Web Security Model

Control Hijacking Attacks: defenses

Sandboxing

Web Defenses

Spectre Attack

Privacy

Control Hijacking Attacks: exploits

Isolation

Web Attacks

Intel SGX

Network Security

Network Defenses

Access control

Web Security

HTTPS

Mobile Platform Security Architecture

Internet Security

Censorship

System Security

Operating System Security

Processor and Microarchitecture Security

Android Security

DoS Attacks

Principle of least privilege

Testing for vulnerabilities

Cryptography

Mobile Security

Internet Protocols

Anonymity

CS 155 Computer and Network Security Stanford University Spring 2022 This course focuses on principles of computer systems and network security, exploring different attack techniques and corresponding defenses. Course projects aim at building reliable code and understanding attacks. Prior knowledge in operating systems, networking protocols, and basic programming languages is needed. The course covers principles of computer systems and network security. We will discuss various attack techniques and how to defend against them. Topics include network attacks and defenses, operating system holes, web security, e-mail, botnet, malware, social engineering attacks, privacy, and digital rights management. Course projects will focus on building reliable code and understanding attacks. The course is intended for junior and senior undergraduates and first year graduate students.  The course requires an understanding of operating systems, networking protocols, and a basic understanding of programming languages. Programming projects will be done primarily in C and JavaScript, but other languages may be needed.

Pre-requisites: CS110/CS111 (Principles of Computer Systems) There is no textbook for the class.

Instead, we will use research papers posted on the course [syllabus page](https://cs155.stanford.edu/syllabus.html) for every lecture.

CS 155 Computer and Network Security

Computer Security and Cryptography

Web Technologies

Web Protocols

Cross-Site Request Forgery (CSRF)

Firewalls

Denial-of-service attack (DoS attack)

Transport Protocols

Stream ciphers

Physical Security

Public-key cryptography

Passwords

Digital signature

OS Isolation

Message authentication code (MAC)

Malware

Authorization

Cloud Security

Accounting

Storage Encryption

Networks

Security Principles

Session Management

Transport Layer Security (TLS)

Symmetric-key Cryptography

Same-Origin Policy

Certificates

One-time pad

Hash functions

SQL Injection

Scanning

Block cipher

Cross-Site Scripting (XSS)

Authentication

OS Privileges

Browser Security

DNS (Domain Name System)

CS1660: Computer Systems Security Brown University Spring 2022 CS1660 delivers a balanced mix of theory and practice in computer systems security. Starting with the foundational aspects of cryptography, the course navigates through security aspects of web applications, operating systems, and networks. Students will hone their "security mindset," learning to identify vulnerabilities and understand defenses across different domains. CS1660 (formerly called CS166) is a course on **computer systems security** through a balanced mixture of theory and practice.

We’ll start out with building the foundations of security through an exploration of **cryptography**. From there, we’ll move to more complex, multi-faceted systems such as **web applications**, **operating systems**, and **networks**. Along the way, we’ll explore complementary topics such as authentication, physical security, social engineering, privacy, anonymity, usability, and the security of emergent systems such as blockchains and machine learning.

By learning about security through these multiple domains, you’ll concretely learn how various classes of attacks appear in a vast variety of scenarios and how they work in practice. You’ll also learn how to evaluate systems adversarially, from writing precise security analyses about subtle issues in protocols to discovering and exploiting vulnerabilities in concrete technical systems for yourself.

Through all of these activities, you’ll ultimately work to develop a specific kind of intuition—a ***“security mindset”***—that will give you the knowledge, vocabulary, and confidence to critically analyze and effectively defend the software and systems you approach as a computer scientist even after the course. - Provide an introduction to computer security
    - Overview security threats and defenses
- Help you develop a security-aware mindset:
    - Take the big picture and understand the details
- Learning by practicing
    - Consider ethical implications and tradeoffs of using, building, and testing secure systems You should have an intro-sequence’s worth of programming experience ([0160](https://cs.brown.edu/courses/info/csci0160/), [0180](https://cs.brown.edu/courses/info/csci0180/), or [0190](https://cs.brown.edu/courses/info/csci0190/)) and have a good understanding of systems programming ([0300](https://cs.brown.edu/courses/info/csci0300/), [0330](https://cs.brown.edu/courses/info/csci0330/), [1310](https://cs.brown.edu/courses/info/csci1310/), or [1330](https://cs.brown.edu/courses/info/csci1330/)). This concretely means that:

- You should be comfortable writing programs and scripts in the language of your choice (such as Python, Ruby, Bash, Go, C++, etc.), be comfortable in a Unix command-line environment (running binaries, filesystem navigation, etc.) and using SSH with the Brown CS filesystem, have a basic understanding of systems programming concepts such as memory management and networking.
- You also should have heard of the terms “race condition”, “packet”, “TCP”, “UDP”, “buffer overflows”, and “DNS”. (If you forget what these are, don’t worry—we’ll describe them again when they come up in the latter half of the course.)
- You should also be at least somewhat comfortable (and very willing) to learn new programming languages and reading code in languages and programs that you’ve never used before. (You’ll get lots of practice with this in this course!)
 
*If you don’t meet the official prerequisites* but still want to take the course, please feel free to ask the instructors–we are happy to discuss your individual situation to determine if the course is right for you!

Your willingness to challenge yourself is perhaps the most important prerequsite for the course. Security can be frustrating at times, but the rewards are great. In exchange for engaging with some difficult intellectual challenges, you’ll have the opportunity to gain concrete insights about systems and security and become a better computer scientist along the way! 

CS1660: Computer Systems Security

Web Security Model

2 courses cover this concept

CS 155 Computer and Network Security

CS1660: Computer Systems Security