| 1 | Sep 28 | Introduction |
| |
| 2 | Oct 1 | Principles |
The
protection of information in computer systems. Saltzer and
Schroeder. (Only Section I.)
| Jim Apple |
| Oct 3 | Buffer overflow |
StackGuard: Automatic Adaptive Detection and Prevention of
Buffer-Overflow Attacks.
Cowan, Pu, Maier, Hinton, Bakke, Beattie, Grier, Wagle, Zhang.
Optional (no review necessary):
Smashing The Stack For Fun And Profit. Aleph One.
| Daniel Martinez Villegas |
| Oct 5 | Static analysis |
Improving Security Using Extensible Lightweight Static Analysis. Evans and Larochelle.
| Manish Kumar Anand |
| 3 | Oct 8 |
(Cache)
Finding Security Vulnerabilities in Java ApplicationsUsing Static Analysis. Livshits and Lam.
| David Whiteneck |
| Oct 10 | Runtime analysis |
(Cache) Dynamic
Taint Analysis: Automatic Detection, Analysis, and Signature
Generation of Exploit Attacks on Commodity Software.
Newsome and Song.
| Nina Gholami |
| Oct 12 | Static analysis |
(Cache)
Intrusion Detection via Static Analysis
Wagner, Dean.
| Philip Fisher-Ogden |
| 4 | Oct 15 | Java security |
(Cache)
Extensible security architectures for Java
Wallach, Balfanz, Dean, Felten
| Liang Cai |
| Oct 17 | Web security |
(Cache)
Protection and Communication Abstractions for WebBrowsers in MashupOS. Wang, Fan, Howell, and Jackson.
| Anhad Preet Singh |
| Oct 19 | Sandbox |
(Cache)
A secure environment for untrusted helper applications:confining the wily hacker.
Goldberg, Wagner, Thomas, and Brewer.
| Paul Congdon |
| 5 | Oct 22 |
(Cache)
Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools, Garfinkel. | Daryl Posnett |
| Oct 24 | Privilege separation |
(Cache)
Preventing Privilege Escalation. Provos, Friedl, Honeyman. | Todd Williamson |
| Oct 26 | Network security |
(Cache)
A Look Back at Security Problems in the TCP/IP Protocol Suite, Bellovin. | Kefeng Tan |
| 6 | Oct 29 | Worms |
(Cache)
Inside the Slammer Worm. Moore, Paxson, Savage,Shannon, Staniford, and Weaver.
| Kevin Langley |
| Oct 31 | Botnets |
(Cache)
A Multifaceted Approach to Understanding the Botnet Phenomenon. Rajab, Zarfoss, Monrose, Terzis. | Taeho, Kwon |
| Nov 2 | Worm fingerprinting |
(Cache)
Automated Worm Fingerprinting, Singh, Estan,Varghese and Savage.
| Pulak Chowdhury |
| 7 | Nov 5 | Secure OS |
(Cache) An Overview of the Singularity Project. Galen
C. Hunt et al.
| George Chen |
| Nov 7 | Capabilities |
(Cache) The
Confused Deputy. Hardy.
(Cache)
Capability Myths Demolished. Miller, Yee, and Shapiro. | |
| Nov 9 | Cryptography |
(Cache)
WhyCryptosystems Fail, Anderson.
| Jeffery Yuen |
| 8 | Nov 12 | Veterans Day. No class. |
| Nov 14 | Kerboros |
(Cache)
Designing an Authentication System: a Dialogue in Four Scenes, Bryant. | |
| Nov 16 | Cryptographical protocols |
(Cache) Prudent
engineering practice for cryptographic protocols, Abadi and
Needham.
| |
| 9 | Nov 19 | Virtual machines |
(Cache)
Whenvirtual is better than real. Chen and Noble.
| |
| Nov 21 |
(Cache)
When
Virtual is Harder than Real: Security Challenges in Virtual Machine
Based Computing Environments.
Garfinkel and Rosenblum.
| |
| Nov 23 | Thanksgiving. No class. |
| 10 | Nov 26 | VM application |
(Cache)
A Virtual Machine Introspection Based Architecture for Intrusion Detection . Garfinkel and Rosenblum. | |
| Nov 28 | E-voting |
(Cache)
Analysis ofan Electronic Voting System, Kohno, Stubblefield, Rubin,
Wallach.
| Andreas Sæbjørnsen |
| Nov 30 |
(Cache) Designing
voting machines for verification. Sastry, Kohno, and Wagner.
| |
| 11 | Dec 3 | Usability |
(Cache) Why
Phishing Works. Dhamija, Tygar, and Hearst.
| Justin Becker |
| Dec 5 | Economics |
(Cache)
Why
Information Security is Hard -- An Economic Perspective. Anderson.
| |
| Dec 7 |
Poster session. |
