Course schedule overview

The scheduling and selection of lecture topics is subject to minor adjustment as the semester progresses, but the assignment and exam dates are not expected to change.

The "Lecture topic" links just link to the detailed information further down the page, so they may not seem to go anywhere if the detailed information is already visible in your window.

Detailed reading and lecture schedule

• Tuesday, January 21st (8-up slides): Overview of course logistics, introduction to threat modeling.
• Thursday, January 23rd (8-up slides): Threat modeling diagrams: data-flow and swimlane. Readings: Shostack, chapters 1-2.
• Tuesday, January 28th (8-up slides, updated with announcements): Threat modeling threats with STRIDE. Reading: Shostack, chapter 3.
• Thursday, January 30th (8-up slides, updated with announcements): From threat modeling to mitigation techniques. Reading: Shostack, chapters 4, 5, and 8.
• Tuesday, February 4th: Memory corruption attacks, part 1. Reading: Crispin Cowan, Perry Wagle, Calton Pu, Steve Beattie, and Jonathan Walpole. Buffer Overflows: Attacks and Defenses for the Vulnerability of the Decade (IEEE version, some formatting issues) (local mirror of author's version), DISCEX 2000.
• Thursday, February 6th: Memory corruption attacks, part 2. No additional readings.