tool (link above).

Schedule (Subject to Change)

Date	Topics, readings, and assignments
01/04/2007	Topic: Overview, Threat Analysis, and Ethics. Lecturer: John Manferdelli. Guest Lecturer: David Aucsmith. Assigned Readings: None. Homework Assignment: None.
01/11/2007	No class. Snow. Homework Assignments: Everyone: Here. Homework Assignments: Members of Groups A.n (for all n): Add product review to class Wiki by 12:01am.
01/18/2007	Topic: Access Control, Session 1. Lecturer: John Manferdelli. Guest Lecturer: Brian LaMacchia. Assigned Readings: See assignment. Homework Assignments: Everyone: None.
01/25/2007	Topic: Human Interactions. Lecturer: Tadayoshi Kohno. Guest Lecturer: None. Assigned Readings: See assignment. Homework Assignments: Everyone: ORIGINAL VERSION Here. Homework Assignments: Everyone: REVISED VERSION Here. Please note the following additional changes. The Eurocrypt paper is still marked with the SID ending in 20 (dmr), not the one ending in 19 (ken). The cryptographers group should include dmr. The HW doesn't mention which file is Ken's paper. The name is confusing because the question says it is the paper for Eurocrypt 2008, but the filename is Eurocrypt2007.pdf. (If you'd like, you can also use /ken/myaeswork.pdf as Ken's paper since the original problem didn't specify.) Homework Assignments: Members of Groups B.n (for all n): Add product review to class Wiki by 12:01am.
02/01/2007	Topic: Code Vulnerabilities, Session 1. Lecturer: Tadayoshi Kohno. Guest Lecturer: None. Assigned Readings: See assignment. Homework Assignments: Everyone: Here. Homework Assignments: Members of Groups A.n (for all n): Add product review to class Wiki by 12:01am. Homework Assignments: Members of Groups C.n (for all n): Add product review to class Wiki by 12:01am.
02/08/2007	Topic: Applied Cryptography. Lecturer: John Manferdelli. Guest Lecturer: None. Assigned Readings: See assignment. Homework Assignments: Everyone: Here. Here is the associated HWclass4Source.tgz file. Here is the new exploit3-new.c file. Here is a tutorial for a variant of problem 4.7. Homework Assignments: Members of Groups B.n (for all n): Add product review to class Wiki by 12:01am.
02/15/2007	Topic: Network Security and Protocols. Lecturer: Tadayoshi Kohno. Guest Lecturer: Paul Leach. Assigned Readings: See assignment. Homework Assignments: Everyone: Here. Homework Assignments: Members of Groups C.n (for all n): Add product review to class Wiki by 12:01am.
02/22/2007	Topic: Distributed Security, DRM, and Privacy (including Access Control, Session 2). Lecturer: John Manferdelli. Guest Lecturer: None. Assigned Readings: See assignment. Homework Assignments: Everyone: Here. Homework Assignments: Members of Groups A.n (for all n): Add product review to class Wiki by 12:01am.This is now due on 03/07/2007.
03/01/2007	Topic: Assurance, Security Models, and Code Vulnerabilities, Session 2. Lecturer: Tadayoshi Kohno. Guest Lecturer: None. Assigned Readings: See assignment. Homework Assignments: Everyone: Here. Homework Assignments: Members of Groups B.n (for all n): Add product review to class Wiki by 12:01am. This is now due on 03/07/2007.
03/08/2007	Topic: Hot Topics. Lecturers: Tadayoshi Kohno and John Manferdelli. Guest Lecturers: Josh Benaloh and David Molnar. Assigned Readings: See assignment. Homework Assignments: Everyone: Here. Homework Assignments: Members of Groups A.n and B.n (for all n): Add product review to class Wiki by 12:01am on 03/07/2007. There will be no presentation component in class on 03/08/2007. Homework Assignments: Members of Groups C.n (for all n): Add product review to class Wiki by 12:01am on 03/08/2007. There will be no presentation component in class on 03/08/2007.
03/15/2007	Topic: Take Home Final. FINALS WEEK --- NO CLASS TODAY. Final available: Here.

yoshi@cs.washington.edu