OVERVIEW

Students will learn key principles, techniques and tools for building secure systems.

AIMS AND CONTENT

LEARNING OUTCOMES

Students will learn key principles, techniques and tools for building secure systems: threat models; modern cryptography; control hijacking attacks and defense; principle of least privilege; identification and authentication; operating-system security; network, web and mobile security. Students will be involved in project activities.

AIMS AND LEARNING OUTCOMES

Students will be able to analyze the (in)security of existing systems, and design and develop secure systems.

SYLLABUS/CONTENT

Threat models; modern cryptography; control-hijacking attacks and defenses; principle of least privilege; identification and authentication; operating-system security; network, web and mobile security.

The course includes some assignments consisting in programming/hands-on activities.

RECOMMENDED READING/BIBLIOGRAPHY

The part on modern cryptography is covered in "Introduction to Modern Cryptography (2nd edition)", by Jonathan Katz and Yehuda Lindell.
For the other topics we will provide papers, and links to external resources, on Aulaweb.

TEACHERS AND EXAM BOARD

Exam Board

GIOVANNI CHIOLA (President)

GIUSEPPE CIACCIO

GIOVANNI LAGORIO

MARINA RIBAUDO

LESSONS

Class schedule

SECURITY

EXAMS

EXAM DESCRIPTION

Students will be involved in project activities during the course.
Submitting the result of these activities on schedule is mandatory for accessing the oral examination. A few exceptions can be made; but, in these cases, the examination becomes proportionally harder.

The final exam consists of an oral examination to assess the understanding of the theory, and discuss the submissions (students may be asked to explain the inner workings of their submissions, and/or make some small changes on the fly).