CS682 - Advanced Security Topics

Home

Schedule

Week 1

Introduction, Contract, Symmetric Encryption

Week 2

No class, travelling

Week 3

Asymmetric Encryption

Week 4

Software Exploitation, Example

Week 5

Authentication
(report, presentation)

Honeywords: Making Password-Cracking Detectable, ACM CCS 2013

George Moullotos

SAuth: Protecting User Accounts from Password Database Leaks, ACM CCS 2013.

Phishing
(report, presentation)

Why Phishing Works, CHI 2006.

Marios Hadjiaros

The Password Reset MitM Attack, Oakland 2017.

Week 6

Passwords (report, presentation)

The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes, Oakland 2012.

Michalis Papaevripides

The Tangled Web of Password Reuse, NDSS 2014.

CAPTCHAs
(report, presentation)

Re: CAPTCHAs – Understanding CAPTCHA-Solving Services in an Economic Context, Usenix Security 2010.

Antreas Dionysiou

I Am Robot: (Deep) Learning to Break Semantic Image CAPTCHAs, EuroS&P 2016.

Week 7

No class, travelling

Week 8 (Starts: 14:00)

Network Security (report, presentation)

Detecting Malware Domains at the Upper DNS Hierarchy, Usenix Security 2011.

Andreas Charalampous

ZMap: Fast Internet-wide Scanning and Its Security Applications, Usenix Security 2013.

Usable Security (report, presentation, presentation)

Android Permissions: User Attention, Comprehension, and Behavior, SOUPS 2012.

Elli Panagi

Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness, Usenix Security 2013.

Social Networks (report, presentation)

All Your Contacts Are Belong to Us: Automated Identity Theft Attacks on Social Networks, ACM WWW 2009.

Rafaela Sophocleous

COMPA: Detecting Compromised Accounts on Social Networks, NDSS 2013.

Week 9

No class, travelling

Week 10 (Starts: 14:00)

~~Applied Cryptography~~

~~The Million-Key Question—Investigating the Origins of RSA Public Keys, Usenix Security 2016.~~

Rafael Michael

~~The Return of Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli, ACM CCS 2017.~~

Mobile Security (report, presentation)

Hey, You, Get Off of My Market: Detecting Malicious Apps in Official and Alternative Android Markets, NDSS 2012.

Giannis Aristeidou

Dissecting android malware: Characterization and evolution, Oakland 2012.

Web Security (report, presentation)

Robust Defenses for Cross-Site Request Forgery, ACM CCS 2008.

Savvas Savva

Clickjacking: Attacks and Defenses, Usenix Security 2012.

Week 11

Measurements (report, presentation)

A Large-Scale Analysis of the Security of Embedded Firmwares, Usenix Security 2014.

Constantina Soteriou

Post-Mortem of a Zombie: Conficker Cleanup After Six Years, Usenix Security 2015.

Botnets (report, presentation)

Your Botnet is My Botnet: Analysis of a Botnet Takeover, ACM CCS 2009.

Nicholas Tsinontas

SoK: P2PWNED — Modeling and Evaluating the Resilience of Peer-to-Peer Botnets, Oakland 2013.

SPAM (report, presentation)

Spamalytics: An Empirical Analysis of Spam Marketing Conversion, ACM CCS 2008.

Iakovos Andreou

@spam: The Underground on 140 Characters or Less, ACM CCS 2010.

Week 12

Cyber-physical Systems (report, presentation)

Lock It and Still Lose It – On the (In)Security of Automotive Remote Keyless Entry Systems, Usenix Security 2016.

Constantinos Xenofontos

An Experimental Security Analysis of an Industrial Robot Controller, Oakland 2017.

Anonymity (report, presentation)

Tor: The Second-Generation Onion Router, Usenix Security 2004.

Markos Panayiotou

Low-Cost Traffic Analysis of Tor, Oakland 2005.

The Underground (report, presentation)

Trafficking Fraudulent Accounts: The Role of the Underground Market in Twitter Spam and Abuse, Usenix Security 2013.

Zacharias Georgiou

PharmaLeaks: Understanding the Business of Online Pharmaceutical Affiliate Programs, Usenix Security 2012.

Week 13 (Starts: 14:00)

Bugs (report, presentation)

The Matter of Heartbleed, ACM IMC 2014.

Adamos Koumi

Understanding the Reproducibility of Crowd-reported Security Vulnerabilities, Usenix Security 2018.

Attacks (report, presentation)

Attacking the Network Time Protocol, NDSS 2016.

Marios Kyprianou

Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels, Usenix Security 2018.

TLS Security (report, presentation)

On the Security of RC4 in TLS, Usenix Security 2013.

Marios Palechoros

Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations, Oakland 2014.

Week 14

Cryptocurrencies (report, presentation)

SoK: Research Perspectives and Challenges for Bitcoin and Cryptocurrencies, Oakland 2015.

Rafael Makrigiorgis

TEETHER: Gnawing at Ethereum to Automatically Exploit Smart Contracts, Usenix Security 2018.

Crypto Mining (report, presentation)

Botcoin: Monetizing Stolen Cycles, NDSS 2014.

Christos Chatzistillis

MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense, ACM CCS 2018.