Software and Systems Security

Computer Security and the Internet: Tools and Jewels from Malware to Bitcoin

Security in Computing

Pfleeger et al. chapters 1.1 - 1.8

van Oorschot chapters 1.1 - 1.4, 1.6

The 10 privacy principles of PIPEDA

A terminology for talking about privacy

Federal privacy reform in Canada: The Consumer Privacy Protection Act

Modernizing Canada’s Privacy Act

Microsoft’s report on Russian Cyberattacks in Ukraine

Social Security Employees in Illinois Sentenced in Federal Court on Charges Including Bribery and Identity Theft

Pfleeger et al. chapters 3.1

van Oorschot chapters 6.3 - 6.8

On the Evolution of Buffer Overflows

Exploiting Format String Vulnerabilities

Example format string vulnerabilities (November 2011)

Example format string vulnerabilities (May 2012)

A Taxonomy of Computer Program Security Flaws, with Examples

van Oorschot chapters 6.1, 6.5 - 6.8

Pfleeger et al. chapters 3.2

van Oorschot chapters 7.5 - 7.9

US Federal Student Aid website has a Facebook web bug

Linux Kernel “Back Door” Attempt

The backdooring of SquirrelMail

Clickjacking attack (Interface illusion)

MITM Malware Re-Writes Online Bank Statements

Pfleeger et al. chapters 3.3

van Oorschot chapters 1.7, 6.9

An operating system kernel with a formal proof of security

Bugs in open source software: #gotofail

Bugs in open source software: Heartbleed

Pfleeger et al. chapters 5.1

van Oorschot chapters 5.1 - 5.2

Android permissions demystified

Google launches its third major operating system, Fuchsia

Breaking SMS-based two-factor authentication: Attacking the cellular network

Breaking SMS-based two-factor authentication: Android malware for stealing SMS messages

Passphrases that you can memorize — But that even the NSA can’t guess

The top 50 woeful passwords exposed by the Adobe security breach

Password Security: A Case History

Facebook’s password hashing scheme

LinkedIn Revisited - Full 2012 Hash Dump Analysis

Anatomy of a password disaster - Adobe’s giant-sized cryptographic blunder

Largest password data breach in history has been leaked online

Pfleeger et al. chapters 5.2

van Oorschot chapters 3.5

‘Fake fingerprint’ Chinese woman fools Japan controls

Politician’s fingerprint ‘cloned from photos’ by hacker

Vietnamese security firm: Your face is easy to fake

Android facial recognition based unlocking can be fooled with photo

Breaking Windows Hello Face Authentication

Reverse-Engineered Irises Look So Real, They Fool Eye-Scanners

Border Drones with Facial Recognition

van Oorschot chapters 1.7

The Security Principles of Saltzer and Schroeder, illlustrated with scenes from Star Wars

Reliably Erasing Data From Flash-Based Solid State Drives

SELinux