Instructor: Dongdong She (dongdong@cse.ust.hk)
Office hours: Tuesday (1:30-2:00 pm) Room 3505
TA: Wei Chen (wchenbt@cse.ust.hk)
TA Office hours: TBD
Classroom: LG5202, Lift 10-12
Class hours: Tuesday and Thursday (1:30-2:50 pm)
This course covers principles of cybersecurity, including the basics of system security, hardware security, web security, network security, ML security, and LLM security. We show concrete examples of diverse security issues when these principles are violated. We then discuss techniques to detect, mitigate and prevent potential security issues.
The general goal of this course is to help you acquire a basic knowledge of system security, network security, ML security, and LLM security. You can also gain hands-on experience on several classic cybersecurity attacks and defenses.
The course requires an understanding of operating systems, networking protocols, and a basic understanding of programming languages. Programming projects will be done primarily in C and JavaScript, but other languages may be needed.
COMP 2012/2012H and COMP 3631 (optional, waive by request). Date Topics Lecture slides & Reading 03/09 Introduction 05/09 Control hijacking attacks: exploits 10/09 Control hijacking attacks: exploits (cntd.) 12/09 Control hijacking attacks: defenses 17/09 Control hijacking attacks: defenses (cntd.) 19/09 Principle of least privilege, access control, and operating systems security 24/09 Principle of least privilege, access control, and operating systems security (cntd.) 26/09 Isolation and sandboxing 03/10 Isolation and sandboxing (cntd.) Processor and microarchitecture security: Intel SGX and the Spectre attack Web Security Model Network Security (cntd.)
Course Goal
Prerequisite
Grading
Schedule
slides, class quiz: lock picking competition
slides, additional reading:
slides, additional reading:
additional reading:
additional reading:
08/10
slides, additional reading:
10/10
slides, additional reading:
15/10
Midterm
17/10
Web Attacksslides, additional reading:
22/10
Web Attacks (cntd.)
24/10
Web Defensesslides, additional reading:
29/10
Web Defenses (cntd.)
31/10
Network Securityslides, additional reading:
05/11
07/11
DoS Attacks and Network Defensesslides, additional reading:
12/11
DoS Attacks and Network Defenses (cntd.)
14/11
Privacy, Anonymity, and Censorshipslides, additional reading:
19/11
Machine Learning Security: Adverserial Attack slides, additional reading: TBD
21/11
Machine Learning Security: Adverserial Training and Verificationslides, additional reading: TBD
26/11
Large Language Model Security: Jailbreak and Defenseslides, additional reading: TBD
28/11
Large Language Model Security: Jailbreak and Defense (cntd.) slides, additional reading: TBD
TBD
Final