Welcome to CS 5435, introduction to computer security (also called "Security and
Privacy in the Wild"). This course will impart a broad overview of modern
computer security, ranging over topics including authentication, web security,
network security, OS and low-level software security, and abuse prevention.
A brief introduction to cryptography, e-crime, and socio-technical issues will
be included. Key learning objectives include understanding the role of threat
modeling in the design and evaluation of modern computing systems, how
exploitation of computing systems work, and approaches to finding and
remediating vulnerabilities.
Classroom: B161 + B165
Instructor: Tom Ristenpart (https://rist.tech.cornell.edu)
Office hours: By appointment
TAs: Paul Grubbs (pag225@cornell.edu), Bijeeta Pal (bp397@cornell.edu), Nirvan Tyagi (nt355@cornell.edu)
Office hours: Tuesday and Wednesday, 11am - 12pm (Masters Studio)
Graders: Kaveesha Shah (ks2379@cornell.edu), Andy Zhang (jz359@cornell.edu), Vignesh Rao (vnr7@cornell.edu), Larissa Pereira (lp445@cornell.edu)
-
Course website (Github): This Github repository will include general information about the course and will be updated to include lecture material and slides throughout the semester.
-
Course schedule (Google spreadsheet): A preliminary schedule is available. The schedule may evolve, but we will try to stick to it particularly with respect to the homeworks.
-
Resources and readings (Google doc): Links to various resources, tutorials, research papers, etc., organized by topic.
-
Course Q/A (Piazza): We will be using Piazza for class discussion. Rather than emailing questions on logistics, homeworks, and lecture material to staff, we encourage you to post on Piazza instead.
-
Course management system (CMSX): We will be using Cornell's CMSX platform for homework submissions and grading. If the CMSX site does not show up for you, please email the TAs and we can attempt to help fix your enrollment status.
-
Course (recordings): Lecture is recorded and the recordings will be available for the semester.
Basic programming skills and an introductory course on discrete structures and / or algorithms (e.g., CS 2800 or CS 4820). You may take the course without these prerequisites, but must convince the instructor that you have adequate background.
Enrollment is limited to master’s-level standing at Cornell Tech.
The class will involve a combination of lectures, homeworks, a prelim, and a final. You'll be graded according to the following:
- Homeworks: 60% (each homework will be worth an equal amount)
- Prelim (midterm): 20%
- Final: 20%
Grades will not be curved, so in theory everyone could get an A in the class if everyone does well.
We are planning 4 somewhat larger homework assignments. A preliminary schedule of when homeworks will be assigned and when they are due, as well as the prelim and final dates appear in the course schedule linked below. The prelim and final will be in-class exams including multiple choice and short answer questions.
Homeworks are due on the due date by 11:59:59pm EST. You can use in total 3 late days throughout the semeseter.
Up to 10% extra credit will be available for students that meaningfully integrate a notable security component to related coursework, e.g., within a product studio project. For example, performing a threat modeling assessment of their product design, and suggested security architecture. You must propose your extra credit project by the prelim, and turn in a short 2-page description of what you did before the final exam.
The course does not have a required textbook. We will try to provide links to related material and slides will be made available after lectures.
The bulk of material will be delivered via lecture, as such you won't get much out of the class if you skip lectures and won't be prepared for homeworks and exams. We are working on lectures being recorded in case you have to miss class due to interviews, illness, or the like, or want to review them later. There's no need to notify me if you can't attend a lecture, I trust you'll use good judgement.
If you have to miss an exam date, or have other requests in terms of accomodations please contact me.