Skip to content

Commit

Permalink
Winter22 refresh
Browse files Browse the repository at this point in the history
  • Loading branch information
ThierrySans committed Dec 14, 2023
1 parent f9bf19b commit d00a7c2
Show file tree
Hide file tree
Showing 6,225 changed files with 120 additions and 19,440 deletions.
The diff you're trying to view is too large. We only load the first 3000 changed files.
63 changes: 33 additions & 30 deletions Gemfile.lock
Original file line number Diff line number Diff line change
@@ -1,67 +1,70 @@
GEM
remote: https://rubygems.org/
specs:
addressable (2.8.0)
public_suffix (>= 2.0.2, < 5.0)
addressable (2.8.6)
public_suffix (>= 2.0.2, < 6.0)
colorator (1.1.0)
concurrent-ruby (1.1.9)
em-websocket (0.5.2)
concurrent-ruby (1.2.2)
em-websocket (0.5.3)
eventmachine (>= 0.12.9)
http_parser.rb (~> 0.6.0)
http_parser.rb (~> 0)
eventmachine (1.2.7)
ffi (1.15.4)
ffi (1.16.3)
forwardable-extended (2.6.0)
http_parser.rb (0.6.0)
i18n (1.8.10)
google-protobuf (3.25.1-arm64-darwin)
http_parser.rb (0.8.0)
i18n (1.14.1)
concurrent-ruby (~> 1.0)
jekyll (4.2.0)
jekyll (4.3.2)
addressable (~> 2.4)
colorator (~> 1.0)
em-websocket (~> 0.5)
i18n (~> 1.0)
jekyll-sass-converter (~> 2.0)
jekyll-sass-converter (>= 2.0, < 4.0)
jekyll-watch (~> 2.0)
kramdown (~> 2.3)
kramdown (~> 2.3, >= 2.3.1)
kramdown-parser-gfm (~> 1.0)
liquid (~> 4.0)
mercenary (~> 0.4.0)
mercenary (>= 0.3.6, < 0.5)
pathutil (~> 0.9)
rouge (~> 3.0)
rouge (>= 3.0, < 5.0)
safe_yaml (~> 1.0)
terminal-table (~> 2.0)
jekyll-sass-converter (2.1.0)
sassc (> 2.0.1, < 3.0)
terminal-table (>= 1.8, < 4.0)
webrick (~> 1.7)
jekyll-sass-converter (3.0.0)
sass-embedded (~> 1.54)
jekyll-watch (2.2.1)
listen (~> 3.0)
kramdown (2.3.1)
kramdown (2.4.0)
rexml
kramdown-parser-gfm (1.1.0)
kramdown (~> 2.0)
liquid (4.0.3)
listen (3.7.0)
liquid (4.0.4)
listen (3.8.0)
rb-fsevent (~> 0.10, >= 0.10.3)
rb-inotify (~> 0.9, >= 0.9.10)
mercenary (0.4.0)
pathutil (0.16.2)
forwardable-extended (~> 2.6)
public_suffix (4.0.6)
rb-fsevent (0.11.0)
public_suffix (5.0.4)
rb-fsevent (0.11.2)
rb-inotify (0.10.1)
ffi (~> 1.0)
rexml (3.2.5)
rouge (3.26.0)
rexml (3.2.6)
rouge (4.2.0)
safe_yaml (1.0.5)
sassc (2.4.0)
ffi (~> 1.9)
terminal-table (2.0.0)
unicode-display_width (~> 1.1, >= 1.1.1)
unicode-display_width (1.7.0)
sass-embedded (1.69.5-arm64-darwin)
google-protobuf (~> 3.23)
terminal-table (3.0.2)
unicode-display_width (>= 1.1.1, < 3)
unicode-display_width (2.5.0)
webrick (1.8.1)

PLATFORMS
ruby
arm64-darwin-23

DEPENDENCIES
jekyll

BUNDLED WITH
2.1.4
2.3.26
72 changes: 30 additions & 42 deletions _data/lectures.yml
Original file line number Diff line number Diff line change
@@ -1,34 +1,30 @@
- week: Introduction
link: https://youtu.be/SMkotdCR2LE
notes:
Course Introduction: 01/CSCD27-Introduction
Definitions: 01/CSCD27-Definitions
Risk Management Analysis: 01/CSCD27-RiskManagementAnalysis
# notes:
# Course Introduction: 01/CSCD27-Introduction
# Definitions: 01/CSCD27-Definitions
# Risk Management Analysis: 01/CSCD27-RiskManagementAnalysis
readings:
Security Engineering: http://www.cl.cam.ac.uk/~rja14/Papers/SE-01.pdf

- week: Classical Cryptography
link: https://youtu.be/joJvC5l_MM0
notes:
Classical Cryptography: 02/CSCD27-ClassicalCryptography
# notes:
# Classical Cryptography: 02/CSCD27-ClassicalCryptography

- week: Symmetric Cryptography, Hash Functions and Protocols
link: https://youtu.be/4JGj_9_ZQLg
notes:
Symmetric Encryption: 03/CSCD27-SymmetricEncryption
Hash Functions: 03/CSCD27-CryptographicHashFunctions
Symmetric Protocols: 03/CSCD27-SymmetricProtocols
# notes:
# Symmetric Encryption: 03/CSCD27-SymmetricEncryption
# Hash Functions: 03/CSCD27-CryptographicHashFunctions
# Symmetric Protocols: 03/CSCD27-SymmetricProtocols
readings:
AES Standard: http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf
Rijndael Proposal for AES Competition: http://csrc.nist.gov/archive/aes/rijndael/Rijndael-ammended.pdf
Illustrated Guide to Secure Hash Functions: http://www.unixwiz.net/techtips/iguide-crypto-hashes.html
Authenticated Encryption: http://cseweb.ucsd.edu/~mihir/papers/oem.pdf

- week: Public-key Cryptography, Digital Signatures and Protocols
link: https://youtu.be/7OaZl1OKZZM
notes:
Asymmetric Encryption: 04/CSCD27-AsymmetricEncryption
Asymmetric Protocols: 04/CSCD27-AsymmetricProtocols
# notes:
# Asymmetric Encryption: 04/CSCD27-AsymmetricEncryption
# Asymmetric Protocols: 04/CSCD27-AsymmetricProtocols
# Quantum Computing and Quantum Cryptography: 04/CSCD27-Quantum
readings:
The original RSA paper: http://people.csail.mit.edu/rivest/Rsapaper.pdf
Expand All @@ -37,58 +33,50 @@
A Detailed Look at RFC 8446 (a.k.a. TLS 1.3): https://blog.cloudflare.com/rfc-8446-aka-tls-1-3/

- week: Network Insecurity
link: https://youtu.be/lKG_UrLSF-4
notes:
Internet (in)security: 05/CSCD27-InternetInsecurity
# notes:
# Internet (in)security: 05/CSCD27-InternetInsecurity
readings:
Intercepting Mobile Communications - The Insecurity of 802.11: http://www.cs.colorado.edu/~rhan/CSCI_7143_001_Fall_2002/Papers/Borisov2001_Insecure802_11.pdf

- break: <span class="em">Reading Week</span>

- week: Network Security
link: https://youtu.be/iOP7tAePruI
notes:
Network Security: 06/CSCD27-NetworkSecurity
# notes:
# Network Security: 06/CSCD27-NetworkSecurity
readings:
The First Few Milliseconds of an HTTPS Connection: http://www.moserware.com/2009/06/first-few-milliseconds-of-https.html
The risks of mixed-content with HTTPS: https://www.youtube.com/watch?v=CSmacMZ0xZo
How Does Tor Really Work? The Definitive Visual Guide (2019): https://skerritt.blog/how-does-tor-really-work/

- week: Human Authentication
link: https://youtu.be/vVel9jrACuE
notes:
Human Authentication: 07/CSCD27-HumanAuthentication
# notes:
# Human Authentication: 07/CSCD27-HumanAuthentication

- week: OS and Program Insecurity
link: https://youtu.be/0DjFjmzTmjU
readings:
Smashing The Stack For Fun And Profit: http://phrack.org/issues/49/14.html
notes:
System Insecurity: 08/CSCD27-SystemInsecurity
# notes:
# System Insecurity: 08/CSCD27-SystemInsecurity

- week: Protection
link: https://youtu.be/S6M8koRsv7o
readings:
Stack Overflows - Defeating Canaries, ASLR, DEP, NX: https://security.stackexchange.com/questions/20497/stack-overflows-defeating-canaries-aslr-dep-nx
notes:
System Security: 09/CSCD27-Protection
# notes:
# System Security: 09/CSCD27-Protection

- week: Malicious Software
link: https://youtu.be/eA926XSUVu0
notes:
Malicious Software: 10/CSCD27-MaliciousSoftware
Data Breach Case Studies: 10/Security Data Breach Case Studies.pdf
# notes:
# Malicious Software: 10/CSCD27-MaliciousSoftware
# Data Breach Case Studies: 10/Security Data Breach Case Studies.pdf
readings:
Google Analysis of Web-based Malware: http://www.usenix.org/events/hotbots07/tech/full_papers/provos/provos.pdf

- week: Web Security
link: https://youtu.be/QM8I9iI0rtg
notes:
Web Security: 11/CSCD27-WebSecurity
# notes:
# Web Security: 11/CSCD27-WebSecurity

- week: Social Engineering
link: https://utoronto.zoom.us/j/81869016590
notes:
Web Security: 12/CSCD27-SocialEngineering
# notes:
# Web Security: 12/CSCD27-SocialEngineering
readings:
Handcrafted Fraud and Extortion - Manual Account Hijacking in the Wild: http://services.google.com/fh/files/blogs/google_hijacking_study_2014.pdf
4 changes: 2 additions & 2 deletions _data/nav.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,13 @@
absolute: False

- title: Piazza
url: https://piazza.com/utoronto.ca/fall2021/cscd27
url: https://piazza.com/utoronto.ca/winter2024/cscd27
absolute: True

- title: Github
url: https://github.com/ThierrySans/CSCD27
absolute: True

- title: Feedback
url: https://forms.gle/TeF5i79wLTLf87za6
url: https://forms.gle/bg1FEvrwJJefu6XK6
absolute: True
97 changes: 43 additions & 54 deletions _data/settings.yml
Original file line number Diff line number Diff line change
@@ -1,80 +1,69 @@
# Site settings
ref: CSCD27
title: Computer and Network Security
edition: Fall 2021
edition: Winter 2024
description: This course is meant to offer Computer Science undergraduate students a broad overview of the field of computer security. Students will learn the basic concepts in computer security including software vulnerability analysis and defense, networking security, applied cryptography. Students will also learn the fundamental methodology for how to design and analyze the security of critical systems.
website: https://thierrysans.me/CSCD27/
github: https://github.com/ThierrySans/CSCD27
piazza: https://piazza.com/utoronto.ca/fall2021/cscd27
feedback: https://forms.gle/NiCRZahRSXHX6rv8A
piazza: https://piazza.com/utoronto.ca/winter2024/cscd27
feedback: https://forms.gle/bg1FEvrwJJefu6XK6

instructor:
name: Thierry Sans
email: [email protected]
website: https://thierrysans.github.io/
github: ThierrySans
twitter: ThierrySans
hours: Thu 2-4 PM
location: <a href="https://utoronto.zoom.us/j/88149611289">Zoom</a>
hours: TBD
location: IC 346
contact: Piazza only (no email)

# https://www.fingerlakesbmw.org/main/flobfuscate.php
assistants:
- name: Alexander Greff
contact: "&#97;&#108;&#101;&#120;&#46;&#103;&#114;&#101;&#102;&#102;&#64;&#109;&#97;&#105;&#108;&#46;&#117;&#116;&#111;&#114;&#111;&#110;&#116;&#111;&#46;&#99;&#97;"
hours: Fri 3-4 PM
location: <a href="https://utoronto.zoom.us/j/87843211186">Zoom</a>
- name: David Yue
contact: "&#100;&#97;&#118;&#105;&#100;&#46;&#121;&#117;&#101;&#64;&#109;&#97;&#105;&#108;&#46;&#117;&#116;&#111;&#114;&#111;&#110;&#116;&#111;&#46;&#99;&#97;"
hours: Tue 4-5 PM
location: <a href="https://utoronto.zoom.us/j/82242716887">Zoom</a>
- name: Jiasong Liang
contact: "&#106;&#105;&#97;&#115;&#111;&#110;&#103;&#46;&#108;&#105;&#97;&#110;&#103;&#64;&#109;&#97;&#105;&#108;&#46;&#117;&#116;&#111;&#114;&#111;&#110;&#116;&#111;&#46;&#99;&#97;"
hours: Wed 12-1 PM
location: <a href="https://utoronto.zoom.us/j/87218765819">Zoom</a>
- name: Sonika Verma
contact: "&#115;&#111;&#110;&#105;&#107;&#97;&#46;&#118;&#101;&#114;&#109;&#97;&#64;&#109;&#97;&#105;&#108;&#46;&#117;&#116;&#111;&#114;&#111;&#110;&#116;&#111;&#46;&#99;&#97;"
hours: Wed 6-7 PM
location: <a href="https://utoronto.zoom.us/j/86519971841">Zoom</a>
# - name: Alexander Greff
# contact: "&#97;&#108;&#101;&#120;&#46;&#103;&#114;&#101;&#102;&#102;&#64;&#109;&#97;&#105;&#108;&#46;&#117;&#116;&#111;&#114;&#111;&#110;&#116;&#111;&#46;&#99;&#97;"
# hours: Fri 3-4 PM
# location: <a href="https://utoronto.zoom.us/j/87843211186">Zoom</a>



timings:
- section: LEC01
time: Thu 11:00-13:00
location: <a href="https://utoronto.zoom.us/j/81869016590">Zoom</a>
time: Thu 1-3 PM
location: SW 143
instructor: Thierry Sans
- section: PRA01
time: Tue 1-2 PM
location: BV 473
instructor: TBD
- section: PRA02
time: Wed 12-1 PM
location: BV 473
instructor: TBD
- section: PRA03
time: Thu 4-5 PM
location: BV 473
instructor: TBD
- section: PRA04
time: Thu 9:00-10:00
location: <a href="https://utoronto.zoom.us/j/81194469287">Zoom</a>
instructor: David Yue
- section: PRA05
time: Thu 13:00-14:00
location: <a href="https://utoronto.zoom.us/j/84170707413">Zoom</a>
instructor: Jiasong Liang
- section: PRA07
time: Fri 14:00-15:00
location: <a href="https://utoronto.zoom.us/j/81865319739">Zoom</a>
instructor: Alexander Greff
- section: PRA08
time: Tue 19:00-20:00
location: <a href="https://utoronto.zoom.us/j/86012099336">Zoom</a>
instructor: Sonika Verma
time: Thu 3-4 PM
location: BV 473
instructor: TBD
- section: TUT01
time: Tue 5-6 PM
location: HL B101
instructor: TBD
- section: TUT02
time: Tue 2-3 PM
location: IC 230
instructor: TBD
- section: TUT03
time: Fri 13:00-14:00
location: <a href="https://utoronto.zoom.us/j/85368292479">Zoom</a>
instructor: Sonika Verma
- section: TUT05
time: Fri 9:00-10:00
location: <a href="https://utoronto.zoom.us/j/85315265002">Zoom</a>
instructor: David Yue
- section: TUT06
time: Tue 15:00-16:00
location: <a href="https://utoronto.zoom.us/j/86884973412">Zoom</a>
instructor: Alexander Greff
- section: TUT07
time: Tue 16:00-17:00
location: <a href="https://utoronto.zoom.us/j/81722175463">Zoom</a>
instructor: Jiasong Liang
time: Tue 9-10 AM
location: IC 230
instructor: TBD
- section: TUT04
time: Fri 1-2 PM
location: SW 143
instructor: TBD


first: 20210906
first: 20240108
Loading

0 comments on commit d00a7c2

Please sign in to comment.