See the fall 2006 academic calendar for add/drop deadlines, etc.

Week of

Day

Topic

Reading

Lec. notes

Milestones

Aug 28

M

Introduction, basic concepts

Anderson 1, Saltzer and Schroeder '75

W

Ethics and responsibility

Thompson '84

F

No class

Sep 4

M

No class (LABOR DAY)

W

Voting system security

Kohno et al. '04

PDF

VotingProject out!

F

No class

Sep 11

M

No class (DSW out of town)

W

Crypto intro

Anderson 5.1-5.6

PDF

F

Crypto intro + protocols

Anderson 2, 5.7

PDF

Sep 18

M

Crypto protocols 2

HAC 12, Cryptyc, Abadi96, Burrows89

PDF

W

Crypto primitives

HAC 6–9, 11

PDF

F

No class

Due: VotingProject Phase 1, 11:59pm

Sep 25

M

Formalizing cryptography

Goldwasser & Bellare ch. 5–6; see also Bellare98

PDF

W

Formalizing cryptography 2

G&B ch. 8

PDF

F

No class

Due: VotingProject Phase 2 (11:59p)

Oct 2

M

Final project introduction (moved up!)

W

OS security basics

Lampson71, ClarkWilson87, Anderson: read 3–4, skim 7, 9

F

OS security architectures

Plan 9, KeyKOS/KeySAFE

Oct 9

M

Common OS vulnerabilities

Provos02 (OpenSSH)

W

No class (DSW out of town)

F

No class (DSW out of town)

Oct 16

M

No class (MIDTERM RECESS)

W

No class (DSW out of town)

(Cancelled: VotingProject Phase 3)

F

No class (DSW out of town)

Oct 23

M

Networking: TCP/IP, DNS

Anderson 18.1-3

W

Viruses, spam, intrusion detection

Anderson 18.4-5, Vixie's Spam Page, CAUCE, Paul Graham's Plan for Spam

Due: Final project proposals

F

No class

Oct 30

M

Distributed / peer-to-peer security (Byzantine failures)

W

Distributed / peer-to-peer security (Freeloading / incentives)

F

No class

Nov 6

M

Guest lecture: Graham Hull

W

Modern programming language basics

Specifying and checking software workshop (many overview talks)

Due: Project status reports

F

No class

Nov 13

M

Agents & mobile code

W

Smart cards & tamper resistance

Anderson 14, iButton security local mirror (section 2), Bunnie's Xbox hacks

F

No class

Nov 20

M

Tempest (& Smart Tempest)

Unofficial TEMPEST page, Anderson 15

W

No class

F

No class (THANKSGIVING)

Nov 27

M

Untrusted platforms

CT99, ST97, Anderson 20

W

In-class public policy discussion

Anderson 21

F

No class

Dec 4

M

Final project presentations, 25 minute conference format
  ↳ #1: GoogleAccounts, #2: ProxCardSecurity

W

Final project presentations (2)
  ↳ #3: AmazonUnboxVideo, #4: FirefoxSecurityUpgrade, #5: PcCillinSecurity

F

Final project presentations (3)
  ↳ #6: SybilAttack, #7: PioneerVoting

Due: Final project writeups