CS 465 Computer Security
BYU
|
Computer Science
Fall 2019
Section 1: MWF 9:00am, 2113 JKB
Discuss and get help on Piazza
Navbar
Syllabus
Schedule
Homework
Homework #1
Homework #2
Homework #3
Homework #4
Homework #5
Homework #6
Homework #7
Homework #8
Homework #9
Homework #10
Homework #11
Homework #12
Projects
Project #1: AES
Project #2: Hash Attack
Project #3: MAC Attack
Project #4: Diffie-Hellman
Project #5: RSA
Project #6: TLS
Project #7: Password Cracking
Project #8: Buffer Overflow
Project #9: Extracting Secrets
Project #10: S/MIME and PGP
Project #11: Bombs Extra Credit
Help
Instructor and TAs
Office Hours
Midterm 1 Study Guide
Midterm 2 Study Guide
Discussion
Schedule
This schedule is
subject to change
. Assignments may be changed up until the day they are assigned.
Week 1
September 4
Introduction
Slides:
Introduction
Due:
Homework #1
September 6
Introduction
Slides:
Terminology
Week 2
September 9
Cryptography
Slides:
Cryptography
September 11
AES
Slides:
AES
September 13
AES
Slides:
AES
Due:
Homework #2
Week 3
September 16
Block Cipher Modes, Authenticated Encryption Modes, and Padding
Slides:
Block Cipher Modes
Reading:
How to Choose an Authenticated Encryption Mode (optional)
Reading:
The Galois/Counter Mode of Operation (GCM) (optional)
September 18
Cryptographic Hash Functions
Slides:
Cryptographic Hash Functions
Reading:
NIST Hash Project (optional)
Reading:
Chinese researchers find first SHA-1 collision 2005
Reading:
Google announces practical collision SHA-1, Feb 2017
September 20
MAC
Slides:
MAC
Reading:
SHA-1 spec
Reading:
Why I hate CBC-MAC
Due:
Homework #3
September 21
Due:
Project #1: AES
Week 4
September 23
Hash Attack
Due:
Homework #4
September 25
Diffie-Hellman
Slides:
Diffie-Hellman
September 27
Diffie-Hellman
Due:
Project #2: Hash Attack
Week 5
September 30
Discuss Homework #5 and Modular Exponentiation
Due:
Homework #5
October 2
RSA
Slides:
RSA
October 4
RSA
Due:
Project #3: MAC Attack
Week 6
October 7
No class -- office hours
October 9
Public Key Infrastructure and Certificates
Slides:
PKI
Due:
Homework #6
October 11
Public Key Infrastructure and Certificates
Due:
Project #4: Diffie-Hellman
Week 7
October 14
Exam Review
Reading:
Midterm 1 Study Guide
Due:
Homework #7
October 15
Due: Exam #1 first day in the testing center
October 16
No Class
Due: Exam #1 last day in the testing center
October 18
TLS
Slides:
TLS
Reading:
The First Few Milliseconds of an HTTPS Connection
Reading:
The Illustrated TLS Connection
Week 8
October 21
TLS, Project #5 Discussion
October 23
Exam Recap
October 25
Exam Recap and RSA project
Due:
Project #5: RSA
Week 9
October 28
No class -- Dr. Zappala at NSF PI Meeting
October 30
Logjam TLS Attack
Reading:
Weak Diffie-Hellman and the Logjam Attack
Due:
Homework #8
November 1
TBD
Due:
Project #6: TLS
Week 10
November 4
Passwords
Slides:
Passwords
Reading:
Easy Ways to Build a Better P@$5w0rd (NIST)
Reading:
How to Devise Passwords That Drive Hackers Away
November 6
Passwords
Reading:
An Administrator's Guide to Password Research
Due:
Homework #9
November 8
Passwords
Reading:
The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes
Due:
Project #7: Password Cracking
Week 11
November 11
Buffer Overflow
Slides:
Buffer Overflow
Reading:
Smashing the Stack For Fun and Profit
Reading:
Smashing the Stack For Fun and Profit (Today)
Reading:
Smashing the Stack in 2011
Reading:
Smashing the Modern Stack for Fun and Profit
November 13
Buffer Overflow
Due:
Homework #10
November 15
Buffer Overflow
Week 12
November 18
Signal
Slides:
Signal
Due:
Homework #11
November 20
Signal
November 22
Encryption Backdoor Debate -- Read in advance and come to class with 3 to 5 points in favor or against government surveillance of encrypted traffic that you found compelling
Reading:
Paper: Keys under doormats: Mandating insecurity by requiring government access to all data and communications
Reading:
Perspectives on Encryption and Surveillance
Due:
Project #8: Buffer Overflow
Week 13
November 25
Secure Email
Slides:
Secure Email
November 26
No Class -- Thanksgiving Holiday
Due:
Project #9: Extracting Secrets
November 27
No Class -- Thanksgiving Holiday
November 29
No Class -- Thanksgiving Holiday
Week 14
December 2
Exam Review
December 3
Due: Exam #2 first day in testing center
December 4
No class
Due: Exam #2 last day in testing center (ends at 3pm)
December 6
Encryption Back Door Debate
Due:
Homework #12
Week 15
December 9
Trust
Due:
Project #10: PGP and S/MIME
December 11
Exam Recap
Due:
Project #11: Extra Credit
Week 16
December 16
Due: Last day to take optional final exam