Fall 2024

The course meets on Zoom at N hour (W 3:00pm—5:30pm). Attendance is required.

Zoom Link (for students registered or with approved override requests; Brown login required)

Course Introduction Slides (Brown login required)

Course Canvas Site (Available to registered and prospective students)

Welcome

This online synchronous course explores advanced topics and highlights current research in computer security and privacy. Topics include applications security, applied cryptography, cloud security, operating systems security, software security, web security, usable security, and vulnerabilities and defenses in cyber physical systems (e.g., automotive, medical, and industrial control devices). Recent research papers will be presented and discussed. Also, projects will provide an opportunity for creative work. Class attendance is required, and active participation in class discussions is essential. The course can be used to satisfy the capstone requirement for the ScB degree in Computer Science.

CSCI 1660 or equivalent background is a prerequisite.

Instructor permission is required to register for the course.

Instructor

• Roberto Tamassia

Online Resources

This page serves as the course syllabus and public website. A private website with additional resources for registered students will be created.

Learning Activities and Workload

The work for the course comprises a topic presentation, a project, and participating in class discussions.

Topic Presentation

A topic presentation consists of studying in depth and presenting a recent research paper from one of the following leading research venues in computer systems security and privacy:

• ACM Conference on Computer and Communications Security
• Network and Distributed System Security Symposium
• IEEE Symposium on Security and Privacy
• USENIX Security Symposium

The presentation should include background material related to the paper so it can be understood by everyone in the class. A set of slides in Google Slides format should be submitted before the presentation. A final version of the slides that incorporates feedback from the instructor and the class discussion should be submitted after the presentation.

Project

A project is an independent creative endeavor that results in an artifact. Various types of projects are acceptable, provided they involve original thinking and new ideas. Projects are presented in class. A set of slides in Google Slides format should be submitted ahead of the presentation. A project paper, or a report and the associated deliverables, as well as a final version of the slides that incorporates feedback from the instructor and the class discussion, should be submitted after the presentation.

Examples of project types include:

• Analyze the security of a system, identifying vulnerabilities and developing attacks to exploit them
• Extend the results of a paper. This could be done in various ways such as:
  • Broaden applicability, improve performance, or incorporate recent research and technological advances
  • Build a proof-of-concept system prototype for a method described in a theoretical paper
  • Perform experiments on new datasets or to evaluate new metrics
• Develop interactive online learning materials for a computer security or privacy subject
• Conduct research on a new or insufficiently explored subject.

Participation

Attendance of every class and active participation in class discussions is required. Classes are not recorded to facilitate the open exchange of diverse ideas and opinions and to encourage attention during class.

Students with no more than one unexcused absence and who regularly contribute to in-class discussions will be given a perfect participation grade.

Expected Workload

During the semester, students will spend about 36 hours in lectures (3 hours per week), 60 hours on the topic presentation, and 90 hours on the project, for a total expected course workload of 186 hours.

Attendance, Late Policy, and Grading

Absences from class are excused and extensions are justified only for illness and personal or family emergencies. Each student is allowed unexcused absences from one class unless the student is presenting that day. Please contact the instructor by email to request accommodations ahead of the missed class or due date.

Final numerical grades are determined by the instructor using the weights below:

• Project: 50%
• Topic presentation: 35%
• Participation: 15%

Diversity and Inclusion

We intend for this course to provide a welcoming learning environment for all students. We especially welcome diverse ideas and perspectives during class discussions. However, despite our best efforts, we may accidentally slip up, so please feel free to speak to the instructors about your concerns. If you believe you need to escalate your concerns further, you can reach out to Professor Tom Doeppner (Vice Chair).

Student Responsibilities

All Brown students are responsible for understanding and following the Brown Academic Code and Principles of the Brown University Community.

Accessibility

Brown University is committed to the full inclusion of all students. Students who, by nature of a documented disability, require academic accommodations should contact the instructors. The staff of the office of Student and Employee Accessibility Services can be reached at SEAS@brown.edu (or 401-863-9588) to discuss the process for requesting accommodations.