Lecture

Subject to change as class progresses (slides will be finalized one day before the class meeting time)

Date	Topic	Reading	Assignment
09/02	Course Introduction Overview	See ANGEL	read Chapter one of Handbook of Applied Cryptography
09/09	Hash & MAC & OWF	See ANGEL	Homework 1 is out in ANGEL
09/16	Symmetric Cryptography	See ANGEL
09/23	Public-key Cryptography	See ANGEL	Group formation
09/30	Threshold Cryptography & Key Management	See ANGEL
10/07	Secure coding Identity Theft Project proposal presentation -- 1st milestone	(1) Stronger Password Authentication Using Browser Extensions (B. Ross et al., USENIX 2005) (2) Client-Side Defense Against Web-Based Identity Theft (N. Chou et al., NDSS04) Each group: 10-minute talk, 5 minute discussion (part 1)	Bob Harris Min Shao project presenters: Harris, Cole, Bai, Hsu
10/14	Study day, no class
10/21	Security Updates RFID	(3): OPUS: Online Patches and Updates for Security (G. Altekar et al, USENIX Security 05) (4) The Blocker Tag: Selective Blocking of RFID Tags for Consumer Privacy (Juels et al. CCS03) Each group: 10-minute talk, 5 minute discussion (part 2)	Bob Cole Yan Sun project presenters: Sun, Liu, Shao, Jean
10/28	Sensor network security	(5) LEAP (Zhu et al, CCS03) (6) SIA: Secure Information Aggregation in Sensor Networks (Przydatek et al, SenSys03) (7) SWATT: SoftWare-based ATTestation for Embedded Devices(A. Seshadri et al., IEEE S&P04)	Sencun zhu Evans Jean Changlei Liu
11/04	DDoS	(8) Sustaining Availability of Web Services under Distributed Denial of Service Attacks(J. Xu, W. Lee) (9) SIFF: A Stateless Internet Flow Filter to Mitigate DDoS Flooding Attacks (A. Yaar, A. Perrig and D. Song, 2004 IEEE Symposium on Security and Privacy Botz-4-Sale: Surviving Organized DDoS Attacks That Mimic Flash Crowds (S. Kandula et al., NSDI 2005)	Yan Sun Hungyuan Hsu
11/11	Worm (1) Project presentation -- 2st milestone	(10) How to own the Internet in your spare time (Staniford et al, Usenix03) (11) New Streaming Algorithms for Superspreader Detection ( S. Venkataraman, et al. NDSS 05). Each group: 10 minute talk, 5 minute discussion (part 1)	Min Shao Kun Bai
11/18	Worm(2) Intrusion Detection	(12) Semantics-Aware Malware Detection (M. Christodorescu et al., S&P05) (13) Automating Mimicry Attacks Using Static Binary Analysis. (C. Kruegel et al., USENIX Security 05) Each group: 10 minute talk, 5 minute discussion (part 2)	Evans Jean Bob Harris
11/22	Sensor Network Security (2)	(14) Probabilistic Pair-wise Key Establishment ( Liu and Ning, CCS03) (15) An Interleaved Hop-by-Hop Authentication Scheme for Filtering of Injected False Data in Sensor Networks (Zhu et al, IEEE S&P04)	Hungyuan Hsu Sencun Zhu
11/25	Thanksgiving, no class
12/02	Privacy-preserving Steppingstone Distributed systems security	(16) Information sharing across private databases (Rakesh Agrawal, Alexandre Evfievski, Ramakrishnan Srikant) (17) Robust Correlation of Encrypted Attack Traffic Through Stepping Stones by Manipulation of Interpacket Delays (Wang and Reeves, CCS03) (18) BIND: A Time-of-use Attestation Service for Secure Distributed Systems (E. Shi et al, IEEE Symposium on Security and Privacy 2005).	Kun Bai Bob Cole Changlei Liu
		Project final presentation -- 3st milestone Each group: 20-minute talk, 1~2 minute discussion

*optional: review of the paper is up to your own interest.

Useful links:

Introduction to Modern Cryptography by Mihir Bellare, UCSD