Course Schedule Spring 2026

Part 1. System Security

Monday, Jan. 12
DANIEL Tuesday, Jan. 13
1. The Security Mindset
Course overview, thinking like an attacker, threat models
Wednesday, Jan. 14
DANIEL Thursday, Jan. 15
2. Software Security 1
Machine organization, basic stack smashing
Friday, Jan. 16
Monday, Jan. 19
DANIEL Tuesday, Jan. 20
3. Software Security 2
Advanced stack smashing and countermeasures
Quiz 0 - Course Logistics due 11:59 p.m.
Lab 1: GDB due 11:59 p.m.
Wednesday, Jan. 21
DANIEL Thursday, Jan. 22
4. OS Security and Access Control
Secure system principles, access control, process and memory isolation
Application Security Project (Part 1) due 11:59 p.m.
Friday, Jan. 23
Quiz 1 - Security Mindset and Software Security due 11:59 p.m.
Monday, Jan. 26
DANIEL Tuesday, Jan. 27
5. Isolation and Sandboxing
Syscalls and interposition, jails, Docker, VMs, hypervisors
Wednesday, Jan. 28
DANIEL Thursday, Jan. 29
6. Hashing
Applications, definitions, birthday, life cycle, common examples
Friday, Jan. 30
Quiz 2 - Operating System Security and Access Control due 11:59 p.m.

Part 2. Cryptography

Monday, Feb. 2
DANIEL Tuesday, Feb. 3
7. Integrity
MAC, HMAC, length extension attacks
Wednesday, Feb. 4
DANIEL Thursday, Feb. 5
8. Symmetric Crypto
OTP, block ciphers, DES history, AES internals
Application Security Project (Part 2) due 11:59 p.m.
Cryptography Project available
Lab 2: Docker and Python available
Friday, Feb. 6
Monday, Feb. 9
DANIEL Tuesday, Feb. 10
9. Combining Integrity and Confidentiality
Block cipher modes, malleability, padding oracles, AEAD
Wednesday, Feb. 11
TEODORA Thursday, Feb. 12
10. DH and Key Exchange
Modular arithmetic, DH, key management, MITM attacks
Lab 2: Docker and Python due 11:59 p.m.
Friday, Feb. 13
Quiz 3 - Isolation, Hashing, and Integrity due 11:59 p.m.
Monday, Feb. 16
DANIEL Tuesday, Feb. 17
11. RSA and Attacks on Protocols, Building a Secure Channel
RSA encryption and signatures, attacks on RSA, combining primitives
Cryptography Project (Part 1) due 11:59 p.m.
Wednesday, Feb. 18
DANIEL Thursday, Feb. 19
12. The Web Platform
HTTP, HTML, DOM, JavaScript, same-origin policy
Friday, Feb. 20
Quiz 4 - Symmetric Crypto due 11:59 p.m.

Part 3. Web and Networking

Monday, Feb. 23
DANIEL Tuesday, Feb. 24
13. Web Attacks and Defenses
CSRF, SQL injection, XSS attacks and defenses
Wednesday, Feb. 25
STAFF Thursday, Feb. 26
Exam Review
Cryptography Project (Part 2) due 11:59 p.m.
Web Security Project available
Lab 3: Browser DevTools available
Friday, Feb. 27
Quiz 5 - DH Key Exchange & RSA due 11:59 p.m.
Monday, Mar. 2
Tuesday, Mar. 3
Exam 1, In-person
Wednesday, Mar. 4
TEODORA Thursday, Mar. 5
14. HTTPS and the Web PKI
TLS, certificates, PKI
Lab 3: Browser DevTools due 11:59 p.m.
Friday, Mar. 6
Quiz 6 - Web Security due 11:59 p.m.
Monday, Mar. 9
TEODORA Tuesday, Mar. 10
15. HTTPS Attacks and Defenses
Social engineering, attacks on CAs, protocol & implementation issues
Wednesday, Mar. 11
TEODORA Thursday, Mar. 12
16. Networking 101
OSI model, link- through transport-layer attacks
Friday, Mar. 13
Monday, Mar. 16
TEODORA Tuesday, Mar. 17
17. Networking 102
TCP/UDP, application-layer protocols and attacks
Wednesday, Mar. 18
TEODORA Thursday, Mar. 19
18. Network Defenses
DoS techniques and defenses, network monitoring
Web Security Project due 11:59 p.m.
Networking Project available
Lab 4: Python Sockets available
Friday, Mar. 20
Quiz 7 - HTTPS, Web PKI, Attacks and Defenses due 11:59 p.m.
Monday, Mar. 23
Tuesday, Mar. 24
Spring Break
Wednesday, Mar. 25
Thursday, Mar. 26
Spring Break
Friday, Mar. 27

Part 4. Security in Context

Monday, Mar. 30
TEODORA Tuesday, Mar. 31
19. Malware
Types of malware, infection methods, C&C, case studies
Lab 4: Python Sockets due 11:59 p.m.
Wednesday, Apr. 1
TEODORA Thursday, Apr. 2
20. Authentication
Passwords, CAPTCHAs, 2FA, biometrics
Friday, Apr. 3
Monday, Apr. 6
TEODORA Tuesday, Apr. 7
21. Privacy and Anonymity
Fingerprinting, k-anonymity, Tor, CFAA, ethics
Wednesday, Apr. 8
TEODORA Thursday, Apr. 9
22. Digital Forensics
Imaging, techniques for analysis, countermeasures for forensics
Networking Project due 11:59 p.m.
Forensics Project available
Lab 5: Autopsy available
Friday, Apr. 10
Quiz 8 - Networking & Networking Defenses due 11:59 p.m.
Monday, Apr. 13
DANIEL Tuesday, Apr. 14
23. Side-Channel Analysis
Physical side channels, microarchitectural issues, Spectre and Meltdown
Wednesday, Apr. 15
TEODORA Thursday, Apr. 16
24. Introduction to ML Security
Lab 5: Autopsy due 11:59 p.m.
Friday, Apr. 17
Quiz 9 - Malware & Authentication due 11:59 p.m.
Monday, Apr. 20
DANIEL Tuesday, Apr. 21
25. Physical Security
Types of physical locks and how to defeat them via lockpicking
Wednesday, Apr. 22
STAFF Thursday, Apr. 23
Exam Review
Friday, Apr. 24
Quiz 10 - Privacy & Digital Forensics due 11:59 p.m.
Monday, Apr. 27
Tuesday, Apr. 28
NO CLASS
Forensics Project due 11:59 p.m.
Wednesday, Apr. 29
Thursday, Apr. 30
Exam 2, In-person
Friday, May 1