CS 161: Computer Security (original) (raw)

Spring 2010

People

Instructors:
Vern Paxson (737 Soda)
David Wagner (733 Soda)

TAs:
John Bethencourt
Erika Chin
Matt Finifter
Cynthia Sturton
Joel Weinberger

Lectures:
MWF, 5:00-6:00pm, 100 Lewis

Sections:
101. Tu 10:00-11:00, 155 Barrows (Weinberger)
102. Tu 11:00-12:00, 4 Evans (Chin)
103. Tu 2:00-3:00, 75 Evans (Bethencourt)
104. Tu 3:00-4:00, 6 Evans (Finifter)
105. Tu 4:00-5:00, 105 Latimer (Sturton)
106. Tu 5:00-6:00, 4 Evans (Sturton)
107. Tu 10:00-11:00, 3105 Etcheverry (Finifter)
108. Tu 2:00-3:00, 70 Evans (Weinberger)

Office hours:
Bethencourt: Friday 4-5 in 751 Soda
Chin: Friday 1-2 in 611 Soda
Finifter: Monday 10-12 in 611 Soda
Paxson: Monday 1:30-2:30 in 737 Soda (by appointment the week of May 3-7)
Sturton: Thursday 3-5 in 611 Soda
Wagner: Wednesday 2-3 in 733 Soda
Weinberger: Monday 1-3 in 751 Soda

Lectures

The lecture schedule is subject to change and will be revised as the course progresses.

Homeworks

Homeworks are due on Thursday at 11:59pm in the drop box labelled "CS 161" in 283 Soda, unless otherwise stated. Homework solutions must be legible; we do not attempt to grade messy and unreadable solutions. You must print your name, your class account name (e.g., cs161-xy), your TA's name, the discussion section time where you want to pick up the homework, and the homework number prominently on the first page and staple all pages together. You risk receiving no credit for any homework lacking this information. No late homeworks will be accepted.

• Homework 0(due 1/28 electronically).
• Homework 1(due 2/11);Homework 1 solution.
• Homework 2(due 2/25);Homework 2 solution.
• Homework 3(due 3/11);Homework 3 solution.
• Homework 4(due 4/15);Homework 4 solution.

Discussion Sections

Handouts from discussion sections will be posted here.

• Week 2 (01/26)

• Week 3 (02/02)

• Week 4 (02/09)

• Week 5 (02/16)

• Week 6 (02/23)

• Week 7 (03/02) -- Section was cancelled

• Week 8 (03/09)

• Week 9 (03/16)

• Week 10 (03/23) -- Spring Break

• Week 11 (03/30)

• Week 12 (4/6) -- Section was cancelled

• Week 13 (4/13)

• Week 14 (4/20)

• Week 15 (4/27)

Projects

There will be approximately 3 course projects. If your project submission is late, we will penalize your grade as follows: less than 24 hours late, you lose 10%; less than 48 hours late, you lose 20%; less than 72 hours late, you lose 40%; at or after 72 hours, late submissions are no longer accepted. (There are no slip days.) Note that this late policy applies only to projects, not homeworks.

• Project 1 (due 2/18 electronically);Q1 solution; Q2 solution.
• Project 2 (due 4/8 electronically);Project 2 solutions.
• Project 3 (due 4/29 electronically at 11:59pm). Hints

Exams

There will be two midterms and one final exam.

• Midterm 1: February 26, 5:10-6:30pm, in 1 Pimentel. (Midterm 1 solutions, and the samewith comments on how problems were graded)
• Midterm 2: Friday, April 2, 5:10-6:30pm, in 1 Pimentel. (Midterm 2 solutions)
• Final exam: Friday, May 14, 2010, 11:30-2:30pm, in 1 Pimentel. (Final solutions) All exams are mandatory. If you are taking CS160, CS164, or another course whose final exam conflicts with that of CS161, see alternate exam information below.

There will be a final exam review on Wednesday, 5/12/10, 3:30-5:30 PM in 155 Dwinelle.

Grading

Grades will be computed from a weighted average, as follows:

• Homeworks: 20%
• Projects: 30%
• Midterms: 20% (10% for each midterm)
• Final exam: 30%

COURSE POLICIES

**Contact information:**If you have a question, the best way to contact us is via the class newsgroup, ucb.class.cs161. The staff (instructors and TAs) will check the newsgroup regularly, and if you use the newsgroup, other students will be able to help you too. Please avoid posting answers to homework questions before the homework is due. See our instructions on how to access the course newsgroup.

If your question is personal or not of interest to other students, send email to cs161@inst.eecs. Email to this address is forwarded to the instructors and all TAs. If you wish to talk with one of us individually, you are welcome to come to our office hours. If the office hours are not convenient, you may make an appointment with any of us by email. Please reserve email for the questions you can't get answered in office hours, in discussion sections, or through the newsgroup.

**Announcements:**The instructors and TAs will periodically post announcements, clarifications, etc. to the newsgroup. Hence it is important that you check the newsgroup frequently throughout the semester.

**Prerequisites:**The prerequisites for CS 161 are CS 61B, CS61C, and either CS70 or Math 55. We will assume basic knowledge of both Java and C. You will need to have a basic familiarity using Unix systems. If you need help, the CSUA runshelp sessions.

**Collaboration:**Homework assignments will specify whether they must be done on your own or whether they may be done in groups. Either way, you must write up your solutions entirely on your own. You must never read or copy the solutions of other students, and you must not share your own solutions with other students. You may use books or online resources to help solve homework problems, but you must always credit all such sources in your writeup and you must never copy material verbatim. Not only is this good scholarly conduct, it also protects you from accusations of theft of your colleagues' ideas. You must not receive help on homework assignments from students who have taken the course in previous years, and you must not review homework solutions from previous years.

We believe that most students can distinguish between helping other students understand course material and cheating. Explaining a subtle point from lecture or discussing course topics is an interaction that we encourage, but you should never read another student's homework solution or partial solution, nor have it in your possession, either electronically or on paper. You must never share your written solutions, or a partial solutions, with another student, even with the explicit understanding that it will not be copied -- not even with students in your homework group. You must write your homework solution strictly by yourself.

Warning: Your attention is drawn to the Department's Policy on Academic Dishonesty. In particular, you should be aware that copying or sharing solutions, in whole or in part, from other students in the class or any other source without acknowledgment constitutes cheating. Any student found to be cheating risks automatically failing the class and being referred to the Office of Student Conduct.

**Ethics:**We will be discussing attacks in this class, some of them quite nasty. None of this is in any way an invitation to undertake these attacks in any fashion other than with informed consent of all involved and affected parties. The existence of a security hole is no excuse. These issues implicate not only professional ethics, but also UCB policy and state and federal law. If there is any question in your mind about what conduct is allowable, please contact the instructors first.

**Computer accounts:**We will use 'class' accounts this semester. You will need to obtain an account form with a username and password from us.When you first log into your account, you will be prompted to enter information about yourself; that will register you with our grading software. If you want to check that you are registered correctly with our grading software, you can run check-register at any time.

**Textbook:**The required textbook isSecurity in Computing, 4th ed.(Charles P. Pfleeger, Shari Lawrence Pfleeger;Prentice Hall, 2007). There is also an optional supplemental text:Security Engineering, 2nd ed.(Ross Anderson; Wiley, 2008). The first edition of the supplemental text is also available online at Ross Anderson's web site; but I recommend buying the second edition, if you can afford it, as it has plenty of wonderful content.

**Lecture notes:**We will provide lecture notes or slides for many of the lectures. You should not view the availability of lecture notes or slides as a substitute for attending class, as our discussion in class may deviate from the written material.

**Discussion sections:**Attendance at discussion sections is expected, and sections may cover important material not covered in lecture. Please enroll in a discussion section via Telebears, if you have not already. You may only enroll in a discussion section that has space available; see the online schedule. You may switch discussion sections only with the approval of the TA of the section you want to switch to, and only if that section is not full. Outside of your discussion section, you should feel free to attend any of the staff office hours (not just your section TA's office hours) and ask any of us for help.

**Re-grading policies:**Any requests for grade changes or re-grading must be made within one week of when the work was returned. To ask for a re-grade, staple to your work a cover page that specifies:

• The problem(s) you want to be re-graded.
• For each of these problems specify clearly why do you think the problem was misgraded. Give this to your TA. Without this page, your work will not be re-graded. Even if you ask for only one problem to be re-graded, your entire work may be re-graded, so your score could decrease, stay the same, or increase. We will not accept verbal re-grade requests or re-grade requests without a cover sheet stapled on. Don't expect us to re-grade your homework on the spot: we normally take the time to read your appeal at some point after it is submitted.

Bear in mind that our primary aim in grading is consistency, so that all students are treated the same; for this reason, we are unlikely to adjust the score of one student on an issue of partial credit if the score allocated is consistent with the grading policy we adopted for that problem.

**More on homeworks:**If a problem can be interpreted in more than one way, clearly state the assumptions under which you solve the problem. In writing up your homework you are allowed to consult any book, paper, or published material, except homework solutions from prior years, as stated under the Collaboration section. If you consult external sources, you are required to cite your source(s). Model solutions will be made available after the due date. Graded problem sets will be returned in discussion section.

**Late homework policy:**We will give no credit for homework turned in after the deadline. Please don't ask for extensions. We don't mean to be harsh, but we prefer to make model solutions available shortly after the due date, which makes it impossible to accept late homeworks.

**Exams:**The midterms and final exam are mandatory. If you are unable to attend any midterm, contact the instructors without delay. Note that CS160 and CS164 have their final exams scheduled at the same time as CS161's final exam, even though their lectures are at a different time. As a special accomodation for students who would like to take CS160 or CS164 in addition to CS161, we will offer the CS161 final exam at an alternate time on May 14th, 3-6pm, in 306 Soda. The alternate exam time is only available to students taking another course (e.g., CS160 or CS164) whose exam is scheduled at the same time as CS161's final exam.

If you wish to take the final exam at the alternate time, you must register in advance by filling outthis surveyby January 29th at the latest. If you cannot make the official CS161 final exam time for any reason other than conflict with another course, please contact the CS161 instructors without delay (by the end of the first week of classes); you may need to drop CS161. If you have a final exam conflict with another course and you cannot attend the alternate exam time, either, then you must drop CS161; we will not be offering any other alternate time slot, and the final exam is mandatory.

**Don't be afraid to ask for help:**Are you struggling? We'd rather you approached us for help, rather than falling behind gradually over the semester until things become untenable. Sometimes this happens when students are afraid of an unpleasant conversation with a professor if they admit to not understanding something. We would much rather deal with your misunderstanding early than deal with its consequences later. Even if you are convinced that you are the only person in the class that doesn't understand the material, and that it is entirely your fault for having fallen behind, please overcome your feeling of guilt and ask for help as soon as you need it. Remember that the other students in the class are working under similar constraints--they are taking multiple classes and are often holding down outside employment. Don't hesitate to ask us for help--helping you learn the material is what we're paid to do, after all!

**Advice:**The following tips are offered based on our experience with CS 161:

**1. Don't wait until the last minute to start projects!**The projects can be time-consuming. Pace yourself. Students who procrastinate generally suffer.

2. Make use of office hours! The instructors and TAs hold office hours expressly to help you. It is often surprising how many students do not take advantage of this service. You are free to attend as many office hours as you wish. You are not constrained just to use the office hours of your section TA. You will also likely get more out of an office hour if you have spent a little time in advance thinking about the questions you have, and formulating them precisely. (In fact, this process can often lead you to a solution yourself!)

3. Participate actively in discussion sections!Discussion sections arenot auxiliary lectures. They are an opportunity for interactive learning. The success of a discussion section depends largely on the willingness of students to participate actively in it. As with office hours, the better prepared you are for the discussion, the more you are likely to get out of it.

Mail inquiries to cs161@inst.eecs.berkeley.edu.