CE 40-442: Network Security

Description:

Acknowledgment:

Policies:

• Grading policy is as follows. This is tentative.
  • 10% Quiz
    
  • 40% Homeworks
    
  • 20% Midterm
    
  • 30% Final
    
  
  There will be no exceptions to the following rules:
  
  • If you turn in your assignments one day late you will loose 25% of the grade, two days will cost you 50% and three days 75% of the grade. No submissions will be accepted after the third day. Penlaty may be calculted continusly and per hour of delay.
  • Cell Phones must be turned off when you are in class.
  • There will be a zero tolerance policy for cheating/copying HWs. The first time you are caught, you will receive a zero for the task at hand. If you are caught for a second time, you will fail the course.
    
  • Providing your assignment to someone else is considered cheating on your behalf.
    

Announcements:

• Quiz 1 on 1396/7/17
• Quiz 2 on 1396/8/22 from lectures 4, 5, 6, 7, and 8.
• Midterm will be on 1396/8/29 from Lectures 0 to 10, including 10.
• Quiz 3 on 1396/9/20, from lectures 11, 12, 13, and 14.
• Grades
  
  
  
  
  

Homeworks:

• HW 0: Watch this presentation on scientific ethics made by Dr. Kiarash Bazargan. A local copy is available here.
• HW 1: [PDF], Available: 1396/7/18, Deadline: 1396/8/3, 11:59PM.
• HW 2: [PDF], Available: 1396/8/9, Deadline: 1396/8/24, 11:59PM.
• HW 3: [PDF] Available: 1396/9/14, Deadline: 1396/10/3, 11:59PM.
  
  
  

Course Material:

-6/25

• Lecture 0-Pre-Intro! [PDF]

-6/27

• Lecture 1- Introduction [PDF]
  • Reflections on Trusting Trust, Ken Thompson, Turing Award Lecture ,1984
  • Measuring Pay-per-Install: The Commoditization of Malware Distribution, J. Caballero, C. Grier, C. Kreibich, V. Paxson, 2011

-7/1

• Lecture 2- Control hijacking attacks: exploits and defenses [PDF]
  • Buffer Overflows: Attacks and Defenses for the Vulnerability of the Decade, Cowan, C., Wagle, F., Pu, C., Beattie, S., & Walpole, J., 2000
  • Basic Integer Overflows, blexim, 2002
  • Bypassing Browser Memory Protections, A. Sotirov,2008

-7/3

• Lecture 2- Control hijacking attacks: exploits and defenses (con't)

-7/10

• Lecture 3- Principle of least privilege, access control, and operating systems security [PDF]
  • SetUID Demystified, Chen, Dean, and Wagner, 2002.
  • Operating Systems Security, T. Jaegeri, 2008. Chapter 4, Security in Ordinary Operating Systems.

-7/15

• Lecture 3- Principle of least privilege, access control, and operating systems security (con't)

-7/17

• Lecture 4- Dealing with legacy code: sandboxing and isolation [PDF]
  • Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools, T. Garfinkel, 2003
  • Efficient Software-Based Fault Isolation, Robert Wahbe, et al., 1993

-7/22

• Lecture 4- Dealing with legacy code: sandboxing and isolationi (con't)

-7/24

• Lecture 5- Tools for writing robust application code [PDF]
  • KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs, C. Cadar, D. Dunbar, D. Engler, 2008
  • Finding Security Vulnerabilities in Java Applications with Static Analysis, B. Livshits and M. Lam, 2005

-7/29

• Lecture 6- Fuzzing [PDF]
  • How hackers look for bugs, Dave Aitel
  • Real world fuzzing, Charlie Miller, 2007
  • Effective Bug Discoveryy, vf, 2006

-8/1

• Lecture 7- Basic web security model [PDF]
  • Securing Browser Frame Communication, Adam Barth, Collin Jackson, and John C. Mitchell, 2008
  • The Security Architecture of the Chromium Browser, Adam Barth, Collin Jackson, Charles Reis, and the Google Chrome Team, 2008
  • Exposing private information by timing web applicationsi, A. Bortz, D. Boneh, and P. Nandy, 2007

-8/6

• Lecture 8- Web application security [PDF]
  • Cross site scripting explained, Amit Klein, 2002
  • SQL Injection attacks, Chris Anley, 2002
  • Robust Defenses for Cross-Site Request Forgery, Adam Barth, Collin Jackson, and John C. Mitchell, 2008

-8/8

• Lecture 8- Web application security (continued)

-8/13

• Lecture 9- Session management and user authentication [PDF]
  • Secure Session Management With Cookies for Web Applications, Chris Palmer, 2008
  • Origin Cookies: Session Integrity for Web Applications, Bortz et al., 2011

-8/15

• Lecture 10- Overview of cryptography [PDF]
  • The BREACH attack: encryption and compression don't mix, Gluck, Harris, and Prado
  • The case for prefetching and prevalidating TLS server certificates, E. Stark, L.S. Huang, et al., 2012

-8/20

• Lecture 11- HTTPS: goals and pitfalls [PDF]
  • ForceHTTPS: protecting high-security web sites from network attacks, A. Barth and C. Jackson, 2008
  • The case for short-lived certificates, Topalovic et al., 2012

-8/22

• Lecture 12- Content Security Policies (CSP), Web workers, and extensions [PDF]
  • Web workers
  • Content Security Policies
  • Sandboxed iFrames
  • cors

-8/27

• Midterm Review

-8/29

• Midterm

-9/4

• Lecture 13- Security issues in Internet protocols: TCP, DNS, and routing [PDF]
  • A look back at Security Problems in the TCP/IP Protocol Suite, 2004
  • BGP Security in Partial Deployment, Lychev, Goldberg, Schapira, 2013
  • DNS cache poisoning, Steve Friedl, 2008

-9/11

• Lecture 14- Network defense tools: Firewalls, VPNs, Intrusion Detection, and filters [PDF]
  • A Security Evaluation of DNSSEC with NSEC3, J. Bau and J.C. Mitchell, 2010
  • How DNSSEC Works, cloudflare
  • Distributed Firewalls, S. Bellovin, 1999
  • Bro: A System for Detecting Network Intruders in Real-Time, V. Paxon, 1998

-9/13

• Lecture 14- Network defense tools: Firewalls, VPNs, Intrusion Detection, and filters (continued)

-9/18

• Lecture 15- Unwanted traffic: denial of service attacks [PDF]
  • Details of a recent large-scale DDoS event , , 2013
  • Practical network support for IP Traceback, S. Savage, et al., 2000
  • A DoS-Limiting Network Architecture, Yang, Wetherall, and Anderson, 2005

-9/20

• Lecture 16- Trusted Computing and SGX [PDF]
  • Introduction to the TPM, Allan Tomlinson, Smart Cards, Tokens, Security and Applications, 2008
  • Shielding Applications from an Untrusted Cloud with Haven, Andrew Baumann, Marcus Peinado, and Galen Hunt, OSDI 2014

-9/25

• Lecture 17- Mobile platform security models: Android and iOS [PDF]
  • Understanding Android Security, Enck, Ongtang, and McDaniel, 2009 (Security Enforcement section)
  • TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones, Enck et al., 2014

-9/27

• Lecture 18- Mobile threats and malware [PDF]
  • FlowDroid: Precise Context, Flow, Field, Object-sensitive and Lifecycle-aware Taint Analysis for Android Apps, Arzt et al., 2014
  • A Large-Scale Study of Mobile Web App Security, P. Mutchler, A. Doupe, J. Mitchell, C. Kruegel, and G. Vigna., 2015
  • Target Fragmentation in Android Apps, Mutchler, P., Safaei, Y., Doupé, A. and Mitchell, J., 2016