Information security and privacy

COM-402

Media

This file is part of the content downloaded from Information security and privacy.
Course summary

Instructors: Prof. Mathias Payer

Teaching Assistants: Nicolas Almerge, Rafaila Galanopoulou, Ariel Pelayo, Han Zheng, Yuxi Zheng

Course Lectures: Monday, 16:15-19:00, PO01

Exercises: Wednesday, 13:15-16:00

         On campus: INM202 (86 people), fallback: INM203 (38 people)

         Q&A on the Ed Forum

Quizzes: Ungraded quizzes will be conducted on Moodle to help you to learn for the material.

Videos: The recordings of the COM-402 class are on our YouTube channel (note that there is no guarantee of completeness for the recordings).

Final Exam:
The exam will be written and it will take place on campus. Its format will be similar to the one of two years ago, which is available at the bottom of this Moodle. Please write in a readable way with a blue or black pen (no pencil) and stay in the bounding box for the question, i.e., only text in the bounding box will be graded. Poorly written responses will not be graded. The exam will contain questions related to the understanding of the course and some problems similar to the homework exercises; some of the questions will be related to the hands-on exercises. The questions will be stated in English; you must write your answers in English (if you don't know a word in English, you can put it in French between quotation marks). Please write in a readable way. Poorly written responses will not be graded. The exam is closed book, i.e., no extra material is allowed. The exam is on Wednesday 14.01.2026 from 15h15 to 18h15.

The exam date is scheduled by the Service Académique. Students must physically come to the exam. In case of absence due to force majeure, please check with the section administration, not with the lecturers.

Grading structure
  • Final exam: 100%
  • You will receive the graded exam and an opportunity to ask questions about the exam. Afterwards, grading will be final.

See the slides of the first lecture for more details.

Sept 08 - Introduction / Common Cyber Threats

Sept 15 - Crypto Basics

Sept 22 - No Class

Sept 29 - Access Control

Oct 06 - Data Security

Oct 13 - Programming Languages Security

Oct 27 - OWASP and Software Security

Nov 03 - Automated Testing / Fuzzing

Nov 10 - Mobile Security

Nov 17 - Network and Operational Security

Nov 24 - Trusted Execution Environments and Side Channels

Dec 01 - Privacy

Dec 08 - Machine Learning Security and Privacy

Dec 15 - Summary and Q&A

Previous Exams