| Week | Day | Date | Topic | Reading | 5430 | 5431 | |
|---|---|---|---|---|---|---|---|
| Introduction to Security | |||||||
| 1 | Wed | Jan 24 | Security Policies [slides] [pdf] | [Bishop, Ch. 1.1-1.3] | |||
| Fri | Jan 26 | No Class | Intro to 5431 | ||||
| 2 | Mon | Jan 29 | Security Principles | [Schneider, Ch. 1],
[Saltzer-Schroeder] |
|||
| Wed | Jan 31 | No Class | |||||
| Fri | Feb 2 | Security Principles | |||||
| 3 | Mon | Feb 5 | Threats [slides] [pdf] | ||||
| Wed | Feb 7 | Beyond Threats [slides] [pdf] | M0 DUE | ||||
| Fri | Feb 9 | No Class | |||||
| 4 | Mon | Feb 12 | No Class | A0 DUE | |||
| Wed | Feb 14 | No Class | M1 DUE | ||||
| Fri | Feb 16 | No Class | |||||
| Cryptography | |||||||
| 5 | Mon | Feb 19 | February Break, No Class | ||||
| Wed | Feb 21 | Symmetric Cryptography [slides] [pdf] | [Bishop, Ch. 8.1-8.2,8.4] | ||||
| Fri | Feb 23 | No Class | |||||
| 6 | Mon | Feb 26 | Protocol Design | [notes] | A1 DUE | ||
| Wed | Feb 28 | Key Management | [notes] | ||||
| Fri | Mar 2 | SNOW DAY (no class) | |||||
| 7 | Mon | Mar 5 | Public-Key Cryptography [slides] [pdf] | [Bishop, Ch. 8.4,9.5] | |||
| Wed | Mar 7 | Secure Channels [slides] [pdf] | M2 DUE | ||||
| Fri | Mar 9 | No Class | Demos | ||||
| Authentication | |||||||
| 8 | Mon | Mar 12 | Human Auth. [slides] [pdf] | [Schneider, Ch. 5] | A2 DUE | ||
| Wed | Mar 14 | Passwords [slides] [pdf] | |||||
| Fri | Mar 16 | Tokens [slides] [pdf] | |||||
| 9 | Mon | Mar 19 | Certificates [slides] [pdf] | [Bishop, Ch. 9.3,9.4] | |||
| Authorization | |||||||
| Wed | Mar 21 | DAC [slides] [pdf] | [Schneider, Ch. 7] [Bishop, Ch. 14] | ||||
| Fri | Mar 23 | Capabilities [slides] [pdf] | [Schneider, Ch. 7.3] [Bishop, Ch. 14.2] | ||||
| 10 | Mon | Mar 26 | MAC [slides] [pdf] | [Bishop, Ch. 5-6.2] | A3 DUE | ||
| Wed | Mar 28 | MAC [slides] [pdf] | [Bishop, Ch. 6.3-7] | M3 DUE | |||
| Fri | Mar 30 | No Class | Demos | ||||
| Mon | Apr 2 | Spring Break, No Class | |||||
| Wed | Apr 4 | Spring Break, No Class | |||||
| Fri | Apr 6 | Spring Break, No Class | |||||
| 11 | Mon | Apr 9 | Information Flow [slides] [pdf] | [notes] [Sabelfeld-Sands] | |||
| Wed | Apr 11 | Static IFC [slides] [pdf] | [notes] | ||||
| Fri | Apr 13 | No Class | |||||
| 12 | Mon | Apr 16 | Dynamic IFC [slides] [pdf] | [notes] [TaintDroid] [Flume] | Audit | ||
| Wed | Apr 18 | Logging [slides] [pdf] | [Bishop, Ch. 21] | ||||
| Fri | Apr 20 | No Class | |||||
| 13 | Mon | Apr 23 | Reviewing Logs [slides] [pdf] | [Pfleeger & Pfleeger Ch. 15.12] | A4 DUE | ||
| Wed | Apr 25 | Blockchains [slides] [pdf] | M4 DUE | ||||
| Fri | Apr 27 | No Class | Demos | ||||
| Applied Security | |||||||
| 14 | Mon | Apr 30 | Network Security [slides] [pdf] | [notes] | |||
| Wed | May 2 | Web Security [slides] [pdf] | [notes] | ||||
| Fri | May 4 | No Class | |||||
| 15 | Mon | May 7 | Privacy [slides] [pdf] | [notes] | A5 DUE | ||
| Wed | May 9 | Trusted Hardware [slides] [pdf] | [notes] | M5 DUE | |||