Session 1: Analyzing attacker capabilities
Session 2: Robustness against malicious inputs
Session 3: I know what you imported last summer
Session 4: We've sprung a leak
The bulk of your work in this class will center around a final project. The goal of this course project is for you to get experience doing security research by working on an open problem. It should also be a problem that's interesting to you: you will pick it, but I am happy to discuss project ideas with you.
Ideally, several (possibly workshop) publications will come out of this class. To this end, there will be several milestones throughout the semester to help make sure that you are making progress.
Any point throughout the semester, you are welcome to come meet with me to discuss ideas, or if you need advice.
09/13 Email Dave with the members of your group
10/11 (in class) Project pre-proposal presentations
Make a short presentation about your intended project to solicit feedback from your classmates.
10/25 Project proposal writeup
Email Dave a 2-3 page PDF document describing your proposed project. Be sure to include:
11/15 Project checkpoint
Email Dave a 1-2 page PDF document describing your progress thus far. Include:
12/03 & 12/05 (in class) Project presentations
The final two days of class will be the 4th Annual UMD GradSec Symposium. Each group will deliver a 10 minute presentation on their work, followed by Q&A. The program will be announced closer to that day.
12/12 Project writeups
Email Dave your final project writeup. This writeup should largely reflect the style and substance of a workshop or conference submission. It should not exceed 8 pages (not including references and appendices). It should include:
Note All attacks must be performed in an ethical, safe manner; please see the discussion of legality and ethics in the syllabus.