CS6230: Topics in Information Security

Description

This is a special topic module on computer security. We will cover topics in the areas of web security, intrusion detection, malicious code analysis and confinement.

The major components of this module are class presentations and a class project. Each student needs to select a paper or a few related papers from our list of papers, and make a half-hour presentation. Students also are organized into teams of two or three to design and implement a solution to some security problem. At the end of the semester, each team needs to make a short presentation, as well as turn in a technical report of the project.

Administrative Matters

Location: COM1/212
Time: 1600-1800, Monday

Paper List

Click here for the list of papers we plan to discuss in class. You're welcome to suggest related papers to me. The list will be updated frequently.

Presentation Schedule

Feb. 2

DONG Xinshu: Browsershield: vulnerability-driven filtering of dynamic html

Kailas PATIL: Noxes: A client-side solution for mitigating cross-site scripting attacks

Feb. 9

Sadegh Heyrani Nobari: Stronger password authentication using browser extensions
Dawei Qi: DART: Directed Automated Random Testing

Feb. 16

Xiangfa Guo: Securing Frame Communication in Browsers
Chengnian Sun: Static Analysis of Executables to Detect Malicious Patterns

Mar. 16

RAJVINDER SINGH: Analysis of W32.Downadup
LIANG Zhenkai: On attack detection

Mar. 23

UTSAV SARAF: Reducing Shoulder-surfing by Using Gaze-based Password Entry
LIANG Zhenkai: On preventing buffer overflow attacks using randomization

Mar. 30

RIKKY WENANG: CANTINA: A content-based approach to detecting phishing web sites