This course will focus on language-based information security: using programming language techniques and abstractions to specify, reason about, and enforce, information security. Most of the course will focus on information-flow control: controlling the flow of information within a system to enforce strong security guarantees.
The course will be a combination of lectures and paper discussion. We will focus primarily on recent papers, from the last 3-4 years.
For those taking the course for credit, evaluation will be based on class participation, and a final project. More information about the final project is available here. Auditors are welcome.
The course is intended for graduate students at all levels as well as advanced undergraduates. It is expected that students have taken a course in the foundations of programming languages, such as CS 152.
Note 1: Schedule is subject to change. All readings are required except for those marked "Optional". Optional readings duplicate and/or extend material discussed in class.
Note 2: Some brief notes on how to read a research paper are available here.
|Th 26-Jan||2||Security policies for information flow||
|Tu 31-Jan||3||Dependency Core Calculus||
|Th 2-Feb||4||Confidentiality and integrity||
|Tu 7-Feb||5||Semantic security conditions beyond noninterference: Declassification and Erasure||
|Tu 14-Feb||7||Inferring security policies||
|Th 16-Feb||8||Timing and termination channels||
|Tu 21-Feb||9||Project proposals due
Quantitative information flow
|Th 23-Feb||10||Static enforcement/analysis||
|Tu 28-Feb||11||Static enforcement/analysis||
|Th 1-Mar||12||Static enforcement/analysis||
|Tu 6-Mar||13||Dynamic/hybrid enforcement||
|Th 8-Mar||14||Dynamic/hybrid enforcement||
|Tu 20-Mar||15||Dynamic/hybrid enforcement||
|Th 22-Mar||16||Dynamic/hybrid enforcement||
|Th 5-Apr||20||Language-based security for Android||
||Hannah Gommerstadt/Devon Long|
|Tu 10-Apr||21||Software fault isolation||Joe Tassarotti|
|Th 12-Apr||22||Software fault isolation||Stefan Muller|
|Tu 17-Apr||23||Software fault isolation||
|Th 19-Apr||24||Project presentations||
|Tu 24-Apr||25||Project presentations||
|Th 3-May||Final project due|