Department of Computer Science
CS 551: Security and Privacy on the Internet
evans@virginia.edu
|
CS551: Security and Privacy on the Internet, Fall 2000
Lectures |
Manifests |
Problem Sets |
Projects |
Midterm |
Final |
Resources |
Syllabus |
Challenges |
Calendar
|
CS551: Security and Privacy on the Internet
Keeping Secrets, Thwarting Imposters and Disarming Malicious Code New Course, Fall 2000
Assignments Due
- Enjoy your break!
Recent Announcements
See below for earlier announcements.
- Thursday, 21 December: Course Surveys
- Wednesday, 13 December: Final Comments
- Wednesday, 6 December: Please fill out the official course evaluation (before 10 December) and the unofficial survey
- Wednesday, 6 December: Final (Due Monday at 5:00 pm)
- Wednesday, 6 December: Jeopardy (don't look at this if you haven't taken the class yet), Manifest
- Monday, 4 December: All Project Presentations are now available
Security in the News
Some links to recent news articles and papers relevant to topics discuss in class:
- Red Team versus the Agents, Scientific American, December 2000.
- The Nexus of Privacy and Security, New York Times, 8 December 2000. Report on SafeNet conference sponsored by Microsoft.
- Cyberspace official urges U.S. to beef up defenses, CNet News, 8 December 2000 - $25,000 scholarships for students studying security willing to work for government.
- Scarfo case could test cyber-spying tactic, Philadelphia Inquirer, 4 December 2000 (suggested by William GJ Halfond).
- Almost everything in 4 December's ACM News is relevant.
- The Risks of Touch-Screen Balloting, San Francisco Chronical, 4 December 2000.
- UK Internet 'spy' plan condemned, CNN, 3 December 2000.
- CIA Shuts Chat Room, Fires 4, Suspends 10, Washington Post, 1 December 2000. Online privacy law anticipated, InfoWorld, 30 November 2000.
- Yahoo delivers encrypted email, CNet, 28 November 2000.
- Report finds risk but supports Carnivore email surveillance, CNet, 21 November 2000.
- E-Mail surveillance tool said OK, Mercury Center News, 20 November 2000.
- Tech CEOs vote for Web-based elections, USA Today, 14 November 2000.
- Sonic: another self-updating Internet -worm has been discovered "in the wild", Net Security, 2 November 2000.
- Mideast hackers may strike U.S. sites, FBI warns, Cnet, 2 November 2000.
- Experts say browsers fall short on certificate alerts , Cnet, 31 October 2000. Revoking certificates doesn't usually work.
- Computer-crime treaty evokes criticism from U.S. tech firms, MSNBC, 26 October 2000.
- Pings and E-Arrows Fly in Mideast Cyber-War , Washington Post, 27 October 2000. More from CNN.
- Microsoft Says Hackers Broke Into Its Network, Washington Post, 27 October 2000.
- Microsoft computer network hacked, CNet News, 27 October 2000.
- SDMI Hacked, Salon Magazine, 12 October 2000.
- VeriSign earnings - VeriSign sold 75,500 digital certificates last quarter
- St. Pete Breeding Ground for World Class Hackers, Moscow Times, 11 October 2000.
- Pentagon Launches 'Smart Card' ID Badge, New York Times, 10 October 2000.
- US Selects a New Encryption Technique, New York Times, 3 October 2000. The fact that the standard emerged from a country known more for its chocolate than for its software shows the international nature of the cryptographic field.
- E-Signatures Become Valid, New York Times, 2 October 2000
- Credit Cards Losing Grip on E-Commerce, E-Commerce Times, 28 September 2000. Predicts $20 Billion in smart card and electronic wallet transactions in 2002! (Compare to Differential Power Analysis story.)
- U.S., EU move toward cybercrime treaty, USA Today, 27 September 2000
- Experts see rash of hack attacks coming Recent costly hits show 'more brazen' criminals preying on companies, USA Today, 27 September 2000
- Ex-NSA expert warns of concealed backdoors - ZDNet News UK, 25 September 2000 (reported by GJ Halfond)
- Massive Denial-of-Service Attack Looming - CERT Report, 18 September 2000
- Visa gives "smart cards" a new push, 12 September 2000
- Self-Destructing Email, Forbes, 12 September 2000
- Differential Power Analysis, New York Times story on using power analysis to break Mondex smart cards, June 1998.
- Chosen Ciphertext Attack Against Several E-Mail Encryption Protocols, Jonathan Katz and Bruce Schneier. USENIX 2000 paper showing how Cipher Feedback Mode used in PGP is vulnerable.
Past Announcements
- Wednesday, 29 November: Project Presentations (1-3, 10-12)
- Wednesday, 29 November: Manifest (including presentation schedule)
- Monday, 27 November: Manifest, Lecture
- Monday, 20 November: Manifest, Lecture
- Wednesday, 15 November: Gary McGraw's slides
- Wednesday, 15 November: Problem Set 4
- Monday, 13 November: Wednesday's class will be a guest lecture by Gary McGraw
- Monday, 13 November: Manifest, Lecture
- Monday, 6 November: Manifest, Lecture (new challenge problems in lecture slides)
- Wednesday, 1 November: Manifest, Lecture
- Monday, 30 October: Manifest, Lecture
- Wednesday, 25 October: Midterm Answers
- Wednesday, 25 October: Manifest, Lecture
- Wednesday, 18 October: Manifest
- Monday, 16 October: Manifest, Lecture
- Wednesday, 11 October: Manifest, Dumpster Document
- Monday, 9 October: The Jefferson Wheel key generation program is here.
- Monday, 9 October: Manifest, Lecture
- Sunday, 8 October: Challenge 4 now open
- Wednesday, 4 October: Manifest, Lecture
- Monday, 2 October: Manifest, Lecture
- Thursday, 28 September: The Economist doesn't like Challenge 2.
- Wednesday, 27 September: Lecture, Manifest
- Monday, 25 September: Lecture, Manifest
- Wednesday, 20 September: Lecture, Manifest
- Monday, 18 September: Lecture, Manifest, PS1 Answers
- Thursday, 14 September: Vic Ludwig has solved the RC6 decryption proof challenge
- Wednesday, 13 September: Lecture
- Wednesday, 13 September: Two new challenges!
- Tuesday, 12 September: Challenge Hint now available
- Monday, 11 September: I will have extra office hours (in 236A) Tuesday 3-4:00 to discuss project ideas.
- Monday, 11 September: Manifest, Lecture
- Thursday, 7 September: DES Simulator (Java applet)
- Wednesday, 6 September: Manifest, Lecture, Project Proposals
- Wednesday, 6 September: RSA is now in public domain
- Wednesday, 6 September: Project Teams
- Monday, 4 September: Manifest, Lecture
- Sunday, 3 September: I've sent a message to everyone who I received a survey from. If you didn't receive this, please resend your survey.
- Friday, 1 September: If you picked up a textbook after class Wednesday that isn't yours, it belongs to Adam Trost (ast9d@virginia.edu).
- Friday, 1 September: If you are on the original registration mailing list, you should have received a message announcing the room change and clarifying the problem set.
- Friday, 1 September: Due to the server failure, registration surveys will be accepted until 11:59pm Sunday night.
- Wednesday, 30 August: Registration Survey: Respond by noon Thursday
- Wednesday, 30 August: Manifest, Lecture, Problem Set 1, start thinking about Projects
- Wednesday, 30 August: Challenge 1 Open
- Wednesday, 30 August: TA Siddarth Dalai will have office hours on Tuesdays 3:30-4:30 and Fridays 2:00-3:00 in the CS department library
- Tuesday, 2 August: Course Announcement
Assignments Past Due
- Thursday, 1 September: Registration Survey
- Monday, 11 September: Problem Set 1
- Monday, 18 September: Project Preliminary Proposal
- Wednesday, 27 September: Problem Set 2
- Wednesday, 4 October: Full Project Proposal
- Wednesday, 11 October: Problem Set 3: Public-Key Cryptosystems
- Before Thanksgiving: Project Progress Meetings
- Wednesday 29 November: Team 1-3, 10-12 Project Presentations
- Wednesday 29 November, before class (or Friday 1 December, 5:00pm for early project presenters): Problem Set 4
- Monday, 4 December: Team 4-9 Project Presentations
- Monday, 11 December (5:00pm): Final Due
|
|
University of Virginia Department of Computer Science CS 551: Security and Privacy on the Internet |
David Evans evans@virginia.edu |