ScheduleΒΆ

The schedule will change as the course progresses, in part based on student interests. If you are particularly interested in some topic not covered here, send mail to the course staff (mailto:yeongjin.jang@oregonstate.edu).

Please visit Gitlab web site to submit your assignments. .. and importantly, ask any questions (and things to discuss) .. with colleagues and staffs via Piazza.

MondayTuesday WednesdayThursday Friday
Sep 23 Sep 24 Sep 25 Sep 26
LEC 1: Course Introduction PDF PPTX
First day of class
Sep 27
Sep 30 Oct 1
LEC 2: x86 Inline Assembly and Rowhammer PDF PPTX
Read: READ #1 Rowhammer
Read: READ #2 FlipFengShui
Read: READ InlineAssembly
Assigned: #1 Inline-assembly, timestamp, cache flush, and Rowhammer
Oct 2 Oct 3
LEC 3: Playing with CPU, CACHE, and DRAM
Read: READ #3 BlackHat
Read: READ #4 HitB
Read: READ #5 Prime+Probe
Read: READ #6 Flush+Reload
Read: READ Intel_x86_instructions
Assigned: #2 Cache side-channel attacks
Oct 4
Oct 7 Oct 8
LEC 4: Speculative Side-channel Attacks
Read: READ #7 Meltdown
Read: READ #8 Spectre
DUE: Assignment #1
Assigned: #3 Exploiting Meltdown
Oct 9 Oct 10
LEC 5: Trusted Computing Base
Read: READ #9 Trust
Read: READ #10 MBox
DUE: Assignment #2
Assigned: #4 Hooking Library and System Calls
Oct 11
Oct 14 Oct 15
LEC 6: Sandboxing basics
Read: READ #11 NaCl Basics
Read: READ #12 NaCl Paper
Read: READ #13 Google Chrome Sandbox
Read: READ #14 Android Sandbox
DUE: Assignment #3
Oct 16 Oct 17
LEC 7: Virtualization
Read: READ #15 Terra
Read: READ #16 XenAccess
Read: READ #17 LibVMI
Read: READ #18 Ether
DUE: Assignment #4
Oct 18
Oct 21 Oct 22
LEC 8: Trusted Execution Environment
Read: READ #19 Intel SGX Basics
Read: READ #20 Intel SGX Bascis 2
Read: REFER #21 Intel SGX Explained
Assigned: #5 Playing with Intel SGX
Oct 23 Oct 24
LEC 9: Remote Attestation
Read: READ #22 Intel SGX RA
Read: READ #23 Intel SGX RA 2
Assigned: #6 Flush+Reload Attack against Intel SGX
Oct 25
Oct 28 Oct 29
LEC 10: Attacks to TEE and countermeasures
Read: READ #24 Controlled Channel Attack
Read: READ #25 SGX Leak Secret
Read: READ #26 SGX-STEP
Read: READ #27 Dark-ROP
Read: READ #28 SGX-Bomb
Read: READ #29 Raccoon
Assigned: #7 SGX + Oblivious Memory Access
Oct 30 Oct 31
LEC 11: Web Security PPTX PDF
Read: READ #30 Defeating SQL Injection
Read: READ #31 CSRF Search Pollution Attack
Read: READ #32 Clickjacking
Nov 1
Nov 4 Nov 5
LEC 12: Web Tracking
Read: READ #33 Online Tracking
Read: READ #34 WebGL Fingerprinting
Read: READ #35 supercookie1
Read: READ #36 supercookie2
Assigned: #8 Implementing Web Tracking Methods
Nov 6 Nov 7
LEC 13: No class today
Nov 8
Nov 11
Veteran's Day
Nov 12
LEC 14: Dynamic Program Instrumentation #2
DUE: Assignment #7
Assigned: #9 Playing with Intel Pin
Nov 13 Nov 14
LEC 15: No class
Nov 15
Nov 18 Nov 19
LEC 16: Fuzzing
Read: READ #41 AFL
Read: READ #42 VUzzer
Assigned: #10 Fuzzing
Nov 20 Nov 21
LEC 17: Symbolic Execution
Read: READ #39 KLEE
Read: READ #40 Angr
Assigned: #11 Symbolic Execution
Nov 22
Nov 25
Thanksgiving Hack Week, Work on Assignments!
Nov 26
Thanksgiving Hack Week, Work on Assignments!
Nov 27
Thanksgiving Hack Week, Work on Assignments!
Nov 28
Thanksgiving Hack Week, Work on Assignments!
Nov 29
Thanksgiving Hack Week, Work on Assignments!
Dec 2 Dec 3
LEC 18: Hybrid Fuzzing
Read: READ #43 Driller
Read: READ #44 QSym
Read: READ #45 T-Fuzz
Dec 4 Dec 5
LEC 19: Recap and discussion
DUE: All assignments!
The last day of class
Dec 6
Dec 9
Final exam week
(No final!)
Dec 10
Final exam week
(No final!)
Dec 11
Final exam week
(No final!)
Dec 12
Final exam week
(No final!)
Dec 13
Final exam week
(No final!)