CSE331: Computer Security Fundamentals (Fall 2022)

Course description: This course will impart a technical and social understanding of how and why security and privacy matter, how to think adversarially, how (and how not) to design systems and products. Less attention will be paid to specific skills such as hacking, writing secure code, and security administration. Topics may include user authentication, cryptography, malware, behavioral economics in security, human factors in security, privacy and anonymity, side channels, decoys and deception, and adversarial modeling. We will explore these concepts by studying real-world systems and attacks, including Bitcoin, Stuxnet, retailer breaches, implantable medical devices, and health apps, and considering issues to come in personal genomics, virtual worlds, and autonomous vehicles. Thanks to Ari Juels for part of the course materials!

We are not using any specific textbook. Throughout the course, there will be materials and links provided. Further, please feel free to look at any of the following:
Times: 8:30-9:50am MON WED
Place: Online. Exams IN PERSON! (see schedule below) (email me at cse331@zxr.io if you don't have the zoom link)
Email: cse331@zxr.io (this is the email to use for this course)
Office Hours: MON 9:50-10:20 (by prior email appointment - email cse331@zxr.io)
TA: Soroush Meghdadizanjani, email: soroush.meghdadizanjani@stonybrook.edu
TA Office Hours: 6-7pm MON WED (online on zoom - email TA for zoom link)

Evaluation and Schedule (this is orientative and these are subject to change): 1-3 projects, 2-4 homeworks, a midterm and a final. Grading criteria (subject to major changes): midterm evaluation (30%), final (30%), other elements (up to 20%), participation and attendance (up to 20%). You are expected to come to class.

Approximate summary of lectures:


Policy on Missing Exams or Homeworks: Missing an exam/homework/project implies a grade of zero in that exam/homework/project, unless there is a properly documented reason (e.g., medical with documentation). Examples of non-valid reasons include oversleeping, forgetting, discretionary travel (travel whose timing is under your control, such as an interview trip), and a host of others. Such policy precedents are difficult for an instructor to deviate from without running the risk of being accused of "treating people unequally" ... etc, so I hope none of you will put me in that situation.

Ethics:
Note: If you have a physical, psychological, medical or learning disability that may impact on your ability to carry out assigned course work, please contact the staff in the Disabled Student Services office (DSS), Room 133, Humanities, 632-6748v/TDD. DSS will review your concerns and determine with you what accommodations are necessary and appropriate. All information and documentation of disability are confidential.

 (C) 2022. All Rights Reserved.