CS155 Computer and Network Security

Course Syllabus

Spring 2010

 
Lecture 1:
3/30/10
(mit)
Course overview   [pdf, ppt]
Reading:
Part 1: Basics
 
Lecture 2:
4/ 1/10
(bon)
Control hijacking attacks: exploits and defenses   [pdf, ppt]
Reading:
 
Lecture 3:
4/ 6/10
(inv)
Exploitation techniques and fuzzing   [pdf, ppt]
Reading:
 
Lecture 4:
4/ 8/10
(mit)
Secure system design, access control, and protection   [pdf, ppt]
Reading:
 
Lecture 5:
4/13/10
(inv)
Tools for writing robust application code   [pdf]
Reading:
 
Lecture 6:
4/15/10
(mit)
Use of cryptography in computer security   [pdf, ppt]
Reading:
 
Lecture 7:
4/20/10
(bon)
Dealing with bad (legacy) application code: sandboxing and isolation   [pdf, ppt]
Reading:
Part 2: Web Security
 
Lecture 8:
4/22/10
(mit)
Basic web security model   [pdf, ppt]
Reading:
 
Lecture 9:
4/27/10
(bon)
User authentication and session management   [pdf, ppt]
Reading:
 
Lecture 10:
4/29/10
(mit)
Web application security   [pdf, ppt]
Reading:
 
Lecture 11:
5/ 4/10
(bon)
HTTPS: goals and pitfalls   [pdf, ppt]
Reading:
Part 3: Network security
 
Lecture 12:
5/ 6/10
(bon)
Security problems in network protocols: TCP, DNS, SMTP, and routing   [pdf, ppt]
Reading:
 
Lecture 13:
5/11/10
(mit)
Network defense tools: Firewalls, VPNs, Intrusion Detection, and filters   [pdf, ppt]
Reading:
 
Lecture 14:
5/13/10
(bon)
Unwanted traffic: denial of service attacks   [pdf, ppt]
Reading:
 
Lecture 15:
5/18/10
(bur)
Network security testing   [pdf, ppt]
Reading:
 
Lecture 16:
5/20/10
(bur)
Malware: Computer viruses, Spyware, and key-loggers   [pdf, ppt]
Reading:
 
Lecture 17:
5/25/10
(bur)
bot-nets: attacks and defenses   [pdf, ppt]
Reading:
Part 5: Final topics
 
Lecture 18:
5/27/10
(bon)
The Trusted Computing Architecture   [pdf, ppt]
Reading:
 
Lecture 19:
6/ 1/10
(inv)
Final lecture