This is an archive of a course I taught Fall 2022, preserved here as a resource for future students.

ECE 560: Computer and Information Security

Section 01, Fall 2022


Computer Security basically just means wearing
a ski mask on the internet.

Overview

Lecture location: Wilkinson 126 + Zoom for authorized remote attendees
Lecture time: Tue/Thu 1:45pm - 3:00pm

Instructor: Dr. Tyler Bletsch
Email: Tyler.Bletsch AT duke.edu
Office Hours:

Teaching Assistants:

Links:

NOTE: This course has a significant overlap with COMPSCI 351 (taught by Maggs, Nayak, and Reiter in the Computer Science department). It is not recommended to take both. That course is great, by the way, it just didn't have enough slots to meet demand, especially from the ECE side.

Schedule

#DateLectureReadingHomework due
(11:59:00pm)
1 Tue 8/30 Introduction, Syllabus, Course Overview -
2 Thu 9/1 Computer Security Overview Chapter 1
Appendix C
3 Tue 9/6 Computer Security Overview Chapter 1
Appendix C
Homework 0,
Ethics Pledge

4 Thu 9/8 Computer Networking Overview Appendix F
Appendix I
5 Tue 9/13 Computer Networking Overview
Appendix F
Appendix I
6 Thu 9/15 Cryptography Chapters 2,20
7 Tue 9/20 Cryptography Chapters 20,21 Homework 1

8 Thu 9/22 User Authentication and Access Control Chapters 3-4
9 Tue 9/27 User Authentication and Access Control Chapters 3-4
10 Thu 9/29 Shell and Data Manipulation Skills Regex Quick Reference
11 Tue 10/4 Shell and Data Manipulation Skills Regex Quick Reference
12 Thu 10/6 Malicious Software Chapter 6
Stuxnet analysis
Homework 2
- HW2 encrypted materials
- Q9: VPN config

- Tue 10/11 Fall Break  
13 Thu 10/13 Midterm review (bring questions!)
Malicious Software
Chapter 6
Stuxnet analysis
14 Tue 10/18 Midterm exam
- Study guide
- Practice midterm
Chapter 6
15 Thu 10/20 Denial-of-Service Attacks Chapter 7
16 Tue 10/25 Buffer Overflows Chapter 10-11
17 Thu 10/27 Buffer Overflows Chapter 10-11 Homework 3
(PDF issue? Try Chrome.)

18 Tue 11/1 Software Security Chapter 12
19 Thu 11/3 Endpoint security, Database security Chapter 12-13
20 Tue 11/8 Cloud security,
Reverse Engineering
Chapter 13,
NSA Codebreaker Challenge (2015)
21 Thu 11/10 Intrusion Detection, Intrusion Prevention, and Firewalls
Chapter 8-9,
Base rate fallacy spreadsheet
22 Tue 11/15 Intrusion Detection, Intrusion Prevention, and Firewalls
Chapter 8-9,
Base rate fallacy spreadsheet
Homework 4

23 Thu 11/17 Wireless Network Security, Mobile Security Chapter 24
24 Tue 11/22 Physical security, organizational security,
security auditing, and legal/ethical aspects
Chapter 16-19
- Thu 11/24 Thanksgiving break
25 Tue 11/29 Guest lecture: Alexander Merck
26 Thu 12/1 Human Factors and Social Engineering,
Final exam course review,
Optional topics?
- BitCoin and Cryptocurrency
- Jump oriented programming (end part of deck)
Poorly-spelled 1990s textfiles:
social.txt, soceng.txt
(Due Mon 12/5)
Homework 5

Sat 12/17 Final exam (7pm)
- Study guide

Syllabus & policies

Course synopsis

An intense trip through many facets of computer and information security. Includes discussion and practical exercises in risk management, threat modeling, applied cryptography, malicious software, network security, intrusion detection and prevention, software and OS security, auditing and forensics, reverse engineering, and social engineering.

Includes *many* hands-on security assignments.

Should be fun.

Pre-requisites for grad students: ECE 650 (Systems Programming and Engineering) or instructor consent.

Pre-requisites for undergrad students: Computer Science 310/ECE 353 (Operating Systems).

If you feel you have an OS background but are missing the above pre-reqs, just contact me.

Grading breakdown

Category%
Homeworks 60%
Midterm exam20%
Final exam20%

Homework

You are expected to complete the homework individually unless otherwise stated. However, you may discuss topics covered in the class.

Late homework submissions incur penalties as follows:

NOTE: If you feel in advance that you may need an extension, contact the instructor. We can work with you if you see a scheduling problem coming, but extensions cannot be granted at or near the due date!

Your homework grade will be based on what you submit to Sakai and when you submit it.

Grade appeals

All regrade requests must be in writing. Email the TA with your questions. After speaking with the TA, if you still have concerns, contact the instructor.

All regrade requests must be submitted to the instructor no later than 1 week after the assignment was returned to you.

Academic integrity

I take academic integrity extremely seriously. Academic misconduct will not be tolerated, and all suspected violations of the Duke Honor Code will be referred to the Office of Student Conduct (for undergraduates) or the departmental Director of Graduate Studies (for graduate students). A student found responsible for academic dishonesty faces formal disciplinary action, which may include suspension. A student twice suspended automatically faces a minimum 5-year separation from Duke University.

In addition to the measures taken by the university, the affected assignment(s) will receive zero credit, or possibly -100% in egregious cases.

If you are considering this course of action, please see me instead, and we can work something out! I want every student in my course to be successful.

Additional resources