Mediaspace scheduled maintenance: Aug 25, 2026 07:00 - 12:00 AM. During this time, videos will be temporarily unavailable. Check status updates.

Course

COM-301: Computer security and privacy

Lectures in this course (60)

Computer Security: Basics and Vocabulary

Introduces computer security basics, properties, policy, threat modeling, and key vocabulary for adversarial thinking.

Basics - Security Engineering Concepts

Covers security mechanisms, defense in depth, and methods to show systems are secure.

Mandatory Access Control: Confidentiality Models

Explores the Bell La Padula model, covert channels, declassification challenges, and security properties in confidentiality models.

Mandatory Access Control - Integrity Models

Explores the Biba model for integrity, security level change, and the process of Sanitization, along with supporting principles.

Mandatory Access Control: Multi-property Security Models

Explores the Chinese Wall model for combining confidentiality and integrity, addressing conflicts of interest and multilateral security.

Applied Cryptography: Basics

Introduces applied cryptography basics, historical encryption methods, and the concept of perfect secrecy with the One Time Pad.

Applied Cryptography: Symmetric Confidentiality

Explores symmetric cryptography for confidentiality, covering stream ciphers, block ciphers, and their modes of operation.

Applied Cryptography: Symmetric Integrity

Explores symmetric cryptography for integrity, emphasizing Message Authentication Codes and different encryption approaches to ensure data confidentiality and integrity.

Applied Cryptography: Hash Functions

Explores hash functions and their crucial role in cryptography, digital signatures, and blockchain technology.

Applied Cryptography: Assymetric Cryptography

Introduces asymmetric cryptography, digital signatures, and hybrid encryption for secure communication.

Authentication: Basics

Covers the process of verifying identity, traditional methods like passwords, and modern approaches such as biometrics.

Authentication: Passwords

Covers the importance of passwords in authentication, including secure transfer, storage, and checking techniques.

Principles I: Economy of Mechanism & Fail-safe Defaults

Discusses the 'economy of mechanism' and 'fail-safe default' principles in computer security.

Authentication - Biometrics

Covers the concept of biometrics, the process of enrolling and verifying biometrics, and the importance of balancing false positives and false negatives.

Authentication - Tokens

Covers the concept of tokens, how they work, and the implementation of two-factor authentication.

Adversarial Thinking: Reasoning as an Adversary

Explores the importance of understanding attacks and the reasoning behind adversarial thinking in developing security mechanisms.

Sudo Bug Exploitation: Demo

Demonstrates exploiting a bug in Sudo to run commands as root when restricted.

Adversarial Thinking: Defender - Threat Modelling

Delves into adversarial thinking and threat modeling methodologies to enhance defense strategies.

Adversarial Thinking: Common Weaknesses Enumeration

Explores adversarial thinking, common weaknesses, and ineffective defenses in software systems, emphasizing the importance of mitigating prevalent vulnerabilities.

Software security - Memory safety

Covers the basics of software security, focusing on memory safety and mitigation strategies against code execution attacks.