8

UBC-wide orientation.
No classes.

10

1. Course overview
2. Introduction to Computer Security (printible)

Read:

1. Chapter 1 Stamp.
2. Watch and prepare to be quizzed on buffer overflow:
   1. General Introduction  [pptx][pdf][YouTube]
   2. Part I - Basic Buffer Overflows [pptx][pdf][YouTube]
   3. Part II - Real Buffer Overflows [pptx][pdf][YouTube]
   4. Part III - Countermeasures [pptx][pdf][YouTube]
3. Refresh your memory on number theory and prepare to be quizzed: Appendix 2.1, 2.2, and 2.3 from Stamp.

14

15

1. Quiz #0 on Buffer Overflow and Number Theory (see reading assignment for September 10th)
2. Introduction to Computer Security (printible)

Read:

1. Chapter 1 Stamp.

Problems from Stamp to try: 1-20.

Lab & TA office hours, 5-7 PM, MCLD 202.

16

17

Assignment #1 (Risk Analysis)
due 11:00 AM. Turn in a paper copy in the class.

1. Q&A on the memo from UBC leagal
2. Project presentation from the previous cohort.
3. Principles of Designing Secure Systems (printable)

Read:

1. Chapter 1 Stamp.

Problems from Stamp to try: 1-20.

Instructor office hours, 1-2 PM, KAIS 4047. Check-in with students with last names starting with A, B, C.

18

21

22

1. Quiz #1 on all lectures and the Legal Implications of Real World Security Analysis.
2. Introduction to Cryptography (printable)

Read:

1. Stamp: Chapter 2 (except 2.3.6 & 2.3.8)
2. Anderson: 5.1-5.3.

Problems from Stamp chapter 2 to look at: 3, 7, 9, 13, 18, 19, 20.

Last day to withdraw from the course without W standing.

Lab & TA office hours, 5-7 PM, MCLD 202.

23

24

1. Introduction to Cryptography (printable)

Read:

1. Stamp: Chapter 2 (except 2.3.6 & 2.3.8)
2. Anderson: 5.1-5.3.

Problems from Stamp chapter 2 to look at: 3, 7, 9, 13, 18, 19, 20.

Instructor office hours, 1-2 PM, KAIS 4047. Check-in with students with last names starting with A-F.

25

28

Assignment #2 (crypto)
due 21:00

29

1. Symmetric Cryptography (printable)

Read:

1. Stamp: Chapter 3

Problems from Stamp chapter 3 to look at: all.

link to AES demos in Flash

Lab & TA office hours, 5-7 PM, MCLD 202.

October 1

1. Symmetric Cryptography (printable)

Read:

1. Stamp: Chapter 3
2. Stamp Sections 5.1, 5.2, 5.5-5.8.
3. Optional: Stamp Sections 5.3-5.6.

Problems from Stamp chapter 3 to look at: all.

link to AES demos in Flash

Instructor office hours, 1-2 PM, KAIS 4047. Check-in with students with last names starting with A-I.

5

6

1. Quiz #2 (on all lectures and reading material since the previous quiz)
2. Asymmetric Cryptography(printable)

Read:

1. Stamp Sections 4.1-4.3.1, 4.6-4.9
2. Optional: Stamp Sections 4.3.2, 4.3.3, 4.5.

Problems from Stamp Chapter 4 to look at: all.

Lab & TA office hours, 5-7 PM, MCLD 202.

7

8

1. Asymmetric Cryptography(printable)

Read:

1. Stamp Sections 4.1-4.3.1, 4.6-4.9
2. Optional: Stamp Sections 4.3.2, 4.3.3, 4.5.

Problems from Stamp Chapter 4: all.

Instructor office hours, 1-2 PM, KAIS 4047. Check-in with students with last names starting with A-L.

deadline for an optional meeting with the instructor to discuss term project proposals

Last day to obtain authorization for third-party system security analysis from the course professor.

9

12

Thanksgiving Day. University closed.

13*

1. Authentication of Computers and Key establishment Over Network (printable)

Read: Stamp 9.1-9.4, 9.6, 9.7.

Problems from Stamp Chapter 9 to look at: 1-41.

Lab & TA office hours, 5-7 PM, MCLD 202.

14

15*

Authenticating People

Read: Stamp: 7.2-7.8

Problems from Stamp chapter 7 to look at: 1, 2, 4-11, 13-15, 17-19, 21-24.

16

Last day to obtain authorization for third-party system security analysis from the UBC IT Security.

Last day to withdraw from the course with W standing.

19

20

Principles of Designing Secure Systems (printable)

Read the following sections from the iOS Security Guide:

• System security
• Encryption and Data Protection
• App code signing
• iMessage

Lab & TA office hours, 5-7 PM, MCLD 202.

21

Assignment #3 (VPN)
due 21:00

22

1. Principles of Designing Secure Systems (printable)
2. Adversary Models (printable)

Read: Stamp: 7.2-7.8

Problems from Stamp chapter 7 to look at: 1, 2, 4-11, 13-15, 17-19, 21-24.

Instructor office hours, 1-2 PM, KAIS 4047. Check-in with students with last names starting with A-P.

23

26

27

Term project proposals presentations

Lab & TA office hours, 5-7 PM, MCLD 202.

28

29

1. Quiz #3 (on all lectures since the previous quiz)
2. Guest Lecture on Vawtrak by Raul Alvarez, Fortinet.

Read: Stamp: Chapters 11 & 12.

Instructor office hours, 1-2 PM, KAIS 4047. Check-in with students with last names starting with A-V.

30

2

Lab & TA office hours, 4-6 PM, MCLD 254.

Assignment #4 (passwords)
due 21:00

3

Ethics and Computer Security (printable)
Video of "Ethics in Computer Security Research" by Dave Dittrich part 1, part 2.

Lab & TA office hours, 5-7 PM, MCLD 202.

4

5

Guest lecture: Anatomy of Attacks (by Dmitry Samosseiko, Sophos Labs)

Read Stamp Chapter 11 and 12.

Instructor office hours, 2-3 PM, KAIS 4047. Check-in with students with last names starting with A-Z.

9

10

1. Quiz #4 (on all lectures and reading material since the previous quiz)
2. Access Control (printable)

Read Stamp: 8.2-8.6
Read Anderson: Chapters 8 & 9

Lab & TA office hours, 5-7 PM, MCLD 202.

11

Remembrance Day. University closed. Service in War Memorial Gymnasium for all students, faculty, alumni, staff, and friends at 10:45 am.

12

Finalized Introduction, Related Work, and Methodology sections of the term project report are duebefore the lecture

1. Access Control (printable)

Read Stamp: 8.2-8.6
Read Anderson: Chapters 8 & 9

Instructor office hours, 2-3 PM, KAIS 4047. Check-in with students with last names starting with A-Z.

13

16

17

1. Guest lecture by Larry Carson on "NavigatingOrganizational Decision Making for Information Security Professionals"
2. Economic and Business aspects of security (printable)

18

Assignment #5 (WebGoat)
due 21:00

19

Guest lecture by Alex Loffler, TELUS, on "Enhancing Incident Detection and Response"

Instructor office hours, 2-3 PM, KAIS 4047. Check-in with students with last names starting with A-Z.

20

23

24

1. Quiz #5 (on all lectures and reading material since the previous quiz)
2. Case study: iOS Security
3. Responsible disclosure in security research

Lab & TA office hours, 5-7 PM, MCLD 202.

25

26

1. Tutorial on Making Oral Technical Presentations by Dr. Tatiana Teslenko
2. How to make your project video clip.

Instructor office hours, 2-3 PM, KAIS 4047. Check-in with students with last names starting with A-Z.

27

November 30

December 1

1. Term project video clips should be handed to the instructor in the class
2. Case Study: iOS Security

Read: "iOS Security Guide"

Lab & TA office hours, 5-7 PM, MCLD 202.

2

3

1. TBD
2. Where to go from here.

Instructor office hours, 2-3 PM, KAIS 4047. Check-in with students with last names starting with A-Z.

4

7

9:00-18:00 Mini-conference all day in KAIS 2020/2030

8

TA office hours, 10 AM - 12 PM, KAIS 4036.

9

Term project reports due 21:00

due 23:59, the following:

1. Self-assessment of course participation
2. Evaluation of your project team members through iPeer

10

Instructor office hours, 2:00-3:00 PM, KAIS 4047.

11

14

15

16

17

Final exam 3:30 PM -- 6 PM

18

22

23

25