CS682 - Advanced Security Topics

Thu, 3pm-6pm, 147 (ΘΕΕ01), Lectures
Thu, 2pm-3pm, 147 (ΘΕΕ01), Recitation
Instructor: Elias Athanasopoulos
Communication: Piazza
Home   

Schedule

Week 1
Introduction, Contract, Symmetric Encryption
Week 2
No class, travelling
Week 3
Asymmetric Encryption
Week 4
Software Exploitation, Example
Week 5
 
Authentication
Honeywords: Making Password-Cracking Detectable, ACM CCS 2013
George Moullotos
SAuth: Protecting User Accounts from Password Database Leaks, ACM CCS 2013.
Phishing
Why Phishing Works, CHI 2006.
Marios Hadjiaros
The Password Reset MitM Attack, Oakland 2017.
Week 6
 
Passwords
The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes, Oakland 2012.
Michalis Papaevripides
The Tangled Web of Password Reuse, NDSS 2014.
CAPTCHAs
Re: CAPTCHAs – Understanding CAPTCHA-Solving Services in an Economic Context, Usenix Security 2010.
Antreas Dionysiou
I Am Robot: (Deep) Learning to Break Semantic Image CAPTCHAs, EuroS&P 2016.
Week 7
No class, travelling
Week 8 (Starts: 14:00)
 
Network Security
Detecting Malware Domains at the Upper DNS Hierarchy, Usenix Security 2011.
Andreas Charalampous
ZMap: Fast Internet-wide Scanning and Its Security Applications, Usenix Security 2013.
Usable Security
Android Permissions: User Attention, Comprehension, and Behavior, SOUPS 2012.
Elli Panagi
Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness, Usenix Security 2013.
Social Networks
All Your Contacts Are Belong to Us: Automated Identity Theft Attacks on Social Networks, ACM WWW 2009.
Rafaela Sophocleous
COMPA: Detecting Compromised Accounts on Social Networks, NDSS 2013.
Week 9
No class, travelling
Week 10 (Starts: 14:00)
 
Applied Cryptography
The Million-Key Question—Investigating the Origins of RSA Public Keys, Usenix Security 2016.
Rafael Michael
The Return of Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli, ACM CCS 2017.
Mobile Security
Hey, You, Get Off of My Market: Detecting Malicious Apps in Official and Alternative Android Markets, NDSS 2012.
Giannis Aristeidou
Dissecting android malware: Characterization and evolution, Oakland 2012.
Web Security
Robust Defenses for Cross-Site Request Forgery, ACM CCS 2008.
Savvas Savva
Clickjacking: Attacks and Defenses, Usenix Security 2012.
Week 11 (starts at: 14:00)
 
Measurements
A Large-Scale Analysis of the Security of Embedded Firmwares, Usenix Security 2014.
Constantina Soteriou
Post-Mortem of a Zombie: Conficker Cleanup After Six Years, Usenix Security 2015.
Botnets
Your Botnet is My Botnet: Analysis of a Botnet Takeover, ACM CCS 2009.
Nicholas Tsinontas
SoK: P2PWNED — Modeling and Evaluating the Resilience of Peer-to-Peer Botnets, Oakland 2013.
SPAM
Spamalytics: An Empirical Analysis of Spam Marketing Conversion, ACM CCS 2008.
Iakovos Andreou
@spam: The Underground on 140 Characters or Less, ACM CCS 2010.
Week 12 (Starts: 14:00)
 
Cyber-physical Systems
Lock It and Still Lose It – On the (In)Security of Automotive Remote Keyless Entry Systems, Usenix Security 2016.
Constantinos Xenofontos
An Experimental Security Analysis of an Industrial Robot Controller, Oakland 2017.
Anonymity
Tor: The Second-Generation Onion Router, Usenix Security 2004.
Markos Panayiotou
Low-Cost Traffic Analysis of Tor, Oakland 2005.
The Underground
Trafficking Fraudulent Accounts: The Role of the Underground Market in Twitter Spam and Abuse, Usenix Security 2013.
Zacharias Georgiou
PharmaLeaks: Understanding the Business of Online Pharmaceutical Affiliate Programs, Usenix Security 2012.
Week 13 (Starts: 14:00)
 
Bugs
The Matter of Heartbleed, ACM IMC 2014.
Adamos Koumi
Understanding the Reproducibility of Crowd-reported Security Vulnerabilities, Usenix Security 2018.
Attacks
Attacking the Network Time Protocol, NDSS 2016.
Marios Kyprianou
Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels, Usenix Security 2018.
TLS Security
On the Security of RC4 in TLS, Usenix Security 2013.
Marios Palechoros
Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations, Oakland 2014.
Week 14
 
Cryptocurrencies
SoK: Research Perspectives and Challenges for Bitcoin and Cryptocurrencies, Oakland 2015.
Rafael Makrigiorgis
TEETHER: Gnawing at Ethereum to Automatically Exploit Smart Contracts, Usenix Security 2018.
Crypto Mining
Botcoin: Monetizing Stolen Cycles, NDSS 2014.
Christos Chatzistillis
MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense, ACM CCS 2018.
(c) Elias Athanasopoulos