CS 177: Computer Security (Fall '18)
Warning: CS170 has been canceled this Fall. You
will not need to take the class any more to take this
class - this is to allow students who were planning to take
170 and 177 concurrently to still attend 177.
September 26: Full webpage is live. Do
subscribe to Piazza, as most announcements will go through
that. September 26: No sections this week.
Total credits: 4 Topics: Applied
cryptography, authentication and access controly; buffer
overflows; web security (injection and cross-scripting
attacks); network security; policies.
Prerequisites: No formal prerequisite -- CS170
(Operating Systems) was required, but due to a last minute
cancelation of the class we will be covering material
withnout needing CS170 background. Informally, we need some
familiarity with programming languages and systems
Instructor: Stefano Tessaro, tessaro(at)cs(dot)ucsb(dot)edu, Harold Frank Hall 1117
Kevin Burk (kburk@cs)
Christian Daley (firstname.lastname@example.org)
Class time and location
TR 12:30pm-1:45pm (GIRV 2128) Sections
Fri 11-11:50am (Phelps 1440)
Fri 12-12:50pm (Phelps 1448) Office hours
ST: Thu 4-5pm or by appointment (HFH 1117)
TA Office Hours: Kevin: Tu 2-4pm (CSIL); Christian: We 12-2pm (CSIL)
No mandatory textbook. Some good options matching parts of this class will be communicated.
Homework: There will be 6 problem sets
distributed over the quarter. Problem sets are posted online on
Wednesday, by 11:59pm PST, and are due 10 days later on Friday, 5pm
PST. (There will be exceptions around Thanksgiving, to accommodate for
holiday travel.) Alternatively, you can submit homework in your
session on Friday morning. You will be able to hand in solutions to
programming tasks online. (Instructions will be on the assignment, as
methods will vary.)
Homework will be graded and you are required to hand in your own
solution for each homework.
Midterm: There will be one midterm during class
on Tuesday, October 30 (Details will be announced in
Final: The final is expected to take place
on Monday, December 10, 12-3pm.
Final grade: The final grade will be distributed
as follows: Homework (30%), midterm (20%), final (50%).
Academic Honesty: The following applies to every course you attend at UC Santa Barbara (from UCSB Campus Regulations, Chapter VII: "Student Conduct and Discipline"):
It is expected that students attending the University of California understand and subscribe to the ideal of academic integrity, and are willing to bear individual responsibility for their work. Any work (written or otherwise) submitted to fulfill an academic requirement must represent a student’s original work. Any act of academic dishonesty, such as cheating or plagiarism, will subject a person to University disciplinary action. Using or attempting to use materials, information, study aids, or commercial “research” services not authorized by the instructor of the course constitutes cheating. Representing the words, ideas, or concepts of another person without appropriate attribution is plagiarism. Whenever another person’s written work is utilized, whether it be a single phrase or longer, quotation marks must be used and sources cited. Paraphrasing another’s work, i.e., borrowing the ideas or concepts and putting them into one’s “own” words, must also be acknowledged. Although a person’s state of mind and intention will be considered in determining the University response to an act of academic dishonesty, this in no way lessens the responsibility of the student.
Specifically for the current CS177 course this means that
You are not allowed to copy or transcribe answers to homework assignments from others or other sources.
Although you are allowed to discuss homework assignments with others, you should write down your answers independently. You should always be able to argue and explain your answers when asked for clarifications.
During the Midterm and Final Examination no electronics are allowed, additional notes are only allowed to the extent described prior to the test.
When you will be unable to hand in the homework in time you should report this to the lecturer (ST) as soon as possible, but always before the deadline. No matter the reason, you will always be asked to present documentation.
When in doubt, ask.
Schedule and Homework
The following is a tentative schedule, and is intended to give a rough idea about what I hope to cover in the class and in which order. There will be (slight) changes depending on the pace of the class, and more information will appear on the schedule.
|Week||Date||Lecture contents||Further Reading||Assignments|
Welcome to CS177 |
Cryptography II |
Cryptography IV ||
Passwords and authentication
Passwords and authentication (2) ||
Basics of Access Control
|2018-10-25||Spare / guest lecture||
Buffer Overflows I
Buffer overflows II
Buffer Overflows III
|7||2018-11-13||Web Security II
Malware Wrap up
Network Security I
|2018-11-22||Holiday -- Thanksgiving|
Network Security II
Network Security III