0CI01(01712720): Information Security Engineering(Fall 2018)

Time: Monday 14:00-17:00

Location: 3201 , Teaching Builing, DaXing

Class web site: https://huipingsun.github.io/ise2018

Instructor: Huiping Sun (sunhp(at)ss.pku.edu.cn)

TA: Haotian Hao

Date

Topics

Readings

September 17

01. Course Introduction [Slides]

• Ross Anderson. Security Engineering (Second Edition). Chapter 1: What Is Security Engineering? [Homework]
• Ross Anderson. Why Information Security is Hard - An Emconmics Perspective. In Proc. ACSAC'2001. [Homework]

October 08

02. Usable Security [Slides]

• Ross Anderson. Security Engineering (Second Edition). Chapter 2: Usability and Psychology. [Homework]
• Lorrie Faith Cranor and Simson Garfinkel. Security and Usability: Designing Secure Systems that People Can Use. Chapter 2: Usable Security: Why Do We Need It? How Do We Get It?. [Homework]
• Anne Adams and Martina Angela Sasses. Users Are Not The Enemy. Communications of ACM. 1999.
• Alma Whitten and J.D.Tygar. Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0. In Proc. USENIX Security'1999.
• Bruce Schneier. The Psychology of Security. 2008.

October 15

03. Human Computation [Slides]

• Edith law and Luis von Ahn. Human Computation. Synthesis Lectures on Artificial Intelligence and Machine Learning 2011.
• Alexander J. Quinn and Benjamin B. Bederson Human Computation: A Survey and Taxonomy of a Growing Field. In Proc. CHI'2011.

October 22

04. Project I: Reading Report
[Blockchain Security and Privacy I, II;
AI Ethics I, II;
Hacking without Humans;
Digital Forensics;
Electronic Voting;
Moving Forward; ]

• Blockchain Security and Privacy. IEEE Security & Privacy Maganize. Volume 16 Issue 4,2018.
• AI Ethics. IEEE Security & Privacy Maganize. Volume 16 Issue 3,2018.
• Hacking without Humans. IEEE Security & Privacy Maganize. Volume 16 Issue 2,2018.
• Digital Forensics. IEEE Security & Privacy Maganize. Volume 15 Issue 6,2017.
• Electronic Voting. IEEE Security & Privacy Maganize. Volume 15 Issue 3,2017.
• Moving Forward . IEEE Security & Privacy Maganize. Volume 15 Issue 1,2017.

October 29

05. Graphical Password [Slides]

• Robert Biddle et al. Graphical Passwords: Learning from the First Twelve Years. ACM Computing Surveys. 2012.
• Huiping Sun et al. PassApp: My App is My Password! In Proc. MobileHCI'2015.
• Qinchen Gu et al. Fingerprinting for Cyber-Physical System Security-Device Physics Matters Too.In IEEE Security & Privacy, 2018.[Homework]

November 05

06. Text Password [Slides]

• Ross Anderson. Security Engineering (Second Edition). Chapter 2.4: Passwords
• Cormac Herley and Paul van Oorschot. A Research Agenda Acknowledging the Persistence of Passwords. IEEE Security & Privacy Magazine. 2012.
• Joseph Bonneau et al. Passwords and The Evolution of Imperfect Authentication. Communications of ACM. 2015.
• Ari Juels and Ronald L. Rivest. Honeywords-Making Password-Cracking Detectable. In Proc. CCS'2013. [Homework]

November 12

07. Biometrics [Slides]

• Ross Anderson. Security Engineering (Second Edition). Chapter 15: Biometrics
• John D.Woodward Jr. et al. Biometrics: Identity Assurance in the Information Age. McGraw-Hill/Osborne. 2003.
• Zahid Akhtar et al. Biometric Liveness Detection: Challenges and Research Opportunities. IEEE Security & Privacy Magazine. 2015. [Homework]

November 19

08. Blockchain Overview [Slides]

• Manav Gupta. IBM Blockchain Dummies . John Wiley & Sons. 2017
• Tomaso Aste et al. Blockchain Technologies: The Foreseeable Impact on Society and Industry. IEEE Computer Magazine. 2017. [Homework]

November 26

09. Blockchain Technology I [Slides]

• Textbook. Charpter 1: Introduction to Cryptography & Cryptocurrencies.
• Textbook. Charpter 2: How Bitcoin Achieves Decentralization.
• Textbook. Charpter 3: Mechanics of Bitcoin.
• Textbook. Charpter 5: Bitcoin Mining.
• Bitcoin Developer Guide . 2018. [Homework]

December 03

10. Project II: User Authentication

• One Time Password
• Graphical CAPTCHA
• Password Manager
• Breaking Slider CAPTCHA
• Text CAPTCHA Attack
• Emoji Based Authentication
• Passwords Meter
• Improving Honeywords

December 10

11. Blockchain Technology II [Slides]

• Textbook. Charpter 1: Introduction to Cryptography & Cryptocurrencies.
• Textbook. Charpter 2: How Bitcoin Achieves Decentralization.
• Textbook. Charpter 3: Mechanics of Bitcoin.
• Textbook. Charpter 5: Bitcoin Mining.
• Textbook. Charpter 6: Bitcoin and Anonymity.
• Textbook. Charpter 8: Alternative Minging Puzzles.
• Eli Androulaki et al. Hyperledger fabric: a distributed operating system for permissioned blockchains In Proc. EuroSys'2018. [Homework]

December 17

12. Blockchain Application [Slides]

• Textbook. Charpter 7: Community, Politics, and Regulation.
• Textbook. Charpter 9: Bitcoin as a Platform.
• Textbook. Charpter 10: Altcoins and the Cryptocurency Ecosystem.
• Textbook. Charpter 11: Decentralized Institutions: The Future of Bitcoin.
• Loi Luu et al. SMARTPOOL: Practical Decentralized Pooled Mining In Proc. USENIX Security'2017. [Homework]

December 24

13. Reputation [Slides]

• Paul Resnick et al. Reputation System. In Communications of the ACM. 2000.
• Lik Mui et al. A Computational Model of Trust and Reputation. In Proc. HICSS'2002.
• Audun Josang et al. A Survey of Trust and Reputation Systems for Online Service Provision. In Decision Support Systems. 2007.
• F.Randall Farmer & Bryce Glass. Building Web Reputation System. O'REILLY. 2010.
• Steven Tadelis. The Economics of Reputation and Feedback Systems in E-Commerce Marketplaces. In IEEE Internet Computing Magazine. 2016. [Homework]

December 31

14. Credit Scoring [Slides]

TBD

January 07

15. Project III: Try Blockchain [Slides]

TBD

January 14

16. Project III: Try Blockchain [Slides]

TBD