| |
Thursday, January 15, 2009 |
Overview |
|
| |
Tuesday, January 18, 2009 |
Design Principles |
|
| |
Thursday, January 22, 2009 |
Protection in Operating Systems |
|
| |
Tuesday, January 27, 2009 |
Authentication |
|
| |
Thursday, January 29, 2009 |
Authentication & Identity, continued
Confinement
|
- Riley, It’s Me, and Here’s My Proof: Why Identity and Authentication Must Remain Distinct
- Bishop, Chapter 17, up to the beginning of 17.3.1
- Goldberg et al, A Secure Environment for Untrusted Helper Applications (Confining the Wily Hacker) (the JANUS paper)
- Govindavajhala & Appel, Using Memory Errors to Attack a Virtual Machine
- Kocher et al, Introduction to Differential Power Analysis and Related Attacks
- Rutkowska, Subverting Vista Kernel For Fun And Profit (via the Blue Pill Project)
- Yee et al, Native Client: A Sandbox for Portable, Untrusted x86 Native Code
- Optional: Lampson, A note on the Confinement Problem, CACM Vol 16, no. 10, October 1973
- Optional: Lipner, A Comment on the Confinement Problem, Proceedings of the 5th Symposium on Operating Systems Principles, pp 192 -196 (Nov. 1975)
- Optional: Friedman, TEMPEST: A Signal Problem, NSA Cryptologic Spectrum, Summer 1972
|
| |
Tuesday, February 3, 2009 |
Vulnerabilities |
- Bishop, Chapter 23
- Thompson, Reflections on trusting trust, CACM 27:8, August 1984.
- McGraw, Static Analysis for Security, IEEE Security & Privacy (Nov/Dec 2004).
- Aleph One, Smashing The Stack For Fun And Profit, Phrack 49, Volume Seven, Issue Forty-Nine, File 14 of 16
|
| |
Thursday, February 12, 2009 |
Bugs |
|
| |
Thursday, February 19, 2009 |
Taxonomies |
|
| |
Thursday, February 26, 2009 |
Some solutions |
|
| |
Thursday, March 4, 2009 |
Web Security Mechanisms |
|
| |
Thursday, March 19, 2009 |
Basic Cryptography |
- Bishop, Chapter 9
- Optional: Smithline, A Cipher to Thomas Jefferson, American Scientist v. 97 no. 2 (March/April 2009) p. 142-9. (Link should work within the UR campus.)
|
| |
Tuesday, March 24, 2009 |
Symmetric Cryptography |
|
| |
Thursday, March 26, 2009 |
Asymmetric Cryptography
|
|
|
Tuesday, March 31, 2009 |
Key Management |
|
|
Thursday, April 2, 2009 - |
More Key Management |
|
|
Thursday, April 16, 2009 |
Network Security (extended example) |
|
|
Thursday, April 23, 2009 |
Network Security (OSI Model) |
|
|
Friday, April 24, 2009 |
Computer Forensics |
|
UR CSC290B » Blog Archive » Confinement Readings:
[...] are lots of readings on today’s topic, “Confinement.” There will be at least one quiz question on each [...]
January 29, 2009, 5:16 PMUR CSC290B » Blog Archive:
[...] Revised lecture notes are posted, including a cleaner example of carrying strings correctly all the way from PHP to a MySQL query using a stored procedure. Category: Uncategorized | Comment (RSS) | Trackback [...]
February 26, 2009, 5:17 PMUR CSC290B » Blog Archive » Fun for Spring Break:
[...] spring break, read the assigned Web Security Handbook reading. Do not memorize the tables, just skim them, to be aware of the variety of browser [...]
March 5, 2009, 5:10 PMUR CSC290B » Blog Archive » Readings for today’s basic cryptography lecture:
[...] posted lecture notes and readings. Readings include one chapter in the text, and one interesting (optional) paper on an [...]
March 19, 2009, 4:35 PMUR CSC290B » Blog Archive » Key readings:
[...] Thursday’s class, do the reading. Notable [...]
April 1, 2009, 10:20 AMUR CSC290B » Blog Archive » April Slides:
[...] April slides have been uploaded. I also added an optional reading related to Computer Forensics. Category: [...]
April 28, 2009, 9:03 PM