Links to notes etc. on future days are copies of materials from 2019 to give
you an idea of what the future will bring. We will update the notes as the
course progresses. If you are particularly interested in some topic not covered here,
send mail to the course staff.
The lecture notes may help you remember the lecture content, but they are not
a replacement for attending lectures.
| Monday | Tuesday |
Wednesday | Thursday |
Friday |
feb 3
LEC 1 (nz): Introduction, threat models (2020 video)
Assigned: Lab 1: Buffer overflows
First day of classes |
feb 4 |
feb 5
LEC 2 (nz): Security architecture (2020 video)
Preparation: Read Google Infrastructure Security (2017) and optionally other details (2018) (Question) |
feb 6 |
feb 7
DUE: Lab 1 part 1 |
feb 10
LEC 3 (fk): User authentication (2020 video)
Preparation: Read Your password doesn't matter (2019) and U2F (2017) (Question) |
feb 11 |
feb 12
LEC 4 (fk): Buffer overflow defenses (2020 video)
Preparation: Read Baggy bounds checking (2009) + errata (Question) |
feb 13 |
feb 14
DUE: Lab 1 part 2 |
feb 17
Presidents day |
feb 18
LEC 5 (fk): Privilege separation (2020 video)
Preparation: Read OKWS (2004) but skip section 7 (Question)
Monday schedule |
feb 19
REC 1 (Rayden Chia): Linux Containers (2020 video)
Preparation: Read Chroot (1979), LXC, and iptables
Assigned: Lab 2: Privilege separation |
feb 20 |
feb 21
DUE: Lab 1 all parts |
feb 24
LEC 6 (fk): Software fault isolation (2020 video)
Preparation: Read Native Client (2009) (Question) |
feb 25 |
feb 26
LEC 7 (nz): Enclaves (2020 video)
Preparation: Read Komodo (2017) (Question) |
feb 27 |
feb 28
DUE: Lab 2 part 1 |
mar 2
LEC 8 (fk): Client device security (2020 video)
Preparation: Read iOS Security (2019), pages 1-28 (Question) |
mar 3 |
mar 4
LEC 9 (nz): Android security (2020 video)
Preparation: Read Android Platform Security Model (2019) (Question) |
mar 5 |
mar 6
DUE: Lab 2 parts 2+3
ADD DATE |
mar 9
LEC 10 (fk): Symbolic execution (2020 video)
Preparation: Read EXE: Automatically generating inputs of death (2006) (Question) |
mar 10 |
mar 11
LEC 11 (nz): Web security model (2020 video)
Preparation: Read The Tangled Web (2012), Chapters 9-11 and optionally modern web security (2018) (Question)
Assigned: Lab 3: Symbolic execution
Assigned: Lab 5: Final project |
mar 12 |
mar 13 |
mar 16
Classes cancelled |
mar 17
Classes cancelled |
mar 18
Classes cancelled |
mar 19
Classes cancelled |
mar 20
Classes cancelled |
mar 23
Spring vacation |
mar 24
Spring vacation |
mar 25
Spring vacation |
mar 26
Spring vacation |
mar 27
Spring vacation |
mar 30
Quiz 1: Covers lectures 1-11 and labs 1-2
Reference: Past quizzes, solutions
Materials: Open laptop |
mar 31 |
apr 1
LEC 12 (fk): Network security (2020 video, boards)
Preparation: Read Security Problems in TCP/IP (2004) (Question) |
apr 2 |
apr 3
DUE: Lab 2 all parts
DUE: Final project proposal (if you are not doing the default project) |
apr 6
LEC 13 (fk): Secure channels (2020 video, boards, handshake)
Preparation: Read Analysis of SSL 3.0 (1996) (Question) |
apr 7 |
apr 8
LEC 14 (nz): Certificates (2020 video)
Preparation: Read SSL and HTTPS (2013) (Question) |
apr 9 |
apr 10
DUE: Lab 3 part 1 |
apr 13
LEC 15 (Max Burkhardt): Information security in real life (2020 video) |
apr 14 |
apr 15
LEC 16 (nz): Messaging security (2020 video)
Preparation: Read Secure messaging (2015) (or extended version) (Question)
Assigned: Lab 4: Browser security |
apr 16 |
apr 17
DUE: Lab 3 all parts |
apr 20
Patriots day |
apr 21
DROP DATE |
apr 22
LEC 17 (nz): Untrusted storage servers (2020 video)
Preparation: Read SUNDR (2004) (Question) |
apr 23 |
apr 24
DUE: Lab 4 parts 1+2 |
apr 27
LEC 18 (fk): CPU timing attacks (2020 video, boards)
Preparation: Read Spectre (2018) (Question) |
apr 28 |
apr 29
LEC 19 (Nick Mathewson): Anonymous communication (2020 video of Q&A)
Preparation: Read Tor (2004) and blog posts 1, 2, and 3 (2012), and watch the 2014 video (Question) |
apr 30 |
may 1
DUE: Lab 4 all parts |
may 4
LEC 20 (Jessica Murray and Mark Silis from MIT IS&T): MIT network security (2020 video of Q&A)
Preparation: Watch 2014 video and think of questions to ask Jessica and Mark about MIT IS&T security |
may 5 |
may 6
LEC 21 (Max Krohn): Keybase (2020 video)
Preparation: Read Keybase |
may 7 |
may 8
DUE: Lab 5 parts 0+1, or final project writeup and code |
may 11
LEC 22 (students): Project presentations (2020 video)
DUE: Final project presentation |
may 12
Last day of classes |
may 13 |
may 14 |
may 15 |
| may 18 |
may 19 |
may 20
Final exam: Emphasis on lectures 11-21 and labs 3-4
Reference: Past quizzes, solutions
Materials: Open laptop |
may 21 |
may 22 |
