Below is the calendar for this semester course. This is the preliminary schedule, which will be altered as the semester progresses. It is the responsibility of the students to frequently check this web-page for schedule, readings, and assignment changes. As the professor, I will attempt to announce any change to the class, but this web-page should be viewed as authoritative. If you have any questions, please contact me (contact information is available at the course homepage).
Date | Topic | Assignments Due |
Readings for Discussion (do readings before class) |
|
01/19/21 |
|
|||
01/21/21 |
|
|||
01/26/21 | Formal Verification - Part 2 | |||
01/28/21 | Crypto Protocol Verification | |||
02/02/21 |
|
KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs. link
A Few Billion Lines of Code Later Using Static Analysis to Find Bugs in the Real World. link
CUTE: A Concolic Unit Testing Engine for C. link
|
||
02/04/21 |
|
Fuzzing: Challenges and
Reflections. link
NEUZZ: Efficient Fuzzing with Neural Program Smoothing. link
The Art, Science, and Engineering of Fuzzing:
A Survey. link
|
||
02/09/21 | Wellness Day! Let me take a break too :) | |||
02/11/21 |
|
Automated Attack Discovery in TCP Congestion Control Using a Model-guided Approach (NDSS'18). link
|
||
02/16/21 |
|
SoK: Exploiting Network Printers (IEEE S&P 2018). link
|
||
02/18/21 |
|
Practical Black Box Attacks Against Machine Learning.
link
|
||
02/23/21 |
|
|||
02/25/21 |
|
|||
03/02/21 |
|
Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications.
link
|
||
03/04/21 |
|
BINSEC/REL: Efficient Relational Symbolic Execution for Constant-Time at Binary-Level.
link
|
||
03/09/21 |
|
IMP4GT: IMPersonation Attacks in 4G NeTworks
link
|
||
03/11/21 | Wellness Day! Let me take a break too :) | |||
03/16/21 |
|
Formal Verification of an OS Kernel.
link
|
||
03/18/21 |
|
Adversarial Examples in Constrained Domains.
link
|
||
03/23/21 |
|
Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection.
link
|
||
03/25/21 |
|
Matryoshka: fuzzing deeply nested branches (CCS'19).
link
|
||
03/30/21 |
|
Securify: Practical Security Analysis of Smart Contracts (CCS'18).
link
|
||
04/01/21 |
|
Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices (Usenix Security'20).
link
|
||
04/06/21 |
|
DeepLog: Anomaly Detection and Diagnosis from System Logs through Deep Learning.
link
|
||
04/08/21 |
|
Intriguing Properties of Adversarial ML Attacks in the Problem Space.
link
|
||
04/13/21 |
|
Learning to Fuzz from Symbolic Execution with Application to Smart Contracts (CCS'19).
link
|
||
04/15/21 |
|
Neutaint: Efficient Dynamic Taint Analysis with Neural Networks.
link
|
||
04/20/21 |
|
Principled Unearthing of TCP Side Channel Vulnerabilities (CCS'19).
link
|
||
04/22/21 |
|
Weird machines, exploitability, and provable unexploitability.
link
|
||
04/27/21 |
|
|||
04/29/21 |
|
.