CS 489
Advanced Topics in Computer Science
Winter 2024 · Software and Systems Security
Topics
- Introduction to Software and System Security
- Program Security
- Operating System Security
- Mobile Security
- Non-techincal Aspects in Security
- Common Bugs and Vulnerabilities
- Bug Finding Tools and Practices
- Defenses against Common Vulnerabilities
- Hardware Security
Readings
- Computer Security and the Internet: Tools and Jewels from Malware to Bitcoin2021
- Security in Computing2015
- Pfleeger et al. chapters 1.1 - 1.8
- van Oorschot chapters 1.1 - 1.4, 1.6
- The 10 privacy principles of PIPEDA
- A terminology for talking about privacy
- Federal privacy reform in Canada: The Consumer Privacy Protection Act
- Modernizing Canada’s Privacy Act
- Microsoft’s report on Russian Cyberattacks in Ukraine
- Social Security Employees in Illinois Sentenced in Federal Court on Charges Including Bribery and Identity Theft
- Pfleeger et al. chapters 3.1
- van Oorschot chapters 6.1 - 6.8
- On the Evolution of Buffer Overflows
- Exploiting Format String Vulnerabilities
- Example format string vulnerabilities (November 2011)
- Example format string vulnerabilities (May 2012)
- A Taxonomy of Computer Program Security Flaws, with Examples
- Pfleeger et al. chapters 3.2
- van Oorschot chapters 7.1 - 7.4
- Morris worm
- The Spread of the Sapphire/Slammer Worm
- Slammed!
- Technical analysis of client identification mechanisms
- van Oorschot chapters 7.5 - 7.9
- US Federal Student Aid website has a Facebook web bug
- Linux Kernel “Back Door” Attempt
- The backdooring of SquirrelMail
- Clickjacking attack (Interface illusion)
- MITM Malware Re-Writes Online Bank Statements
- Pfleeger et al. chapters 3.3
- van Oorschot chapters 1.7, 6.9
- An operating system kernel with a formal proof of security
- Bugs in open source software: #gotofail
- Bugs in open source software: Heartbleed
- Pfleeger et al. chapters 5.1
- van Oorschot chapters 5.1 - 5.2
- Android permissions demystified
- Google launches its third major operating system, Fuchsia
- Breaking SMS-based two-factor authentication: Attacking the cellular network
- Breaking SMS-based two-factor authentication: Android malware for stealing SMS messages
- Passphrases that you can memorize — But that even the NSA can’t guess
- The top 50 woeful passwords exposed by the Adobe security breach
- Password Security: A Case History
- Facebook’s password hashing scheme
- LinkedIn Revisited - Full 2012 Hash Dump Analysis
- Anatomy of a password disaster - Adobe’s giant-sized cryptographic blunder
- Largest password data breach in history has been leaked online
- Pfleeger et al. chapters 5.2
- van Oorschot chapters 3.5
- ‘Fake fingerprint’ Chinese woman fools Japan controls
- Politician’s fingerprint ‘cloned from photos’ by hacker
- Vietnamese security firm: Your face is easy to fake
- Android facial recognition based unlocking can be fooled with photo
- Breaking Windows Hello Face Authentication
- Reverse-Engineered Irises Look So Real, They Fool Eye-Scanners
- Border Drones with Facial Recognition
- van Oorschot chapters 1.7
- The Security Principles of Saltzer and Schroeder, illlustrated with scenes from Star Wars
- Reliably Erasing Data From Flash-Based Solid State Drives
- SELinux
Sources
- Course catalogue ↗2026–2027
- course_website ↗Winter 2024