CSE 227

Date	Topic
Sept 27	Class introduction
Sep 29	Low-level Vulnerabilities and Exploits: Low-Level Software Security by Example (just this chapter) Handbook of Information and Communication Security 2010 and Exploit Programming: From Bufer Overflows to "Weird Machines" and Theory of Computation, USENIX ;login, 2011.
Oct 4	Vulnerability finding Evaluating Fuzz Testing, ACM CCS '18. and EXE: Automatically Generating Inputs of Death, CCS '06. Related papers [not assigned]: A Few Billion Lines of Code Later: Using Static Analaysis to Find Bugs in the Real World, CACM 2010 and Lessons for Building Static Analysis Tools at Google, CACM 2018.
Oct 6	Low-level Software Defenses Control-Flow Integrity: Principles, Implementations, and Applications,” ACM CCS 2005 and NOZZLE: A Defense Against Heap-spraying Code Injection Attacks,” USENIX Sec. 2009. Related papers [not assigned]: Counterfeit Object-oriented Programming IEEE Security and Privacy '15 and ROP is Still Dangerous: Breaking Modern Defenses, USENIX Sec '14.
Oct 11	Software vulnerabilities in aggregate Milk or Wine: Does Software Security Improve with Age?” USENIX Sec. 2006. and Before We Knew It: An Empirical Study of Zero-Day Attacks in the Real World, ACM CCS 2012. Related papers [not assigned]: An Empirical Study of Vulnerability Rewards Programs, USENIX Sec '13, Zero Days, Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits, RAND report and Is finding security holes a good idea?” IEEE S&P 2005.
Oct 13	Side Channels I: Keyboard Acoustic Emanations Revisited, CCS 2005 and Lest we Remember: Cold Boot Attacks on Encryption Keys, USENIX Security 2008.
Oct 18	Other Channels II: Exploioting the DRAM rowhammer bug to gain kernel privileges, ?Google Project Zero Blog post and Neuroscience Meets Cryptography: Designing Crypto Primitives Secure against Rubber Hose Attacks, USENIX Security '12.
Oct 20	Ecosystem I: Click Trajectories: End-to-End Analysis of the Spam Value Chain IEEE S&P 2011 and Re: CAPTCHAs -- Understanding CAPTCHA-Solving from an Economic Context USENIX Sec. 2010.
Oct 25	Ecosystem II: Examining the Impact of Website Take-down on Phishing, APWG eCrime Summit, 2007. and The Underground Economy of Fake Antivirus Software, WEIS 2011. Related papers [not assigned]: Pricless: the Role of Payments in Adbuse-advertised Goods, CCS 2012 and Empirically Characterizing Domain Abuse and the Revenue Impact of Blacklisting, WEIS 2014.
Oct 27	SSL/TLS I: The Most Dangerous Code in the World: Validating SSL Certificates in Non-Browser Software, CCS 2012 and Analysis of the HTTPS Certificate Ecosystem, IMC 2013.
Nov 1	SSL/TLS II: The Security Impact of HTTPS Interception, NDSS 2017 and DROWN: Breaking TLS using SSLv2, USENIX Security '16.
Nov 3	Class canclled
Nov 8	Usability and human factors in security “A Framework for Reasoning about the Human in the Loop, UPSec '08, and Allice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness, USENIX Security '13. Related papers [not assigned]: Users are not the Enemy, CACM v42no12, and So Long, and No Thanks for the Externalities: The Rational Rejection of Security Advice by Users, NPSW '09, and The Psychology of Security, CACM v51no4.
Nov 10	Usability II Network-in-a-Box: How to Set Up A Secure Wireless Network in Under a Minute, USENIX Security '04, and Why Johnny Can't Encrypt: a Usability Evaluation of PGP 5.0, USENIX Sec '99 Related papers [not assigned]: The Emperor's New Security Indicators: An evaluation of website authentication and the effect of role playing on usability studies, IEEE Security and Privacy '07
Nov 15	Cyber-Physical Security: Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses, IEEE Security and Privacy '08 and Comrehensive Experimental Analyses of Automative Attack Surfaces, USENIX Security '11.
Nov 17	Watching the watchers: A Systematic Analysis of the Juniper Dual EC incident and When Governments Hack Opponents: A Look at Actors and Technology
Nov 22	Web Privacy I: Internet Jones and the Raiders of the Lost Trackers: An Archaelogical Study of Web Tracking from 1996 to 2016 and and XRay: Enhancing the Web's Transparency with Differential Correlation
Nov 24	Cancelled -- Thanksgiving holiday
Nov 29	AISec Audio Adversarial Examples>; Targeted Attacks on Speech-to-Text, DLS18, andObfuscated Gradients Give a False Sense of Security, ICML18/td>
Dec 1	Science of Security: Science, Security and the Elusive Goal of Security as a Scientific Pursuit, IEEE Security and Privacy '17
Dec 10 (Finals period)	Final presentations: 8:00am-10:59am (sorry) 10 minutes max. Send me slides by 8pm the night before (ppt, odp, or pdf accepted) so we can use one laptop.

Sept 27

Sep 29

Low-level Vulnerabilities and Exploits:
Low-Level Software Security by Example (just this chapter) Handbook of Information and Communication Security 2010 and Exploit Programming: From Bufer Overflows to "Weird Machines" and Theory of Computation, USENIX ;login, 2011.

Oct 4

Vulnerability finding
Evaluating Fuzz Testing, ACM CCS '18. and EXE: Automatically Generating Inputs of Death, CCS '06.

Oct 6

Low-level Software Defenses
Control-Flow Integrity: Principles, Implementations, and Applications,” ACM CCS 2005 and NOZZLE: A Defense Against Heap-spraying Code Injection Attacks,” USENIX Sec. 2009.

Related papers [not assigned]:
Counterfeit Object-oriented Programming IEEE Security and Privacy '15 and ROP is Still Dangerous: Breaking Modern Defenses, USENIX Sec '14.

Oct 11

Software vulnerabilities in aggregate
Milk or Wine: Does Software Security Improve with Age?” USENIX Sec. 2006. and Before We Knew It: An Empirical Study of Zero-Day Attacks in the Real World, ACM CCS 2012.
Related papers [not assigned]:
An Empirical Study of Vulnerability Rewards Programs, USENIX Sec '13, Zero Days, Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits, RAND report and Is finding security holes a good idea?” IEEE S&P 2005.

Oct 13

Side Channels I: Keyboard Acoustic Emanations Revisited, CCS 2005 and Lest we Remember: Cold Boot Attacks on Encryption Keys, USENIX Security 2008.

Oct 18

Other Channels II: Exploioting the DRAM rowhammer bug to gain kernel privileges, ?Google Project Zero Blog post and Neuroscience Meets Cryptography: Designing Crypto Primitives Secure against Rubber Hose Attacks, USENIX Security '12.

Oct 20

Ecosystem I: Click Trajectories: End-to-End Analysis of the Spam Value Chain IEEE S&P 2011 and Re: CAPTCHAs -- Understanding CAPTCHA-Solving from an Economic Context USENIX Sec. 2010.

Oct 25

Ecosystem II: Examining the Impact of Website Take-down on Phishing, APWG eCrime Summit, 2007. and The Underground Economy of Fake Antivirus Software, WEIS 2011.

Related papers [not assigned]:
Pricless: the Role of Payments in Adbuse-advertised Goods, CCS 2012 and Empirically Characterizing Domain Abuse and the Revenue Impact of Blacklisting, WEIS 2014.

Oct 27

SSL/TLS I: The Most Dangerous Code in the World: Validating SSL Certificates in Non-Browser Software, CCS 2012 and Analysis of the HTTPS Certificate Ecosystem, IMC 2013.

Nov 1