CS 491/591: Computer Security and Privacy, Spring 2009

• test4.pdf
• test4.odt

• test2.pdf
• test2.doc
• test2.odt

• Friday, 27 February
• Wednesday, 25 March
• Friday, 17 April
• Wednesday, 6 May

• lab1.pdf
• lab1.pdf.ciphertext
• secret.ciphertext
• sdes16.cc

• lab1.pdf (Hasn't changed, plaintext links to the same file.)
• lab1.pdf.ciphertextv2 (New ciphertext, same key, new EP and S-boxes.)
• secret.ciphertextv2 (New ciphertext, same key, new EP and S-boxes.)
• sdes16v2.cc (Same algorithm, new EP and S-boxes).

• 3 days on intro to the course and ethics.
• 2 days on history of crypto, symmetric key cryptography, and linear and differential cryptanalysis.
• End of January.
• 2 days on assymetric crypto, including RSA, identity-based encryption, Shor's algorithm, and quantum crypto.
• 1 day on hashing, MAC, authentication, dictionary attacks, salting, password file shadowing
• 1 day on policy, confidentiality, integrity, availability, hybrid policies, access control matrices, take-grant models, RBAC, and MAC
• 2 days on typical UNIX system security/authentication mechanisms (virtual memory, filesystems, signals, SELinux, etc.)
• 1 day on concurrency vulnerabilities and early vulnerability analysis papers (Saltzer and Schroeder, Ware, and Anderson, etc.)
• 1 day on memory corruption exploits, escaping chroot jails
• 1 day on rootkits and kernel exploits
• 1 day on the Windows Access Control Model
• 1 day of review for Test 1
• Test 1
• End of February
• 3 days of going through various network protocols and their security issues (ARP, DNS, BGP, TCP/IP, UDP, IPSec, ICMP, DHCP, FTP/Telnet vs. SSH, and SMTP and IMAP)
• 1 day of talking about packet filtering, IDS, and IPS systems, including RST injection
• 1 day of learning all about nmap
• 1 day on insertion, evasion, and DoS attacks
• 2 days of review
• Test 2
• Almost the end of March
• 3 days on information flow (basic information theory, Dennings lattice model, noninterference, the unwinding theorem, the confinement problem, dynamic and static information flow tracking, covert channel analysis, timing channels, inference channels)
• 2 days on anomaly detection and biologically-inspried approaches to computer and network security
• 1 day on web security (SQL injections attacks, cross-site scripting, etc.)
• 1 day on the security of Mac vs. PC vs. Linux
• 1 day of review
• Test 3 on 17 April
• 3 days on Internet censorship and privacy issues, including privacy-preserving networks such as Tor, censorship technologies, and Internet measurement issues such as routing, tunneling, and protocol dynamics
• 3 days on malicious code, including worms, viruses, botnets, polymorphism, metamorphism, appearance vs. behavior-based analysis, and macro viruses and recombination
• 1 Day of review for Test 4
• Test 4 on 6 May
• 1 day to review for the final

• Linear and/or differential cryptanalysis (probability theory, issues in symmetric cryptosystem design)
• Filesystem race conditions (concurrency bugs, filesystems)
• Using nmap (sockets, network protocols, firewall configuration)
• ARP poisoning (Ethernet)
• DNS spoofing and poisoning (DNS)
• Insertion and evasion (TCP/IP, intrusion detection)
• Virus obfuscation (malware detection, string matching algorithms)
• Memory corruption and/or web app exploits (secure programming in C or other languages)
• Using fuzzing tools to discover vulnerabilities (debugging)
• Whatever you are interested in, e-mail me if you have ideas