CSE 227

Date	Topic
Sept 26	Class introduction
Oct 1	Low-level Vulnerabilities and Exploits: Low-Level Software Security by Example (just this chapter) Handbook of Information and Communication Security 2010 and Exploit Programming: From Bufer Overflows to "Weird Machines" and Theory of Computation, USENIX ;login, 2011.
Oct 3	Vulnerability finding Evaluating Fuzz Testing, ACM CCS '18. and EXE: Automatically Generating Inputs of Death, CCS '06. Related papers [not assigned]: A Few Billion Lines of Code LAter: Using Static Analaysis to Find Bugs in the Real World, CACM 2010 and Lessons for Building Static Analysis Tools at Google, CACM 2018.
Oct 8	Low-level Software Defenses Control-Flow Integrity: Principles, Implementations, and Applications,” ACM CCS 2005 and NOZZLE: A Defense Against Heap-spraying Code Injection Attacks,” USENIX Sec. 2009. Related papers [not assigned]: Counterfeit Object-oriented Programming IEEE Security and Privacy '15 and ROP is Still Dangerous: Breaking Modern Defenses, USENIX Sec '14.
Oct 10	Software vulnerabilities in aggregate Milk or Wine: Does Software Security Improve with Age?” USENIX Sec. 2006. and Before We Knew It: An Empirical Study of Zero-Day Attacks in the Real World, ACM CCS 2012. Related papers [not assigned]: An Empirical Study of Vulnerability Rewards Programs, USENIX Sec '13, Zero Days, Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits, RAND report and Is finding security holes a good idea?” IEEE S&P 2005.
Oct 15	Cancelled -- Prof sick
Oct 17	Side Channels I: Keyboard Acoustic Emanations Revisited, CCS 2005 and Lest we Remember: Cold Boot Attacks on Encryption Keys, USENIX Security 2008.
Oct 22	Other Channels II: Exploioting the DRAM rowhammer bug to gain kernel privileges, ?Google Project Zero Blog post and Neuroscience Meets Cryptography: Designing Crypto Primitives Secure against Rubber Hose Attacks, USENIX Security '12.
Oct 24	Ecosystem I: Click Trajectories: End-to-End Analysis of the Spam Value Chain IEEE S&P 2011 and Re: CAPTCHAs -- Understanding CAPTCHA-Solving from an Economic Context USENIX Sec. 2010.
Oct 29	Cancelled. Professor at CSLAW.
Oct 31	Ecosystem II: Examining the Impact of Website Take-down on Phishing, APWG eCrime Summit, 2007. and The Underground Economy of Fake Antivirus Software, WEIS 2011. Related papers [not assigned]: Pricless: the Role of Payments in Adbuse-advertised Goods, CCS 2012 and Empirically Characterizing Domain Abuse and the Revenue Impact of Blacklisting, WEIS 2014.
Nov 5	SSL/TLS I: The Most Dangerous Code in the World: Validating SSL Certificates in Non-Browser Software, CCS 2012 and Analysis of the HTTPS Certificate Ecosystem, IMC 2013.
Nov 7	SSL/TLS II: The Security Impact of HTTPS Interception, NDSS 2017 and DROWN: Breaking TLS using SSLv2, USENIX Security '16.
Nov 12	Usability and human factors in security “A Framework for Reasoning about the Human in the Loop, UPSec '08, and Allice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness, USENIX Security '13. Related papers [not assigned]: Users are not the Enemy, CACM v42no12, and So Long, and No Thanks for the Externalities: The Rational Rejection of Security Advice by Users, NPSW '09, and The Psychology of Security, CACM v51no4.
Nov 14	Usability II Network-in-a-Box: How to Set Up A Secure Wireless Network in Under a Minute, USENIX Security '04, and Why Johnny Can't Encrypt: a Usability Evaluation of PGP 5.0, USENIX Sec '99 Related papers [not assigned]: The Emperor's New Security Indicators: An evaluation of website authentication and the effect of role playing on usability studies, IEEE Security and Privacy '07
Nov 19	Cyber-Physical Security: Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses, IEEE Security and Privacy '08 and Comrehensive Experimental Analyses of Automative Attack Surfaces, USENIX Security '11.
Nov 21	Watching the watchers: A Systematic Analysis of the Juniper Dual EC incident and When Governments Hack Opponents: A Look at Actors and Technology
Nov 26	Web Privacy I: Internet Jones and the Raiders of the Lost Trackers: An Archaelogical Study of Web Tracking from 1996 to 2016 and and XRay: Enhancing the Web's Transparency with Differential Correlation
Nov 28	Cancelled -- Thanksgiving holiday
Dec 3	AISec Audio Adversarial Examples>; Targeted Attacks on Speech-to-Text, DLS18, andObfuscated Gradients Give a False Sense of Security, ICML18/td>
Dec 5	Science of Security: Science, Security and the Elusive Goal of Security as a Scientific Pursuit, IEEE Security and Privacy '17
Dec 11	Final presentations: 11:30-2:20pm 10 minutes max. Send me slides by 9am same day (ppt, odp, or pdf accepted) so we can use one laptop. Presentation order TBD:

Sept 26

Oct 1

Low-level Vulnerabilities and Exploits:
Low-Level Software Security by Example (just this chapter) Handbook of Information and Communication Security 2010 and Exploit Programming: From Bufer Overflows to "Weird Machines" and Theory of Computation, USENIX ;login, 2011.

Oct 3

Vulnerability finding
Evaluating Fuzz Testing, ACM CCS '18. and EXE: Automatically Generating Inputs of Death, CCS '06.

Oct 8

Low-level Software Defenses
Control-Flow Integrity: Principles, Implementations, and Applications,” ACM CCS 2005 and NOZZLE: A Defense Against Heap-spraying Code Injection Attacks,” USENIX Sec. 2009.

Related papers [not assigned]:
Counterfeit Object-oriented Programming IEEE Security and Privacy '15 and ROP is Still Dangerous: Breaking Modern Defenses, USENIX Sec '14.

Oct 10

Software vulnerabilities in aggregate
Milk or Wine: Does Software Security Improve with Age?” USENIX Sec. 2006. and Before We Knew It: An Empirical Study of Zero-Day Attacks in the Real World, ACM CCS 2012.
Related papers [not assigned]:
An Empirical Study of Vulnerability Rewards Programs, USENIX Sec '13, Zero Days, Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits, RAND report and Is finding security holes a good idea?” IEEE S&P 2005.

Oct 15

Cancelled -- Prof sick

Oct 17

Side Channels I: Keyboard Acoustic Emanations Revisited, CCS 2005 and Lest we Remember: Cold Boot Attacks on Encryption Keys, USENIX Security 2008.

Oct 22

Other Channels II: Exploioting the DRAM rowhammer bug to gain kernel privileges, ?Google Project Zero Blog post and Neuroscience Meets Cryptography: Designing Crypto Primitives Secure against Rubber Hose Attacks, USENIX Security '12.

Oct 24

Ecosystem I: Click Trajectories: End-to-End Analysis of the Spam Value Chain IEEE S&P 2011 and Re: CAPTCHAs -- Understanding CAPTCHA-Solving from an Economic Context USENIX Sec. 2010.

Oct 29

Cancelled. Professor at CSLAW.

Oct 31

Ecosystem II: Examining the Impact of Website Take-down on Phishing, APWG eCrime Summit, 2007. and The Underground Economy of Fake Antivirus Software, WEIS 2011.