CS 3710

Introduction to Cybersecurity

Aaron Bloomfield (aaron@virginia.edu)
@github | ↑ |

Daily Announcements

Final Exam

For those of you also taking Game Theory, your grade in that class will be based on how close your grade on this exam is to 80% of the average.

xkcd # 2385

The End

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- HW 7: Forensics is out, and due tomorrow, Saturday, June 14, by midnight
  - Details on the Canvas landing page
  - Please start it before the final on Saturday!
Grading
- Everything other than SQL/XSS/CSRF and Cryptocurrency has been returned
- A note about your Ethics and Rational Paranoia grades…
The final is tomorrow starting at 10:30
Gradescope submissions are open, and everything should be configured correctly
Today we will finish buffer overflows, binary exploits, and the course reflection

Network

Viruses so far have been really disappointing on the 'disable the internet' front, and time is running out. When Linux/Mac win in a decade or so the game will be over.

xkcd # 350

Lecture 18: Thu, June 12th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- HW 7: Forensics is out, and due Saturday, June 14, by midnight
  - Details on the Canvas landing page
  - Please start it before the final on Saturday!
Grading
- Everything other than SQL/XSS/CSRF and Cryptocurrency has been returned
- A note about your Ethics and Rational Paranoia grades…
The final is this Saturday starting at 10:30
Gradescope submissions are open, and everything should be configured correctly
Today we will continue with viruses then onto buffer overflows

Virus Venn Diagram

Within five minutes of the Singularity appearing, somebody will suggest defragging it.

xkcd # 1180

Lecture 17: Wed, June 11th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due yesterday: HW 6: Cryptocurrency; how did it go?
- The last homework, on Forensics, will be due the day of the final (Saturday), and will be out soon
Grading
- Everything other than SQL/XSS/CSRF has been returned
- A note about your Ethics and Rational Paranoia grades…
The final is this Saturday starting at 10:30
Gradescope submissions are open, and everything should be configured correctly
Today we will go through digital forensics and then onto viruses

Devotion to Duty

The weird sense of duty really good sysadmins have can border on the sociopathic, but it's nice to know that it stands between the forces of darkness and your cat blog's servers.

xkcd # 705

Lecture 16: Tue, June 10th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due today, Tuesday, June 10th: HW 6: Cryptocurrency
- The last homework, on Forensics, will be due the day of the final (Saturday)
Grading
- Everything other than SQL/XSS/CSRF has been returned
- A note about your Ethics and Rational Paranoia grades…
The final is this Saturday starting at 10:30
Gradescope submissions are open, and everything should be configured correctly
Today we will finish rootkits, then onto VMs and Stuxnet

API

ACCESS LIMITS: Clients may maintain connections to the server for no more than 86,400 seconds per day. If you need additional time, you may contact IERS to file a request for up to one additional second.

xkcd # 1481

Lecture 15: Mon, June 9th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due tomorrow, Tuesday, June 10th: HW 6: Cryptocurrency
- The last homework, on Forensics, will be due the day of the final (Saturday)
Grading
- Everything other than SQL/XSS/CSRF has been returned
- A note about your Ethics and Rational Paranoia grades…
The final is this Saturday starting at 10:30
Gradescope submissions are open, and everything should be configured correctly
Today we will finish policy then onto rootkits

Phone Security

...wait until they type in payment information, then use it to order yourself a replacement phone.

xkcd # 1934

Lecture 14: Fri, June 6th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due Tuesday, June 10th: HW 6: Cryptocurrency
- The last homework, on Forensics, will be due the day of the final (next Saturday)
The midterm was last Friday, May 30th; regrades open until the end of this week
Gradescope submissions are open, and everything should be configured correctly
Today we will finish anonymity and then go back to policy

How Hacking Works

If only somebody had warned them that the world would roll them like this.

xkcd # 2176

Lecture 13: Thu, June 5th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due yesterday: HW 5: SQL/XSS/CSRF; how did it go?
- Due today, Thursday, June 6th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
- Due early next week: HW 6: Cryptocurrency (it’s ready, but due date not yet set)
- The last homework, on Forensics, will be due the day of the final (next Saturday)
The midterm was last Friday, May 30th; regrades open until the end of this week
Gradescope submissions are open, and everything should be configured correctly
Today we will finish cryptocurrency and start on anonymity

Blockchain

xkcd # 2267

Lecture 12: Wed, June 4th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due Wednesday, June 4th, by midnight: HW 5: SQL/XSS/CSRF
- Due Thursday, June 6th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
- Due next week: HW ???
The midterm was last Friday, May 30th; regrades open until the end of this week
Gradescope submissions are open, and everything should be configured correctly
Today we will start on cryptocurrency

Hacking

The dump also contains a list of millions of prime factors, a 0-day Tamagotchi exploit, and a technique for getting gcc and bash to execute arbitrary code.

xkcd # 1808

Lecture 11: Tue, June 3rd

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due Wednesday, June 4th, by midnight: HW 5: SQL/XSS/CSRF
- Due Thursday, June 6th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
- Due next week: HW ???
The midterm was last Friday, May 30th; regrades open until the end of this week
Gradescope submissions are open, and everything should be configured correctly
Today we will finish web security, then onto cryptocurrency

Encryption

WARNING: PEOPLE NAMED EVE ARE PROHIBITED FROM INSTALLING THIS APP!

xkcd # 2691

Lecture 10: Mon, June 2nd

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due yesterday (Sunday), by midnight: HW 4: Fuzzing
- Due Wednesday, June 4th, by midnight: HW 5: SQL/XSS/CSRF
- Due Thursday, June 6th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
The midterm was last Friday, May 30th, at the start of class; how did it go?
Gradescope submissions are open, and everything should be configured correctly
Today we will detour into SQL/XSS/CSRF and then finish web security

PGP

If you want to be extra safe, check that there's a big block of jumbled characters at the bottom.

xkcd # 1181

Lecture 8: Thu, May 29th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due today by the start of class: watch Last Week Tonight with John Oliver: Data Brokers; it’s free on Youtube (possibly with a few ads)
- Due Saturday, May 31st, by midnight: HW 4: Fuzzing
The midterm is this Friday, May 30th, at the start of class
- Old miterms are in the repo on the exams page
Gradescope submissions are open, and everything should be configured correctly
- Fuzzing will open up later today
- Due next Wednesday: SQL/XSS/CSRF (not yet ready)
Today we will finish web security
- Then onto SQL/XSS/CSRF

Authorization

Before you say anything, no, I know not to leave my computer sitting out logged in to all my accounts. I have it set up so after a few minutes of inactivity it automatically switches to my brother's.

xkcd # 1200

Lecture 7: Wed, May 28th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due yesterday: HW 3: RSA; how did it go?
- Due tomorrow, Thursday, May 29th by the start of class: watch Last Week Tonight with John Oliver: Data Brokers; it’s free on Youtube (possibly with a few ads)
- Due Saturday, May 31st, by midnight: HW 4: Fuzzing
The midterm is Friday, May 30th, at the start of class
- Old miterms are in the repo on the exams page
Gradescope submissions are open, and everything should be configured correctly
Today we will finish with networks and start web security

Bag Check

A laptop battery contains roughly the stored energy of a hand grenade, and if shorted it ... hey! You can't arrest me if I prove your rules inconsistent!

xkcd # 651

Lecture 6: Tue, May 27th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due Tuesday, May 27th, by midnight: HW 3: RSA
- Due Thursday, May 29th by the start of class: watch Last Week Tonight with John Oliver: Data Brokers; it’s free on Youtube (possibly with a few ads)
- Due Saturday, May 31st, by midnight: HW 4: Fuzzing
The midterm is Friday, May 30th, at the start of class
- Old miterms are in the repo on the exams page
Gradescope submissions are open, and everything should be configured correctly
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
- We are missing 1…
Today we will finish with encryption
- Next up: networks and then web security

Smart Home Security

If they're getting valuable enough stuff from you, at least the organized crime folks have an incentive to issue regular updates to keep the appliance working after the manufacturer discontinues support.

xkcd # 1966

Lecture 5: Fri, May 23rd

Office hours are M-F 9:30-10:20, or by appointment
- But today they are right after class
Items due soon
- Today, Friday, 5/23: HW 2: Ethics
- Tuesday, 5/27: HW 3: RSA; we’ll go over it today
Gradescope submissions are open, and everything should be configured correctly
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with encryption

Trolley Problem

For $5 I promise not to orchestrate this situation, and for $25 I promise not to take further advantage of this ability to create incentives.

xkcd # 1455

Lecture 4: Thu, May 22nd

Office hours are M-F 9:30-10:20, or by appointment
- But not tomorrow: those will be after class, not before
HW 1: Rational Paranoia was due yesterday – how did it go?
Items due soon
- Friday, 5/23: HW 2: Ethics
- Tuesday, 5/27: HW 3: RSA; we’ll go over it today
Gradescope submissions are open, and everything should be configured correctly
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with encryption

Security Advice

Never give your password or bank account number to anyone who doesn't have a blue check mark next to their name.

xkcd # 1820

Lecture 3: Wed, May 21st

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Today (Wednesday, 5/21) by the start of class: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
- Today (Wednesday, 5/21) by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
- Friday, 5/23: HW 2: Ethics
- Tuesday, 5/27: HW 3: RSA (not yet ready)
Gradescope submissions are open, and everything should be configured correctly
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish with ethics
- We will skip policy for now, and come back to it later
- Next up: encryption

Security Question

Let's invite him to a party and play 'I never'. Okay, I never hid any bodies SOUTH of Main Street. ... he's taking a drink!

xkcd # 565

Lecture 2: Tue, May 20th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Tomorrow (Wednesday, 5/21) by the start of class: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
- Tomorrow (Wednesday, 5/21) by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
  - Submission on Gradescope will open up shortly
- Friday, 5/23: HW 2: Ethics
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish with the terminology slide set, then onto ethics
- We may skip policy for now, as we have to get through encryption in time for HW 3

Expected summer term schedule

Week 1 (Mon, 5/19 - Fri, 5/23)
- Due Wed: reading (ACM ethics / Thompson article / Morris worm)
- Due Wed: HW 1 (rational paranoia)
- Due Fri: HW 2 (ethics)
Week 2 (Tue, 5/26 - Fri, 5/30)
- Due Tue: HW 3 (RSA)
- Due Thu: “reading” (Youtube video)
- On Friday: midterm
- Due Sat: HW 4 (fuzzing?)
Week 3 (Mon, 6/2 - Fri, 6/6)
- Due Wed: HW 5 (SQL/XSS/CSRF)
- Due Thu: “reading” (podcast)
Week 4 (Mon, 6/9 - Sat, 6/14)
- Due Mon: HW 6 (cryptocurrency?)
- Due Fri: HW 7 (forensics)
- On Sat: final exam