Readings
Paper Review Guidelines
Write a ~400 word critical response to each required paper. You only need to read one paper in depth, the other you can skim, but you still need to write a response to both. It is extremely valuable to be able to skim and know what is going on so lets practice!- In the first paragraph:
- State the problem that the paper tries to solve.
- Summarize the main contributions.
- In one or more additional paragraphs:
- Evaluate the paper's strenghts and weaknesses.
- Discuss something you would have done differently if you had written the paper.
- Suggest one or more interetsting open problems on related topics.
Reading list / Schedule
This is a rough schedule, depending on how things go and where the interest is in the class, we can cover these topics, or some additional ones as well. We'll start here and see where the semester takes us! Page last updated: 10/16/24 @ 15:37:40Week 1 - Welcome / Ethics / Privacy
Tuesday, January 10th
-
Optional
Reading:
- The Security Mindset Bruce Schneier; 2008
- How to Read a Paper S. Keshav; Article
- The Menlo Report DHS; 2012
Notes:
Thursday, January 12th
- The Security Mindset Bruce Schneier; 2008
- How to Read a Paper S. Keshav; Article
- The Menlo Report DHS; 2012 Optional Reading:
- The End of Trust McSweeney's 54; EFF
Notes:
No reviews on these papers!
Week 2 - Web Privacy / Botnets and Denial of Service Attacks
Tuesday, January 17th
- Guest talk by Dr. Benjamin VanderSloot
- Privacy Principles W3C Group Draft Note; White paper (No Review for this one) Optional Reading:
- The End of Trust McSweeney's 54; EFF
Notes:
No reviews yet... don't worry they are coming!
Thursday, January 19th
- I never signed up for this! Privacy implications of email tracking Steven Englehardt, Jeffery Han, Arvind Narayanan; PETs 2018
- DoS and Botnet Primer Presentations Optional Reading:
Notes:
HotCRP reviews start now for all required readings (starting with email tracking paper)
Week 3 - Botnets and Denial of Service Attacks / Network Security
Tuesday, January 24th
- Understanding the Mirai Botnet Manos Antonakakis, Tim April et al.; USENIX, 2017.
- Weaponizing Middleboxes for TCP Reflected Amplification Kevin Bock, Abdulrahman Alaraj et al.; USENIX 2021 Optional Reading:
Notes:
You only need to read one of these in-depth, skim the others. Remember to write reviews for all papers (indicate in your review if it was a skim or not)
Thursday, January 26th
- Your Botnet is My Botnet: Analysis of a Botnet Takeover Brett Stone-Gross, Marco Cova et al.; CCS 2009
- Network Security Primer Presentations Optional Reading:
Notes:
Week 4 - Network Security / Elections
Tuesday, January 31st
- The Matter of Heartbleed Zakir Durumeric, Frank Li et al.; IMC 2014
- DNS Cache Poisoning Attack Reloaded: Revolutions with Side Channels Keyu Man, Zhiyun Qian et al.; CCS 2020 Optional Reading:
Notes:
Thursday, February 2nd
- Off-Path TCP Exploits: Global Rate Limit Considered Dangerous Yue Cao, Zhiyun Qian et al.; USENIX 2016
- Election Security Primer Presentations Optional Reading:
Notes:
Week 5 - Election Security / Human Factors
Tuesday, February 7th
- Guest talk by Dr. Matthew Bernhard
- Can Voters Detect Malicious Manipulation of Ballot Marking Devices? Matthew Bernhard, Allison McDonald et al.; IEEE S&P 2020 Optional Reading:
Notes:
Thursday, February 9th
- Security Analysis of the Democracy Live Online Voting System Michael A. Specter, J. Alex Halderman; USENIX 2021
- Human Factors Primer Presentation Optional Reading:
Notes:
Week 6 - Human Factors / Machine Learning
Tuesday, February 14th
- Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness Devdatta Akhawe, and Adrienne Porter Felt; USENIX 2013
- A Comprehensive Quality Evaluation of Security and Privacy Advice on the Web Elissa M. Redmiles, Noel Warford et al.; USENIX 2020 Optional Reading:
Notes:
Thursday, February 16th
- The Tangled Web of Password Reuse Anupam Das, Josheph Bonneau et al.; NDSS 2014
- Machine Learning Primer Presentation Optional Reading:
Notes:
For these papers, just do a 1.5 read through and reviews
Week 7 - Machine Learning / Critical Systems Security
Tuesday, February 21st
- Outside the Closed World: On Using Machine Learning For Network Intrusion Detection Robin Sommer, and Vern Paxson; IEEE S&P 2010
- Towards Evaluating the Robustness of Neural Networks Nicholas Carlini, and David Wagner; IEEE S&P 2017 Optional Reading:
Notes:
Thursday, February 23rd
- TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time Feargus Pendlebury, Fabio Pierazzi et al.; USENIX 2019
- Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0 Alma Whitten, and J.D. Tygar; USENIX 1999
- Critical Systems Primer Optional Reading:
Notes:
Week 8 - Critical Systems Security / Project Brainstorming
Tuesday, February 28th
- Who's in Control of Your Control System? Device Fingerprinting for Cyber-Physical Systems David Formby, Preethi Srinivasan et al.; NDSS 2016 Optional Reading:
- Comprehensive Experimental Analyses of Automotive Attack Surfaces Stephen Checkoway, Damon McCoy et al.; USENIX 2011
- All Things Considered: An Analysis of IoT Devices on Home Networks Deepak Kumar, Kelly Shen et al.; USENIX 2019
- Mon(IOT)R Research Group
Notes:
Thursday, March 2nd
- IoT Inspector: Crowdsourcing Labeled Network Traffic from Smart Home Devices at Scale Danny Yuxing Huang, Noah Apthorpe et al.; IMWUT/UbiComp 2020
- Automated Attack Synthesis by Extracting Finite State Machines from Protocol Specification Documents Maria Lenore Pacheco, Max von Hippel et al.; IEEE S&P 2022
- Project Brainstorming! Optional Reading:
Notes:
Week 9 - SPRING BREAK
Tuesday, March 7th
Holiday - no class
Thursday, March 9th
Holiday - no class
Week 10 - Planning / Online Freedom
Tuesday, March 14th
- Fireside Chat, Class Directions, Audible Time Optional Reading:
Notes:
The rest of the schedule is fully open to move around, and cover anything we are interested in!
Thursday, March 16th
- Guest Talk by Ram Sundara Raman
- Online Freedom Primer Presentation Optional Reading:
Notes:
Project Proposal Due at 11:59PM ET
Week 11 - Online Freedom / Web Security
Tuesday, March 21st
- Tor: The Second-Generation Onion Router Roger Dingledine, Nick Mathewson, and Paul Syverson; USENIX 2004
- Examining How the Great Firewall Discovers Hidden Circumvention Servers Roya Ensafi, David Fifield et al.; IMC 2015 Optional Reading:
Notes:
Thursday, March 23rd
- Hacking Google Series Google Security; YouTube 2022
- Web Security Primer Presentation Optional Reading:
Notes:
No review for the Google presentation, just take a peak at it beforehand
Week 12 - Web Security / Nation State Security
Tuesday, March 28th
- The First Few Milliseconds of an HTTPS Connection Jeff Moser; No need to submit a review for this, just read it!
- Security Challenges in an Increasingly Tangled Web Deepak Kumar, Zane Ma et al.; WWW 2017
- BLUEPRINT: Robust Prevention of Cross-site Scripting Attacks for Existing Browsers Mike Ter Louw, and V.N. Venkatakrishnan; IEEE S&P 2009 Optional Reading:
- OUTGUARD: Detecting In-Browser Covert Cryptocurrency Mining in the Wild Amin Kharraz, Zane Ma et al.; WWW 2019
Notes:
Thursday, March 30th
- Guest talk by Dr. Christoph Kerschbaumer
- Robust Defenses for Cross-Site Request Forgery Adam Barth, Collin Jackson et al.; CCS 2008
- Nation State Security Primer Presentation Optional Reading:
Notes:
Week 13 - Nation State Security / Final Project
Tuesday, April 4th
- W32.Stuxnet Dossier Symantec; White paper
- Keys Under Doormats Harold Abelson, Ross Anderson et al.; Open Letter Optional Reading:
Notes:
Thursday, April 6th
- Analysis of the Cyber Attack on the Ukrainian Power Grid E-ISAC and SANS; White paper
- Project meetings Optional Reading:
Notes:
Talk about our projects, progress, and meet with your group
Week 14 - Project Meetings / Presentation Day 1
Tuesday, April 11th
- Project meetings Optional Reading:
Notes:
Talk about our projects, progress, and meet with your group
Thursday, April 13th
Final Presentations Day 1
Week 15 - Presentation Day 2
Tuesday, April 18th
Final Presentations Day 2
Thursday, April 20
No class - work on your course project
Week 15 - "Finals"
Tuesday, April 25th
No class - work on your course project
Thursday, April 27th
COURSE PROJECT DUE AT 11:59PM