CSE 127: Computer Security
Syllabus
Date |
Topic |
Apr 2 |
Introduction |
Apr 4 |
Security Foundations
Read by today: Thompson, Reflections on Trusting Trust |
Apr 9 |
Low-level Software Security I: Buffer Overflows
Read by today: Smashing the Stack for Fun and Profit by Aleph One.
Optional: Richard Bonichon's Basic exploitation techniques slides
|
Apr 11 |
Low-level Software Security II: Format Strings, Shellcode and Stack protection
Read by today: Memory Errors: The Past, the Present, and the Future by van der Veen et al.
|
Apr 16 |
Low-level Software Security III: Integer overflow, ROP and CFI |
Apr 18 |
Low-level Software Security IV: Heap attacks
Read by today: Understanding glibc malloc by sploitfun. |
Apr 23 |
Crypto I
Security Engineering, Chapter 5
|
Apr 25 |
Crypto II: PKI and side channels |
Apr 30 |
Midterm Exam |
May 2 |
User authentication
Security Engineering Chap 2.4 and 2.5
|
May 7 |
Class cancelled (prof sick) |
May 9 |
Web Security I
Deian Stefan's lecture notes on CSRF, XSS and SQLi, SQL injection
|
May 14 |
Web Security II
|
May 16 |
Network Security I
Security Problems in the TCP/IP Protocol Suite, and A Look Back at 'Security Problems in the TCP/IP Protocol Suite'
|
May 21 |
Class cancelled
|
May 23 |
Network Security II
An Illusgtrated Guide to the Kaminsky DNS Vulnerability
|
May 28 |
System Security I
Saltzer and Shroeder, The Protection of Information in Computer Systems,
Jaeger, Operating System Security
|
|
May 30 |
Systems Security II |
June 4 |
Hardware Security: Spectre, Meltdown and Rowhammer
Also see: Schwarz and Lipps Spectre/Meltdown talk |
June 6 |
Malware and Cybercrime
|
June 10 |
Final Exam: 3:00pm–5:59pm |