CS 7430 (Spring 2015)

Syllabus for CS 7430: Special Topics in Applied Security and Privacy

Spring 2015
Instructor: Ari Juels (Jacobs Institute, Cornell Tech)
Room: Gates 416 (Ithaca) and Ursa (NYC)

In this seminar / reading group, we will devote several weeks to each of a small range of topics in security and privacy, studying both classic and current papers. Topics will include virtual currency (particularly Bitcoin), machine learning (security applications and attacks), user authentication (including study of commercial offerings such as Yubikey and Touch ID), and cloud computing (e.g., trusted hardware and cryptography). We will read one and sometimes two papers a week. Students are expected to participate in and occasionally lead discussions.

Schedule
26 Jan.	Seminar overview and logistics
Topic 1: Virtual Currencies
2 Feb.	J. Bonneau, A. Miller, J. Clark, A. Narayanan, J. Kroll, and E. W. Felten. SoK: Bitcoin and Second-Generation Cryptocurrencies. Useful background: S. Nakamoto. Bitcoin: A Peer-to-Peer Electronic Cash System. 2008.
9 Feb.	A. Back, M. Corallo, L. Dashjr, M. Friedenbach, G. Maxwell, A. Miller, A. Poelstra, J. Timón, and P. Wuille. Enabling Blockchain Innovations with Pegged Sidechains. 2014-10-22 (commit 5620e43).
16 Feb.	Presidents’ Day
23 Feb.	I. Eyal and E.G. Sirer. Majority Is Not Enough: Bitcoin Mining Is Vulnerable. Financial Cryptography, pp. 436-454. 2014.
Topic 2: Machine Learning and Security
2 Mar.	M. Fredrikson, E. Lantz, S. Jha, S. Lin, D. Page, and T. Ristenpart. Privacy in Pharmacogenetics: An End-to-End Case Study of Personalized Warfarin Dosing. USENIX Security, pp. 17-32, 2014. (Best Paper Award.)
9 Mar.	D. Lowd and C. Meek. Adversarial Learning. KDD, pp. 641-647, 2005. L. Huang, A. D. Joseph, B. Nelson, B. I. Rubinstein, and J. D. Tygar, J. D. Adversarial Machine Learning. ACM Workshop on Security and Artificial Intelligence, pp. 43-58), 2011.
16 Mar.	No meeting
23 Mar.	B. Miller et al. Active Adversarial Learning. AISec, pp. 3-14, 2014.
Topic 3: Cloud Computing
30 Mar.	No meeting (Spring break)
6 Apr.	A. Baumann, M. Peinado, and G. Hunt. Shielding applications from an untrusted cloud with Haven. OSDI, pp. 267-283, 2014. Useful background: F. Mckeen, I. Alexandrovich, A. Berenzon, C. Rozas, H. Shafi, V. Shanbhogue, and U. Savagaonkar. Innovative instructions and software model for isolated execution. In Workshop on Hardware and Architectural Support for Security and Privacy (HASP), 2013. I. Anati, S. J. Shay Gueron, and V. Scarlata. Innovative technology for CPU based attestation and sealing. In Workshop on Hardware and Architectural Support for Security and Privacy (HASP), 2013. M. Hoekstra, R. Lal, P. Pappachan, C. Rozas, V. Phegade, and J. del Cuvillo. Using innovative instructions to create trustworthy software solutions. In Workshop on Hardware and Architectural Support for Security and Privacy (HASP), 2013.
13 Apr.	F. Schuster, M. Costa, C. Fournet, C. Gkantsidis, M. Peinado, G. Mainar-Ruiz, and M. Russinovich. VC3 : Trustworthy Data Analytics in the Cloud. Microsoft Technical Report MSR-TR-2014-39. 2014.
Topic 4: User Authentication
20 Apr.	J. Bonneau, C. Hurley, P. van Oorschot, and F. Stajano. The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes. IEEE S&P, pp. 553-567. 2012.
27 Apr.	[Charter Day: Make-up to be scheduled] FIDO Alliance. Universal 2nd Factor (U2F) Overview. FIDO Alliance Proposed Standard (V1.0). 09 October 2014. FIDO Alliance. FIDO UAF Architectural Overview. FIDO Alliance Proposed Standard. V1.0. 8 Dec. 2014. Yubico. YubiKey Hardware Comparison. Yubico. YubiKey FAQ.
4 May	Paper(s) to be selected by group.

Syllabus for CS 7430: Special Topics in Applied Security and Privacy

Schedule

Topic 1: Virtual Currencies

Topic 2: Machine Learning and Security

Topic 3: Cloud Computing

Topic 4: User Authentication