Course Schedule Fall 2026
Part 1. System Security
|
DANIEL
Monday, Aug. 24 1. The Security Mindset Course overview, thinking like an attacker, threat models |
Tuesday, Aug. 25 |
DANIEL
Wednesday, Aug. 26 2. Software Security 1 Machine organization, basic stack smashing |
Thursday, Aug. 27 |
Friday, Aug. 28 |
|
DANIEL
Monday, Aug. 31 3. Software Security 2 Advanced stack smashing and countermeasures Quiz 0 - Course Logistics due 11:59 p.m.
Lab 1: GDB due 11:59 p.m.
|
Tuesday, Sep. 1 |
MIKE
Wednesday, Sep. 2 4. Malware Types of malware, infection methods, C&C, case studies Application Security Project (Part 1) due 11:59 p.m.
Quiz 1 - Security Mindset and Software Security due 11:59 p.m.
|
Thursday, Sep. 3 |
Friday, Sep. 4 |
Part 2. Cryptography
|
Monday, Sep. 7 Labor Day |
Tuesday, Sep. 8 |
DANIEL
Wednesday, Sep. 9 5. Hashing Applications, definitions, birthday, life cycle, common examples Quiz 2 - Operating System Security and Access Control due 11:59 p.m.
|
Thursday, Sep. 10 |
Friday, Sep. 11 |
|
DANIEL
Monday, Sep. 14 6. Integrity MAC, HMAC, length extension attacks |
Tuesday, Sep. 15 |
DANIEL
Wednesday, Sep. 16 7. Symmetric Crypto OTP, block ciphers, DES history, AES internals Application Security Project (Part 2) due 11:59 p.m.
Cryptography Project
available
Lab 2: Docker and Python
available
|
Thursday, Sep. 17 |
Friday, Sep. 18 |
|
DANIEL
Monday, Sep. 21 8. Combining Integrity and Confidentiality Block cipher modes, malleability, padding oracles, AEAD |
Tuesday, Sep. 22 |
DANIEL
Wednesday, Sep. 23 9. DH and Key Exchange Modular arithmetic, DH, key management, MITM attacks Quiz 3 - Isolation, Hashing, and Integrity due 11:59 p.m.
Lab 2: Docker and Python due 11:59 p.m.
|
Thursday, Sep. 24 |
Friday, Sep. 25 |
|
DANIEL
Monday, Sep. 28 10. RSA and Attacks on Protocols, Building a Secure Channel RSA encryption and signatures, attacks on RSA, combining primitives Cryptography Project (Part 1) due 11:59 p.m.
|
Tuesday, Sep. 29 |
DANIEL
Wednesday, Sep. 30 11. The Web Platform HTTP, HTML, DOM, JavaScript, same-origin policy Quiz 4 - Symmetric Crypto due 11:59 p.m.
|
Thursday, Oct. 1 |
Friday, Oct. 2 |
Part 3. Web and Networking
|
Monday, Oct. 5 Fall Break |
Tuesday, Oct. 6 |
DANIEL
Wednesday, Oct. 7 12. Web Attacks and Defenses CSRF, SQL injection, XSS attacks and defenses Cryptography Project (Part 2) due 11:59 p.m.
Quiz 5 - DH Key Exchange & RSA due 11:59 p.m.
Web Security Project
available
Lab 3: Browser DevTools
available
|
Thursday, Oct. 8 |
Friday, Oct. 9 |
|
STAFF
Monday, Oct. 12 Exam Review |
Tuesday, Oct. 13 |
Wednesday, Oct. 14 Exam 1, In-person
|
Thursday, Oct. 15 Quiz 6 - Web Security due 11:59 p.m.
Lab 3: Browser DevTools due 11:59 p.m.
|
Friday, Oct. 16 |
|
MIKE
Monday, Oct. 19 13. HTTPS and the Web PKI TLS, certificates, PKI |
Tuesday, Oct. 20 |
MIKE
Wednesday, Oct. 21 14. HTTPS Attacks and Defenses Social engineering, attacks on CAs, protocol & implementation issues |
Thursday, Oct. 22 |
Friday, Oct. 23 |
|
MIKE
Monday, Oct. 26 15. Networking 101 OSI model, link- through transport-layer attacks |
Tuesday, Oct. 27 |
MIKE
Wednesday, Oct. 28 16. Networking 102 TCP/UDP, application-layer protocols and attacks Web Security Project due 11:59 p.m.
Networking Project
available
Lab 4: Python Sockets
available
|
Thursday, Oct. 29 |
Friday, Oct. 30 |
|
MIKE
Monday, Nov. 2 17. Network Defenses DoS techniques and defenses, network monitoring |
Tuesday, Nov. 3 |
MIKE
Wednesday, Nov. 4 18. OS Security and Access Control Secure system principles, access control, process and memory isolation Quiz 7 - HTTPS, Web PKI, Attacks and Defenses due 11:59 p.m.
Lab 4: Python Sockets due 11:59 p.m.
|
Thursday, Nov. 5 |
Friday, Nov. 6 |
Part 4. Security in Context
|
MIKE
Monday, Nov. 9 19. Isolation and Sandboxing Syscalls and interposition, jails, Docker, VMs, hypervisors |
Tuesday, Nov. 10 |
MIKE
Wednesday, Nov. 11 20. Authentication Passwords, CAPTCHAs, 2FA, biometrics Quiz 8 - Networking & Networking Defenses due 11:59 p.m.
|
Thursday, Nov. 12 |
Friday, Nov. 13 |
|
MIKE
Monday, Nov. 16 21. Privacy and Anonymity Fingerprinting, k-anonymity, Tor, CFAA, ethics |
Tuesday, Nov. 17 |
MIKE
Wednesday, Nov. 18 22. Digital Forensics Imaging, techniques for analysis, countermeasures for forensics Networking Project due 11:59 p.m.
Quiz 9 - Malware & Authentication due 11:59 p.m.
Forensics Project
available
Lab 5: Autopsy
available
|
Thursday, Nov. 19 |
Friday, Nov. 20 |
|
DANIEL
Monday, Nov. 23 23. Side-Channel Analysis Physical side channels, microarchitectural issues, Spectre and Meltdown |
Tuesday, Nov. 24 Quiz 10 - Privacy & Digital Forensics due 11:59 p.m.
Lab 5: Autopsy due 11:59 p.m.
|
Wednesday, Nov. 25 Thanksgiving |
Thursday, Nov. 26 |
Friday, Nov. 27 |
|
MIKE
Monday, Nov. 30 24. Elections Security Special topics in election security and secure voting systems |
Tuesday, Dec. 1 |
DANIEL
Wednesday, Dec. 2 25. Physical Security Types of physical locks and how to defeat them via lockpicking |
Thursday, Dec. 3 |
Friday, Dec. 4 |
|
STAFF
Monday, Dec. 7 Exam Review |
Tuesday, Dec. 8 Forensics Project due 11:59 p.m.
|
Wednesday, Dec. 9 |
Thursday, Dec. 10 |
Friday, Dec. 11 Exam 2, In-person
|