Final Exam

Final Exam

xkcd # 2385

## The End - Schedule - Tomorrow, Saturday, June 15th: the final exam at 10:30 - Due tomorrow, Saturday: [HW 7: Forensics](../slides/hw-forensics-tabbed) - Grading - Graded and returned: HWs 1-4 and 6, quiz 1, midterm - Regrade concerns? Submit it through Gradescope or email within 1 week - Still to be graded: HW 5 (SQL/XSS/CSRF), midterm regrades - And, shortly, the final and HW 7 - Grades are shown in Canvas - But it's buggy: missing assignments don't report as zero, for example - I *hope* to have the grades all ready by Sunday night - All submission is through Gradescope, which automatically open 72 hours before they are due - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will have a final exam review session then work through the [course reflection](../slides/reflection.html#/)

Devotion to Duty

Devotion to Duty

xkcd # 705

## Day 17: Wed, Jun 12th - Office hours are weekdays from 9:30-10:25 in Rice 402 - Schedule - No reading due this Thursday - Saturday, June 15th: the final exam at 10:30 - Due Saturday: [HW 7: Forensics](../slides/hw-forensics-tabbed) - It will be on a different system; details to follow - Grading - Graded and returned: HWs 1-4, quiz 1, midterm - Regrade concerns? Submit it through Gradescope or email within 1 week - Still to be graded: HW 5 (SQL/XSS/CSRF), HW 6 (Cryptocurrency), midterm regrades - Grades are shown in Canvas - But it's buggy: missing assignments don't report as zero, for example - All submission is through Gradescope, which automatically open 72 hours before they are due - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will start on [binary exploits](../slides/binary-exploits.html#/)

Phone Security

Phone Security

xkcd # 1934

## Day 16: Tue, Jun 11th - Office hours are weekdays from 9:30-10:25 in Rice 402 - Schedule - Due yesterday, Monday, June 10th: [HW 6: Cryptocurrency](../hws/hw-cryptocurrency-tabbed.html): how did it go? - Grades can be released in a few days - No reading due this Thursday - Saturday, June 15th: the final exam at 10:30 - Due Saturday: Forensics (not yet ready) - It will be on a different system; details to follow - Grading - Graded and returned: HWs 1-4, quiz 1, midterm - Regrade concerns? Submit it through Gradescope or email within 1 week - Still to be graded: HW 5 (SQL/XSS/CSRF) - Grades are shown in Canvas - But it's buggy: missing assignments don't report as zero, for example - All submission is through Gradescope, which automatically open 72 hours before they are due - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will go over [forensics](../slides/forensics.html#/) - Then back to [binary exploits](../slides/binary-exploits.html#/)

How Hacking Works

How Hacking Works

xkcd # 2176

## Day 15: Mon, Jun 10th - Office hours are weekdays from 9:30-10:25 in Rice 402 - Schedule - Due today, Monday, June 10th: [HW 6: Cryptocurrency](../hws/hw-cryptocurrency-tabbed.html) - No reading due this Thursday - Saturday, June 15th: the final exam - Due late next week (Saturday?): HW 7: Forensics (not yet ready) - When should it be due? - Grading - Graded and returned: HWs 1-4, quiz 1, midterm - Regrade concerns? Submit it through Gradescope or email within 1 week - Still to be graded: HW 5 (SQL/XSS/CSRF) - Grades are shown in Canvas - But it's buggy: missing assignments don't report as zero, for example - All submission is through Gradescope, which automatically open 72 hours before they are due - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will continue with the binary exploits module: [viruses](../slides/viruses.html#/) (starting on 8.3), [buffer overflows](../slides/buffer-overflows.html#/), and [binary exploits](../slides/binary-exploits.html#/)

API

API

xkcd # 1481

## Day 14: Fri, Jun 7th - Office hours are weekdays from 9:30-10:25 in Rice 402 - [Midterm](../exams/midterm-sum24.pdf) is graded and returned; regrades due by the end of the week - Average was 35.5/48 (73.9%) with a stdev of 7.0 (14.7%) - Schedule - Due Monday, June 10th: [HW 6: Cryptocurrency](../hws/hw-cryptocurrency-tabbed.html) - Due Thursday, June 13th: a reading, details TBA - Saturday, June 15th: the final exam - due late next week (Saturday?): HW 7: Forensics (not yet ready) - Grading - Graded and returned: everything so far (HWs 1-4, quiz 1, midterm) - Regrade concerns? Submit it through Gradescope or email within 1 week - Still to be graded: HW 5 (SQL/XSS/CSRF), but that can't start for a day or two - Grades are shown in Canvas - But it's buggy: missing assignments don't report as zero, for example - All submission is through Gradescope, which automatically open 72 hours before they are due - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will start on the binary exploits module: [viruses](../slides/viruses.html#/), [buffer overflows](../slides/buffer-overflows.html#/), and [binary exploits](../slides/binary-exploits.html#/)

Protocol

Protocol

xkcd # 1323

## Day 13: Thu, Jun 6th - Office hours are weekdays from 9:30-10:25 in Rice 402 - [Midterm](../exams/midterm-sum24.pdf) is graded and returned; regrades due by the end of the week - Average was 35.5/48 (73.9%) with a stdev of 7.0 (14.7%) - Schedule - Due yesterday, Wednesday, Jun 5th: [HW 5: SQL/XSS/CSRF](../hws/hw-sql-xss-csrf-tabbed.html): how did it go? - Due Monday, June 10th: [HW 6: Cryptocurrency](../hws/hw-cryptocurrency-tabbed.html) - Reading: due today, Thursday, June 6th: Listen to [NPR's Planet Monday podcast episode 908: I Am Not A Robot](https://www.npr.org/sections/money/2019/04/24/716854013/episode-908-i-am-not-a-robot) - Grading - Graded and returned: everything so far (HWs 1-4, quiz 1, midterm) - Regrade concerns? Submit it through Gradescope or email within 1 week - Still to be graded: HW 5 (SQL/XSS/CSRF), but that can't start for a few days - Grades are shown in Canvas - But it's buggy: missing assignments don't report as zero, for example - All submission is through Gradescope, which automatically open 72 hours before they are due - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will continue with the modern topics module: [Rootkits](../slides/rootkits.html#/) (starting at 4.11), [Virtual Machines](../slides/vms.html#/), [Stuxnet](../slides/stuxnet.html#/)

Modern OSI Model

Modern OSI Model

xkcd # 2105

## Day 12: Wed, Jun 5th - Office hours are weekdays from 9:30-10:25 in Rice 402 - [Midterm](../exams/midterm-sum24.pdf) is graded and returned; regrades due by the end of the week - Average was 35.5/48 (73.9%) with a stdev of 7.0 (14.7%) - Schedule - Due today, Wednesday, Jun 5th: [HW 5: SQL/XSS/CSRF](../hws/hw-sql-xss-csrf-tabbed.html) - Due Monday, June 10th: [HW 6: Cryptocurrency](../hws/hw-cryptocurrency-tabbed.html) - Reading: due tomorrow, Thursday, June 6th: Listen to [NPR's Planet Monday podcast episode 908: I Am Not A Robot](https://www.npr.org/sections/money/2019/04/24/716854013/episode-908-i-am-not-a-robot) - Grading - Graded and returned: everything so far (HWs 1-4, quiz 1, midterm) - Regrade concerns? Submit it through Gradescope within 1 week - Still to be graded: HW 5 (SQL/XSS/CSRF), but that can't start for a few days - Grades are shown in Canvas - But it's buggy: missing assignments don't report as zero, for example - All submission is through Gradescope, which automatically open 72 hours before they are due - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will continue with the modern topics module: [Anonymity](../slides/anonymity.html#/), [Rootkits](../slides/rootkits.html#/), [Virtual Machines](../slides/vms.html#/), [Stuxnet](../slides/stuxnet.html#/)

Hacking

Hacking

xkcd # 1808

## Day 11: Tue, Jun 4th - Office hours are weekdays from 9:30-10:25 in Rice 402 - [Midterm](../exams/midterm-sum24.pdf) is graded and returned; regrades due by the end of the week - Average was 35.5/48 (73.9%) with a stdev of 7.0 (14.7%) - Schedule - Due tomorrow, Wednesday, Jun 5th: [HW 5: SQL/XSS/CSRF](../hws/hw-sql-xss-csrf-tabbed.html) - The following HW due on Monday, Jun 10th - About listing due dates in three places... - Grading - Graded and returned: HW 1 (rational paranoia), quiz 1, HW 3 (RSA), midterm - Regrade concerns? Submit it through Gradescope within 1 week - Still to be graded: HW 2 (ethics), soon HW 4 (fuzzer) - All submission is through Gradescope - The assignments should automatically open 72 hours before they are due - Everybody has to sign the Ethics Honor Pledge - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will continue with the modern topics module: [Cryptocurrency](../slides/cryptocurrency.html#/), [Anonymity](../slides/anonymity.html#/), [Rootkits](../slides/rootkits.html#/), [Virtual Machines](../slides/vms.html#/), [Stuxnet](../slides/stuxnet.html#/)

Encryption

Encryption

xkcd # 2691

## Day 10: Mon, Jun 3rd - Office hours are weekdays from 9:30-10:25 in Rice 402 - [Midterm](../exams/midterm-sum24.pdf) is graded and returned; we'll go over it today - Average was 35.5/48 (73.9%) with a stdev of 7.0 (14.7%); about regrades... - Schedule - Due this past Saturday, Jun 1st: [HW 4: Fuzzing](../hws/hw-fuzzing-tabbed.html): how was it? - Due this Wednesday, Jun 5th: [HW 5: SQL/XSS/CSRF](../hws/hw-sql-xss-csrf-tabbed.html) - Next HW due on Monday, Jun 10th - About listing due dates in three places... - Grading - Graded and returned: HW 1 (rational paranoia), quiz 1, HW 3 (RSA), midterm - Regrade concerns? Submit it through Gradescope within 1 week - Still to be graded: HW 2 (ethics) - All submission is through Gradescope - The assignments should automatically open 72 hours before they are due - Everybody has to sign the Ethics Honor Pledge - I emailed those who have not yet signed it - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we continue with [web security](../slides/web-security.html#/), starting on 6.8 - Next up: onto Modern topics: [Cryptocurrency](../slides/cryptocurrency.html#/), [Anonymity](../slides/anonymity.html#/), [Rootkits](../slides/rootkits.html#/), [Virtual Machines](../slides/vms.html#/), [Stuxnet](../slides/stuxnet.html#/)
## ICS topics in the news recently - VPNs: May 28th: [US sanctions operators of “free VPN” that routed crime traffic through user PCs](https://arstechnica.com/security/2024/05/us-sanctions-operators-of-free-vpn-that-routed-crime-traffic-through-user-pcs/) - DoS attacks: May 29th: [Internet Archive, aka the Wayback Machine, is under sustained DDoS attack](https://9to5mac.com/2024/05/29/internet-archive-ddos-attack/) - No apparent news updates in about 5 days - For Stuxnet: May 27th: [Iran further increases its stockpile of uranium enriched to near weapons-grade levels, watchdog says](https://apnews.com/article/iaea-iran-nuclear-enrichment-stockpile-2190f0d7247a6160fb13f28304d4b6ad)

PGP

PGP

xkcd # 1181

## Day 8: Thu, May 30th - Office hours are weekdays from 9:30-10:25 in Rice 402 - Schedule - Due today, May 30th: watch [Last Week Tonight with John Oliver: Data Brokers](https://www.youtube.com/watch?v=wqn3gR1WTcA) - It's free on Youtube (possibly with a few ads) - Tomorrow, Friday, May 31st: midterm (at the start of class) - How to handle tomorrow, after the midterm? - Due Saturday, Jun 1st: [HW 4: Fuzzing](../hws/hw-fuzzing-tabbed.html) - Due Wednesday, Jun 5th: [HW 5: SQL/XSS/CSRF](../hws/hw-sql-xss-csrf-tabbed.html), which is *mostly* ready - About listing due dates in three places... - Grading - Graded and returned: HW 1 (rational paranoia) and quiz 1 - Regrade concerns? Submit it through Gradescope within 1 week - Still to be graded: HW 2 (ethics), HW 3 (RSA) - All submission is through Gradescope - The assignments should automatically open 72 hours before they are due - Everybody has to sign the Ethics Honor Pledge - I emailed those who have not yet signed it - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will go through [SQL, XSS, & CSRF](../slides/sql-xss-csrf.html#/) - Do we want to have a Q&A review session later in class today? - Later we will go back to [web security](../slides/web-security.html#/), starting on 6.8

Authorization

Authorization

xkcd # 1200

## Day 7: Wed, May 29th - Office hours are weekdays from 9:30-10:25 in Rice 402 - Schedule - Due yesterday, Tuesday, May 28th: [HW 3: RSA](../hws/hw-rsa-tabbed.html): how did it go? - Due this Thursday, May 30th: watch [Last Week Tonight with John Oliver: Data Brokers](https://www.youtube.com/watch?v=wqn3gR1WTcA) - It's free on Youtube (possibly with a few ads) - This Friday, May 31st: midterm (at the start of class) - Due Saturday, Jun 1st: [HW 4: Fuzzing](../hws/hw-fuzzing-tabbed.html) - About listing due dates in three places... - Grading - Graded and returned: HW 1 (rational paranoia) and quiz 1 - Regrade concerns? Submit it through Gradescope within 1 week - Still to be graded: HW 2 (ethics) - All submission is through Gradescope - The assignments should automatically open 72 hours before they are due - Everybody has to sign the Ethics Honor Pledge - I emailed those who have not yet signed it - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will continue with [networks](../slides/networks.html#/), starting on 3.12 - Next up: [web security](../slides/web-security.html#/)

Bag Check

Bag Check

xkcd # 651

## Day 6: Tue, May 28th - Office hours are weekdays from 9:30-10:25 in Rice 402 - Schedule - Due today, Tuesday, May 28th: [HW 3: RSA](../hws/hw-rsa-tabbed.html): how is it going? - If you want to do it in a language other than Python, let's chat first - Due this Thursday, May 30th: watch [Last Week Tonight with John Oliver: Data Brokers](https://www.youtube.com/watch?v=wqn3gR1WTcA) - It's free on Youtube (possibly with a few ads) - This Friday, May 31st: midterm (at the start of class) - Due Saturday, Jun 1st: [HW 4: Fuzzing](../hws/hw-fuzzing-tabbed.html) - About listing due dates in three places... - Grading - Graded and returned: HW 1 (rational paranoia) and quiz 1 - Regrade concerns? Submit it through Gradescope within 1 week - Still to be graded: HW 2 (ethics) - All submission is through Gradescope - The assignments should automatically open 72 hours before they are due - Everybody has to sign the Ethics Honor Pledge - I emailed those who have not yet signed it - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will continue with [encryption](../slides/encryption.html#/), starting on 7.13 - Next up: [networks](../slides/networks.html#/)
## Rational Paranoia Scenarios - Securing of own apartment - Small hospital physical security - Remote workers personal network security - Medical system security - Remote workers: company privacy versus personal device privacy - Safety of dorm during the summer - Securing local cafe network - Hosting a kid's friend - Payment systems in retail stores - Physical security at Pride events - Management of gov't center for classified documents - Bank security (x3) - Security for a pirate themed amusement park

Smart Home Security

Smart Home Security

xkcd # 1966

## Day 5: Fri, May 24th - Office hours are weekdays from 9:30-10:25 in Rice 402 - Schedule - Due today, Friday, May 24th, by midnight: [HW 2: Ethics](../hws/hw-ethics-tabbed.html) - No class on Monday, May 27th (Memorial Day) - Due next Tuesday, May 28th: [HW 3: RSA](../hws/hw-rsa-tabbed.html) - If you want to do it in a language other than Python, let's chat first - Due next Thursday, May 30th: watch a John Oliver episode video (about 25 min) - Next Friday, May 31st: midterm - Due next Saturday, Jun 1st: HW 4: Fuzzing - Grading - To be graded: quiz 1, HW 1 (paranoia) - All submission is through Gradescope - The assignments should automatically open 72 hours before they are due - Everybody has to sign the Ethics Honor Pledge - I emailed those who have not yet signed it - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will continue with [encryption](../slides/encryption.html#/), starting on 6.18

Trolley Problem

Trolley Problem

xkcd # 1455

## Day 4: Thu, May 23rd - Office hours are weekdays from 9:30-10:25 in Rice 402 - Schedule - Due yesterday: [HW 1: Rational Paranoia](../hws/hw-paranoia-tabbed.html): how did it go? - I hope to have it graded by the start of next week - Due today, by the start of class: read the [ACM Code of Ethics](https://www.acm.org/code-of-ethics), [Reflections on Trusting Trust](https://dl.acm.org/citation.cfm?id=358210), and the [Morris Worm Wikipedia page](https://en.wikipedia.org/wiki/Morris_worm) - [Reflections on Trusting Trust](https://dl.acm.org/citation.cfm?id=358210) is also in the Canvas Files tool - Due tomorrow, Friday, May 24th, by midnight: [HW 2: Ethics](../hws/hw-ethics-tabbed.html) - No class this Monday, May 27th (Memorial Day) - Due next Tuesday, May 28th: [HW 3: RSA](../hws/hw-rsa-tabbed.html) - If you want to do it in a language other than Python, let's chat first - Due next Thursday, May 30th: watch a John Oliver episode video (about 25 min) - Next Friday, May 31st: midterm - Due next Saturday, Jun 1st: HW 4: Fuzzing - All submission is through Gradescope - The assignments should automatically open 72 hours before they are due - Everybody has to sign the Ethics Honor Pledge - I emailed those who have not yet signed it - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will finish [ethics](../slides/ethics.html#/) (starting on 7.12) and start on [encryption](../slides/encryption.html#/)

Security Advice

Security Advice

xkcd # 1820

## Day 3: Wed, May 22nd - Office hours are weekdays from 9:30-10:25 in Rice 402 - Schedule - Due Wednesday, May 22th (today) by midnight: [HW 1: Rational Paranoia](../hws/hw-paranoia-tabbed.html) - Due Thursday, May 23rd, by the start of class: read the [ACM Code of Ethics](https://www.acm.org/code-of-ethics), [Reflections on Trusting Trust](https://dl.acm.org/citation.cfm?id=358210), and the [Morris Worm Wikipedia page](https://en.wikipedia.org/wiki/Morris_worm) - [Reflections on Trusting Trust](https://dl.acm.org/citation.cfm?id=358210) is also in the Canvas Files tool - Due Friday, May 24th, by midnight: [HW 2: Ethics](../hws/hw-ethics-tabbed.html) - No class on Monday (Memorial Day) - Due next week, likely Tuesday: HW 3: RSA (not yet ready) - All submission is through Gradescope - The assignments should automatically open 72 hours before they are due - Everybody has to sign the Ethics Honor Pledge; link on the Canvas landing page - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we will finish [policy](../slides/policy.html#/) and start on [ethics](../slides/ethics.html#/)

Security Question

Security Question

xkcd # 565

## Day 2: Tuesday, May 21st - Office hours are weekdays from 9:30-10:25 in Rice 402 - More will be made available as needed - Schedule - Due Wednesday, May 22th (tomorrow) by midnight: [HW 1: Rational Paranoia](../hws/hw-paranoia-tabbed.html) - Due Thursday, May 23rd, by the start of class: read the [ACM Code of Ethics](https://www.acm.org/code-of-ethics), [Reflections on Trusting Trust](https://dl.acm.org/citation.cfm?id=358210), and the [Morris Worm Wikipedia page](https://en.wikipedia.org/wiki/Morris_worm) - [Reflections on Trusting Trust](https://dl.acm.org/citation.cfm?id=358210) is also in the Canvas Files tool - Due Friday, May 24th, by midnight: [HW 2: Ethics](../hws/hw-ethics-tabbed.html) - No class on Monday (Memorial Day) - Due next week, likely Tuesday: HW 3: RSA (not yet ready) - Lecture progress can be seen on the [repo's UVA page](http://aaronbloomfield.github.io/ics/uva/) - Today we'll finish [security mindset](../slides/security-mindset.html#/), go through [terminology](../slides/terminology.html#/), and start on [policy](../slides/policy.html#/)