CYB 5280: Host and Application Security

Welcome to the class website of Host and Application Security. This page links to all the slides for the current class, plus assignment information.

Syllabus

The formal syllabus for this class is available here.

In a less formal way, the goal of the class is to make you aware of security issues that impact client machines and the applications they run. We will be looking at how the host works at a fairly granular level, as well as vulnerability patterns that hosts encounter. We will spend several weeks looking at malicious code. Finally, we will look at countermeasures and best practices on the host for improving security.

Prerequisites & Administrivia

The class is rather relatively straightforward: we will take a guided tour of the malware universe and other host/application security issues. Assignments will vary between writing about malware, examining files/executables, looking at low-level system functionality, and simulating malware spread. In order to get an A in the class, all assignment must be turned in and complete. Please note, you must pass the final to obtain a passing grade in the class.

The book for the class is Peter Szor's "The Art of Computer Virus Research and Defense". It's a very good book, and should be useful to you after you have graduated. In addition, we will be using Pfleeger and Pfleeger's classic "Computer Security" book.

Unless otherwise stated, all assignments are due before class 1 week after they were assigned (e.g. if an assignment is set on Tuesday, it is due before class the following Tuesday). Assignments should be turned in through the class SVN server.

Reading List

Things you will read, at a minimum, by the final exam. In addition, make sure you have read Szor and the relevant parts of Pfleeger.

Slides

This deck changes as a function to time. Please check back for additional materials covered in class.

Further lessons will be uploaded as needed.