CSCI 8260 Spring Computer Network Attacks and Defenses. Syllabus. Prof. Roberto Perdisci

Transcription

1 CSCI 8260 Spring 2016 Computer Network Attacks and Defenses Syabus Prof. Roberto Perdisci

2 Who is this course for? Open to graduate students ony Students who compete this course successfuy wi receive 8000-eve credit (4 credit hours) This is an advanced, research-oriented course Prerequisites Operating Systems Computer Networks Programming (e.g., C/C++, Java, Python) Basics of Computer Security + Crypto wi hep!

3 Goas of this course Anayze computer security systems Learn to identify vunerabiities Anayze recent attacks Learn to design better defenses Find and address open research probems Learn to read, anayze, and write academic papers

4 How wi we get there? Brief introduction to security concepts Quick intro to ML concepts (ater in the course) Seminar-stye ectures We' read papers (mainy) from top security and systems conferences IEEE S&P, USENIX Security, ACM CCS, NDSS, SIGCOMM, NSDI, etc... Papers wi be assigned in advance Students are responsibe for Presenting one or more papers during the semester Writing short reviews for some of the papers Reading a assigned papers!

5 Topics Maware: anaysis, packing/obfuscation, detection, behaviora custering Worms: propagation and mitigation Botnets: measurement and detection Spam: content anaysis, network-eve spammer behavior Vunerabiities: Buffer-overfows, returnoriented programming IDS: Anomay detectors, evasion attacks

6 Topics Web Security: browser-side and server-side vunerabiities Privacy: de-anonymizing data, sef-destructive data DNS security: poisoning attacks, domain reputation and backisting Physica security: hardware-assisted security primitives, audio-visua attacks

7 Grading 10% Cass Participation 15% Paper Reviews 35% Paper Presentations 40% Research Project

8 Cass Participation (10%) We wi discuss one paper per ecture (refer to course schedue) You wi need to read a papers, uness I indicated a paper is "optiona" Reading the papers is fundamenta to be abe to activey participate to discussions during cass

9 Paper Reviews (15%) You are responsibe to write a short peer-stye review for some of the papers (one paper per week, in average) I wi indicate what papers you need to review Reviews need to be short (max 1 or 2 pages) and yet meaningfu What is the paper about? What are the main contributions? Are the contributions nove or incrementa? Is the paper technicay correct Is the experimenta setup reaistic? What are the main experimenta resuts? Are they over-optimistic? Are they satisfying? Pros/Cons and open probems

10 Paper Presentations (35%) You wi be asked to present one or more papers during the semester Presentation guideines min presentation min discussion introduce the probem expain motivations for the work differences with previous work describe approach experimenta setup/resuts imitations pros/cons and points for discussion

11 Research Project (40%) I wi suggest possibe projects, but fee free to propose your own reevant topic Ceary state motivation, approach, resuts Choose eary! Be reaistic! Don't try to sove a Miennium Prize Probem in one semester! I prefer simpicity+competeness to nice ideas but incompete resuts uness you reay have a super coo idea that has a chance to be pubished in IEEE S&P!

12 Research Project it does not necessariy have to be reated to your ong-term research pans, but... try to find something that is cose to your research area, if possibe - You wi ikey enjoy it more! - You wi probaby do better! - e.g., if you do research in DBs, try to find something reated to DB security - If you do research in mobie computing, choose something reated to security in mobie devices - etc.

13 Research Project Advice read as many papers as you can on the topic you are interested in make sure you are not re-inventing the whee can we overcome imitations of previous work? ook at the probem from a different ange measurement papers are ok, in particuar when you can draw unexpected or nonobvious concusions

14 Research Project Things to consider data is fundamenta! what data have you got access to? what data woud you be abe to get? can you perform experiments on a meaningfu amount of data? if you have doubts tak to me...

15 Academic Integrity Every student must abide by UGA's academic honesty poicy Dishonest behavior incuding cheating, copying, or forging experimenta resuts wi not be toerated!

16 Ethica Learning In this cass we wi earn about vunerabiities in computer systems and attacks that may expoit them Such information must never be used for unethica purposes

17 First Assignment Learn LaTeX, pease! and penty of other tutorias onine...

18 Logistics Course website officia reference for a detais regarding the course (check it reguary!) You can emai me for questions perdisci@cs.uga.edu pease use [CSCI8260] in the subject! If you need to tak to me right after cass office hours (to be announced)

19 Next Introduction to Computer Security Brief overview of research topics in security Intro to ML Tips on how to choose a research project Tips on how to write a paper (maybe ater in the course ) Start choosing what papers you woud ike to present (I wi make a ist avaiabe soon)

20 Before you eave... Questions? Introduce yoursef and your research interests!