Course Schedule

Week Lecture (Tue) Lecture (Thr) Lab (Fri)
1 Jan 16:
Lecture - Security Principles
Textbook Discussion - Chapter 1 (Due Jan 23)
Jan 18:
Lecture - Security Principles
Module 1 - Linux Fundamentals (Due Jan 25)
Jan 19:
Lab 1 - Linux Privilege Escalation (Due Jan 25)
2 Jan 23:
Lecture - Securing Accounts
Textbook Discussion - Chapter 3 (Due Jan 30)
Jan 25:
Lecture - Securing Passwords Module 2 - Password Attacks (Due Feb 1)
Jan 26:
Lab 2 - Cracking Passwords (Due Feb 1)
3 Jan 30:
Lecture - Securing Data
Module 3 - Public Key Encryption (Due Feb 6)
Due Today Research Reading 1
Feb 1:
Lecture - Applied Cryptography
Module 4 - Applied Cryptography (Due Feb 8)
Feb 2:
Lab 3 - Cryptanalysis (Due Feb 8)
4 Feb 6:
Guest speaker: Ms. Svetla Walsh
UR Information Security Analyst
Textbook Discussion - Chapter 6 (Due Feb 15)
Module 5 - Common Software Vulnerabilities (Due Feb 13)
Feb 8:
Lecture - Software Vulnerabilities - Race Conditions
Module 6 - Linux processes and Bash scripting (Due Feb 15)
Feb 9:
Lab 4 - Race Condition Vulnerability (Due Feb 15)
5 Feb 13:
Lecture - Software Vulnerabilities - Buffer Overflows (Intro)
Feb 15:
Lecture - Software Vulnerabilities - Buffer Overflow
Feb 16:
Lab 5 - Buffer Overflow (Due Feb 22)
6 Feb 20:
Guest speaker: S&P Researcher Collins Munyendo talk on Usable Security and Privacy
Due Today Research Reading 2
Feb 22:
Lecture - Web Security Basics
Module 7 - Web Security Basics (Due Mar 5)
Feb 23:
Lab 6 - Capture the Flag
Join Score Board Code: 9faafe92
Lab 6 - GitHub README for write-up (Due Feb 29)
7 Feb 27:
Lecture - Web Security SOP
Feb 29:
Module 8 - Web Security Single Origin (Due Mar 7)
Mar 1:
Lab 7 - Clickjacking (Due Mar 7)
8 Mar 5:
Lecture - Web Security XSS
Textbook Discussion - Chapter 9 (Due Mar 21)
Module 9 - Cross-site scripting (Due Mar 19)
Mar 7:
Lecture - Web Security SQL Injection
Module 10 - SQL Injection (Due Mar 21)
Mar 8:
Lab 8 - SQL Injection (Due Mar 28)
9 Mar 12:
Spring Break
Mar 14:
Spring Break
Mar 15:
Spring Break
10 Mar 19:
Lecture - Networking Introduction

Module 11 - Networking Fundamentals (Due Mar 28)
Project
Mar 21:
Module 12 - Packet Sniffing and Spoofing (Due Mar 28)
Mar 22:
Lab 9 - Capture the Flag
Join Score Board Code: 9faafe92
Lab 9 - GitHub README for write-up (Due Mar 28)
11 Mar 26:
Due Today Research Reading 3
Lecture - Link Layer MAC & ARP
Module 13 - ARP Cache Poisoning Attack (Due Apr 4)
Mar 28:
Lecture - Distributed Denial of Service (DDos)

Module 14 - Wireshark (Due Apr 9)
Mar 29:
Work on Project
12 Apr 2:
Lecture - TCP Attacks
Module 15 - TCP Attacks (Due Apr 9)
Apr 4:
Lecture - Network Enumeration

Module 16 - nmap (Due Apr 11)
Apr 5:
Work on Project
13 Apr 9:
Lecture - Usable Security: Warning Messages
Module 17 - Evaluating Security Warning Messages (Due Apr 16)
Apr 11:
Lecture - Phishing and Privacy Notices
Apr 12:
Work on Project
14 Apr 16:
Module 18 - Security and Large Language Models (Due Apr 23)
Due Today Research Reading 4
Apr 18:
Presentation Guidelines
Vote on Lunch Options

Module 19 - Security Flaws in Generated Code
Apr 19:
Lab assignment is to attend the A&S Research Symposium
We will not meet in the lab
15 Apr 23:
Please complete: Course Evals
Work on Project
Apr 25:
Work on Project
Apr 26:
Due Class Project
Lab 10 - Capture the Flag
Join Score Board Code: 9faafe92
16   May 2 (2pm - 5pm):
Project Presentations