CPEN 542 Calendar

1

Instructor office hours, 1 PM - 2 PM, KAIS 4047. Check-in with students with first names starting with A-I.

2

Before the class

1. Study Cryptography 101: Goals, Basics, Substitution Ciphers
2. Study all micro-modules of ancient cryptography and then study and pracrtice all parts of Ciphers module

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discuss problems on the material studies for the class.
3. Discuss Adversary Models

3

4

Term paper proposal presentations.

5

Term paper proposals due to Kosta via turnitin.com by 9 PM.

8

9

Instructor office hours, 11 AM - 12 PM, KAIS 4047. Check-in with students with first names starting with A-L.

Before the class:

1. Study Random Oracle model and its versions for hash functions, block ciphers, and stream ciphers by reading Anderson: Sections 5.1-5.3.
2. Study introduction to modern cryptography, videos 1, 2, 3.
3. Study introduction into stream ciphers, videos 1, 2, 3.
4. Study random number generators video 1.
5. Study block ciphers Introduction video.
6. Study AES
1. videos 1 and 2.
2. AES demos.
3. Watch a narrated demo of AES.
7. Optionally, study videos AES Parts 3-15 from applied crypto playlist.

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of problems on the application of the studied material.

10

11

Before the class:

1. Study modes of operations for block ciphers: 
   1. By watching videos ECB & CBC, CBC, CFB, CTR, and
   2. By reading Anderson's Section 5.5.
2. Study Asymmetric Crypto Primitives by reading Anderson's Section 5.7.
3. Study Diffie-Hellman key exchange protocol with this very affordable videos.
4. Study key establishement video lectures by Stamp: 9.1-9.2, 9.3, 9.3.1, 9.3.2-9.3.3, 9.3.4-9.3.5, 9.3.6, 9.4, 9.6 (from 9:30).

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of problems on the application of the studied material.

12

15

16

Instructor office hours, 11 AM - 12 PM, KAIS 4047. Check-in with students with first names starting with A-O.

Before the class:

1. Study real-world security protocols, as presented by by Stamp: 10.1-10.2, 10.3, 10.3.1-10.3.3, 10.5-10.5.1, 10.5.2-10.5.3, 10.6.1-10.6.3, 10.6.2-10.6.5, 10.7-10.7.1, 10.7.2-10.7.3, 10.7.4-10.8.
2. Watch WEP vs. WPA explanation.

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

17

18

Before the class:

1. Study N. Unger et al., "SoK: Secure Messaging," in IEEE Symposium on Security and Privacy (SP), San Jose, CA, 2015, pp. 232-249.

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

19

22

23

Before the class:

1. Study these How BitCoin works under the hood.
2. Study J. Bonneau, A. Miller, J. Clark, A. Narayanan, J. A. Kroll and E. W. Felten, "SoK: Research Perspectives and Challenges for Bitcoin and Cryptocurrencies," Security and Privacy (SP), 2015 IEEE Symposium on, San Jose, CA, 2015, pp. 104-121.

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

 

24

25

Instructor office hours, 11 AM - 12 PM, KAIS 4047. Check-in with students with first names starting with A-R.

Before the class:

1. Study MIT's video lecture on User Authentication (notes).

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

26

October 29

October 30

Before the class:

1. Study "The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes." IEEE Symposium on Security and Privacy (2012): pp. 553–567.

During the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

October 31

November 1

Instructor office hours, 11 AM - 12 PM, KAIS 4047. Check-in with students with first names starting with A-U.

Before the class:

Study video lectures on usable security:

1. Lecture 1: Introduction.
2. Lecture 2: Design.
3. Lecture 3: Evaluating usable security design.

During the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

2

5

6

Before the class:

1. Study video lectures on usable security:
   1. Lecture 4: Guidelines for Secure Interaction Design.
   2. Lecture 5: Usable Authentication.
   3. TED Talk "What's wrong with your pa$$w0rd?"
2. Study sections 1-3.1 of "Usable Security: History, Themes, and Challenges"

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

7

8

Instructor office hours, 11 AM - 12 PM, KAIS 4047. Check-in with students with first names starting with A-Z.

Before the class:

1. Sections 3.2-5 of "Usable Security: History, Themes, and Challenges"

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

9

Term paper prefinal drafts due 9 PM.

12

13

Before the class:

1. Study Low Level Vulnerabilities and Exploits (from 25m50s to the end) (50 minutes total).
2. Study Countemeasures to Buffer Overflow and Other Code Injection and Manipulation Attacks (1h40m).

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

14

15

Instructor office hours, 11 AM - 12 PM, KAIS 4047.

Before the class:

1. Study Security for the Web (1h42m).
2. Study OWASP Top 10 Most Critical Web Application Security Risks (2017 edition).

In the class:

1. TopHat quiz on the material to presented in the previous class (if any) and to be studied before this class.
2. Discussion of the material studied for this class.

16

19

20

Before the class:

1. Study video lecture on Designing and Building Secure Software (2h10m).
2. Study video lecture on Penetration Testing (1h47m).

During the class:

1. Top Hat Quiz on the study material for the class.
2. Discussion of the study material.

21

22

Instructor office hours, 11 AM - 12 PM, KAIS 4047.

Before the class:

Study video lectures on the economics of cybersecurity:

Part 1: Basics

1. A brief history,
2. Introduction to economics,
3. The economics of information goods,
4. Security from an economic perspective,

During the class:

1. Top Hat Quiz on the study material for the class.
2. Discussion of the study material.

23

27

Before the class:

Study video lectures on the economics of cybersecurity (continued):

Part 2: Security Metrics

1. What to measure?
2. Measuring security levels,
3. Metrics in practice,
4. Metrics from incident data,

Part 3: Security Investment and Risk Management

1. Information security strategy,
2. Information security investment,
3. Risk management,
4. Operational security management.

Part 4: Market Failures

1. Market failures,
2. case study 1: Information sharing in incident response,
3. case study 2: payment card security,
4. Policy interventions,

During the class:

1. Top Hat Quiz on the study material for the class.
2. Discussion of the study material.

29

Instructor office hours, 11 AM - 12 PM, KAIS 4047.

Before the class:

Study video lectures on the economics of cybersecurity (continued):

Part 5: Behavioural research into security & Policy Implications

1. Prospect Theory,
2. Heuristics and social persuasion,
3. Consumer behaviour and deception,
4. Security economics and policy,
5. Behavioural economics of privacy.

During the class:

1. Top Hat Quiz on the study material for the class.
2. Discussion of the study material.

3

4

Mini-conference 9:00-18:00, KAIS 2020/2030.

5

Term papers due 21:00

6

Instructor office hours, 3 PM - 4 PM, KAIS 4047.

Self-assessment of course participation due 23:59.

7

10

11

12

Final examination 3:30-6:00 PM.

13

14

17

18

19

20

21

25

26

28