Course Schedule Spring 2026
Part 1. System Security
|
Monday, Jan. 12 |
DANIEL
Tuesday, Jan. 13 1. The Security Mindset Course overview, thinking like an attacker, threat models |
Wednesday, Jan. 14 |
DANIEL
Thursday, Jan. 15 2. Software Security 1 Machine organization, basic stack smashing |
Friday, Jan. 16 |
|
Monday, Jan. 19 |
DANIEL
Tuesday, Jan. 20 3. Software Security 2 Advanced stack smashing and countermeasures Quiz 0 - Course Logistics due 11:59 p.m.
Lab 1: GDB due 11:59 p.m.
|
Wednesday, Jan. 21 |
DANIEL
Thursday, Jan. 22 4. OS Security and Access Control Secure system principles, access control, process and memory isolation Application Security Project (Part 1) due 11:59 p.m.
|
Friday, Jan. 23 Quiz 1 - Security Mindset and Software Security due 11:59 p.m.
|
|
Monday, Jan. 26 |
DANIEL
Tuesday, Jan. 27 5. Isolation and Sandboxing Syscalls and interposition, jails, Docker, VMs, hypervisors |
Wednesday, Jan. 28 |
DANIEL
Thursday, Jan. 29 6. Hashing Applications, definitions, birthday, life cycle, common examples |
Friday, Jan. 30 Quiz 2 - Operating System Security and Access Control due 11:59 p.m.
|
Part 2. Cryptography
|
Monday, Feb. 2 |
DANIEL
Tuesday, Feb. 3 7. Integrity MAC, HMAC, length extension attacks |
Wednesday, Feb. 4 |
DANIEL
Thursday, Feb. 5 8. Symmetric Crypto OTP, block ciphers, DES history, AES internals Application Security Project (Part 2) due 11:59 p.m.
Cryptography Project
available
Lab 2: Docker and Python
available
|
Friday, Feb. 6 |
|
Monday, Feb. 9 |
DANIEL
Tuesday, Feb. 10 9. Combining Integrity and Confidentiality Block cipher modes, malleability, padding oracles, AEAD |
Wednesday, Feb. 11 |
TEODORA
Thursday, Feb. 12 10. DH and Key Exchange Modular arithmetic, DH, key management, MITM attacks Lab 2: Docker and Python due 11:59 p.m.
|
Friday, Feb. 13 Quiz 3 - Isolation, Hashing, and Integrity due 11:59 p.m.
|
|
Monday, Feb. 16 |
DANIEL
Tuesday, Feb. 17 11. RSA and Attacks on Protocols, Building a Secure Channel RSA encryption and signatures, attacks on RSA, combining primitives Cryptography Project (Part 1) due 11:59 p.m.
|
Wednesday, Feb. 18 |
DANIEL
Thursday, Feb. 19 12. The Web Platform HTTP, HTML, DOM, JavaScript, same-origin policy |
Friday, Feb. 20 Quiz 4 - Symmetric Crypto due 11:59 p.m.
|
Part 3. Web and Networking
|
Monday, Feb. 23 |
DANIEL
Tuesday, Feb. 24 13. Web Attacks and Defenses CSRF, SQL injection, XSS attacks and defenses |
Wednesday, Feb. 25 |
STAFF
Thursday, Feb. 26 Exam Review Cryptography Project (Part 2) due 11:59 p.m.
Web Security Project
available
Lab 3: Browser DevTools
available
|
Friday, Feb. 27 Quiz 5 - DH Key Exchange & RSA due 11:59 p.m.
|
|
Monday, Mar. 2 |
Tuesday, Mar. 3 Exam 1, In-person
|
Wednesday, Mar. 4 |
TEODORA
Thursday, Mar. 5 14. HTTPS and the Web PKI TLS, certificates, PKI Lab 3: Browser DevTools due 11:59 p.m.
|
Friday, Mar. 6 Quiz 6 - Web Security due 11:59 p.m.
|
|
Monday, Mar. 9 |
TEODORA
Tuesday, Mar. 10 15. HTTPS Attacks and Defenses Social engineering, attacks on CAs, protocol & implementation issues |
Wednesday, Mar. 11 |
TEODORA
Thursday, Mar. 12 16. Networking 101 OSI model, link- through transport-layer attacks |
Friday, Mar. 13 |
|
Monday, Mar. 16 |
TEODORA
Tuesday, Mar. 17 17. Networking 102 TCP/UDP, application-layer protocols and attacks |
Wednesday, Mar. 18 |
TEODORA
Thursday, Mar. 19 18. Network Defenses DoS techniques and defenses, network monitoring Web Security Project due 11:59 p.m.
Networking Project
available
Lab 4: Python Sockets
available
|
Friday, Mar. 20 Quiz 7 - HTTPS, Web PKI, Attacks and Defenses due 11:59 p.m.
|
|
Monday, Mar. 23 |
Tuesday, Mar. 24 Spring Break |
Wednesday, Mar. 25 |
Thursday, Mar. 26 Spring Break |
Friday, Mar. 27 |
Part 4. Security in Context
|
Monday, Mar. 30 |
TEODORA
Tuesday, Mar. 31 19. Malware Types of malware, infection methods, C&C, case studies Lab 4: Python Sockets due 11:59 p.m.
|
Wednesday, Apr. 1 |
TEODORA
Thursday, Apr. 2 20. Authentication Passwords, CAPTCHAs, 2FA, biometrics |
Friday, Apr. 3 |
|
Monday, Apr. 6 |
TEODORA
Tuesday, Apr. 7 21. Privacy and Anonymity Fingerprinting, k-anonymity, Tor, CFAA, ethics |
Wednesday, Apr. 8 |
TEODORA
Thursday, Apr. 9 22. Digital Forensics Imaging, techniques for analysis, countermeasures for forensics Networking Project due 11:59 p.m.
Forensics Project
available
Lab 5: Autopsy
available
|
Friday, Apr. 10 Quiz 8 - Networking & Networking Defenses due 11:59 p.m.
|
|
Monday, Apr. 13 |
DANIEL
Tuesday, Apr. 14 23. Side-Channel Analysis Physical side channels, microarchitectural issues, Spectre and Meltdown |
Wednesday, Apr. 15 |
TEODORA
Thursday, Apr. 16 24. Introduction to ML Security Lab 5: Autopsy due 11:59 p.m.
|
Friday, Apr. 17 Quiz 9 - Malware & Authentication due 11:59 p.m.
|
|
Monday, Apr. 20 |
DANIEL
Tuesday, Apr. 21 25. Physical Security Types of physical locks and how to defeat them via lockpicking |
Wednesday, Apr. 22 |
STAFF
Thursday, Apr. 23 Exam Review |
Friday, Apr. 24 Quiz 10 - Privacy & Digital Forensics due 11:59 p.m.
|
|
Monday, Apr. 27 |
Tuesday, Apr. 28 NO CLASS Forensics Project due 11:59 p.m.
|
Wednesday, Apr. 29 |
Thursday, Apr. 30 Exam 2, In-person
|
Friday, May 1 |