This schedule is tentative and subject to change!
Week Day Date Topic Reading Due
Introduction to Security
1 Wed Sep 5 Security Policies   [slides]   [pdf] [Bishop, Ch. 1.1-1.3]
2 Mon Sep 10 Vulnerabilities   [slides]   [pdf] [Notes]  [Review Exercises]
Wed Sep 12 Threat Models   [slides]   [pdf] T1 DUE
3 Mon Sep 17 Security by Design   [slides]   [pdf]
Wed Sep 19 Security Principles   [slides]   [pdf] [Schneider, Ch. 1], [Saltzer-Schroeder] A1 DUE
Cryptography
4 Mon Sep 24 Symmetric Cryptography   [slides]   [pdf]
Wed Sep 26 Public-Key Cryptography   [slides]   [pdf] [Bishop Ch. 8] M0 DUE
5 Mon Oct 1 Secure Channels   [slides]   [pdf]
Wed Oct 3 Protocols   [slides]   [pdf] [notes] M1 DUE
Authentication
6 Mon Oct 8 Certificates   [slides]   [pdf]
Wed Oct 10 Human Authentication   [slides]   [pdf] [Schneider, Ch. 5.3] A2 DUE
7 Mon Oct 15 No Class
Wed Oct 17 No Class T2 DUE
8 Mon Oct 22 Fall Recess, No Class
Wed Oct 24 Passwords   [slides]   [pdf] [Schneider, Ch. 5.1], [Kelley et al. 2012], [NIST 2017] M2 DUE
9 Mon Oct 29 Tokens   [slides]   [pdf] [Schneider, Ch. 5.2]
Authorization
Wed Oct 31 DAC   [slides]   [pdf] [Schneider, Ch. 7-7.2] A3 DUE
10 Mon Nov 5 Capabilities   [slides]   [pdf] [Schneider, Ch. 7.3]
Wed Nov 7 MAC   [slides]   [pdf] [Bishop, Ch. 5-6.2] T3 DUE
11 Mon Nov 12 Information Flow   [slides]   [pdf] [Clarkson]   [Sabelfeld-Sands]
Wed Nov 14 Static IFC   [slides]   [pdf] [Clarkson] M3 DUE
12 Mon Nov 19 Dynamic IFC   [slides]   [pdf] [Clarkson]
Wed Nov 21 Thanksgiving, No Class
Audit
13 Mon Nov 26 Logs   [slides]   [pdf]
Wed Nov 28 Blockchains  [slides]  [pdf] [Nakamoto]   [Ben-Sasson et al.] T4 DUE
Applied Security
14 Mon Dec 3 Network Security  [slides]  [pdf] [notes]
Wed Dec 5 Web Security  [slides]  [pdf] [notes] M4 DUE
15 Mon Dec 10 Web Security  [slides]  [pdf]
Wed Dec 12 Privacy  [slides]  [pdf] [notes]
16 Mon Dec 17 No Class, Exam Period
Wed Dec 19 No Class, Exam Period M5 DUE
Thu Dec 20 Final Presentations, 2-5pm