CS 526 Lectures, Handouts & Homeworks

(Fall 2014)

	Tuesday	Thursday
Week 1 (Aug 25 -- Aug 29)	Overview of the course (PPT) Readings Information Security on Wikipedia	Cryptography: Classical Ciphers (PPT) Readings Cryptography on Wikipedia
Week 2 (Sept 1 -- Sept 5)	Cryography: One-Time Pad, stream ciphers, etc. (PPT) A note on perfect secrecy. Readings (on wikipedia) One-Time Pad Information Theoretic Security Stream cipher Pseudorandom number generator	Cryography: Block cipher, etc. (PPT) Readings (on wikipedia) Semantic Security Block Cipher Block cipher modes of operation Data Encryption Standard Advanced Encryption Standard
Week 3 (Sept 8 -- Sept 12)	Watch recorded lecture in the classroom during lecture time. Cryptographic hash functions and message authentication code. (PPT) Readings (on wikipedia) Cryptographic hash function Message Authentication Code	No new slides. Continue with previous topic.
Week 4 (Sept 15 -- Sept 19)	Quiz 1, covering topics 1-5. Public key cryptography. (PPT) Readings Public key cryptography RSA Diffie-Hellman ElGamal New Directions in Cryptography	User authentication. (PPT) Readings Password Password strength Password cracking Password salts Trusted Path One-time Password
Week 5 (Sept 22 -- Sept 26)	OS Security Basics & Unix Access control. (PPT) Readings CPU modes System call Filesystem permissions UNIX File and Directory Permissions and Modes Unix file permissions	No new slides. Continue with previous topic.
Week 6 (Sept 29 -- Oct 3)	Software Vulnerabilities (PPT) Readings Privilege escalation Directory traversal Time-of-check-to-time-of-use Stack buffer overflow Buffer overflow protection Format string attack Integer overflow Smashing The Stack For Fun And Profit by Aleph One	No new slides. Continue with previous topic.
Week 7 (Oct 6 -- Oct 10)	Malwares (PPT) Readings Malware Computer virus Computer worm Botnet Spyware Rootkit	Quiz 2 No new slides. Continue with previous topic.
Week 8 (Oct 13 -- Oct 17)	No class. (October break)	Web Security (1). (PPT) Readings HTTP Cookie Same Origin Policy Cross Site Scripting Cross Site Request Forgery
Week 9 (Oct 20 -- Oct 24)	Mid term exam. Covering topics 1-10.	Project 2 assigned. Web Security (2). (PPT) Slides on SQL injection from Prof. V. N. Venkatakrishnan at UIC Slides on Side Channel attacks Optional Readings Bandhakavi et al.: CANDID : Preventing SQL Injection Attacks Using Dynamic Candidate Evaluations Chen et al.: Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow
Week 10 (Oct 27 -- Oct 31)	Secure Software (PPT) Basics of Secure Design, Development, and Test by Microsoft	Secure communication. (PPT) Secure communication. Readings Needham-Schroeder protocol (only the symmetric key part) Public Key Certificate Transport Layer Security HTTP Secure
Week 11 (Nov 3 -- Nov 7)	Watch recorded lecture in the classroom during lecture time. Malware Defense (PPT) Slides on "The Base Rate Fallacy and its Implications for the Difficulty of Intrusion Detection" Optional Reading	Watch recorded lecture in the classroom during lecture time. Discretionary Access Control(PPT) Readings Discretionary Access Control The Confused Deputy Problem
Week 12 (Nov 10 -- Nov 14)	The Bell LaPadula Model(PPT) Readings The Bell LaPadula Model Looking Back at the Bell-La Padula Model	Non-interference and non-deducability(PPT) Optional Readings Goguen and Meseguer. "Security Policies and Security Models".
Week 13 (Nov 17 -- Nov 21)	Quiz 3. Covering Topics 11-15. Integrity Protection Models(PPT) Optional Readings A Comparison of Commercial and Military Computer Security Policies Biba: Integrity Considerations for Secure Computer Systems	Trusted Operating Systems and Assurance(PPT)
Week 14 (Nov 24 -- Nov 28)	Data Privacy(PPT) Optional reading t-Closeness: Privacy Beyond k-Anonymity and l-Diversity. Membership Privacy: A Unifying Framework For Privacy Definitions	No class. (Thanksgiving.)
Week 15 (Dec 1 -- Dev 5)	Watch recorded lecture in classroom. No new slides. Continue with the previous topic.	Quiz 4 (Covering topics 16-21) Role Based Access Control (PPT) Readings Role Based Access Control Models
Week 16 (Dec 8 -- Dec 12)	Topic 19: DNS Security (PPT) Optional Readings Steve Friedl: An Illustrated Guide to the Kaminsky DNS Vulnerability Dan Kaminsky: Presentation at BlackHat 2009