Information security and privacy
COM-402
Media
Media
Media
Media
This file is part of the content downloaded from Information security and privacy.
Instructors: Prof. Mathias Payer
Teaching Assistants: Chibin Zhang, Florian Hofhammer, Han Zheng, Luca Di Bartolomeo, Musa Ünal, Philipp Mao, Yuxi Zheng, Zhiyao Feng
Course Lectures: Monday, 16:15-19:00, CO1
Exercises: Wednesday, 13:15-16:00
On campus: INM 203, INM 11, INF 213, INJ 218
Q&A on the Ed Forum
Quizzes: They will take place in CO 01 (onsite) at the following dates/times:
- Quiz 1: Oct. 07th at 16:15 (covering HW 2 and lectures 1, 2, 3)
- Quiz 2: Nov. 04th during class hours (covering HWs 3, 4, 5, 6 and lectures 4, 5, 6)
- Quiz 3: Nov. 25th during class hours (covering HWs 7, 8, 9 and lectures 7, 8, 9)
- Quiz 4: Dec. 16th during class hours (covering HWs 10, 11, 12 and lectures 10, 11, 12)
Videos: The recordings of the COM-402 class are on our YouTube channel.
Final Exam:
The exam will be written and it will take place on campus. Its format will be similar to the one of last year, which is available at the bottom of this Moodle. Please write in a readable way with a blue or black pen (no pencil) and stay in the bounding box for the question, i.e., only text in the bounding box will be graded. Poorly written responses will not be graded. The exam will contain questions related to the understanding of the course and some problems similar to the homework exercises; some of the questions will be related to the hands-on exercises. The questions will be stated in English; you must write your answers in English (if you don't know a word in English, you can put it in French between quotation marks). Please write in a readable way. Poorly written responses will not be graded. The exam is closed book, i.e., no extra material is allowed.
The exam date is scheduled by the Service Académique. Students must physically come to the exam. In case of absence due to force majeure, please check with the section administration, not with the lecturers.
Grading structure
- Best 3 of the 4 quizzes : 30%
- Final exam : 70%
See the slides of the first lecture for more details.
Sept 09 - Introduction / Common Cyber Threats
No class
Sept 23 - Crypto Basics
- 0x02 Crypto Basics (URL)
- Exercise 02 (File)
- Exercise 02 - Solutions (File)
- Demo notebook (File)
- Demo Notebook Solution (File)
- Demo presentation (URL)
Sept 30 - Access Control
- 0x03 Access Control (URL)
- Exercise 3 (File)
- Exercise 3 - Solutions (File)
- Demo Handout (File)
- Demo Solution (File)
- Demo Slides (URL)
Oct 07 - Data Security
- 0x14 Data Security (URL)
- Demo Handout (File)
- Demo Solution (File)
- Exercise 04 (File)
- Exercise 04 Solution (File)
- Demo Slides (URL)
- Quiz 01: Basics -- Solution (File)
Oct 14 - Programming Languages Security
- 0x15 Programming Languages Security (URL)
- Demo Handout (File)
- Demo Slides (URL)
- Exercise Solution (File)
- Exercise (File)
Oct 28 - OWASP and Software Security
- 0x16 Web and Application Security (URL)
- 0x41 Stefan Lueders (CERN): OpSec Challenges vs. Real World (File)
- Quiz 01 common mistakes and midsemester Feedback discussion (File)
- Private recording of Stefan's talk (URL)
- Exercise (File)
- Demo Handout (File)
- static_c0 (File)
- Demo Slides (URL)
- c1 static (File)
- static c2 (File)
- static c3 (File)
- Demo Solutions (File)
- Exercise Solutions (File)
Nov 04 - Automated Testing / Fuzzing
- 0x27 Automated Testing (URL)
- Quiz 02: Security -- Solution (File)
- Ex07-fuzzing (File)
- Ex07-Lab (File)
- 0x27 Automated Testing Demo Slides (File)
- Ex 07 Fuzzing - Solutions (File)
Nov 11 - Mobile Security
- 0x28 Mobile Security (URL)
- Lab slides - Mobile security (File)
- Lab handout - Mobile security (File)
- Exercise sheet - Mobile Security (File)
- Ex. 09 Mobisec - solutions (File)
Nov 19 - Network and Operational Security
- 0x29 Network Security (URL)
- Exercises (File)
- Exercise solutions (File)
- Demo handout (updated 17:20) (File)
Nov 27 - Trusted Execution Environments and Side Channels
- 0x3A Trusted Computing (URL)
- Exercises - Trusted Execution Environments and Side Channels (File)
- Demo handout (File)
- Quiz 03: Applications -- Solution (File)
- Exercises - Solutions (File)
Dec 04 - Privacy
- 0x3B Privacy (URL)
- Exercises Privacy (File)
- Exercises Privacy - Solutions (File)
- Lab Privacy (File)
- Lab Privacy - Solutions (File)
- Lab session slides (File)
Dec 11 - Machine Learning Security and Privacy
- 0x3C Machine Learning Security (URL)
- Exercises - Machine Learning Security and Privacy (File)
- Demo Handout (File)
- Lab/Demo solutions (File)
- Exercise - ML Sec.&Privacy Solutions (File)
Dec 18 - Last quiz, Summary, and Q&A
Previous Exams
- Exam 2021 (File)
- Exam 2021 - Solutions (File)
- Exam 2020 (File)
- Exam 2020 - Solutions (File)
- Exam 2019 (File)
- Exam 2019 - Solutions (File)
- Quizzes 2020-2022 (File)