CS 3710

Introduction to Cybersecurity

Aaron Bloomfield (aaron@virginia.edu)
@github | ↑ |

Daily Announcements

Sandboxing Cycle

All I want is a secure system where it's easy to do anything I want. Is that so much to ask?

xkcd # 2044

Lecture 19: Halloween!!!

Office hours are underway; details on the Canvas landing page
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
Grading
- Grades returned through HW 6 (fuzzing); HW 7 (sql/xss/csrf) is out being graded
  - Late networks submissions still need to get the PDF graded
- Regrades within 1 week: for written assignments via Gradescope, auto-graded assignments: chat with me in person
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due today: HW 8: Cryptocurrency
- Due next Thursday, Nov 7th: HW 9: Rootkits (not yet ready)
No class Tuesday, Nov 5th, due to it being election day
The midterm was two Thursdays ago; regrades due in the next few days
Readings: none currently assigned
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
Today we will start on viruses
- We’ll be coming back to virtual machines, Stuxnet, and policy

Voting Machines

And that's *another* crypto conference I've been kicked out of. C'mon, it's a great analogy!

xkcd # 463

Lecture 18: Tue, Oct 29th

Office hours are underway; details on the Canvas landing page
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
Grading
- Grades returned through HW 6 (fuzzing); HW 7 (sql/xss/csrf) is out being graded
  - Late networks submissions still need to get the PDF graded
- Regrades within 1 week: for written assignments via Gradescope, auto-graded assignments: chat with me in person
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due Thursday, Oct 31st: HW 8: Cryptocurrency
- Due next Thursday, Nov 7th: HW 9: Rootkits (not yet ready)
No class next Tuesday, Nov 5th, due to it being election day
The midterm was two Thursdays ago; regrades due in the next few days
Readings: none currently assigned
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
Today we will finish: rootkits
- Next up: Stuxnet

Blockchain

xkcd # 2267

Lecture 17: Thu, Oct 24th

Office hours are underway; details on the Canvas landing page
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
Grading
- Grades returned through HW 4 (hashing); HW 5 (networks) and HW 6 (fuzzing) back soon
- Regrades within 1 week: for written assignments via Gradescope, auto-graded assignments: chat with me in person
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due today, Thursday, Oct 24th: HW 7: SQL, CSRF, and XSS
- Due next Thursday, Oct 31st: HW 8: Cryptocurrency (not yet ready)
The midterm was last Thursday; regrades due in the next few days
Readings: none currently assigned
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
News
- Remeber the Beale ciphers? Some now claim to have cracked them (Apple only)
- Clouldflare is reporting a record-breaking DDoS attack
Today we will continue with cryptocurrency; next up: rootkits

2010 and 2020

2030: "I just bought a house for one bitcoin. No, it's the equivalent of a dollar. Houses are often transferred for a nominal fee because the buyer is taking responsibility for containing the holo-banshees in the attic."

xkcd # 2280

Lecture 16: Tue, Oct 22nd

Office hours are underway; details on the Canvas landing page
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
Grading
- Grades returned through HW 4 (hashing); HW 5 (networks) and HW 6 (fuzzing) should be back soon
- Regrades for written assignments: submit via Gradescope, but do not abuse this!
- Regrades for auto-graded assignments: chat with me in person
- All regrades due within 1 week(ish)
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due this Thursday, Oct 24th: HW 7: SQL, CSRF, and XSS
- Due next Thursday, Oct 31st: HW 8: Cryptocurrency (not yet ready)
  - Yes, it’s Halloween, but you get free extensions
The midterm was last Thursday
- Regrades due in the next few days
Readings: none currently assigned
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
Today we will start on cryptocurrency

Privacy Opinions

I'm the Philosopher until someone hands me a burrito.

xkcd # 1269

Lecture 15: Thu, Oct 17th

Office hours are underway; details on the Canvas landing page
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
Grading
- Grades returned through HW 4 (hashing); HW 5 (networks) should be back soon
- Regrades for written assignments: submit via Gradescope, but do not abuse this!
- Regrades for auto-graded assignments: chat with me in person
- All regrades due within 1 week(ish)
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due this Friday, Oct 18th: HW 6: Fuzzing
- Due next Thursday, Oct 24th: HW 7: SQL, CSRF, and XSS (not yet ready)
The midterm was last Thursday
- We’ll go over it today; regrades will open tonight
Readings: none currently assigned
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
Today we will continue with SQL, XSS, & CSRF
- Next up: cryptocurrency

Midterm

The midterm was on Thu, Oct 10th.

And Tue, Oct 15th was fall break

Authorization

Before you say anything, no, I know not to leave my computer sitting out logged in to all my accounts. I have it set up so after a few minutes of inactivity it automatically switches to my brother's.

xkcd # 1200

Lecture 13: Tue, Oct 8th

Office hours are underway; details on the Canvas landing page
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
- TA office hours will be cancelled this Thursday through next Tuesday
Grading
- Grades returned through HW 4 (hashing)
- Regrades for written assignments: submit via Gradescope, but do not abuse this!
- Regrades for auto-graded assignments: chat with me in person
- All regrades due within 1 week(ish)
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due next Friday, Oct 18th: HW 6: Fuzzing
Midterm this Thursday, during lecture
- Past exams in the repo; about the topic coverage…
Readings: none currently assigned
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
Today we will finish anonymity, starting on 6.1
- Then go back to the Wireshark section of Networks
- Then onto SQL, XSS, & CSRF

Devotion to Duty

The weird sense of duty really good sysadmins have can border on the sociopathic, but it's nice to know that it stands between the forces of darkness and your cat blog's servers.

xkcd # 705

Lecture 12: Thu, Oct 3rd

Office hours are underway; details on the Canvas landing page
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
Grading
- Grades returned for HWs 1 (Rational Paranoia), 2 (Ethics), and 3 (RSA)
- Regrades for HWs 1 & 2: submit via Gradescope, but do not abuse this!
- Regrades for auto-graded assignments, such as HW 3: chat with me in person
- All regrades due within 1 week(ish)
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due tomorrow, Fri, Oct 4th: HW 5: Networks
- Next week on Thu (Oct 10) is the midterm, so no homework due next week
Midterm next Thursday, during lecture
- Past exams in the repo; about the topic coverage…
Readings
- Due today, Thu, Oct 3rd: watch Last Week Tonight with John Oliver: Data Brokers (25:09 long)
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
Today we will continue with web security, starting on 8.12
- Next up: anonymity

API

ACCESS LIMITS: Clients may maintain connections to the server for no more than 86,400 seconds per day. If you need additional time, you may contact IERS to file a request for up to one additional second.

xkcd # 1481

Lecture 11: Tue, Oct 1st

Office hours are underway; details on the Canvas landing page
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
  - But not today
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
Grading
- Grades returned last night for HWs 1 (Rational Paranoia), 2 (Ethics), and 3 (RSA)
- Regrades for HWs 1 & 2: submit via Gradescope, but do not abuse this!
- Regrades for auto-graded assignments, such as HW 3: chat with me in person
- All regrades due within 1 week(ish)
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due this past Sun, Sep 29th: HW 4: Hashing; how did it go?
  - About hasing passwords – this got some press recently
- Due this Fri, Oct 4th: HW 5: Networks
- Next week on Thu (Oct 10) is the midterm, so no homework due next week
Readings
- Due this Thu, Oct 3rd: watch Last Week Tonight with John Oliver: Data Brokers (25:09 long)
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
Today we will continue with web security, starting on 6.11
- Next up: anonymity

Networking Problems

LOOK, THE LATENCY FALLS EVERY TIME YOU CLAP YOUR HANDS AND SAY YOU BELIEVE

xkcd # 2259

Lecture 10: Thu, Sep 26th

Office hours are underway
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
- This is all on the Canvas landing page
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due last week: HW 3: RSA: how was it?
- Due this Sunday, Sep 29th: HW 4: Hashing
- Due next Thursday, Oct 3rd (?): HW 5: Networks
- The following Thursday (Oct 10) is the midterm, so no homework due that week
Readings
- Due Thu, Oct 3rd: watch Last Week Tonight with John Oliver: Data Brokers (25:09 long)
Tomorrow is a CAE National Cybersecurity Virtual Career Fair if you are interested
Grading:
- Almost done: HW 1 (paranoia), HW 2 (ethics), quiz 1
- To be returned later this week: HW 3 (RSA)
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
Today we will continue with web security

Constructive

xkcd # 810

Lecture 9: Tue, Sep 24th

Office hours are underway
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
- This is all on the Canvas landing page
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due last week: HW 3: RSA: how was it?
- Due this Thursday, Sep 26th (?): HW 4: Hashing
- Due next Thursday, Oct 3rd: HW 5: Networks
- The following Thursday (Oct 10) is the midterm, so no homework due that week
Readings
- Due Thu, Oct 3rd: watch Last Week Tonight with John Oliver: Data Brokers (25:09 long)
Grading:
- Almost done: HW 1 (paranoia), HW 2 (ethics), quiz 1
- To be returned later this week: HW 3 (RSA)
Be sure to sign the Ethics Honor Pledge; link on the Canvas landing page
Today we will continue with networking, starting on 3.14
- Next up: web security

Phone Security

...wait until they type in payment information, then use it to order yourself a replacement phone.

xkcd # 1934

Lecture 8: Thu, Sep 19th

Office hours are underway
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
  - Note the change! Thursday starts 30 minutes later now
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
- This is all on the Canvas landing page
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due today: HW 3: RSA
- Out later today, and due next Thursday: HW 4: Hashing (not yet ready)
Readings
- Due today: NPR’s Planet Monday podcast episode 908: I Am Not A Robot
Grading: HW 1 (paranoia), HW 2 (ethics), quiz 1
- Two are graded, and should be back “soon”
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish with encryption, starting on 10.1?
- Next up: networking

Voting Software

There are lots of very smart people doing fascinating work on cryptographic voting protocols. We should be funding and encouraging them, and doing all our elections with paper ballots until everyone currently working in that field has retired.

xkcd # 2030

Lecture 7: Tue, Sep 17th

Office hours are underway
- My office hours are now Tu 1:00-2:30 and Thu 2-3 in Rice 402
  - Note the change! Thursday starts 30 minutes later now
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
- This is all on the Canvas landing page
Homeworks (Gradescope opens up 72 hours before it’s due)
- Let’s chat about last week’s HW 2: Ethics
- Due Thursday: HW 3: RSA
- Out this Thursday: HW 4: Hashing (not yet ready)
Readings
- Due this Thursday, September 19th: NPR’s Planet Monday podcast episode 908: I Am Not A Robot
Grading: HW 1 (paranoia), HW 2 (ethics), quiz 1
- Two are graded, and should be back “soon”
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish with encryption, starting on 8.8
- Next up: networking

How Hacking Works

If only somebody had warned them that the world would roll them like this.

xkcd # 2176

Lecture 6: Thu, Sep 12th

Office hours are underway
- My office hours are Tu/Th 1:00-2:30 in Rice 402
  - Note the change! Now 30 minutes earlier
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
  - Note the change: Tu/Th now ends at 3:30
- TA office hours room is Rice 442; you can see the TAs here
- This is all on the Canvas landing page
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due today: HW 2: Ethics, due next Thursday (Sep 12)
- Due next Thursday, September 19th: HW 3: RSA
Readings
- Due next Thursday, September 19th: NPR’s Planet Monday podcast episode 908: I Am Not A Robot
Grading: HW 1 (paranoia), soon HW 2 (ethics), quiz 1
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with encryption, starting on 7.33

Bag Check

A laptop battery contains roughly the stored energy of a hand grenade, and if shorted it ... hey! You can't arrest me if I prove your rules inconsistent!

xkcd # 651

Lecture 5: Tue, Sep 10th

Office hours are underway
- My office hours are Tu/Th 1:00-2:30 in Rice 402
  - Note the change! Now 30 minutes earlier
- TA office hours are Mon 1:00-2:30, Tue 2:00-3:30, Wed 1:00-2:30, Thu 2:00-3:30 & 5:00-7:00
  - Note the change: Tu/Th now ends at 3:30
- TA office hours room is Rice 442; you can see the TAs here
- This is all on the Canvas landing page
Homeworks (Gradescope opens up 72 hours before it’s due)
- Due this Thursday: HW 2: Ethics, due next Thursday (Sep 12)
- Due the following Thursday (9/19): HW 3: RSA (not yet ready)
Readings
- Due Thursday, September 19th: NPR’s Planet Monday podcast episode 908: I Am Not A Robot
Grading: HW 1 (paranoia), soon HW 2 (ethics), quiz 1
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with encryption, starting on 5.1

Smart Home Security

If they're getting valuable enough stuff from you, at least the organized crime folks have an incentive to issue regular updates to keep the appliance working after the manufacturer discontinues support.

xkcd # 1966

Lecture 4: Thu, Sep 5th

Office hours have started
- My office hours are Tu/Th 1:30-3:00 in Rice 402
- TA office hours are Mon 1:00-2:30, Tue 2:00-4:00, Wed 1:00-2:30, Thu 2:00-4:00 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
- This is all on the Canvas landing page
Homeworks (Gradescope opens up 72 hours before it’s due)
- Homework due today by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
- The second homework is HW 2: Ethics, due next Thursday (Sep 12)
  - It’s ready, and we’ll talk about it today
Readings
- Due today: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish ethics (starting on 7.8)
- We will come back to policy later in the semester
- Next up is encryption so we get to it in time for the HW

Security Advice

Never give your password or bank account number to anyone who doesn't have a blue check mark next to their name.

xkcd # 1820

Lecture 3: Tue, Sep 3rd

Office hours start today (Tuesday)
- My office hours are Tu/Th 1:30-3:00 in Rice 402 (but not today)
- TA office hours are Mon 1:00-2:30, Tue 2:00-4:00, Wed 1:00-2:30, Thu 2:00-4:00 & 5:00-7:00
- TA office hours room is Rice 442; you can see the TAs here
- This is all on the Canvas landing page
Homeworks (Gradescope opens up 72 hours before it’s due)
- Homework due this Thursday (September 5th) by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
- The second homework is HW 2: Ethics, due the follwoing Thursday (Sep 12)
  - It’s ready, and we’ll talk about ChatGPT today
Readings
- Due this Thursday, September 5th: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with terminology, starting on 5.1, then onto ethics
- Next up is encryption so we get to it in time for the HW
- We will come back to policy later in the semester

Security Question

Let's invite him to a party and play 'I never'. Okay, I never hid any bodies SOUTH of Main Street. ... he's taking a drink!

xkcd # 565

Lecture 2: Thu, Aug 29th

Office hours start next week
- All are currently TBA; the times will be posted this weekend, but the locations may not be ready until Monday
- This all will be on the Canvas landing page
Homeworks
- Homework due next Thursday (September 5th) by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
  - You will likely want to wait until we finish the security mindset slide set slide set
  - Submission on Gradescope will open up three days (72 hours) before it is due
- The second homework will be on Ethics, due the follwoing Thursday (Sep 12)
  - It’s ready, but we’ll talk about ChatGPT early next week
Readings
- Due next Thursday, September 5th: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with the security mindset slide set, starting on 5.1
- Next up: the terminology slide set, then ethics