The lectures cover a broad overview of systems security together with a deeper focus on several topics: isolation techniques, privilege separation, dealing with buggy code, and networked and distributed systems.

Links to notes etc. on future days are copies of materials from last year, to give you an idea of what the future will bring. We will update the notes as the course progresses. The year of publication for class readings are shown in parentheses.

MondayTuesday WednesdayThursday Friday
feb 2
First day of classes
feb 3
LEC 1: Introduction, threat models (video)
Preparation: Optionally read about what a modern vulnerability looks like (2026)
Assigned: Lab 1: Buffer overflows
feb 4 feb 5
LEC 2: OS and VM isolation (video)
Preparation: Read about OS and VM isolation (Question)
feb 6
feb 9 feb 10
LEC 3: Software fault isolation (video)
Preparation: Read about WebAssembly (Question)
feb 11 feb 12
LEC 4: Trusted hardware (video)
Preparation: Read BitLocker (2006), sections 1-2 (Question)
feb 13
DUE: Lab 1 part 1
DUE: Lab 1 part 2
feb 16
Presidents day
feb 17
Monday schedule
feb 18 feb 19
Hacking day: no class meeting, work on lab
Assigned: Lab 2: Privilege separation
feb 20
DUE: Lab 1 all parts
feb 23 feb 24
LEC 5: Privilege separation (video)
Preparation: Read OpenSSH (2003) (Question)
feb 25 feb 26
LEC 6: Data center infrastructure (video)
Preparation: Read Google Infrastructure Security (2024) and BeyondProd (2024) (Question)
feb 27
DUE: Lab 2 part 1
mar 2 mar 3
LEC 7: Mobile phone security (video)
Preparation: Read about iOS Security (Question)
mar 4 mar 5
LEC 8: Web security model (video)
Preparation: Read about web security (2022) (Question)
mar 6
DUE: Lab 2 parts 2+3
ADD DATE
mar 9 mar 10
LEC 9: Buffer overflow defenses (video)
Preparation: Read Baggy bounds checking (2009) + errata (Question)
Assigned: Lab 3: Symbolic execution
mar 11 mar 12
LEC 10: Symbolic execution (video)
Preparation: Read EXE: Automatically generating inputs of death (2006) (Question)
mar 13
DUE: Lab 2 all parts
mar 16 mar 17
LEC 11: Verification (video)
Preparation: Read TickTock (2025) (Question)
mar 18 mar 19
Quiz 1: Covers lectures 1-12 and labs 1-2
Reference: Past quizzes, solutions
Materials: Open laptop
Time and Location: 2:30-4p in 45-230
mar 20
Assigned: Lab 4: Browser security
mar 23
Spring vacation
mar 24
Spring vacation
mar 25
Spring vacation
mar 26
Spring vacation
mar 27
Spring vacation
mar 30 mar 31
Hacking day: no class meeting, work on lab
apr 1 apr 2
LEC 12 (guest): Supply chain security (Russ Cox) (video)
Preparation: Read 50 years of open-source supply chain (2025)
apr 3
DUE: Lab 3 part 1
apr 6 apr 7
LEC 13: Network security (video)
Preparation: Read about network security (Question)
apr 8 apr 9
LEC 14: Secure channels (video)
Preparation: Read TLS 1.3 blog post (2018) (Question)
apr 10
DUE: Lab 3 all parts
Assigned: Lab 5: ACME + WebAuthn
apr 13 apr 14
LEC 15: Certificates (video)
Preparation: Read Let's Encrypt (2019) (Question)
apr 15 apr 16
LEC 16: User authentication (video)
Preparation: Read U2F (2016) and optionally from U2F to passkeys (2023) (Question)
apr 17
DUE: Lab 4 part 1
apr 20
Patriots day
apr 21
Hacking day: no class meeting, work on lab
DROP DATE
apr 22 apr 23
Hacking day: no class meeting, work on lab
apr 24
DUE: Lab 4 all parts
apr 27 apr 28
LEC 17: Messaging security (video)
Preparation: Read Analysis of Signal (2019), sections 1-3 (Question)
apr 29 apr 30
LEC 18 (guest): TBD (Anish Athalye) (video)
may 1
DUE: Lab 5 part 1
may 4 may 5
LEC 19: Key transparency (video)
Preparation: Read CONIKS (2015) (Question)
may 6 may 7
LEC 20 (guest): Information security in real life (Colby Morgan) (video)
may 8
DUE: Lab 5 all parts
may 11 may 12
LEC 21: Anonymous communication (video)
Preparation: Read Tor (2004) and blog posts 1, 2, and 3 (2012) (Question)
Last day of classes
may 13 may 14 may 15
Final exam: Emphasis on lectures 13-24 and labs 3-5
Reference: Past quizzes, solutions
Materials: Open laptop
Time and Location: TBD
may 18
Final exam: Emphasis on lectures 13-24 and labs 3-5
Reference: Past quizzes, solutions
Materials: Open laptop
Time and Location: TBD
may 19
Final exam: Emphasis on lectures 13-24 and labs 3-5
Reference: Past quizzes, solutions
Materials: Open laptop
Time and Location: TBD
may 20
Final exam: Emphasis on lectures 13-24 and labs 3-5
Reference: Past quizzes, solutions
Materials: Open laptop
Time and Location: TBD
may 21 may 22