CS 5173/4173: Computer Security

Fall 2023

Instructor:

Dr. Song Fang

 

Meeting:

TR 3:00 pm - 4:15 pm in Dale Hall 0206

Office hours:

Tuesday 9:30 - 10:30 am or other times by appointment, in DEH 232

Email address:

songf at ou.edu

Homepage:

http://www.cs.ou.edu/~songf/

Teaching assistant:

Ms. Qiuye He

 

Office hours:

W 4:30 - 6:00 pm, in DEH 115

Email address:

qiuye.he at ou.edu

Syllabus:

syllabus.pdf

Suggested textbook: Charlie Kaufman, Radia Perlman, and Mike Speciner, Network Security: Private Communication in a Public World, 2nd Edition, Prentice Hall, ISBN: 0-13-046019-2.
Wenliang Du. Computer Security: A Hands-on Approach. 3rd Edition, 2022.
Final Exam: W 4:30 - 6:30 pm, December 13, 2023, in Dale Hall 0206
Labs: 1. Secret-Key Encryption Lab due on Sep 16
2. MD5 Collision Attack Lab due on Oct 2
3. RSA Public-Key Encryption and Signature Lab due on Oct 19
4. Buffer-Overflow Attack Lab due on Nov 8
Project: Teams of students will work on a collaborative project for the duration of the semester. Students can form teams, each with up to three members, based on common interests and/or complementary skills. You get no extra credit for working alone.
Term project proposal due on 09/26
Term project report due on 12/04
Notes on submissions:

You must use a text editor (e.g., MS Word, Latex) to complete your homework. All submissions should be made via OU's Canvas.


Schedule of classes (Topics and dates may change as the semester progresses)

Date Reading Topics Slide
08/22 Kaufman Chapter 2 Course overview; Basic security concepts Lec 1
08/24 Introduction to cryptography; Substitution/permutation ciphers Lec 2
08/29 Kaufman Chapter 3 Secret key kryptography - Feistel Ciphers Lec 3
08/31 DES, AES
09/05 Kaufman Chapter 4 Modes of operation; Triple DES; MAC Lec 4
09/07

Project discussion

09/12 Kaufman Chapter 5 Introduction to hash functions Lec 5
09/14

Engineering career fair - No class

09/19 Kaufman Chapters 6 and 7 Hash function applications; MD5; SHA-1 Lec 6
09/21 Introduction to public key cryptography
09/26 RSA Lec 7
09/28 Diffie-Hellman; Blockchain Lec 8
10/03 Du Chapters 1-2 Software security: set-UID
10/05 Invoking programs
10/10

Term project lightning talk

10/12 Du Chapters 4 and 5 Buffer overflow attack Lec 9
10/17 Research paper presentation
10/19 Research paper presentation
10/24 Research paper presentation
10/26 Buffer overflow mitigation
10/31 Lab/assignment analysis
11/02 Du Chapters 11-14 Introduction to web security Lec 10
11/07 Common web vulnerabilities
11/09 Coss-site request forgery, and XSS Lec 11
11/14

Individual team meeting on projects

11/16 SQL injection
11/21 Networking basics; Network packets/protocols Lec 12
11/23

Thanksgiving break - No class

11/28 Packets sniffing and spoofing Lec 13
11/30 Final Review
12/05

Final project demo

12/07

Final project demo (Cont'd)




© 2023 Song Fang.