Computer and Network Security

EECS 588 — Winter 2012

Overview | Schedule | Readings | Attack Presentation | Course Project

Readings Topic / Slides Date Attack
Presentations
Course Project
Deadlines
Week 1 Essential Crypto 1/5/12*
Week 2 Alex's Welcome and Intro
Crypto Failures I
1/10/12
1/12/12
Week 3 Crypto Failures II 1/17/12
1/19/12
Week 4 Attacking Software 1/24/12 Modern Buffer Overflow
1/26/12* Return-Oriented Programming
Week 5 Defending Software 1/31/12 Trojan Compiler
2/2/12
Week 6 Web Security I 2/7/12
2/9/12 Malicious Code in Websites
Abusing Cookies
Week 7 Web Security II 2/14/12 CAPTCHA Cracking
2/16/12 Password Cracking
Week 8 Mobile Security 2/21/12 Fooling Web Users Project proposal
due Tuesday 2/21 at 5pm
2/23/12 Smartphone Spyware
“Spring” Break
Week 9 Network Security I 3/6/12 DNS Cache Poisoning
Browser DNS Rebinding
3/8/12 Keystroke Eavesdropping
Week 10 Network Security II 3/13/12 Kernel-level rootkit
WEP key recovery
3/15/12 Rogue Access Point Project checkpoint
due Friday 3/16 at 5pm
Week 11 Advanced Topics I 3/20/12 Malicious Devices
Firmware-resident Malware
3/22/12 Cold-Boot Attack
Week 12 Security and Society 3/27/12 Internet Voting Fraud
3/29/12 Jailbreaking
Week 13 Advanced Topics II 4/3/12 Web Tracking
VoIP Side Channels
4/5/12* Traffic De-anonymization
Week 14 Project Presentations 4/10/12 Presentations
4/12/12 Presentations
Week 15 Physical Security / Wrapup 4/17/12 Final report
due Friday 4/20 at 5pm