Mediaspace scheduled maintenance: Aug 25, 2026 07:00 - 12:00 AM. During this time, videos will be temporarily unavailable. Check status updates.

Home

Course

COM-301: Computer security and privacy

About
Privacy
Disclaimer

Graph Chatbot

Lectures in this course (60)

Software Security: Execution Attacks and Defenses

Covers code injection and control-flow hijack attacks, and defenses like Data Execution Prevention and Stack Canaries.

Software security - Security testing

Covers software security testing approaches and coverage metrics.

Software Security: Fuzzing

Explores fuzzing as an automated technique to improve program coverage in security testing.

Principles II: Complete Mediation, Open Design, Separation of Privilege

Discusses the 'complete mediation', 'open design', and 'separation of privilege' principles to enhance system security.

Software Security: Security Testing - Sanitizers

Explores the use of sanitizers in software security testing to detect bugs early and improve testing effectiveness.

Network Security: Desired Properties and Solutions

Discusses the importance of network security properties and solutions to enhance overall security.

Network Security: ARP Spoofing

Delves into routing in LAN, ARP spoofing attacks, and defense strategies against them, emphasizing the risks of network vulnerabilities.

Network Security - DNS spoofing

Covers DNS spoofing attacks, defenses using DNSSEC, and the importance of origin authentication.

Network Security: BGP Spoofing

Explores BGP security weaknesses, real-world incidents, and defenses against BGP hijacking, emphasizing the importance of cryptography in securing routing information.

Network Security: IP Security

Covers IP basics, vulnerabilities like IP spoofing, and the use of IPSec for Virtual Private Networks.

Network Security - TCP security

Covers the limitations of IP and the Transmission Control Protocol (TCP), including security considerations.

Network Security - Transport Layer Security

Discusses the limitations of TCP, the TLS Handshake, and the vulnerabilities in TLS protocols, emphasizing the importance of provable security in TLS 1.3.

Network Security: Denial of Service

Explores Denial of Service attacks, prevention techniques, and various attack examples in network security.

Network Security: Other Protections

Explores network security through NAT, firewalls, and deep packet inspection, emphasizing the importance of robust host-level defenses and the limitations of protection techniques.

Security Principles: Least Privilege, Common Mechanism, Acceptability

Explores security principles like least privilege, common mechanism, and user acceptability to enhance system protection.

Privacy: Why is privacy important

Explores the importance of privacy in democratic societies and the shared security infrastructure across individuals, industry, and governments.

Privacy: What is privacy

Delves into privacy definitions, technical concerns, PETS, GDPR, and anti-surveillance privacy.

Privacy Technologies: End-to-End Encryption and Metadata Protection

Explores end-to-end encryption, metadata sensitivity, and the role of traffic analysis in intelligence gathering.

Privacy Technologies: Some Privacy Technologies (part II)

Explores anonymous communication systems, attribute-based credentials, the Tor network, and other privacy technologies.

Malware: Introduction

Introduces the basics of malware, its distribution, reasons for its rise, and taxonomy.

Page 2 of 3