CS 252r: Advanced Topics in Programming Languages

NOTE: Schedule is subject to change.

Lec.	Date	Topic	Readings	Notes
1	Tue 2-Sep	Introduction		Steve.
2	Thu 4-Sep	Coding standards	Secure Coding Guidelines for Java SE Oracle. CERT Coding standards especially for Android.	Steve.
Mobile Apps
3	Tue 9-Sep		https://source.android.com/devices/tech/security/ A Study of Android Application Security by Enck, Octeau, McDaniel, and Chaudhuri. USENIX Security 2011. Smartphone security limitations: conflicting traditions by Husted, Saidi, and Gehani. GTIP 11.	Steve.
4	Thu 11-Sep		FlowDroid: Precise Context, Flow, Field, Object-sensitive and Lifecycle-aware Taint Analysis for Android Apps by Arzt, Rasthofer, Fritz, Bodden, Bartel, Klein, Le Traon, Octeau, and McDaniel. PLDI 2014.	Andrew.
5	Tue 16-Sep		Apposcopy: Semantics-Based Detection of Android Malware Through Static Analysis by Feng, Anand, Dillig, and Aiken. FSE 2014.	Dan K.
6	Thu 18-Sep		AnaDroid: Malware Analysis of Android with User-supplied Predicates by Liang, Might, and van Horn. TAPAS 2013. Sound and Precise Malware Analysis for Android via Pushdown Reachability and Entry-Point Saturation by Liang, Keep, Might, Van Horn, Lyde, Gilray, and Aldous. SPSM 2013.	David.
7	Tue 23-Sep		Cassandra: Towards a Certifying App Store by Lortz, Mantel, Starostin, Bahr, and Schneider.	Steve.
8	Thu 25-Sep	Guest speaker: Willard Rafnsson
9	Tue 30-Sep		Effective Inter-Component Communication Mapping in Android: An Essential Step Towards Holistic Security Analysis by Octeau, McDaniel, Jha, Bartel, Bodden, Klein, and Le Traon. USENIX Security 2013.	Christos
10	Thu 2-Oct		Automatic Mediation of Privacy-Sensitive Resource Access in Smartphone Applications by Livshits and Jung. USENIX Security 2013.	Lucas.
11	Tue 7-Oct	No class
12	Thu 9-Oct		Thresher: Precise Refutations for Heap Reachability by Blackshear, Chang, and Sridharan. PLDI 2013.	Anitha. Project proposals due
Distributed Apps
13	Tue 14-Oct		Inferring Models of Concurrent Systems from Logs of Their Behavior with Csight by Beschastnikh, Brun, Ernst, and Krishnamurthy, ICSE 14.	Lucas.
14	Thu 16-Oct		Wysteria: A Programming Language for Generic, Mixed-Mode Multiparty Computations by Rastogi, Hammer, and Hicks. IEEE Security and Privacy, 2014.	David
15	Tue 21-Oct	No class
16	Thu 23-Oct	Class rescheduled: 4pm Tuesday Oct 28	Discussion of PDA analysis	David + Dan.
17	Tue 28-Oct		Memory Trace Oblivious Program Execution by Liu, Hicks, and Shi. CSF 2013.	Anitha
18	Thu 30-Oct		A language-based approach to secure quorum replication by Zheng and Myers. PLAS 2014.	Scott.
Web Apps
19	Tue 4-Nov		Automating Isolation and Least Privilege in Web Services by Blankstein and Freedman. IEEE Security and Privacy, 2014.	Christos
20	Thu 6-Nov		Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud Birgisson, Gibbs Politz, Erlingsson, Taly, Vrable, and Lentczner, NDSS 2014.	Dan.
Program Analysis
21	Tue 11-Nov		Introduction to Abstract Interpretation	Steve.
22	Thu 13-Nov		Workshoping a research idea
Class Outing
23	Tue 18-Nov		IBM PL Research Day
Miscellany
24	Thu 20-Nov		Web Services Are Not Distributed Objects by Werner Vogels, IEEE Internet Computing, Nov-Dec 2003. Like it or Not, Web Services are Distributed Objects! by Ken Birman
25	Tue 25-Nov	Project presentations
Thanksgiving Recess
26	Tue 2-Dec	No class
	Wed 10-Dec			Projects due